1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22#ifndef __LINUX_SECURITY_H
23#define __LINUX_SECURITY_H
24
25#include <linux/key.h>
26#include <linux/capability.h>
27#include <linux/slab.h>
28#include <linux/err.h>
29#include <linux/string.h>
30
31struct linux_binprm;
32struct cred;
33struct rlimit;
34struct siginfo;
35struct sem_array;
36struct sembuf;
37struct kern_ipc_perm;
38struct audit_context;
39struct super_block;
40struct inode;
41struct dentry;
42struct file;
43struct vfsmount;
44struct path;
45struct qstr;
46struct nameidata;
47struct iattr;
48struct fown_struct;
49struct file_operations;
50struct shmid_kernel;
51struct msg_msg;
52struct msg_queue;
53struct xattr;
54struct xfrm_sec_ctx;
55struct mm_struct;
56
57
58#define SECURITY_NAME_MAX 10
59
60
61#define SECURITY_CAP_NOAUDIT 0
62#define SECURITY_CAP_AUDIT 1
63
64
65#define SECURITY_LSM_NATIVE_LABELS 1
66
67struct ctl_table;
68struct audit_krule;
69struct user_namespace;
70struct timezone;
71
72
73
74
75
76extern int cap_capable(const struct cred *cred, struct user_namespace *ns,
77 int cap, int audit);
78extern int cap_settime(const struct timespec *ts, const struct timezone *tz);
79extern int cap_ptrace_access_check(struct task_struct *child, unsigned int mode);
80extern int cap_ptrace_traceme(struct task_struct *parent);
81extern int cap_capget(struct task_struct *target, kernel_cap_t *effective, kernel_cap_t *inheritable, kernel_cap_t *permitted);
82extern int cap_capset(struct cred *new, const struct cred *old,
83 const kernel_cap_t *effective,
84 const kernel_cap_t *inheritable,
85 const kernel_cap_t *permitted);
86extern int cap_bprm_set_creds(struct linux_binprm *bprm);
87extern int cap_bprm_secureexec(struct linux_binprm *bprm);
88extern int cap_inode_setxattr(struct dentry *dentry, const char *name,
89 const void *value, size_t size, int flags);
90extern int cap_inode_removexattr(struct dentry *dentry, const char *name);
91extern int cap_inode_need_killpriv(struct dentry *dentry);
92extern int cap_inode_killpriv(struct dentry *dentry);
93extern int cap_mmap_addr(unsigned long addr);
94extern int cap_mmap_file(struct file *file, unsigned long reqprot,
95 unsigned long prot, unsigned long flags);
96extern int cap_task_fix_setuid(struct cred *new, const struct cred *old, int flags);
97extern int cap_task_prctl(int option, unsigned long arg2, unsigned long arg3,
98 unsigned long arg4, unsigned long arg5);
99extern int cap_task_setscheduler(struct task_struct *p);
100extern int cap_task_setioprio(struct task_struct *p, int ioprio);
101extern int cap_task_setnice(struct task_struct *p, int nice);
102extern int cap_vm_enough_memory(struct mm_struct *mm, long pages);
103
104struct msghdr;
105struct sk_buff;
106struct sock;
107struct sockaddr;
108struct socket;
109struct flowi;
110struct dst_entry;
111struct xfrm_selector;
112struct xfrm_policy;
113struct xfrm_state;
114struct xfrm_user_sec_ctx;
115struct seq_file;
116
117extern int cap_netlink_send(struct sock *sk, struct sk_buff *skb);
118
119void reset_security_ops(void);
120
121#ifdef CONFIG_MMU
122extern unsigned long mmap_min_addr;
123extern unsigned long dac_mmap_min_addr;
124#else
125#define mmap_min_addr 0UL
126#define dac_mmap_min_addr 0UL
127#endif
128
129
130
131
132
133#define LSM_SETID_ID 1
134
135
136#define LSM_SETID_RE 2
137
138
139#define LSM_SETID_RES 4
140
141
142#define LSM_SETID_FS 8
143
144
145struct sched_param;
146struct request_sock;
147
148
149#define LSM_UNSAFE_SHARE 1
150#define LSM_UNSAFE_PTRACE 2
151#define LSM_UNSAFE_PTRACE_CAP 4
152#define LSM_UNSAFE_NO_NEW_PRIVS 8
153
154#ifdef CONFIG_MMU
155extern int mmap_min_addr_handler(struct ctl_table *table, int write,
156 void __user *buffer, size_t *lenp, loff_t *ppos);
157#endif
158
159
160typedef int (*initxattrs) (struct inode *inode,
161 const struct xattr *xattr_array, void *fs_data);
162
163#ifdef CONFIG_SECURITY
164
165struct security_mnt_opts {
166 char **mnt_opts;
167 int *mnt_opts_flags;
168 int num_mnt_opts;
169};
170
171static inline void security_init_mnt_opts(struct security_mnt_opts *opts)
172{
173 opts->mnt_opts = NULL;
174 opts->mnt_opts_flags = NULL;
175 opts->num_mnt_opts = 0;
176}
177
178static inline void security_free_mnt_opts(struct security_mnt_opts *opts)
179{
180 int i;
181 if (opts->mnt_opts)
182 for (i = 0; i < opts->num_mnt_opts; i++)
183 kfree(opts->mnt_opts[i]);
184 kfree(opts->mnt_opts);
185 opts->mnt_opts = NULL;
186 kfree(opts->mnt_opts_flags);
187 opts->mnt_opts_flags = NULL;
188 opts->num_mnt_opts = 0;
189}
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
1001
1002
1003
1004
1005
1006
1007
1008
1009
1010
1011
1012
1013
1014
1015
1016
1017
1018
1019
1020
1021
1022
1023
1024
1025
1026
1027
1028
1029
1030
1031
1032
1033
1034
1035
1036
1037
1038
1039
1040
1041
1042
1043
1044
1045
1046
1047
1048
1049
1050
1051
1052
1053
1054
1055
1056
1057
1058
1059
1060
1061
1062
1063
1064
1065
1066
1067
1068
1069
1070
1071
1072
1073
1074
1075
1076
1077
1078
1079
1080
1081
1082
1083
1084
1085
1086
1087
1088
1089
1090
1091
1092
1093
1094
1095
1096
1097
1098
1099
1100
1101
1102
1103
1104
1105
1106
1107
1108
1109
1110
1111
1112
1113
1114
1115
1116
1117
1118
1119
1120
1121
1122
1123
1124
1125
1126
1127
1128
1129
1130
1131
1132
1133
1134
1135
1136
1137
1138
1139
1140
1141
1142
1143
1144
1145
1146
1147
1148
1149
1150
1151
1152
1153
1154
1155
1156
1157
1158
1159
1160
1161
1162
1163
1164
1165
1166
1167
1168
1169
1170
1171
1172
1173
1174
1175
1176
1177
1178
1179
1180
1181
1182
1183
1184
1185
1186
1187
1188
1189
1190
1191
1192
1193
1194
1195
1196
1197
1198
1199
1200
1201
1202
1203
1204
1205
1206
1207
1208
1209
1210
1211
1212
1213
1214
1215
1216
1217
1218
1219
1220
1221
1222
1223
1224
1225
1226
1227
1228
1229
1230
1231
1232
1233
1234
1235
1236
1237
1238
1239
1240
1241
1242
1243
1244
1245
1246
1247
1248
1249
1250
1251
1252
1253
1254
1255
1256
1257
1258
1259
1260
1261
1262
1263
1264
1265
1266
1267
1268
1269
1270
1271
1272
1273
1274
1275
1276
1277
1278
1279
1280
1281
1282
1283
1284
1285
1286
1287
1288
1289
1290
1291
1292
1293
1294
1295
1296
1297
1298
1299
1300
1301
1302
1303
1304
1305
1306
1307
1308
1309
1310
1311
1312
1313
1314
1315
1316
1317
1318
1319
1320
1321
1322
1323
1324
1325
1326
1327
1328
1329
1330
1331
1332
1333
1334
1335
1336
1337
1338
1339
1340
1341
1342
1343
1344
1345
1346
1347
1348
1349
1350
1351
1352
1353
1354
1355
1356
1357
1358
1359
1360
1361
1362
1363
1364
1365
1366
1367
1368
1369
1370
1371
1372
1373
1374
1375
1376
1377
1378
1379
1380
1381
1382
1383
1384
1385
1386
1387
1388
1389
1390
1391
1392
1393
1394
1395
1396
1397
1398
1399
1400
1401
1402
1403
1404
1405
1406
1407
1408
1409
1410
1411
1412
1413
1414
1415
1416
1417
1418
1419
1420
1421
1422
1423
1424
1425
1426
1427
1428
1429
1430
1431
1432struct security_operations {
1433 char name[SECURITY_NAME_MAX + 1];
1434
1435 int (*ptrace_access_check) (struct task_struct *child, unsigned int mode);
1436 int (*ptrace_traceme) (struct task_struct *parent);
1437 int (*capget) (struct task_struct *target,
1438 kernel_cap_t *effective,
1439 kernel_cap_t *inheritable, kernel_cap_t *permitted);
1440 int (*capset) (struct cred *new,
1441 const struct cred *old,
1442 const kernel_cap_t *effective,
1443 const kernel_cap_t *inheritable,
1444 const kernel_cap_t *permitted);
1445 int (*capable) (const struct cred *cred, struct user_namespace *ns,
1446 int cap, int audit);
1447 int (*quotactl) (int cmds, int type, int id, struct super_block *sb);
1448 int (*quota_on) (struct dentry *dentry);
1449 int (*syslog) (int type);
1450 int (*settime) (const struct timespec *ts, const struct timezone *tz);
1451 int (*vm_enough_memory) (struct mm_struct *mm, long pages);
1452
1453 int (*bprm_set_creds) (struct linux_binprm *bprm);
1454 int (*bprm_check_security) (struct linux_binprm *bprm);
1455 int (*bprm_secureexec) (struct linux_binprm *bprm);
1456 void (*bprm_committing_creds) (struct linux_binprm *bprm);
1457 void (*bprm_committed_creds) (struct linux_binprm *bprm);
1458
1459 int (*sb_alloc_security) (struct super_block *sb);
1460 void (*sb_free_security) (struct super_block *sb);
1461 int (*sb_copy_data) (char *orig, char *copy);
1462 int (*sb_remount) (struct super_block *sb, void *data);
1463 int (*sb_kern_mount) (struct super_block *sb, int flags, void *data);
1464 int (*sb_show_options) (struct seq_file *m, struct super_block *sb);
1465 int (*sb_statfs) (struct dentry *dentry);
1466 int (*sb_mount) (const char *dev_name, struct path *path,
1467 const char *type, unsigned long flags, void *data);
1468 int (*sb_umount) (struct vfsmount *mnt, int flags);
1469 int (*sb_pivotroot) (struct path *old_path,
1470 struct path *new_path);
1471 int (*sb_set_mnt_opts) (struct super_block *sb,
1472 struct security_mnt_opts *opts,
1473 unsigned long kern_flags,
1474 unsigned long *set_kern_flags);
1475 int (*sb_clone_mnt_opts) (const struct super_block *oldsb,
1476 struct super_block *newsb);
1477 int (*sb_parse_opts_str) (char *options, struct security_mnt_opts *opts);
1478 int (*dentry_init_security) (struct dentry *dentry, int mode,
1479 struct qstr *name, void **ctx,
1480 u32 *ctxlen);
1481
1482
1483#ifdef CONFIG_SECURITY_PATH
1484 int (*path_unlink) (struct path *dir, struct dentry *dentry);
1485 int (*path_mkdir) (struct path *dir, struct dentry *dentry, umode_t mode);
1486 int (*path_rmdir) (struct path *dir, struct dentry *dentry);
1487 int (*path_mknod) (struct path *dir, struct dentry *dentry, umode_t mode,
1488 unsigned int dev);
1489 int (*path_truncate) (struct path *path);
1490 int (*path_symlink) (struct path *dir, struct dentry *dentry,
1491 const char *old_name);
1492 int (*path_link) (struct dentry *old_dentry, struct path *new_dir,
1493 struct dentry *new_dentry);
1494 int (*path_rename) (struct path *old_dir, struct dentry *old_dentry,
1495 struct path *new_dir, struct dentry *new_dentry);
1496 int (*path_chmod) (struct path *path, umode_t mode);
1497 int (*path_chown) (struct path *path, kuid_t uid, kgid_t gid);
1498 int (*path_chroot) (struct path *path);
1499#endif
1500
1501 int (*inode_alloc_security) (struct inode *inode);
1502 void (*inode_free_security) (struct inode *inode);
1503 int (*inode_init_security) (struct inode *inode, struct inode *dir,
1504 const struct qstr *qstr, const char **name,
1505 void **value, size_t *len);
1506 int (*inode_create) (struct inode *dir,
1507 struct dentry *dentry, umode_t mode);
1508 int (*inode_link) (struct dentry *old_dentry,
1509 struct inode *dir, struct dentry *new_dentry);
1510 int (*inode_unlink) (struct inode *dir, struct dentry *dentry);
1511 int (*inode_symlink) (struct inode *dir,
1512 struct dentry *dentry, const char *old_name);
1513 int (*inode_mkdir) (struct inode *dir, struct dentry *dentry, umode_t mode);
1514 int (*inode_rmdir) (struct inode *dir, struct dentry *dentry);
1515 int (*inode_mknod) (struct inode *dir, struct dentry *dentry,
1516 umode_t mode, dev_t dev);
1517 int (*inode_rename) (struct inode *old_dir, struct dentry *old_dentry,
1518 struct inode *new_dir, struct dentry *new_dentry);
1519 int (*inode_readlink) (struct dentry *dentry);
1520 int (*inode_follow_link) (struct dentry *dentry, struct nameidata *nd);
1521 int (*inode_permission) (struct inode *inode, int mask);
1522 int (*inode_setattr) (struct dentry *dentry, struct iattr *attr);
1523 int (*inode_getattr) (struct vfsmount *mnt, struct dentry *dentry);
1524 int (*inode_setxattr) (struct dentry *dentry, const char *name,
1525 const void *value, size_t size, int flags);
1526 void (*inode_post_setxattr) (struct dentry *dentry, const char *name,
1527 const void *value, size_t size, int flags);
1528 int (*inode_getxattr) (struct dentry *dentry, const char *name);
1529 int (*inode_listxattr) (struct dentry *dentry);
1530 int (*inode_removexattr) (struct dentry *dentry, const char *name);
1531 int (*inode_need_killpriv) (struct dentry *dentry);
1532 int (*inode_killpriv) (struct dentry *dentry);
1533 int (*inode_getsecurity) (const struct inode *inode, const char *name, void **buffer, bool alloc);
1534 int (*inode_setsecurity) (struct inode *inode, const char *name, const void *value, size_t size, int flags);
1535 int (*inode_listsecurity) (struct inode *inode, char *buffer, size_t buffer_size);
1536 void (*inode_getsecid) (const struct inode *inode, u32 *secid);
1537
1538 int (*file_permission) (struct file *file, int mask);
1539 int (*file_alloc_security) (struct file *file);
1540 void (*file_free_security) (struct file *file);
1541 int (*file_ioctl) (struct file *file, unsigned int cmd,
1542 unsigned long arg);
1543 int (*mmap_addr) (unsigned long addr);
1544 int (*mmap_file) (struct file *file,
1545 unsigned long reqprot, unsigned long prot,
1546 unsigned long flags);
1547 int (*file_mprotect) (struct vm_area_struct *vma,
1548 unsigned long reqprot,
1549 unsigned long prot);
1550 int (*file_lock) (struct file *file, unsigned int cmd);
1551 int (*file_fcntl) (struct file *file, unsigned int cmd,
1552 unsigned long arg);
1553 int (*file_set_fowner) (struct file *file);
1554 int (*file_send_sigiotask) (struct task_struct *tsk,
1555 struct fown_struct *fown, int sig);
1556 int (*file_receive) (struct file *file);
1557 int (*file_open) (struct file *file, const struct cred *cred);
1558
1559 int (*task_create) (unsigned long clone_flags);
1560 void (*task_free) (struct task_struct *task);
1561 int (*cred_alloc_blank) (struct cred *cred, gfp_t gfp);
1562 void (*cred_free) (struct cred *cred);
1563 int (*cred_prepare)(struct cred *new, const struct cred *old,
1564 gfp_t gfp);
1565 void (*cred_transfer)(struct cred *new, const struct cred *old);
1566 int (*kernel_act_as)(struct cred *new, u32 secid);
1567 int (*kernel_create_files_as)(struct cred *new, struct inode *inode);
1568 int (*kernel_module_request)(char *kmod_name);
1569 int (*kernel_module_from_file)(struct file *file);
1570 int (*task_fix_setuid) (struct cred *new, const struct cred *old,
1571 int flags);
1572 int (*task_setpgid) (struct task_struct *p, pid_t pgid);
1573 int (*task_getpgid) (struct task_struct *p);
1574 int (*task_getsid) (struct task_struct *p);
1575 void (*task_getsecid) (struct task_struct *p, u32 *secid);
1576 int (*task_setnice) (struct task_struct *p, int nice);
1577 int (*task_setioprio) (struct task_struct *p, int ioprio);
1578 int (*task_getioprio) (struct task_struct *p);
1579 int (*task_setrlimit) (struct task_struct *p, unsigned int resource,
1580 struct rlimit *new_rlim);
1581 int (*task_setscheduler) (struct task_struct *p);
1582 int (*task_getscheduler) (struct task_struct *p);
1583 int (*task_movememory) (struct task_struct *p);
1584 int (*task_kill) (struct task_struct *p,
1585 struct siginfo *info, int sig, u32 secid);
1586 int (*task_wait) (struct task_struct *p);
1587 int (*task_prctl) (int option, unsigned long arg2,
1588 unsigned long arg3, unsigned long arg4,
1589 unsigned long arg5);
1590 void (*task_to_inode) (struct task_struct *p, struct inode *inode);
1591
1592 int (*ipc_permission) (struct kern_ipc_perm *ipcp, short flag);
1593 void (*ipc_getsecid) (struct kern_ipc_perm *ipcp, u32 *secid);
1594
1595 int (*msg_msg_alloc_security) (struct msg_msg *msg);
1596 void (*msg_msg_free_security) (struct msg_msg *msg);
1597
1598 int (*msg_queue_alloc_security) (struct msg_queue *msq);
1599 void (*msg_queue_free_security) (struct msg_queue *msq);
1600 int (*msg_queue_associate) (struct msg_queue *msq, int msqflg);
1601 int (*msg_queue_msgctl) (struct msg_queue *msq, int cmd);
1602 int (*msg_queue_msgsnd) (struct msg_queue *msq,
1603 struct msg_msg *msg, int msqflg);
1604 int (*msg_queue_msgrcv) (struct msg_queue *msq,
1605 struct msg_msg *msg,
1606 struct task_struct *target,
1607 long type, int mode);
1608
1609 int (*shm_alloc_security) (struct shmid_kernel *shp);
1610 void (*shm_free_security) (struct shmid_kernel *shp);
1611 int (*shm_associate) (struct shmid_kernel *shp, int shmflg);
1612 int (*shm_shmctl) (struct shmid_kernel *shp, int cmd);
1613 int (*shm_shmat) (struct shmid_kernel *shp,
1614 char __user *shmaddr, int shmflg);
1615
1616 int (*sem_alloc_security) (struct sem_array *sma);
1617 void (*sem_free_security) (struct sem_array *sma);
1618 int (*sem_associate) (struct sem_array *sma, int semflg);
1619 int (*sem_semctl) (struct sem_array *sma, int cmd);
1620 int (*sem_semop) (struct sem_array *sma,
1621 struct sembuf *sops, unsigned nsops, int alter);
1622
1623 int (*netlink_send) (struct sock *sk, struct sk_buff *skb);
1624
1625 void (*d_instantiate) (struct dentry *dentry, struct inode *inode);
1626
1627 int (*getprocattr) (struct task_struct *p, char *name, char **value);
1628 int (*setprocattr) (struct task_struct *p, char *name, void *value, size_t size);
1629 int (*ismaclabel) (const char *name);
1630 int (*secid_to_secctx) (u32 secid, char **secdata, u32 *seclen);
1631 int (*secctx_to_secid) (const char *secdata, u32 seclen, u32 *secid);
1632 void (*release_secctx) (char *secdata, u32 seclen);
1633
1634 int (*inode_notifysecctx)(struct inode *inode, void *ctx, u32 ctxlen);
1635 int (*inode_setsecctx)(struct dentry *dentry, void *ctx, u32 ctxlen);
1636 int (*inode_getsecctx)(struct inode *inode, void **ctx, u32 *ctxlen);
1637
1638#ifdef CONFIG_SECURITY_NETWORK
1639 int (*unix_stream_connect) (struct sock *sock, struct sock *other, struct sock *newsk);
1640 int (*unix_may_send) (struct socket *sock, struct socket *other);
1641
1642 int (*socket_create) (int family, int type, int protocol, int kern);
1643 int (*socket_post_create) (struct socket *sock, int family,
1644 int type, int protocol, int kern);
1645 int (*socket_bind) (struct socket *sock,
1646 struct sockaddr *address, int addrlen);
1647 int (*socket_connect) (struct socket *sock,
1648 struct sockaddr *address, int addrlen);
1649 int (*socket_listen) (struct socket *sock, int backlog);
1650 int (*socket_accept) (struct socket *sock, struct socket *newsock);
1651 int (*socket_sendmsg) (struct socket *sock,
1652 struct msghdr *msg, int size);
1653 int (*socket_recvmsg) (struct socket *sock,
1654 struct msghdr *msg, int size, int flags);
1655 int (*socket_getsockname) (struct socket *sock);
1656 int (*socket_getpeername) (struct socket *sock);
1657 int (*socket_getsockopt) (struct socket *sock, int level, int optname);
1658 int (*socket_setsockopt) (struct socket *sock, int level, int optname);
1659 int (*socket_shutdown) (struct socket *sock, int how);
1660 int (*socket_sock_rcv_skb) (struct sock *sk, struct sk_buff *skb);
1661 int (*socket_getpeersec_stream) (struct socket *sock, char __user *optval, int __user *optlen, unsigned len);
1662 int (*socket_getpeersec_dgram) (struct socket *sock, struct sk_buff *skb, u32 *secid);
1663 int (*sk_alloc_security) (struct sock *sk, int family, gfp_t priority);
1664 void (*sk_free_security) (struct sock *sk);
1665 void (*sk_clone_security) (const struct sock *sk, struct sock *newsk);
1666 void (*sk_getsecid) (struct sock *sk, u32 *secid);
1667 void (*sock_graft) (struct sock *sk, struct socket *parent);
1668 int (*inet_conn_request) (struct sock *sk, struct sk_buff *skb,
1669 struct request_sock *req);
1670 void (*inet_csk_clone) (struct sock *newsk, const struct request_sock *req);
1671 void (*inet_conn_established) (struct sock *sk, struct sk_buff *skb);
1672 int (*secmark_relabel_packet) (u32 secid);
1673 void (*secmark_refcount_inc) (void);
1674 void (*secmark_refcount_dec) (void);
1675 void (*req_classify_flow) (const struct request_sock *req, struct flowi *fl);
1676 int (*tun_dev_alloc_security) (void **security);
1677 void (*tun_dev_free_security) (void *security);
1678 int (*tun_dev_create) (void);
1679 int (*tun_dev_attach_queue) (void *security);
1680 int (*tun_dev_attach) (struct sock *sk, void *security);
1681 int (*tun_dev_open) (void *security);
1682 void (*skb_owned_by) (struct sk_buff *skb, struct sock *sk);
1683#endif
1684
1685#ifdef CONFIG_SECURITY_NETWORK_XFRM
1686 int (*xfrm_policy_alloc_security) (struct xfrm_sec_ctx **ctxp,
1687 struct xfrm_user_sec_ctx *sec_ctx, gfp_t gfp);
1688 int (*xfrm_policy_clone_security) (struct xfrm_sec_ctx *old_ctx, struct xfrm_sec_ctx **new_ctx);
1689 void (*xfrm_policy_free_security) (struct xfrm_sec_ctx *ctx);
1690 int (*xfrm_policy_delete_security) (struct xfrm_sec_ctx *ctx);
1691 int (*xfrm_state_alloc) (struct xfrm_state *x,
1692 struct xfrm_user_sec_ctx *sec_ctx);
1693 int (*xfrm_state_alloc_acquire) (struct xfrm_state *x,
1694 struct xfrm_sec_ctx *polsec,
1695 u32 secid);
1696 void (*xfrm_state_free_security) (struct xfrm_state *x);
1697 int (*xfrm_state_delete_security) (struct xfrm_state *x);
1698 int (*xfrm_policy_lookup) (struct xfrm_sec_ctx *ctx, u32 fl_secid, u8 dir);
1699 int (*xfrm_state_pol_flow_match) (struct xfrm_state *x,
1700 struct xfrm_policy *xp,
1701 const struct flowi *fl);
1702 int (*xfrm_decode_session) (struct sk_buff *skb, u32 *secid, int ckall);
1703#endif
1704
1705
1706#ifdef CONFIG_KEYS
1707 int (*key_alloc) (struct key *key, const struct cred *cred, unsigned long flags);
1708 void (*key_free) (struct key *key);
1709 int (*key_permission) (key_ref_t key_ref,
1710 const struct cred *cred,
1711 key_perm_t perm);
1712 int (*key_getsecurity)(struct key *key, char **_buffer);
1713#endif
1714
1715#ifdef CONFIG_AUDIT
1716 int (*audit_rule_init) (u32 field, u32 op, char *rulestr, void **lsmrule);
1717 int (*audit_rule_known) (struct audit_krule *krule);
1718 int (*audit_rule_match) (u32 secid, u32 field, u32 op, void *lsmrule,
1719 struct audit_context *actx);
1720 void (*audit_rule_free) (void *lsmrule);
1721#endif
1722};
1723
1724
1725extern int security_init(void);
1726extern int security_module_enable(struct security_operations *ops);
1727extern int register_security(struct security_operations *ops);
1728extern void __init security_fixup_ops(struct security_operations *ops);
1729
1730
1731
1732int security_ptrace_access_check(struct task_struct *child, unsigned int mode);
1733int security_ptrace_traceme(struct task_struct *parent);
1734int security_capget(struct task_struct *target,
1735 kernel_cap_t *effective,
1736 kernel_cap_t *inheritable,
1737 kernel_cap_t *permitted);
1738int security_capset(struct cred *new, const struct cred *old,
1739 const kernel_cap_t *effective,
1740 const kernel_cap_t *inheritable,
1741 const kernel_cap_t *permitted);
1742int security_capable(const struct cred *cred, struct user_namespace *ns,
1743 int cap);
1744int security_capable_noaudit(const struct cred *cred, struct user_namespace *ns,
1745 int cap);
1746int security_quotactl(int cmds, int type, int id, struct super_block *sb);
1747int security_quota_on(struct dentry *dentry);
1748int security_syslog(int type);
1749int security_settime(const struct timespec *ts, const struct timezone *tz);
1750int security_vm_enough_memory_mm(struct mm_struct *mm, long pages);
1751int security_bprm_set_creds(struct linux_binprm *bprm);
1752int security_bprm_check(struct linux_binprm *bprm);
1753void security_bprm_committing_creds(struct linux_binprm *bprm);
1754void security_bprm_committed_creds(struct linux_binprm *bprm);
1755int security_bprm_secureexec(struct linux_binprm *bprm);
1756int security_sb_alloc(struct super_block *sb);
1757void security_sb_free(struct super_block *sb);
1758int security_sb_copy_data(char *orig, char *copy);
1759int security_sb_remount(struct super_block *sb, void *data);
1760int security_sb_kern_mount(struct super_block *sb, int flags, void *data);
1761int security_sb_show_options(struct seq_file *m, struct super_block *sb);
1762int security_sb_statfs(struct dentry *dentry);
1763int security_sb_mount(const char *dev_name, struct path *path,
1764 const char *type, unsigned long flags, void *data);
1765int security_sb_umount(struct vfsmount *mnt, int flags);
1766int security_sb_pivotroot(struct path *old_path, struct path *new_path);
1767int security_sb_set_mnt_opts(struct super_block *sb,
1768 struct security_mnt_opts *opts,
1769 unsigned long kern_flags,
1770 unsigned long *set_kern_flags);
1771int security_sb_clone_mnt_opts(const struct super_block *oldsb,
1772 struct super_block *newsb);
1773int security_sb_parse_opts_str(char *options, struct security_mnt_opts *opts);
1774int security_dentry_init_security(struct dentry *dentry, int mode,
1775 struct qstr *name, void **ctx,
1776 u32 *ctxlen);
1777
1778int security_inode_alloc(struct inode *inode);
1779void security_inode_free(struct inode *inode);
1780int security_inode_init_security(struct inode *inode, struct inode *dir,
1781 const struct qstr *qstr,
1782 initxattrs initxattrs, void *fs_data);
1783int security_old_inode_init_security(struct inode *inode, struct inode *dir,
1784 const struct qstr *qstr, const char **name,
1785 void **value, size_t *len);
1786int security_inode_create(struct inode *dir, struct dentry *dentry, umode_t mode);
1787int security_inode_link(struct dentry *old_dentry, struct inode *dir,
1788 struct dentry *new_dentry);
1789int security_inode_unlink(struct inode *dir, struct dentry *dentry);
1790int security_inode_symlink(struct inode *dir, struct dentry *dentry,
1791 const char *old_name);
1792int security_inode_mkdir(struct inode *dir, struct dentry *dentry, umode_t mode);
1793int security_inode_rmdir(struct inode *dir, struct dentry *dentry);
1794int security_inode_mknod(struct inode *dir, struct dentry *dentry, umode_t mode, dev_t dev);
1795int security_inode_rename(struct inode *old_dir, struct dentry *old_dentry,
1796 struct inode *new_dir, struct dentry *new_dentry);
1797int security_inode_readlink(struct dentry *dentry);
1798int security_inode_follow_link(struct dentry *dentry, struct nameidata *nd);
1799int security_inode_permission(struct inode *inode, int mask);
1800int security_inode_setattr(struct dentry *dentry, struct iattr *attr);
1801int security_inode_getattr(struct vfsmount *mnt, struct dentry *dentry);
1802int security_inode_setxattr(struct dentry *dentry, const char *name,
1803 const void *value, size_t size, int flags);
1804void security_inode_post_setxattr(struct dentry *dentry, const char *name,
1805 const void *value, size_t size, int flags);
1806int security_inode_getxattr(struct dentry *dentry, const char *name);
1807int security_inode_listxattr(struct dentry *dentry);
1808int security_inode_removexattr(struct dentry *dentry, const char *name);
1809int security_inode_need_killpriv(struct dentry *dentry);
1810int security_inode_killpriv(struct dentry *dentry);
1811int security_inode_getsecurity(const struct inode *inode, const char *name, void **buffer, bool alloc);
1812int security_inode_setsecurity(struct inode *inode, const char *name, const void *value, size_t size, int flags);
1813int security_inode_listsecurity(struct inode *inode, char *buffer, size_t buffer_size);
1814void security_inode_getsecid(const struct inode *inode, u32 *secid);
1815int security_file_permission(struct file *file, int mask);
1816int security_file_alloc(struct file *file);
1817void security_file_free(struct file *file);
1818int security_file_ioctl(struct file *file, unsigned int cmd, unsigned long arg);
1819int security_mmap_file(struct file *file, unsigned long prot,
1820 unsigned long flags);
1821int security_mmap_addr(unsigned long addr);
1822int security_file_mprotect(struct vm_area_struct *vma, unsigned long reqprot,
1823 unsigned long prot);
1824int security_file_lock(struct file *file, unsigned int cmd);
1825int security_file_fcntl(struct file *file, unsigned int cmd, unsigned long arg);
1826int security_file_set_fowner(struct file *file);
1827int security_file_send_sigiotask(struct task_struct *tsk,
1828 struct fown_struct *fown, int sig);
1829int security_file_receive(struct file *file);
1830int security_file_open(struct file *file, const struct cred *cred);
1831int security_task_create(unsigned long clone_flags);
1832void security_task_free(struct task_struct *task);
1833int security_cred_alloc_blank(struct cred *cred, gfp_t gfp);
1834void security_cred_free(struct cred *cred);
1835int security_prepare_creds(struct cred *new, const struct cred *old, gfp_t gfp);
1836void security_transfer_creds(struct cred *new, const struct cred *old);
1837int security_kernel_act_as(struct cred *new, u32 secid);
1838int security_kernel_create_files_as(struct cred *new, struct inode *inode);
1839int security_kernel_module_request(char *kmod_name);
1840int security_kernel_module_from_file(struct file *file);
1841int security_task_fix_setuid(struct cred *new, const struct cred *old,
1842 int flags);
1843int security_task_setpgid(struct task_struct *p, pid_t pgid);
1844int security_task_getpgid(struct task_struct *p);
1845int security_task_getsid(struct task_struct *p);
1846void security_task_getsecid(struct task_struct *p, u32 *secid);
1847int security_task_setnice(struct task_struct *p, int nice);
1848int security_task_setioprio(struct task_struct *p, int ioprio);
1849int security_task_getioprio(struct task_struct *p);
1850int security_task_setrlimit(struct task_struct *p, unsigned int resource,
1851 struct rlimit *new_rlim);
1852int security_task_setscheduler(struct task_struct *p);
1853int security_task_getscheduler(struct task_struct *p);
1854int security_task_movememory(struct task_struct *p);
1855int security_task_kill(struct task_struct *p, struct siginfo *info,
1856 int sig, u32 secid);
1857int security_task_wait(struct task_struct *p);
1858int security_task_prctl(int option, unsigned long arg2, unsigned long arg3,
1859 unsigned long arg4, unsigned long arg5);
1860void security_task_to_inode(struct task_struct *p, struct inode *inode);
1861int security_ipc_permission(struct kern_ipc_perm *ipcp, short flag);
1862void security_ipc_getsecid(struct kern_ipc_perm *ipcp, u32 *secid);
1863int security_msg_msg_alloc(struct msg_msg *msg);
1864void security_msg_msg_free(struct msg_msg *msg);
1865int security_msg_queue_alloc(struct msg_queue *msq);
1866void security_msg_queue_free(struct msg_queue *msq);
1867int security_msg_queue_associate(struct msg_queue *msq, int msqflg);
1868int security_msg_queue_msgctl(struct msg_queue *msq, int cmd);
1869int security_msg_queue_msgsnd(struct msg_queue *msq,
1870 struct msg_msg *msg, int msqflg);
1871int security_msg_queue_msgrcv(struct msg_queue *msq, struct msg_msg *msg,
1872 struct task_struct *target, long type, int mode);
1873int security_shm_alloc(struct shmid_kernel *shp);
1874void security_shm_free(struct shmid_kernel *shp);
1875int security_shm_associate(struct shmid_kernel *shp, int shmflg);
1876int security_shm_shmctl(struct shmid_kernel *shp, int cmd);
1877int security_shm_shmat(struct shmid_kernel *shp, char __user *shmaddr, int shmflg);
1878int security_sem_alloc(struct sem_array *sma);
1879void security_sem_free(struct sem_array *sma);
1880int security_sem_associate(struct sem_array *sma, int semflg);
1881int security_sem_semctl(struct sem_array *sma, int cmd);
1882int security_sem_semop(struct sem_array *sma, struct sembuf *sops,
1883 unsigned nsops, int alter);
1884void security_d_instantiate(struct dentry *dentry, struct inode *inode);
1885int security_getprocattr(struct task_struct *p, char *name, char **value);
1886int security_setprocattr(struct task_struct *p, char *name, void *value, size_t size);
1887int security_netlink_send(struct sock *sk, struct sk_buff *skb);
1888int security_ismaclabel(const char *name);
1889int security_secid_to_secctx(u32 secid, char **secdata, u32 *seclen);
1890int security_secctx_to_secid(const char *secdata, u32 seclen, u32 *secid);
1891void security_release_secctx(char *secdata, u32 seclen);
1892
1893int security_inode_notifysecctx(struct inode *inode, void *ctx, u32 ctxlen);
1894int security_inode_setsecctx(struct dentry *dentry, void *ctx, u32 ctxlen);
1895int security_inode_getsecctx(struct inode *inode, void **ctx, u32 *ctxlen);
1896#else
1897struct security_mnt_opts {
1898};
1899
1900static inline void security_init_mnt_opts(struct security_mnt_opts *opts)
1901{
1902}
1903
1904static inline void security_free_mnt_opts(struct security_mnt_opts *opts)
1905{
1906}
1907
1908
1909
1910
1911
1912
1913static inline int security_init(void)
1914{
1915 return 0;
1916}
1917
1918static inline int security_ptrace_access_check(struct task_struct *child,
1919 unsigned int mode)
1920{
1921 return cap_ptrace_access_check(child, mode);
1922}
1923
1924static inline int security_ptrace_traceme(struct task_struct *parent)
1925{
1926 return cap_ptrace_traceme(parent);
1927}
1928
1929static inline int security_capget(struct task_struct *target,
1930 kernel_cap_t *effective,
1931 kernel_cap_t *inheritable,
1932 kernel_cap_t *permitted)
1933{
1934 return cap_capget(target, effective, inheritable, permitted);
1935}
1936
1937static inline int security_capset(struct cred *new,
1938 const struct cred *old,
1939 const kernel_cap_t *effective,
1940 const kernel_cap_t *inheritable,
1941 const kernel_cap_t *permitted)
1942{
1943 return cap_capset(new, old, effective, inheritable, permitted);
1944}
1945
1946static inline int security_capable(const struct cred *cred,
1947 struct user_namespace *ns, int cap)
1948{
1949 return cap_capable(cred, ns, cap, SECURITY_CAP_AUDIT);
1950}
1951
1952static inline int security_capable_noaudit(const struct cred *cred,
1953 struct user_namespace *ns, int cap) {
1954 return cap_capable(cred, ns, cap, SECURITY_CAP_NOAUDIT);
1955}
1956
1957static inline int security_quotactl(int cmds, int type, int id,
1958 struct super_block *sb)
1959{
1960 return 0;
1961}
1962
1963static inline int security_quota_on(struct dentry *dentry)
1964{
1965 return 0;
1966}
1967
1968static inline int security_syslog(int type)
1969{
1970 return 0;
1971}
1972
1973static inline int security_settime(const struct timespec *ts,
1974 const struct timezone *tz)
1975{
1976 return cap_settime(ts, tz);
1977}
1978
1979static inline int security_vm_enough_memory_mm(struct mm_struct *mm, long pages)
1980{
1981 return cap_vm_enough_memory(mm, pages);
1982}
1983
1984static inline int security_bprm_set_creds(struct linux_binprm *bprm)
1985{
1986 return cap_bprm_set_creds(bprm);
1987}
1988
1989static inline int security_bprm_check(struct linux_binprm *bprm)
1990{
1991 return 0;
1992}
1993
1994static inline void security_bprm_committing_creds(struct linux_binprm *bprm)
1995{
1996}
1997
1998static inline void security_bprm_committed_creds(struct linux_binprm *bprm)
1999{
2000}
2001
2002static inline int security_bprm_secureexec(struct linux_binprm *bprm)
2003{
2004 return cap_bprm_secureexec(bprm);
2005}
2006
2007static inline int security_sb_alloc(struct super_block *sb)
2008{
2009 return 0;
2010}
2011
2012static inline void security_sb_free(struct super_block *sb)
2013{ }
2014
2015static inline int security_sb_copy_data(char *orig, char *copy)
2016{
2017 return 0;
2018}
2019
2020static inline int security_sb_remount(struct super_block *sb, void *data)
2021{
2022 return 0;
2023}
2024
2025static inline int security_sb_kern_mount(struct super_block *sb, int flags, void *data)
2026{
2027 return 0;
2028}
2029
2030static inline int security_sb_show_options(struct seq_file *m,
2031 struct super_block *sb)
2032{
2033 return 0;
2034}
2035
2036static inline int security_sb_statfs(struct dentry *dentry)
2037{
2038 return 0;
2039}
2040
2041static inline int security_sb_mount(const char *dev_name, struct path *path,
2042 const char *type, unsigned long flags,
2043 void *data)
2044{
2045 return 0;
2046}
2047
2048static inline int security_sb_umount(struct vfsmount *mnt, int flags)
2049{
2050 return 0;
2051}
2052
2053static inline int security_sb_pivotroot(struct path *old_path,
2054 struct path *new_path)
2055{
2056 return 0;
2057}
2058
2059static inline int security_sb_set_mnt_opts(struct super_block *sb,
2060 struct security_mnt_opts *opts,
2061 unsigned long kern_flags,
2062 unsigned long *set_kern_flags)
2063{
2064 return 0;
2065}
2066
2067static inline int security_sb_clone_mnt_opts(const struct super_block *oldsb,
2068 struct super_block *newsb)
2069{
2070 return 0;
2071}
2072
2073static inline int security_sb_parse_opts_str(char *options, struct security_mnt_opts *opts)
2074{
2075 return 0;
2076}
2077
2078static inline int security_inode_alloc(struct inode *inode)
2079{
2080 return 0;
2081}
2082
2083static inline void security_inode_free(struct inode *inode)
2084{ }
2085
2086static inline int security_dentry_init_security(struct dentry *dentry,
2087 int mode,
2088 struct qstr *name,
2089 void **ctx,
2090 u32 *ctxlen)
2091{
2092 return -EOPNOTSUPP;
2093}
2094
2095
2096static inline int security_inode_init_security(struct inode *inode,
2097 struct inode *dir,
2098 const struct qstr *qstr,
2099 const initxattrs initxattrs,
2100 void *fs_data)
2101{
2102 return 0;
2103}
2104
2105static inline int security_old_inode_init_security(struct inode *inode,
2106 struct inode *dir,
2107 const struct qstr *qstr,
2108 const char **name,
2109 void **value, size_t *len)
2110{
2111 return -EOPNOTSUPP;
2112}
2113
2114static inline int security_inode_create(struct inode *dir,
2115 struct dentry *dentry,
2116 umode_t mode)
2117{
2118 return 0;
2119}
2120
2121static inline int security_inode_link(struct dentry *old_dentry,
2122 struct inode *dir,
2123 struct dentry *new_dentry)
2124{
2125 return 0;
2126}
2127
2128static inline int security_inode_unlink(struct inode *dir,
2129 struct dentry *dentry)
2130{
2131 return 0;
2132}
2133
2134static inline int security_inode_symlink(struct inode *dir,
2135 struct dentry *dentry,
2136 const char *old_name)
2137{
2138 return 0;
2139}
2140
2141static inline int security_inode_mkdir(struct inode *dir,
2142 struct dentry *dentry,
2143 int mode)
2144{
2145 return 0;
2146}
2147
2148static inline int security_inode_rmdir(struct inode *dir,
2149 struct dentry *dentry)
2150{
2151 return 0;
2152}
2153
2154static inline int security_inode_mknod(struct inode *dir,
2155 struct dentry *dentry,
2156 int mode, dev_t dev)
2157{
2158 return 0;
2159}
2160
2161static inline int security_inode_rename(struct inode *old_dir,
2162 struct dentry *old_dentry,
2163 struct inode *new_dir,
2164 struct dentry *new_dentry)
2165{
2166 return 0;
2167}
2168
2169static inline int security_inode_readlink(struct dentry *dentry)
2170{
2171 return 0;
2172}
2173
2174static inline int security_inode_follow_link(struct dentry *dentry,
2175 struct nameidata *nd)
2176{
2177 return 0;
2178}
2179
2180static inline int security_inode_permission(struct inode *inode, int mask)
2181{
2182 return 0;
2183}
2184
2185static inline int security_inode_setattr(struct dentry *dentry,
2186 struct iattr *attr)
2187{
2188 return 0;
2189}
2190
2191static inline int security_inode_getattr(struct vfsmount *mnt,
2192 struct dentry *dentry)
2193{
2194 return 0;
2195}
2196
2197static inline int security_inode_setxattr(struct dentry *dentry,
2198 const char *name, const void *value, size_t size, int flags)
2199{
2200 return cap_inode_setxattr(dentry, name, value, size, flags);
2201}
2202
2203static inline void security_inode_post_setxattr(struct dentry *dentry,
2204 const char *name, const void *value, size_t size, int flags)
2205{ }
2206
2207static inline int security_inode_getxattr(struct dentry *dentry,
2208 const char *name)
2209{
2210 return 0;
2211}
2212
2213static inline int security_inode_listxattr(struct dentry *dentry)
2214{
2215 return 0;
2216}
2217
2218static inline int security_inode_removexattr(struct dentry *dentry,
2219 const char *name)
2220{
2221 return cap_inode_removexattr(dentry, name);
2222}
2223
2224static inline int security_inode_need_killpriv(struct dentry *dentry)
2225{
2226 return cap_inode_need_killpriv(dentry);
2227}
2228
2229static inline int security_inode_killpriv(struct dentry *dentry)
2230{
2231 return cap_inode_killpriv(dentry);
2232}
2233
2234static inline int security_inode_getsecurity(const struct inode *inode, const char *name, void **buffer, bool alloc)
2235{
2236 return -EOPNOTSUPP;
2237}
2238
2239static inline int security_inode_setsecurity(struct inode *inode, const char *name, const void *value, size_t size, int flags)
2240{
2241 return -EOPNOTSUPP;
2242}
2243
2244static inline int security_inode_listsecurity(struct inode *inode, char *buffer, size_t buffer_size)
2245{
2246 return 0;
2247}
2248
2249static inline void security_inode_getsecid(const struct inode *inode, u32 *secid)
2250{
2251 *secid = 0;
2252}
2253
2254static inline int security_file_permission(struct file *file, int mask)
2255{
2256 return 0;
2257}
2258
2259static inline int security_file_alloc(struct file *file)
2260{
2261 return 0;
2262}
2263
2264static inline void security_file_free(struct file *file)
2265{ }
2266
2267static inline int security_file_ioctl(struct file *file, unsigned int cmd,
2268 unsigned long arg)
2269{
2270 return 0;
2271}
2272
2273static inline int security_mmap_file(struct file *file, unsigned long prot,
2274 unsigned long flags)
2275{
2276 return 0;
2277}
2278
2279static inline int security_mmap_addr(unsigned long addr)
2280{
2281 return cap_mmap_addr(addr);
2282}
2283
2284static inline int security_file_mprotect(struct vm_area_struct *vma,
2285 unsigned long reqprot,
2286 unsigned long prot)
2287{
2288 return 0;
2289}
2290
2291static inline int security_file_lock(struct file *file, unsigned int cmd)
2292{
2293 return 0;
2294}
2295
2296static inline int security_file_fcntl(struct file *file, unsigned int cmd,
2297 unsigned long arg)
2298{
2299 return 0;
2300}
2301
2302static inline int security_file_set_fowner(struct file *file)
2303{
2304 return 0;
2305}
2306
2307static inline int security_file_send_sigiotask(struct task_struct *tsk,
2308 struct fown_struct *fown,
2309 int sig)
2310{
2311 return 0;
2312}
2313
2314static inline int security_file_receive(struct file *file)
2315{
2316 return 0;
2317}
2318
2319static inline int security_file_open(struct file *file,
2320 const struct cred *cred)
2321{
2322 return 0;
2323}
2324
2325static inline int security_task_create(unsigned long clone_flags)
2326{
2327 return 0;
2328}
2329
2330static inline void security_task_free(struct task_struct *task)
2331{ }
2332
2333static inline int security_cred_alloc_blank(struct cred *cred, gfp_t gfp)
2334{
2335 return 0;
2336}
2337
2338static inline void security_cred_free(struct cred *cred)
2339{ }
2340
2341static inline int security_prepare_creds(struct cred *new,
2342 const struct cred *old,
2343 gfp_t gfp)
2344{
2345 return 0;
2346}
2347
2348static inline void security_transfer_creds(struct cred *new,
2349 const struct cred *old)
2350{
2351}
2352
2353static inline int security_kernel_act_as(struct cred *cred, u32 secid)
2354{
2355 return 0;
2356}
2357
2358static inline int security_kernel_create_files_as(struct cred *cred,
2359 struct inode *inode)
2360{
2361 return 0;
2362}
2363
2364static inline int security_kernel_module_request(char *kmod_name)
2365{
2366 return 0;
2367}
2368
2369static inline int security_kernel_module_from_file(struct file *file)
2370{
2371 return 0;
2372}
2373
2374static inline int security_task_fix_setuid(struct cred *new,
2375 const struct cred *old,
2376 int flags)
2377{
2378 return cap_task_fix_setuid(new, old, flags);
2379}
2380
2381static inline int security_task_setpgid(struct task_struct *p, pid_t pgid)
2382{
2383 return 0;
2384}
2385
2386static inline int security_task_getpgid(struct task_struct *p)
2387{
2388 return 0;
2389}
2390
2391static inline int security_task_getsid(struct task_struct *p)
2392{
2393 return 0;
2394}
2395
2396static inline void security_task_getsecid(struct task_struct *p, u32 *secid)
2397{
2398 *secid = 0;
2399}
2400
2401static inline int security_task_setnice(struct task_struct *p, int nice)
2402{
2403 return cap_task_setnice(p, nice);
2404}
2405
2406static inline int security_task_setioprio(struct task_struct *p, int ioprio)
2407{
2408 return cap_task_setioprio(p, ioprio);
2409}
2410
2411static inline int security_task_getioprio(struct task_struct *p)
2412{
2413 return 0;
2414}
2415
2416static inline int security_task_setrlimit(struct task_struct *p,
2417 unsigned int resource,
2418 struct rlimit *new_rlim)
2419{
2420 return 0;
2421}
2422
2423static inline int security_task_setscheduler(struct task_struct *p)
2424{
2425 return cap_task_setscheduler(p);
2426}
2427
2428static inline int security_task_getscheduler(struct task_struct *p)
2429{
2430 return 0;
2431}
2432
2433static inline int security_task_movememory(struct task_struct *p)
2434{
2435 return 0;
2436}
2437
2438static inline int security_task_kill(struct task_struct *p,
2439 struct siginfo *info, int sig,
2440 u32 secid)
2441{
2442 return 0;
2443}
2444
2445static inline int security_task_wait(struct task_struct *p)
2446{
2447 return 0;
2448}
2449
2450static inline int security_task_prctl(int option, unsigned long arg2,
2451 unsigned long arg3,
2452 unsigned long arg4,
2453 unsigned long arg5)
2454{
2455 return cap_task_prctl(option, arg2, arg3, arg3, arg5);
2456}
2457
2458static inline void security_task_to_inode(struct task_struct *p, struct inode *inode)
2459{ }
2460
2461static inline int security_ipc_permission(struct kern_ipc_perm *ipcp,
2462 short flag)
2463{
2464 return 0;
2465}
2466
2467static inline void security_ipc_getsecid(struct kern_ipc_perm *ipcp, u32 *secid)
2468{
2469 *secid = 0;
2470}
2471
2472static inline int security_msg_msg_alloc(struct msg_msg *msg)
2473{
2474 return 0;
2475}
2476
2477static inline void security_msg_msg_free(struct msg_msg *msg)
2478{ }
2479
2480static inline int security_msg_queue_alloc(struct msg_queue *msq)
2481{
2482 return 0;
2483}
2484
2485static inline void security_msg_queue_free(struct msg_queue *msq)
2486{ }
2487
2488static inline int security_msg_queue_associate(struct msg_queue *msq,
2489 int msqflg)
2490{
2491 return 0;
2492}
2493
2494static inline int security_msg_queue_msgctl(struct msg_queue *msq, int cmd)
2495{
2496 return 0;
2497}
2498
2499static inline int security_msg_queue_msgsnd(struct msg_queue *msq,
2500 struct msg_msg *msg, int msqflg)
2501{
2502 return 0;
2503}
2504
2505static inline int security_msg_queue_msgrcv(struct msg_queue *msq,
2506 struct msg_msg *msg,
2507 struct task_struct *target,
2508 long type, int mode)
2509{
2510 return 0;
2511}
2512
2513static inline int security_shm_alloc(struct shmid_kernel *shp)
2514{
2515 return 0;
2516}
2517
2518static inline void security_shm_free(struct shmid_kernel *shp)
2519{ }
2520
2521static inline int security_shm_associate(struct shmid_kernel *shp,
2522 int shmflg)
2523{
2524 return 0;
2525}
2526
2527static inline int security_shm_shmctl(struct shmid_kernel *shp, int cmd)
2528{
2529 return 0;
2530}
2531
2532static inline int security_shm_shmat(struct shmid_kernel *shp,
2533 char __user *shmaddr, int shmflg)
2534{
2535 return 0;
2536}
2537
2538static inline int security_sem_alloc(struct sem_array *sma)
2539{
2540 return 0;
2541}
2542
2543static inline void security_sem_free(struct sem_array *sma)
2544{ }
2545
2546static inline int security_sem_associate(struct sem_array *sma, int semflg)
2547{
2548 return 0;
2549}
2550
2551static inline int security_sem_semctl(struct sem_array *sma, int cmd)
2552{
2553 return 0;
2554}
2555
2556static inline int security_sem_semop(struct sem_array *sma,
2557 struct sembuf *sops, unsigned nsops,
2558 int alter)
2559{
2560 return 0;
2561}
2562
2563static inline void security_d_instantiate(struct dentry *dentry, struct inode *inode)
2564{ }
2565
2566static inline int security_getprocattr(struct task_struct *p, char *name, char **value)
2567{
2568 return -EINVAL;
2569}
2570
2571static inline int security_setprocattr(struct task_struct *p, char *name, void *value, size_t size)
2572{
2573 return -EINVAL;
2574}
2575
2576static inline int security_netlink_send(struct sock *sk, struct sk_buff *skb)
2577{
2578 return cap_netlink_send(sk, skb);
2579}
2580
2581static inline int security_ismaclabel(const char *name)
2582{
2583 return 0;
2584}
2585
2586static inline int security_secid_to_secctx(u32 secid, char **secdata, u32 *seclen)
2587{
2588 return -EOPNOTSUPP;
2589}
2590
2591static inline int security_secctx_to_secid(const char *secdata,
2592 u32 seclen,
2593 u32 *secid)
2594{
2595 return -EOPNOTSUPP;
2596}
2597
2598static inline void security_release_secctx(char *secdata, u32 seclen)
2599{
2600}
2601
2602static inline int security_inode_notifysecctx(struct inode *inode, void *ctx, u32 ctxlen)
2603{
2604 return -EOPNOTSUPP;
2605}
2606static inline int security_inode_setsecctx(struct dentry *dentry, void *ctx, u32 ctxlen)
2607{
2608 return -EOPNOTSUPP;
2609}
2610static inline int security_inode_getsecctx(struct inode *inode, void **ctx, u32 *ctxlen)
2611{
2612 return -EOPNOTSUPP;
2613}
2614#endif
2615
2616#ifdef CONFIG_SECURITY_NETWORK
2617
2618int security_unix_stream_connect(struct sock *sock, struct sock *other, struct sock *newsk);
2619int security_unix_may_send(struct socket *sock, struct socket *other);
2620int security_socket_create(int family, int type, int protocol, int kern);
2621int security_socket_post_create(struct socket *sock, int family,
2622 int type, int protocol, int kern);
2623int security_socket_bind(struct socket *sock, struct sockaddr *address, int addrlen);
2624int security_socket_connect(struct socket *sock, struct sockaddr *address, int addrlen);
2625int security_socket_listen(struct socket *sock, int backlog);
2626int security_socket_accept(struct socket *sock, struct socket *newsock);
2627int security_socket_sendmsg(struct socket *sock, struct msghdr *msg, int size);
2628int security_socket_recvmsg(struct socket *sock, struct msghdr *msg,
2629 int size, int flags);
2630int security_socket_getsockname(struct socket *sock);
2631int security_socket_getpeername(struct socket *sock);
2632int security_socket_getsockopt(struct socket *sock, int level, int optname);
2633int security_socket_setsockopt(struct socket *sock, int level, int optname);
2634int security_socket_shutdown(struct socket *sock, int how);
2635int security_sock_rcv_skb(struct sock *sk, struct sk_buff *skb);
2636int security_socket_getpeersec_stream(struct socket *sock, char __user *optval,
2637 int __user *optlen, unsigned len);
2638int security_socket_getpeersec_dgram(struct socket *sock, struct sk_buff *skb, u32 *secid);
2639int security_sk_alloc(struct sock *sk, int family, gfp_t priority);
2640void security_sk_free(struct sock *sk);
2641void security_sk_clone(const struct sock *sk, struct sock *newsk);
2642void security_sk_classify_flow(struct sock *sk, struct flowi *fl);
2643void security_req_classify_flow(const struct request_sock *req, struct flowi *fl);
2644void security_sock_graft(struct sock*sk, struct socket *parent);
2645int security_inet_conn_request(struct sock *sk,
2646 struct sk_buff *skb, struct request_sock *req);
2647void security_inet_csk_clone(struct sock *newsk,
2648 const struct request_sock *req);
2649void security_inet_conn_established(struct sock *sk,
2650 struct sk_buff *skb);
2651int security_secmark_relabel_packet(u32 secid);
2652void security_secmark_refcount_inc(void);
2653void security_secmark_refcount_dec(void);
2654int security_tun_dev_alloc_security(void **security);
2655void security_tun_dev_free_security(void *security);
2656int security_tun_dev_create(void);
2657int security_tun_dev_attach_queue(void *security);
2658int security_tun_dev_attach(struct sock *sk, void *security);
2659int security_tun_dev_open(void *security);
2660
2661void security_skb_owned_by(struct sk_buff *skb, struct sock *sk);
2662
2663#else
2664static inline int security_unix_stream_connect(struct sock *sock,
2665 struct sock *other,
2666 struct sock *newsk)
2667{
2668 return 0;
2669}
2670
2671static inline int security_unix_may_send(struct socket *sock,
2672 struct socket *other)
2673{
2674 return 0;
2675}
2676
2677static inline int security_socket_create(int family, int type,
2678 int protocol, int kern)
2679{
2680 return 0;
2681}
2682
2683static inline int security_socket_post_create(struct socket *sock,
2684 int family,
2685 int type,
2686 int protocol, int kern)
2687{
2688 return 0;
2689}
2690
2691static inline int security_socket_bind(struct socket *sock,
2692 struct sockaddr *address,
2693 int addrlen)
2694{
2695 return 0;
2696}
2697
2698static inline int security_socket_connect(struct socket *sock,
2699 struct sockaddr *address,
2700 int addrlen)
2701{
2702 return 0;
2703}
2704
2705static inline int security_socket_listen(struct socket *sock, int backlog)
2706{
2707 return 0;
2708}
2709
2710static inline int security_socket_accept(struct socket *sock,
2711 struct socket *newsock)
2712{
2713 return 0;
2714}
2715
2716static inline int security_socket_sendmsg(struct socket *sock,
2717 struct msghdr *msg, int size)
2718{
2719 return 0;
2720}
2721
2722static inline int security_socket_recvmsg(struct socket *sock,
2723 struct msghdr *msg, int size,
2724 int flags)
2725{
2726 return 0;
2727}
2728
2729static inline int security_socket_getsockname(struct socket *sock)
2730{
2731 return 0;
2732}
2733
2734static inline int security_socket_getpeername(struct socket *sock)
2735{
2736 return 0;
2737}
2738
2739static inline int security_socket_getsockopt(struct socket *sock,
2740 int level, int optname)
2741{
2742 return 0;
2743}
2744
2745static inline int security_socket_setsockopt(struct socket *sock,
2746 int level, int optname)
2747{
2748 return 0;
2749}
2750
2751static inline int security_socket_shutdown(struct socket *sock, int how)
2752{
2753 return 0;
2754}
2755static inline int security_sock_rcv_skb(struct sock *sk,
2756 struct sk_buff *skb)
2757{
2758 return 0;
2759}
2760
2761static inline int security_socket_getpeersec_stream(struct socket *sock, char __user *optval,
2762 int __user *optlen, unsigned len)
2763{
2764 return -ENOPROTOOPT;
2765}
2766
2767static inline int security_socket_getpeersec_dgram(struct socket *sock, struct sk_buff *skb, u32 *secid)
2768{
2769 return -ENOPROTOOPT;
2770}
2771
2772static inline int security_sk_alloc(struct sock *sk, int family, gfp_t priority)
2773{
2774 return 0;
2775}
2776
2777static inline void security_sk_free(struct sock *sk)
2778{
2779}
2780
2781static inline void security_sk_clone(const struct sock *sk, struct sock *newsk)
2782{
2783}
2784
2785static inline void security_sk_classify_flow(struct sock *sk, struct flowi *fl)
2786{
2787}
2788
2789static inline void security_req_classify_flow(const struct request_sock *req, struct flowi *fl)
2790{
2791}
2792
2793static inline void security_sock_graft(struct sock *sk, struct socket *parent)
2794{
2795}
2796
2797static inline int security_inet_conn_request(struct sock *sk,
2798 struct sk_buff *skb, struct request_sock *req)
2799{
2800 return 0;
2801}
2802
2803static inline void security_inet_csk_clone(struct sock *newsk,
2804 const struct request_sock *req)
2805{
2806}
2807
2808static inline void security_inet_conn_established(struct sock *sk,
2809 struct sk_buff *skb)
2810{
2811}
2812
2813static inline int security_secmark_relabel_packet(u32 secid)
2814{
2815 return 0;
2816}
2817
2818static inline void security_secmark_refcount_inc(void)
2819{
2820}
2821
2822static inline void security_secmark_refcount_dec(void)
2823{
2824}
2825
2826static inline int security_tun_dev_alloc_security(void **security)
2827{
2828 return 0;
2829}
2830
2831static inline void security_tun_dev_free_security(void *security)
2832{
2833}
2834
2835static inline int security_tun_dev_create(void)
2836{
2837 return 0;
2838}
2839
2840static inline int security_tun_dev_attach_queue(void *security)
2841{
2842 return 0;
2843}
2844
2845static inline int security_tun_dev_attach(struct sock *sk, void *security)
2846{
2847 return 0;
2848}
2849
2850static inline int security_tun_dev_open(void *security)
2851{
2852 return 0;
2853}
2854
2855static inline void security_skb_owned_by(struct sk_buff *skb, struct sock *sk)
2856{
2857}
2858
2859#endif
2860
2861#ifdef CONFIG_SECURITY_NETWORK_XFRM
2862
2863int security_xfrm_policy_alloc(struct xfrm_sec_ctx **ctxp,
2864 struct xfrm_user_sec_ctx *sec_ctx, gfp_t gfp);
2865int security_xfrm_policy_clone(struct xfrm_sec_ctx *old_ctx, struct xfrm_sec_ctx **new_ctxp);
2866void security_xfrm_policy_free(struct xfrm_sec_ctx *ctx);
2867int security_xfrm_policy_delete(struct xfrm_sec_ctx *ctx);
2868int security_xfrm_state_alloc(struct xfrm_state *x, struct xfrm_user_sec_ctx *sec_ctx);
2869int security_xfrm_state_alloc_acquire(struct xfrm_state *x,
2870 struct xfrm_sec_ctx *polsec, u32 secid);
2871int security_xfrm_state_delete(struct xfrm_state *x);
2872void security_xfrm_state_free(struct xfrm_state *x);
2873int security_xfrm_policy_lookup(struct xfrm_sec_ctx *ctx, u32 fl_secid, u8 dir);
2874int security_xfrm_state_pol_flow_match(struct xfrm_state *x,
2875 struct xfrm_policy *xp,
2876 const struct flowi *fl);
2877int security_xfrm_decode_session(struct sk_buff *skb, u32 *secid);
2878void security_skb_classify_flow(struct sk_buff *skb, struct flowi *fl);
2879
2880#else
2881
2882static inline int security_xfrm_policy_alloc(struct xfrm_sec_ctx **ctxp,
2883 struct xfrm_user_sec_ctx *sec_ctx,
2884 gfp_t gfp)
2885{
2886 return 0;
2887}
2888
2889static inline int security_xfrm_policy_clone(struct xfrm_sec_ctx *old, struct xfrm_sec_ctx **new_ctxp)
2890{
2891 return 0;
2892}
2893
2894static inline void security_xfrm_policy_free(struct xfrm_sec_ctx *ctx)
2895{
2896}
2897
2898static inline int security_xfrm_policy_delete(struct xfrm_sec_ctx *ctx)
2899{
2900 return 0;
2901}
2902
2903static inline int security_xfrm_state_alloc(struct xfrm_state *x,
2904 struct xfrm_user_sec_ctx *sec_ctx)
2905{
2906 return 0;
2907}
2908
2909static inline int security_xfrm_state_alloc_acquire(struct xfrm_state *x,
2910 struct xfrm_sec_ctx *polsec, u32 secid)
2911{
2912 return 0;
2913}
2914
2915static inline void security_xfrm_state_free(struct xfrm_state *x)
2916{
2917}
2918
2919static inline int security_xfrm_state_delete(struct xfrm_state *x)
2920{
2921 return 0;
2922}
2923
2924static inline int security_xfrm_policy_lookup(struct xfrm_sec_ctx *ctx, u32 fl_secid, u8 dir)
2925{
2926 return 0;
2927}
2928
2929static inline int security_xfrm_state_pol_flow_match(struct xfrm_state *x,
2930 struct xfrm_policy *xp, const struct flowi *fl)
2931{
2932 return 1;
2933}
2934
2935static inline int security_xfrm_decode_session(struct sk_buff *skb, u32 *secid)
2936{
2937 return 0;
2938}
2939
2940static inline void security_skb_classify_flow(struct sk_buff *skb, struct flowi *fl)
2941{
2942}
2943
2944#endif
2945
2946#ifdef CONFIG_SECURITY_PATH
2947int security_path_unlink(struct path *dir, struct dentry *dentry);
2948int security_path_mkdir(struct path *dir, struct dentry *dentry, umode_t mode);
2949int security_path_rmdir(struct path *dir, struct dentry *dentry);
2950int security_path_mknod(struct path *dir, struct dentry *dentry, umode_t mode,
2951 unsigned int dev);
2952int security_path_truncate(struct path *path);
2953int security_path_symlink(struct path *dir, struct dentry *dentry,
2954 const char *old_name);
2955int security_path_link(struct dentry *old_dentry, struct path *new_dir,
2956 struct dentry *new_dentry);
2957int security_path_rename(struct path *old_dir, struct dentry *old_dentry,
2958 struct path *new_dir, struct dentry *new_dentry);
2959int security_path_chmod(struct path *path, umode_t mode);
2960int security_path_chown(struct path *path, kuid_t uid, kgid_t gid);
2961int security_path_chroot(struct path *path);
2962#else
2963static inline int security_path_unlink(struct path *dir, struct dentry *dentry)
2964{
2965 return 0;
2966}
2967
2968static inline int security_path_mkdir(struct path *dir, struct dentry *dentry,
2969 umode_t mode)
2970{
2971 return 0;
2972}
2973
2974static inline int security_path_rmdir(struct path *dir, struct dentry *dentry)
2975{
2976 return 0;
2977}
2978
2979static inline int security_path_mknod(struct path *dir, struct dentry *dentry,
2980 umode_t mode, unsigned int dev)
2981{
2982 return 0;
2983}
2984
2985static inline int security_path_truncate(struct path *path)
2986{
2987 return 0;
2988}
2989
2990static inline int security_path_symlink(struct path *dir, struct dentry *dentry,
2991 const char *old_name)
2992{
2993 return 0;
2994}
2995
2996static inline int security_path_link(struct dentry *old_dentry,
2997 struct path *new_dir,
2998 struct dentry *new_dentry)
2999{
3000 return 0;
3001}
3002
3003static inline int security_path_rename(struct path *old_dir,
3004 struct dentry *old_dentry,
3005 struct path *new_dir,
3006 struct dentry *new_dentry)
3007{
3008 return 0;
3009}
3010
3011static inline int security_path_chmod(struct path *path, umode_t mode)
3012{
3013 return 0;
3014}
3015
3016static inline int security_path_chown(struct path *path, kuid_t uid, kgid_t gid)
3017{
3018 return 0;
3019}
3020
3021static inline int security_path_chroot(struct path *path)
3022{
3023 return 0;
3024}
3025#endif
3026
3027#ifdef CONFIG_KEYS
3028#ifdef CONFIG_SECURITY
3029
3030int security_key_alloc(struct key *key, const struct cred *cred, unsigned long flags);
3031void security_key_free(struct key *key);
3032int security_key_permission(key_ref_t key_ref,
3033 const struct cred *cred, key_perm_t perm);
3034int security_key_getsecurity(struct key *key, char **_buffer);
3035
3036#else
3037
3038static inline int security_key_alloc(struct key *key,
3039 const struct cred *cred,
3040 unsigned long flags)
3041{
3042 return 0;
3043}
3044
3045static inline void security_key_free(struct key *key)
3046{
3047}
3048
3049static inline int security_key_permission(key_ref_t key_ref,
3050 const struct cred *cred,
3051 key_perm_t perm)
3052{
3053 return 0;
3054}
3055
3056static inline int security_key_getsecurity(struct key *key, char **_buffer)
3057{
3058 *_buffer = NULL;
3059 return 0;
3060}
3061
3062#endif
3063#endif
3064
3065#ifdef CONFIG_AUDIT
3066#ifdef CONFIG_SECURITY
3067int security_audit_rule_init(u32 field, u32 op, char *rulestr, void **lsmrule);
3068int security_audit_rule_known(struct audit_krule *krule);
3069int security_audit_rule_match(u32 secid, u32 field, u32 op, void *lsmrule,
3070 struct audit_context *actx);
3071void security_audit_rule_free(void *lsmrule);
3072
3073#else
3074
3075static inline int security_audit_rule_init(u32 field, u32 op, char *rulestr,
3076 void **lsmrule)
3077{
3078 return 0;
3079}
3080
3081static inline int security_audit_rule_known(struct audit_krule *krule)
3082{
3083 return 0;
3084}
3085
3086static inline int security_audit_rule_match(u32 secid, u32 field, u32 op,
3087 void *lsmrule, struct audit_context *actx)
3088{
3089 return 0;
3090}
3091
3092static inline void security_audit_rule_free(void *lsmrule)
3093{ }
3094
3095#endif
3096#endif
3097
3098#ifdef CONFIG_SECURITYFS
3099
3100extern struct dentry *securityfs_create_file(const char *name, umode_t mode,
3101 struct dentry *parent, void *data,
3102 const struct file_operations *fops);
3103extern struct dentry *securityfs_create_dir(const char *name, struct dentry *parent);
3104extern void securityfs_remove(struct dentry *dentry);
3105
3106#else
3107
3108static inline struct dentry *securityfs_create_dir(const char *name,
3109 struct dentry *parent)
3110{
3111 return ERR_PTR(-ENODEV);
3112}
3113
3114static inline struct dentry *securityfs_create_file(const char *name,
3115 umode_t mode,
3116 struct dentry *parent,
3117 void *data,
3118 const struct file_operations *fops)
3119{
3120 return ERR_PTR(-ENODEV);
3121}
3122
3123static inline void securityfs_remove(struct dentry *dentry)
3124{}
3125
3126#endif
3127
3128#ifdef CONFIG_SECURITY
3129
3130static inline char *alloc_secdata(void)
3131{
3132 return (char *)get_zeroed_page(GFP_KERNEL);
3133}
3134
3135static inline void free_secdata(void *secdata)
3136{
3137 free_page((unsigned long)secdata);
3138}
3139
3140#else
3141
3142static inline char *alloc_secdata(void)
3143{
3144 return (char *)1;
3145}
3146
3147static inline void free_secdata(void *secdata)
3148{ }
3149#endif
3150
3151#ifdef CONFIG_SECURITY_YAMA
3152extern int yama_ptrace_access_check(struct task_struct *child,
3153 unsigned int mode);
3154extern int yama_ptrace_traceme(struct task_struct *parent);
3155extern void yama_task_free(struct task_struct *task);
3156extern int yama_task_prctl(int option, unsigned long arg2, unsigned long arg3,
3157 unsigned long arg4, unsigned long arg5);
3158#else
3159static inline int yama_ptrace_access_check(struct task_struct *child,
3160 unsigned int mode)
3161{
3162 return 0;
3163}
3164
3165static inline int yama_ptrace_traceme(struct task_struct *parent)
3166{
3167 return 0;
3168}
3169
3170static inline void yama_task_free(struct task_struct *task)
3171{
3172}
3173
3174static inline int yama_task_prctl(int option, unsigned long arg2,
3175 unsigned long arg3, unsigned long arg4,
3176 unsigned long arg5)
3177{
3178 return -ENOSYS;
3179}
3180#endif
3181
3182#endif
3183
3184