1#ifndef _LINUX_PRCTL_H 2#define _LINUX_PRCTL_H 3 4#include <linux/types.h> 5 6/* Values to pass as first argument to prctl() */ 7 8#define PR_SET_PDEATHSIG 1 /* Second arg is a signal */ 9#define PR_GET_PDEATHSIG 2 /* Second arg is a ptr to return the signal */ 10 11/* Get/set current->mm->dumpable */ 12#define PR_GET_DUMPABLE 3 13#define PR_SET_DUMPABLE 4 14 15/* Get/set unaligned access control bits (if meaningful) */ 16#define PR_GET_UNALIGN 5 17#define PR_SET_UNALIGN 6 18# define PR_UNALIGN_NOPRINT 1 /* silently fix up unaligned user accesses */ 19# define PR_UNALIGN_SIGBUS 2 /* generate SIGBUS on unaligned user access */ 20 21/* Get/set whether or not to drop capabilities on setuid() away from 22 * uid 0 (as per security/commoncap.c) */ 23#define PR_GET_KEEPCAPS 7 24#define PR_SET_KEEPCAPS 8 25 26/* Get/set floating-point emulation control bits (if meaningful) */ 27#define PR_GET_FPEMU 9 28#define PR_SET_FPEMU 10 29# define PR_FPEMU_NOPRINT 1 /* silently emulate fp operations accesses */ 30# define PR_FPEMU_SIGFPE 2 /* don't emulate fp operations, send SIGFPE instead */ 31 32/* Get/set floating-point exception mode (if meaningful) */ 33#define PR_GET_FPEXC 11 34#define PR_SET_FPEXC 12 35# define PR_FP_EXC_SW_ENABLE 0x80 /* Use FPEXC for FP exception enables */ 36# define PR_FP_EXC_DIV 0x010000 /* floating point divide by zero */ 37# define PR_FP_EXC_OVF 0x020000 /* floating point overflow */ 38# define PR_FP_EXC_UND 0x040000 /* floating point underflow */ 39# define PR_FP_EXC_RES 0x080000 /* floating point inexact result */ 40# define PR_FP_EXC_INV 0x100000 /* floating point invalid operation */ 41# define PR_FP_EXC_DISABLED 0 /* FP exceptions disabled */ 42# define PR_FP_EXC_NONRECOV 1 /* async non-recoverable exc. mode */ 43# define PR_FP_EXC_ASYNC 2 /* async recoverable exception mode */ 44# define PR_FP_EXC_PRECISE 3 /* precise exception mode */ 45 46/* Get/set whether we use statistical process timing or accurate timestamp 47 * based process timing */ 48#define PR_GET_TIMING 13 49#define PR_SET_TIMING 14 50# define PR_TIMING_STATISTICAL 0 /* Normal, traditional, 51 statistical process timing */ 52# define PR_TIMING_TIMESTAMP 1 /* Accurate timestamp based 53 process timing */ 54 55#define PR_SET_NAME 15 /* Set process name */ 56#define PR_GET_NAME 16 /* Get process name */ 57 58/* Get/set process endian */ 59#define PR_GET_ENDIAN 19 60#define PR_SET_ENDIAN 20 61# define PR_ENDIAN_BIG 0 62# define PR_ENDIAN_LITTLE 1 /* True little endian mode */ 63# define PR_ENDIAN_PPC_LITTLE 2 /* "PowerPC" pseudo little endian */ 64 65/* Get/set process seccomp mode */ 66#define PR_GET_SECCOMP 21 67#define PR_SET_SECCOMP 22 68 69/* Get/set the capability bounding set (as per security/commoncap.c) */ 70#define PR_CAPBSET_READ 23 71#define PR_CAPBSET_DROP 24 72 73/* Get/set the process' ability to use the timestamp counter instruction */ 74#define PR_GET_TSC 25 75#define PR_SET_TSC 26 76# define PR_TSC_ENABLE 1 /* allow the use of the timestamp counter */ 77# define PR_TSC_SIGSEGV 2 /* throw a SIGSEGV instead of reading the TSC */ 78 79/* Get/set securebits (as per security/commoncap.c) */ 80#define PR_GET_SECUREBITS 27 81#define PR_SET_SECUREBITS 28 82 83/* 84 * Get/set the timerslack as used by poll/select/nanosleep 85 * A value of 0 means "use default" 86 */ 87#define PR_SET_TIMERSLACK 29 88#define PR_GET_TIMERSLACK 30 89 90#define PR_TASK_PERF_EVENTS_DISABLE 31 91#define PR_TASK_PERF_EVENTS_ENABLE 32 92 93/* 94 * Set early/late kill mode for hwpoison memory corruption. 95 * This influences when the process gets killed on a memory corruption. 96 */ 97#define PR_MCE_KILL 33 98# define PR_MCE_KILL_CLEAR 0 99# define PR_MCE_KILL_SET 1 100 101# define PR_MCE_KILL_LATE 0 102# define PR_MCE_KILL_EARLY 1 103# define PR_MCE_KILL_DEFAULT 2 104 105#define PR_MCE_KILL_GET 34 106 107/* 108 * Tune up process memory map specifics. 109 */ 110#define PR_SET_MM 35 111# define PR_SET_MM_START_CODE 1 112# define PR_SET_MM_END_CODE 2 113# define PR_SET_MM_START_DATA 3 114# define PR_SET_MM_END_DATA 4 115# define PR_SET_MM_START_STACK 5 116# define PR_SET_MM_START_BRK 6 117# define PR_SET_MM_BRK 7 118# define PR_SET_MM_ARG_START 8 119# define PR_SET_MM_ARG_END 9 120# define PR_SET_MM_ENV_START 10 121# define PR_SET_MM_ENV_END 11 122# define PR_SET_MM_AUXV 12 123# define PR_SET_MM_EXE_FILE 13 124# define PR_SET_MM_MAP 14 125# define PR_SET_MM_MAP_SIZE 15 126 127/* 128 * This structure provides new memory descriptor 129 * map which mostly modifies /proc/pid/stat[m] 130 * output for a task. This mostly done in a 131 * sake of checkpoint/restore functionality. 132 */ 133struct prctl_mm_map { 134 __u64 start_code; /* code section bounds */ 135 __u64 end_code; 136 __u64 start_data; /* data section bounds */ 137 __u64 end_data; 138 __u64 start_brk; /* heap for brk() syscall */ 139 __u64 brk; 140 __u64 start_stack; /* stack starts at */ 141 __u64 arg_start; /* command line arguments bounds */ 142 __u64 arg_end; 143 __u64 env_start; /* environment variables bounds */ 144 __u64 env_end; 145 __u64 *auxv; /* auxiliary vector */ 146 __u32 auxv_size; /* vector size */ 147 __u32 exe_fd; /* /proc/$pid/exe link file */ 148}; 149 150/* 151 * Set specific pid that is allowed to ptrace the current task. 152 * A value of 0 mean "no process". 153 */ 154#define PR_SET_PTRACER 0x59616d61 155# define PR_SET_PTRACER_ANY ((unsigned long)-1) 156 157#define PR_SET_CHILD_SUBREAPER 36 158#define PR_GET_CHILD_SUBREAPER 37 159 160/* 161 * If no_new_privs is set, then operations that grant new privileges (i.e. 162 * execve) will either fail or not grant them. This affects suid/sgid, 163 * file capabilities, and LSMs. 164 * 165 * Operations that merely manipulate or drop existing privileges (setresuid, 166 * capset, etc.) will still work. Drop those privileges if you want them gone. 167 * 168 * Changing LSM security domain is considered a new privilege. So, for example, 169 * asking selinux for a specific new context (e.g. with runcon) will result 170 * in execve returning -EPERM. 171 * 172 * See Documentation/prctl/no_new_privs.txt for more details. 173 */ 174#define PR_SET_NO_NEW_PRIVS 38 175#define PR_GET_NO_NEW_PRIVS 39 176 177#define PR_GET_TID_ADDRESS 40 178 179#define PR_SET_THP_DISABLE 41 180#define PR_GET_THP_DISABLE 42 181 182/* 183 * Tell the kernel to start/stop helping userspace manage bounds tables. 184 */ 185#define PR_MPX_ENABLE_MANAGEMENT 43 186#define PR_MPX_DISABLE_MANAGEMENT 44 187 188#endif /* _LINUX_PRCTL_H */ 189