1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23#ifndef __LINUX_SECURITY_H
24#define __LINUX_SECURITY_H
25
26#include <linux/key.h>
27#include <linux/capability.h>
28#include <linux/fs.h>
29#include <linux/slab.h>
30#include <linux/err.h>
31#include <linux/string.h>
32#include <linux/mm.h>
33#include <linux/fs.h>
34
35struct linux_binprm;
36struct cred;
37struct rlimit;
38struct siginfo;
39struct sem_array;
40struct sembuf;
41struct kern_ipc_perm;
42struct audit_context;
43struct super_block;
44struct inode;
45struct dentry;
46struct file;
47struct vfsmount;
48struct path;
49struct qstr;
50struct iattr;
51struct fown_struct;
52struct file_operations;
53struct shmid_kernel;
54struct msg_msg;
55struct msg_queue;
56struct xattr;
57struct xfrm_sec_ctx;
58struct mm_struct;
59
60
61#define SECURITY_CAP_NOAUDIT 0
62#define SECURITY_CAP_AUDIT 1
63
64
65#define SECURITY_LSM_NATIVE_LABELS 1
66
67struct ctl_table;
68struct audit_krule;
69struct user_namespace;
70struct timezone;
71
72enum lsm_event {
73 LSM_POLICY_CHANGE,
74};
75
76
77extern int cap_capable(const struct cred *cred, struct user_namespace *ns,
78 int cap, int audit);
79extern int cap_settime(const struct timespec64 *ts, const struct timezone *tz);
80extern int cap_ptrace_access_check(struct task_struct *child, unsigned int mode);
81extern int cap_ptrace_traceme(struct task_struct *parent);
82extern int cap_capget(struct task_struct *target, kernel_cap_t *effective, kernel_cap_t *inheritable, kernel_cap_t *permitted);
83extern int cap_capset(struct cred *new, const struct cred *old,
84 const kernel_cap_t *effective,
85 const kernel_cap_t *inheritable,
86 const kernel_cap_t *permitted);
87extern int cap_bprm_set_creds(struct linux_binprm *bprm);
88extern int cap_bprm_secureexec(struct linux_binprm *bprm);
89extern int cap_inode_setxattr(struct dentry *dentry, const char *name,
90 const void *value, size_t size, int flags);
91extern int cap_inode_removexattr(struct dentry *dentry, const char *name);
92extern int cap_inode_need_killpriv(struct dentry *dentry);
93extern int cap_inode_killpriv(struct dentry *dentry);
94extern int cap_mmap_addr(unsigned long addr);
95extern int cap_mmap_file(struct file *file, unsigned long reqprot,
96 unsigned long prot, unsigned long flags);
97extern int cap_task_fix_setuid(struct cred *new, const struct cred *old, int flags);
98extern int cap_task_prctl(int option, unsigned long arg2, unsigned long arg3,
99 unsigned long arg4, unsigned long arg5);
100extern int cap_task_setscheduler(struct task_struct *p);
101extern int cap_task_setioprio(struct task_struct *p, int ioprio);
102extern int cap_task_setnice(struct task_struct *p, int nice);
103extern int cap_vm_enough_memory(struct mm_struct *mm, long pages);
104
105struct msghdr;
106struct sk_buff;
107struct sock;
108struct sockaddr;
109struct socket;
110struct flowi;
111struct dst_entry;
112struct xfrm_selector;
113struct xfrm_policy;
114struct xfrm_state;
115struct xfrm_user_sec_ctx;
116struct seq_file;
117
118#ifdef CONFIG_MMU
119extern unsigned long mmap_min_addr;
120extern unsigned long dac_mmap_min_addr;
121#else
122#define mmap_min_addr 0UL
123#define dac_mmap_min_addr 0UL
124#endif
125
126
127
128
129
130#define LSM_SETID_ID 1
131
132
133#define LSM_SETID_RE 2
134
135
136#define LSM_SETID_RES 4
137
138
139#define LSM_SETID_FS 8
140
141
142#define LSM_PRLIMIT_READ 1
143#define LSM_PRLIMIT_WRITE 2
144
145
146struct sched_param;
147struct request_sock;
148
149
150#define LSM_UNSAFE_SHARE 1
151#define LSM_UNSAFE_PTRACE 2
152#define LSM_UNSAFE_NO_NEW_PRIVS 4
153
154#ifdef CONFIG_MMU
155extern int mmap_min_addr_handler(struct ctl_table *table, int write,
156 void __user *buffer, size_t *lenp, loff_t *ppos);
157#endif
158
159
160typedef int (*initxattrs) (struct inode *inode,
161 const struct xattr *xattr_array, void *fs_data);
162
163#ifdef CONFIG_SECURITY
164
165struct security_mnt_opts {
166 char **mnt_opts;
167 int *mnt_opts_flags;
168 int num_mnt_opts;
169};
170
171int call_lsm_notifier(enum lsm_event event, void *data);
172int register_lsm_notifier(struct notifier_block *nb);
173int unregister_lsm_notifier(struct notifier_block *nb);
174
175static inline void security_init_mnt_opts(struct security_mnt_opts *opts)
176{
177 opts->mnt_opts = NULL;
178 opts->mnt_opts_flags = NULL;
179 opts->num_mnt_opts = 0;
180}
181
182static inline void security_free_mnt_opts(struct security_mnt_opts *opts)
183{
184 int i;
185 if (opts->mnt_opts)
186 for (i = 0; i < opts->num_mnt_opts; i++)
187 kfree(opts->mnt_opts[i]);
188 kfree(opts->mnt_opts);
189 opts->mnt_opts = NULL;
190 kfree(opts->mnt_opts_flags);
191 opts->mnt_opts_flags = NULL;
192 opts->num_mnt_opts = 0;
193}
194
195
196extern int security_init(void);
197
198
199int security_binder_set_context_mgr(struct task_struct *mgr);
200int security_binder_transaction(struct task_struct *from,
201 struct task_struct *to);
202int security_binder_transfer_binder(struct task_struct *from,
203 struct task_struct *to);
204int security_binder_transfer_file(struct task_struct *from,
205 struct task_struct *to, struct file *file);
206int security_ptrace_access_check(struct task_struct *child, unsigned int mode);
207int security_ptrace_traceme(struct task_struct *parent);
208int security_capget(struct task_struct *target,
209 kernel_cap_t *effective,
210 kernel_cap_t *inheritable,
211 kernel_cap_t *permitted);
212int security_capset(struct cred *new, const struct cred *old,
213 const kernel_cap_t *effective,
214 const kernel_cap_t *inheritable,
215 const kernel_cap_t *permitted);
216int security_capable(const struct cred *cred, struct user_namespace *ns,
217 int cap);
218int security_capable_noaudit(const struct cred *cred, struct user_namespace *ns,
219 int cap);
220int security_quotactl(int cmds, int type, int id, struct super_block *sb);
221int security_quota_on(struct dentry *dentry);
222int security_syslog(int type);
223int security_settime64(const struct timespec64 *ts, const struct timezone *tz);
224static inline int security_settime(const struct timespec *ts, const struct timezone *tz)
225{
226 struct timespec64 ts64 = timespec_to_timespec64(*ts);
227
228 return security_settime64(&ts64, tz);
229}
230int security_vm_enough_memory_mm(struct mm_struct *mm, long pages);
231int security_bprm_set_creds(struct linux_binprm *bprm);
232int security_bprm_check(struct linux_binprm *bprm);
233void security_bprm_committing_creds(struct linux_binprm *bprm);
234void security_bprm_committed_creds(struct linux_binprm *bprm);
235int security_bprm_secureexec(struct linux_binprm *bprm);
236int security_sb_alloc(struct super_block *sb);
237void security_sb_free(struct super_block *sb);
238int security_sb_copy_data(char *orig, char *copy);
239int security_sb_remount(struct super_block *sb, void *data);
240int security_sb_kern_mount(struct super_block *sb, int flags, void *data);
241int security_sb_show_options(struct seq_file *m, struct super_block *sb);
242int security_sb_statfs(struct dentry *dentry);
243int security_sb_mount(const char *dev_name, const struct path *path,
244 const char *type, unsigned long flags, void *data);
245int security_sb_umount(struct vfsmount *mnt, int flags);
246int security_sb_pivotroot(const struct path *old_path, const struct path *new_path);
247int security_sb_set_mnt_opts(struct super_block *sb,
248 struct security_mnt_opts *opts,
249 unsigned long kern_flags,
250 unsigned long *set_kern_flags);
251int security_sb_clone_mnt_opts(const struct super_block *oldsb,
252 struct super_block *newsb,
253 unsigned long kern_flags,
254 unsigned long *set_kern_flags);
255int security_sb_parse_opts_str(char *options, struct security_mnt_opts *opts);
256int security_dentry_init_security(struct dentry *dentry, int mode,
257 const struct qstr *name, void **ctx,
258 u32 *ctxlen);
259int security_dentry_create_files_as(struct dentry *dentry, int mode,
260 struct qstr *name,
261 const struct cred *old,
262 struct cred *new);
263
264int security_inode_alloc(struct inode *inode);
265void security_inode_free(struct inode *inode);
266int security_inode_init_security(struct inode *inode, struct inode *dir,
267 const struct qstr *qstr,
268 initxattrs initxattrs, void *fs_data);
269int security_old_inode_init_security(struct inode *inode, struct inode *dir,
270 const struct qstr *qstr, const char **name,
271 void **value, size_t *len);
272int security_inode_create(struct inode *dir, struct dentry *dentry, umode_t mode);
273int security_inode_link(struct dentry *old_dentry, struct inode *dir,
274 struct dentry *new_dentry);
275int security_inode_unlink(struct inode *dir, struct dentry *dentry);
276int security_inode_symlink(struct inode *dir, struct dentry *dentry,
277 const char *old_name);
278int security_inode_mkdir(struct inode *dir, struct dentry *dentry, umode_t mode);
279int security_inode_rmdir(struct inode *dir, struct dentry *dentry);
280int security_inode_mknod(struct inode *dir, struct dentry *dentry, umode_t mode, dev_t dev);
281int security_inode_rename(struct inode *old_dir, struct dentry *old_dentry,
282 struct inode *new_dir, struct dentry *new_dentry,
283 unsigned int flags);
284int security_inode_readlink(struct dentry *dentry);
285int security_inode_follow_link(struct dentry *dentry, struct inode *inode,
286 bool rcu);
287int security_inode_permission(struct inode *inode, int mask);
288int security_inode_setattr(struct dentry *dentry, struct iattr *attr);
289int security_inode_getattr(const struct path *path);
290int security_inode_setxattr(struct dentry *dentry, const char *name,
291 const void *value, size_t size, int flags);
292void security_inode_post_setxattr(struct dentry *dentry, const char *name,
293 const void *value, size_t size, int flags);
294int security_inode_getxattr(struct dentry *dentry, const char *name);
295int security_inode_listxattr(struct dentry *dentry);
296int security_inode_removexattr(struct dentry *dentry, const char *name);
297int security_inode_need_killpriv(struct dentry *dentry);
298int security_inode_killpriv(struct dentry *dentry);
299int security_inode_getsecurity(struct inode *inode, const char *name, void **buffer, bool alloc);
300int security_inode_setsecurity(struct inode *inode, const char *name, const void *value, size_t size, int flags);
301int security_inode_listsecurity(struct inode *inode, char *buffer, size_t buffer_size);
302void security_inode_getsecid(struct inode *inode, u32 *secid);
303int security_inode_copy_up(struct dentry *src, struct cred **new);
304int security_inode_copy_up_xattr(const char *name);
305int security_file_permission(struct file *file, int mask);
306int security_file_alloc(struct file *file);
307void security_file_free(struct file *file);
308int security_file_ioctl(struct file *file, unsigned int cmd, unsigned long arg);
309int security_mmap_file(struct file *file, unsigned long prot,
310 unsigned long flags);
311int security_mmap_addr(unsigned long addr);
312int security_file_mprotect(struct vm_area_struct *vma, unsigned long reqprot,
313 unsigned long prot);
314int security_file_lock(struct file *file, unsigned int cmd);
315int security_file_fcntl(struct file *file, unsigned int cmd, unsigned long arg);
316void security_file_set_fowner(struct file *file);
317int security_file_send_sigiotask(struct task_struct *tsk,
318 struct fown_struct *fown, int sig);
319int security_file_receive(struct file *file);
320int security_file_open(struct file *file, const struct cred *cred);
321int security_task_create(unsigned long clone_flags);
322int security_task_alloc(struct task_struct *task, unsigned long clone_flags);
323void security_task_free(struct task_struct *task);
324int security_cred_alloc_blank(struct cred *cred, gfp_t gfp);
325void security_cred_free(struct cred *cred);
326int security_prepare_creds(struct cred *new, const struct cred *old, gfp_t gfp);
327void security_transfer_creds(struct cred *new, const struct cred *old);
328int security_kernel_act_as(struct cred *new, u32 secid);
329int security_kernel_create_files_as(struct cred *new, struct inode *inode);
330int security_kernel_module_request(char *kmod_name);
331int security_kernel_read_file(struct file *file, enum kernel_read_file_id id);
332int security_kernel_post_read_file(struct file *file, char *buf, loff_t size,
333 enum kernel_read_file_id id);
334int security_task_fix_setuid(struct cred *new, const struct cred *old,
335 int flags);
336int security_task_setpgid(struct task_struct *p, pid_t pgid);
337int security_task_getpgid(struct task_struct *p);
338int security_task_getsid(struct task_struct *p);
339void security_task_getsecid(struct task_struct *p, u32 *secid);
340int security_task_setnice(struct task_struct *p, int nice);
341int security_task_setioprio(struct task_struct *p, int ioprio);
342int security_task_getioprio(struct task_struct *p);
343int security_task_prlimit(const struct cred *cred, const struct cred *tcred,
344 unsigned int flags);
345int security_task_setrlimit(struct task_struct *p, unsigned int resource,
346 struct rlimit *new_rlim);
347int security_task_setscheduler(struct task_struct *p);
348int security_task_getscheduler(struct task_struct *p);
349int security_task_movememory(struct task_struct *p);
350int security_task_kill(struct task_struct *p, struct siginfo *info,
351 int sig, u32 secid);
352int security_task_prctl(int option, unsigned long arg2, unsigned long arg3,
353 unsigned long arg4, unsigned long arg5);
354void security_task_to_inode(struct task_struct *p, struct inode *inode);
355int security_ipc_permission(struct kern_ipc_perm *ipcp, short flag);
356void security_ipc_getsecid(struct kern_ipc_perm *ipcp, u32 *secid);
357int security_msg_msg_alloc(struct msg_msg *msg);
358void security_msg_msg_free(struct msg_msg *msg);
359int security_msg_queue_alloc(struct msg_queue *msq);
360void security_msg_queue_free(struct msg_queue *msq);
361int security_msg_queue_associate(struct msg_queue *msq, int msqflg);
362int security_msg_queue_msgctl(struct msg_queue *msq, int cmd);
363int security_msg_queue_msgsnd(struct msg_queue *msq,
364 struct msg_msg *msg, int msqflg);
365int security_msg_queue_msgrcv(struct msg_queue *msq, struct msg_msg *msg,
366 struct task_struct *target, long type, int mode);
367int security_shm_alloc(struct shmid_kernel *shp);
368void security_shm_free(struct shmid_kernel *shp);
369int security_shm_associate(struct shmid_kernel *shp, int shmflg);
370int security_shm_shmctl(struct shmid_kernel *shp, int cmd);
371int security_shm_shmat(struct shmid_kernel *shp, char __user *shmaddr, int shmflg);
372int security_sem_alloc(struct sem_array *sma);
373void security_sem_free(struct sem_array *sma);
374int security_sem_associate(struct sem_array *sma, int semflg);
375int security_sem_semctl(struct sem_array *sma, int cmd);
376int security_sem_semop(struct sem_array *sma, struct sembuf *sops,
377 unsigned nsops, int alter);
378void security_d_instantiate(struct dentry *dentry, struct inode *inode);
379int security_getprocattr(struct task_struct *p, char *name, char **value);
380int security_setprocattr(const char *name, void *value, size_t size);
381int security_netlink_send(struct sock *sk, struct sk_buff *skb);
382int security_ismaclabel(const char *name);
383int security_secid_to_secctx(u32 secid, char **secdata, u32 *seclen);
384int security_secctx_to_secid(const char *secdata, u32 seclen, u32 *secid);
385void security_release_secctx(char *secdata, u32 seclen);
386
387void security_inode_invalidate_secctx(struct inode *inode);
388int security_inode_notifysecctx(struct inode *inode, void *ctx, u32 ctxlen);
389int security_inode_setsecctx(struct dentry *dentry, void *ctx, u32 ctxlen);
390int security_inode_getsecctx(struct inode *inode, void **ctx, u32 *ctxlen);
391#else
392struct security_mnt_opts {
393};
394
395static inline int call_lsm_notifier(enum lsm_event event, void *data)
396{
397 return 0;
398}
399
400static inline int register_lsm_notifier(struct notifier_block *nb)
401{
402 return 0;
403}
404
405static inline int unregister_lsm_notifier(struct notifier_block *nb)
406{
407 return 0;
408}
409
410static inline void security_init_mnt_opts(struct security_mnt_opts *opts)
411{
412}
413
414static inline void security_free_mnt_opts(struct security_mnt_opts *opts)
415{
416}
417
418
419
420
421
422
423static inline int security_init(void)
424{
425 return 0;
426}
427
428static inline int security_binder_set_context_mgr(struct task_struct *mgr)
429{
430 return 0;
431}
432
433static inline int security_binder_transaction(struct task_struct *from,
434 struct task_struct *to)
435{
436 return 0;
437}
438
439static inline int security_binder_transfer_binder(struct task_struct *from,
440 struct task_struct *to)
441{
442 return 0;
443}
444
445static inline int security_binder_transfer_file(struct task_struct *from,
446 struct task_struct *to,
447 struct file *file)
448{
449 return 0;
450}
451
452static inline int security_ptrace_access_check(struct task_struct *child,
453 unsigned int mode)
454{
455 return cap_ptrace_access_check(child, mode);
456}
457
458static inline int security_ptrace_traceme(struct task_struct *parent)
459{
460 return cap_ptrace_traceme(parent);
461}
462
463static inline int security_capget(struct task_struct *target,
464 kernel_cap_t *effective,
465 kernel_cap_t *inheritable,
466 kernel_cap_t *permitted)
467{
468 return cap_capget(target, effective, inheritable, permitted);
469}
470
471static inline int security_capset(struct cred *new,
472 const struct cred *old,
473 const kernel_cap_t *effective,
474 const kernel_cap_t *inheritable,
475 const kernel_cap_t *permitted)
476{
477 return cap_capset(new, old, effective, inheritable, permitted);
478}
479
480static inline int security_capable(const struct cred *cred,
481 struct user_namespace *ns, int cap)
482{
483 return cap_capable(cred, ns, cap, SECURITY_CAP_AUDIT);
484}
485
486static inline int security_capable_noaudit(const struct cred *cred,
487 struct user_namespace *ns, int cap) {
488 return cap_capable(cred, ns, cap, SECURITY_CAP_NOAUDIT);
489}
490
491static inline int security_quotactl(int cmds, int type, int id,
492 struct super_block *sb)
493{
494 return 0;
495}
496
497static inline int security_quota_on(struct dentry *dentry)
498{
499 return 0;
500}
501
502static inline int security_syslog(int type)
503{
504 return 0;
505}
506
507static inline int security_settime64(const struct timespec64 *ts,
508 const struct timezone *tz)
509{
510 return cap_settime(ts, tz);
511}
512
513static inline int security_settime(const struct timespec *ts,
514 const struct timezone *tz)
515{
516 struct timespec64 ts64 = timespec_to_timespec64(*ts);
517
518 return cap_settime(&ts64, tz);
519}
520
521static inline int security_vm_enough_memory_mm(struct mm_struct *mm, long pages)
522{
523 return __vm_enough_memory(mm, pages, cap_vm_enough_memory(mm, pages));
524}
525
526static inline int security_bprm_set_creds(struct linux_binprm *bprm)
527{
528 return cap_bprm_set_creds(bprm);
529}
530
531static inline int security_bprm_check(struct linux_binprm *bprm)
532{
533 return 0;
534}
535
536static inline void security_bprm_committing_creds(struct linux_binprm *bprm)
537{
538}
539
540static inline void security_bprm_committed_creds(struct linux_binprm *bprm)
541{
542}
543
544static inline int security_bprm_secureexec(struct linux_binprm *bprm)
545{
546 return cap_bprm_secureexec(bprm);
547}
548
549static inline int security_sb_alloc(struct super_block *sb)
550{
551 return 0;
552}
553
554static inline void security_sb_free(struct super_block *sb)
555{ }
556
557static inline int security_sb_copy_data(char *orig, char *copy)
558{
559 return 0;
560}
561
562static inline int security_sb_remount(struct super_block *sb, void *data)
563{
564 return 0;
565}
566
567static inline int security_sb_kern_mount(struct super_block *sb, int flags, void *data)
568{
569 return 0;
570}
571
572static inline int security_sb_show_options(struct seq_file *m,
573 struct super_block *sb)
574{
575 return 0;
576}
577
578static inline int security_sb_statfs(struct dentry *dentry)
579{
580 return 0;
581}
582
583static inline int security_sb_mount(const char *dev_name, const struct path *path,
584 const char *type, unsigned long flags,
585 void *data)
586{
587 return 0;
588}
589
590static inline int security_sb_umount(struct vfsmount *mnt, int flags)
591{
592 return 0;
593}
594
595static inline int security_sb_pivotroot(const struct path *old_path,
596 const struct path *new_path)
597{
598 return 0;
599}
600
601static inline int security_sb_set_mnt_opts(struct super_block *sb,
602 struct security_mnt_opts *opts,
603 unsigned long kern_flags,
604 unsigned long *set_kern_flags)
605{
606 return 0;
607}
608
609static inline int security_sb_clone_mnt_opts(const struct super_block *oldsb,
610 struct super_block *newsb,
611 unsigned long kern_flags,
612 unsigned long *set_kern_flags)
613{
614 return 0;
615}
616
617static inline int security_sb_parse_opts_str(char *options, struct security_mnt_opts *opts)
618{
619 return 0;
620}
621
622static inline int security_inode_alloc(struct inode *inode)
623{
624 return 0;
625}
626
627static inline void security_inode_free(struct inode *inode)
628{ }
629
630static inline int security_dentry_init_security(struct dentry *dentry,
631 int mode,
632 const struct qstr *name,
633 void **ctx,
634 u32 *ctxlen)
635{
636 return -EOPNOTSUPP;
637}
638
639static inline int security_dentry_create_files_as(struct dentry *dentry,
640 int mode, struct qstr *name,
641 const struct cred *old,
642 struct cred *new)
643{
644 return 0;
645}
646
647
648static inline int security_inode_init_security(struct inode *inode,
649 struct inode *dir,
650 const struct qstr *qstr,
651 const initxattrs xattrs,
652 void *fs_data)
653{
654 return 0;
655}
656
657static inline int security_old_inode_init_security(struct inode *inode,
658 struct inode *dir,
659 const struct qstr *qstr,
660 const char **name,
661 void **value, size_t *len)
662{
663 return -EOPNOTSUPP;
664}
665
666static inline int security_inode_create(struct inode *dir,
667 struct dentry *dentry,
668 umode_t mode)
669{
670 return 0;
671}
672
673static inline int security_inode_link(struct dentry *old_dentry,
674 struct inode *dir,
675 struct dentry *new_dentry)
676{
677 return 0;
678}
679
680static inline int security_inode_unlink(struct inode *dir,
681 struct dentry *dentry)
682{
683 return 0;
684}
685
686static inline int security_inode_symlink(struct inode *dir,
687 struct dentry *dentry,
688 const char *old_name)
689{
690 return 0;
691}
692
693static inline int security_inode_mkdir(struct inode *dir,
694 struct dentry *dentry,
695 int mode)
696{
697 return 0;
698}
699
700static inline int security_inode_rmdir(struct inode *dir,
701 struct dentry *dentry)
702{
703 return 0;
704}
705
706static inline int security_inode_mknod(struct inode *dir,
707 struct dentry *dentry,
708 int mode, dev_t dev)
709{
710 return 0;
711}
712
713static inline int security_inode_rename(struct inode *old_dir,
714 struct dentry *old_dentry,
715 struct inode *new_dir,
716 struct dentry *new_dentry,
717 unsigned int flags)
718{
719 return 0;
720}
721
722static inline int security_inode_readlink(struct dentry *dentry)
723{
724 return 0;
725}
726
727static inline int security_inode_follow_link(struct dentry *dentry,
728 struct inode *inode,
729 bool rcu)
730{
731 return 0;
732}
733
734static inline int security_inode_permission(struct inode *inode, int mask)
735{
736 return 0;
737}
738
739static inline int security_inode_setattr(struct dentry *dentry,
740 struct iattr *attr)
741{
742 return 0;
743}
744
745static inline int security_inode_getattr(const struct path *path)
746{
747 return 0;
748}
749
750static inline int security_inode_setxattr(struct dentry *dentry,
751 const char *name, const void *value, size_t size, int flags)
752{
753 return cap_inode_setxattr(dentry, name, value, size, flags);
754}
755
756static inline void security_inode_post_setxattr(struct dentry *dentry,
757 const char *name, const void *value, size_t size, int flags)
758{ }
759
760static inline int security_inode_getxattr(struct dentry *dentry,
761 const char *name)
762{
763 return 0;
764}
765
766static inline int security_inode_listxattr(struct dentry *dentry)
767{
768 return 0;
769}
770
771static inline int security_inode_removexattr(struct dentry *dentry,
772 const char *name)
773{
774 return cap_inode_removexattr(dentry, name);
775}
776
777static inline int security_inode_need_killpriv(struct dentry *dentry)
778{
779 return cap_inode_need_killpriv(dentry);
780}
781
782static inline int security_inode_killpriv(struct dentry *dentry)
783{
784 return cap_inode_killpriv(dentry);
785}
786
787static inline int security_inode_getsecurity(struct inode *inode, const char *name, void **buffer, bool alloc)
788{
789 return -EOPNOTSUPP;
790}
791
792static inline int security_inode_setsecurity(struct inode *inode, const char *name, const void *value, size_t size, int flags)
793{
794 return -EOPNOTSUPP;
795}
796
797static inline int security_inode_listsecurity(struct inode *inode, char *buffer, size_t buffer_size)
798{
799 return 0;
800}
801
802static inline void security_inode_getsecid(struct inode *inode, u32 *secid)
803{
804 *secid = 0;
805}
806
807static inline int security_inode_copy_up(struct dentry *src, struct cred **new)
808{
809 return 0;
810}
811
812static inline int security_inode_copy_up_xattr(const char *name)
813{
814 return -EOPNOTSUPP;
815}
816
817static inline int security_file_permission(struct file *file, int mask)
818{
819 return 0;
820}
821
822static inline int security_file_alloc(struct file *file)
823{
824 return 0;
825}
826
827static inline void security_file_free(struct file *file)
828{ }
829
830static inline int security_file_ioctl(struct file *file, unsigned int cmd,
831 unsigned long arg)
832{
833 return 0;
834}
835
836static inline int security_mmap_file(struct file *file, unsigned long prot,
837 unsigned long flags)
838{
839 return 0;
840}
841
842static inline int security_mmap_addr(unsigned long addr)
843{
844 return cap_mmap_addr(addr);
845}
846
847static inline int security_file_mprotect(struct vm_area_struct *vma,
848 unsigned long reqprot,
849 unsigned long prot)
850{
851 return 0;
852}
853
854static inline int security_file_lock(struct file *file, unsigned int cmd)
855{
856 return 0;
857}
858
859static inline int security_file_fcntl(struct file *file, unsigned int cmd,
860 unsigned long arg)
861{
862 return 0;
863}
864
865static inline void security_file_set_fowner(struct file *file)
866{
867 return;
868}
869
870static inline int security_file_send_sigiotask(struct task_struct *tsk,
871 struct fown_struct *fown,
872 int sig)
873{
874 return 0;
875}
876
877static inline int security_file_receive(struct file *file)
878{
879 return 0;
880}
881
882static inline int security_file_open(struct file *file,
883 const struct cred *cred)
884{
885 return 0;
886}
887
888static inline int security_task_create(unsigned long clone_flags)
889{
890 return 0;
891}
892
893static inline int security_task_alloc(struct task_struct *task,
894 unsigned long clone_flags)
895{
896 return 0;
897}
898
899static inline void security_task_free(struct task_struct *task)
900{ }
901
902static inline int security_cred_alloc_blank(struct cred *cred, gfp_t gfp)
903{
904 return 0;
905}
906
907static inline void security_cred_free(struct cred *cred)
908{ }
909
910static inline int security_prepare_creds(struct cred *new,
911 const struct cred *old,
912 gfp_t gfp)
913{
914 return 0;
915}
916
917static inline void security_transfer_creds(struct cred *new,
918 const struct cred *old)
919{
920}
921
922static inline int security_kernel_act_as(struct cred *cred, u32 secid)
923{
924 return 0;
925}
926
927static inline int security_kernel_create_files_as(struct cred *cred,
928 struct inode *inode)
929{
930 return 0;
931}
932
933static inline int security_kernel_module_request(char *kmod_name)
934{
935 return 0;
936}
937
938static inline int security_kernel_read_file(struct file *file,
939 enum kernel_read_file_id id)
940{
941 return 0;
942}
943
944static inline int security_kernel_post_read_file(struct file *file,
945 char *buf, loff_t size,
946 enum kernel_read_file_id id)
947{
948 return 0;
949}
950
951static inline int security_task_fix_setuid(struct cred *new,
952 const struct cred *old,
953 int flags)
954{
955 return cap_task_fix_setuid(new, old, flags);
956}
957
958static inline int security_task_setpgid(struct task_struct *p, pid_t pgid)
959{
960 return 0;
961}
962
963static inline int security_task_getpgid(struct task_struct *p)
964{
965 return 0;
966}
967
968static inline int security_task_getsid(struct task_struct *p)
969{
970 return 0;
971}
972
973static inline void security_task_getsecid(struct task_struct *p, u32 *secid)
974{
975 *secid = 0;
976}
977
978static inline int security_task_setnice(struct task_struct *p, int nice)
979{
980 return cap_task_setnice(p, nice);
981}
982
983static inline int security_task_setioprio(struct task_struct *p, int ioprio)
984{
985 return cap_task_setioprio(p, ioprio);
986}
987
988static inline int security_task_getioprio(struct task_struct *p)
989{
990 return 0;
991}
992
993static inline int security_task_prlimit(const struct cred *cred,
994 const struct cred *tcred,
995 unsigned int flags)
996{
997 return 0;
998}
999
1000static inline int security_task_setrlimit(struct task_struct *p,
1001 unsigned int resource,
1002 struct rlimit *new_rlim)
1003{
1004 return 0;
1005}
1006
1007static inline int security_task_setscheduler(struct task_struct *p)
1008{
1009 return cap_task_setscheduler(p);
1010}
1011
1012static inline int security_task_getscheduler(struct task_struct *p)
1013{
1014 return 0;
1015}
1016
1017static inline int security_task_movememory(struct task_struct *p)
1018{
1019 return 0;
1020}
1021
1022static inline int security_task_kill(struct task_struct *p,
1023 struct siginfo *info, int sig,
1024 u32 secid)
1025{
1026 return 0;
1027}
1028
1029static inline int security_task_prctl(int option, unsigned long arg2,
1030 unsigned long arg3,
1031 unsigned long arg4,
1032 unsigned long arg5)
1033{
1034 return cap_task_prctl(option, arg2, arg3, arg4, arg5);
1035}
1036
1037static inline void security_task_to_inode(struct task_struct *p, struct inode *inode)
1038{ }
1039
1040static inline int security_ipc_permission(struct kern_ipc_perm *ipcp,
1041 short flag)
1042{
1043 return 0;
1044}
1045
1046static inline void security_ipc_getsecid(struct kern_ipc_perm *ipcp, u32 *secid)
1047{
1048 *secid = 0;
1049}
1050
1051static inline int security_msg_msg_alloc(struct msg_msg *msg)
1052{
1053 return 0;
1054}
1055
1056static inline void security_msg_msg_free(struct msg_msg *msg)
1057{ }
1058
1059static inline int security_msg_queue_alloc(struct msg_queue *msq)
1060{
1061 return 0;
1062}
1063
1064static inline void security_msg_queue_free(struct msg_queue *msq)
1065{ }
1066
1067static inline int security_msg_queue_associate(struct msg_queue *msq,
1068 int msqflg)
1069{
1070 return 0;
1071}
1072
1073static inline int security_msg_queue_msgctl(struct msg_queue *msq, int cmd)
1074{
1075 return 0;
1076}
1077
1078static inline int security_msg_queue_msgsnd(struct msg_queue *msq,
1079 struct msg_msg *msg, int msqflg)
1080{
1081 return 0;
1082}
1083
1084static inline int security_msg_queue_msgrcv(struct msg_queue *msq,
1085 struct msg_msg *msg,
1086 struct task_struct *target,
1087 long type, int mode)
1088{
1089 return 0;
1090}
1091
1092static inline int security_shm_alloc(struct shmid_kernel *shp)
1093{
1094 return 0;
1095}
1096
1097static inline void security_shm_free(struct shmid_kernel *shp)
1098{ }
1099
1100static inline int security_shm_associate(struct shmid_kernel *shp,
1101 int shmflg)
1102{
1103 return 0;
1104}
1105
1106static inline int security_shm_shmctl(struct shmid_kernel *shp, int cmd)
1107{
1108 return 0;
1109}
1110
1111static inline int security_shm_shmat(struct shmid_kernel *shp,
1112 char __user *shmaddr, int shmflg)
1113{
1114 return 0;
1115}
1116
1117static inline int security_sem_alloc(struct sem_array *sma)
1118{
1119 return 0;
1120}
1121
1122static inline void security_sem_free(struct sem_array *sma)
1123{ }
1124
1125static inline int security_sem_associate(struct sem_array *sma, int semflg)
1126{
1127 return 0;
1128}
1129
1130static inline int security_sem_semctl(struct sem_array *sma, int cmd)
1131{
1132 return 0;
1133}
1134
1135static inline int security_sem_semop(struct sem_array *sma,
1136 struct sembuf *sops, unsigned nsops,
1137 int alter)
1138{
1139 return 0;
1140}
1141
1142static inline void security_d_instantiate(struct dentry *dentry, struct inode *inode)
1143{ }
1144
1145static inline int security_getprocattr(struct task_struct *p, char *name, char **value)
1146{
1147 return -EINVAL;
1148}
1149
1150static inline int security_setprocattr(char *name, void *value, size_t size)
1151{
1152 return -EINVAL;
1153}
1154
1155static inline int security_netlink_send(struct sock *sk, struct sk_buff *skb)
1156{
1157 return 0;
1158}
1159
1160static inline int security_ismaclabel(const char *name)
1161{
1162 return 0;
1163}
1164
1165static inline int security_secid_to_secctx(u32 secid, char **secdata, u32 *seclen)
1166{
1167 return -EOPNOTSUPP;
1168}
1169
1170static inline int security_secctx_to_secid(const char *secdata,
1171 u32 seclen,
1172 u32 *secid)
1173{
1174 return -EOPNOTSUPP;
1175}
1176
1177static inline void security_release_secctx(char *secdata, u32 seclen)
1178{
1179}
1180
1181static inline void security_inode_invalidate_secctx(struct inode *inode)
1182{
1183}
1184
1185static inline int security_inode_notifysecctx(struct inode *inode, void *ctx, u32 ctxlen)
1186{
1187 return -EOPNOTSUPP;
1188}
1189static inline int security_inode_setsecctx(struct dentry *dentry, void *ctx, u32 ctxlen)
1190{
1191 return -EOPNOTSUPP;
1192}
1193static inline int security_inode_getsecctx(struct inode *inode, void **ctx, u32 *ctxlen)
1194{
1195 return -EOPNOTSUPP;
1196}
1197#endif
1198
1199#ifdef CONFIG_SECURITY_NETWORK
1200
1201int security_unix_stream_connect(struct sock *sock, struct sock *other, struct sock *newsk);
1202int security_unix_may_send(struct socket *sock, struct socket *other);
1203int security_socket_create(int family, int type, int protocol, int kern);
1204int security_socket_post_create(struct socket *sock, int family,
1205 int type, int protocol, int kern);
1206int security_socket_bind(struct socket *sock, struct sockaddr *address, int addrlen);
1207int security_socket_connect(struct socket *sock, struct sockaddr *address, int addrlen);
1208int security_socket_listen(struct socket *sock, int backlog);
1209int security_socket_accept(struct socket *sock, struct socket *newsock);
1210int security_socket_sendmsg(struct socket *sock, struct msghdr *msg, int size);
1211int security_socket_recvmsg(struct socket *sock, struct msghdr *msg,
1212 int size, int flags);
1213int security_socket_getsockname(struct socket *sock);
1214int security_socket_getpeername(struct socket *sock);
1215int security_socket_getsockopt(struct socket *sock, int level, int optname);
1216int security_socket_setsockopt(struct socket *sock, int level, int optname);
1217int security_socket_shutdown(struct socket *sock, int how);
1218int security_sock_rcv_skb(struct sock *sk, struct sk_buff *skb);
1219int security_socket_getpeersec_stream(struct socket *sock, char __user *optval,
1220 int __user *optlen, unsigned len);
1221int security_socket_getpeersec_dgram(struct socket *sock, struct sk_buff *skb, u32 *secid);
1222int security_sk_alloc(struct sock *sk, int family, gfp_t priority);
1223void security_sk_free(struct sock *sk);
1224void security_sk_clone(const struct sock *sk, struct sock *newsk);
1225void security_sk_classify_flow(struct sock *sk, struct flowi *fl);
1226void security_req_classify_flow(const struct request_sock *req, struct flowi *fl);
1227void security_sock_graft(struct sock*sk, struct socket *parent);
1228int security_inet_conn_request(struct sock *sk,
1229 struct sk_buff *skb, struct request_sock *req);
1230void security_inet_csk_clone(struct sock *newsk,
1231 const struct request_sock *req);
1232void security_inet_conn_established(struct sock *sk,
1233 struct sk_buff *skb);
1234int security_secmark_relabel_packet(u32 secid);
1235void security_secmark_refcount_inc(void);
1236void security_secmark_refcount_dec(void);
1237int security_tun_dev_alloc_security(void **security);
1238void security_tun_dev_free_security(void *security);
1239int security_tun_dev_create(void);
1240int security_tun_dev_attach_queue(void *security);
1241int security_tun_dev_attach(struct sock *sk, void *security);
1242int security_tun_dev_open(void *security);
1243
1244#else
1245static inline int security_unix_stream_connect(struct sock *sock,
1246 struct sock *other,
1247 struct sock *newsk)
1248{
1249 return 0;
1250}
1251
1252static inline int security_unix_may_send(struct socket *sock,
1253 struct socket *other)
1254{
1255 return 0;
1256}
1257
1258static inline int security_socket_create(int family, int type,
1259 int protocol, int kern)
1260{
1261 return 0;
1262}
1263
1264static inline int security_socket_post_create(struct socket *sock,
1265 int family,
1266 int type,
1267 int protocol, int kern)
1268{
1269 return 0;
1270}
1271
1272static inline int security_socket_bind(struct socket *sock,
1273 struct sockaddr *address,
1274 int addrlen)
1275{
1276 return 0;
1277}
1278
1279static inline int security_socket_connect(struct socket *sock,
1280 struct sockaddr *address,
1281 int addrlen)
1282{
1283 return 0;
1284}
1285
1286static inline int security_socket_listen(struct socket *sock, int backlog)
1287{
1288 return 0;
1289}
1290
1291static inline int security_socket_accept(struct socket *sock,
1292 struct socket *newsock)
1293{
1294 return 0;
1295}
1296
1297static inline int security_socket_sendmsg(struct socket *sock,
1298 struct msghdr *msg, int size)
1299{
1300 return 0;
1301}
1302
1303static inline int security_socket_recvmsg(struct socket *sock,
1304 struct msghdr *msg, int size,
1305 int flags)
1306{
1307 return 0;
1308}
1309
1310static inline int security_socket_getsockname(struct socket *sock)
1311{
1312 return 0;
1313}
1314
1315static inline int security_socket_getpeername(struct socket *sock)
1316{
1317 return 0;
1318}
1319
1320static inline int security_socket_getsockopt(struct socket *sock,
1321 int level, int optname)
1322{
1323 return 0;
1324}
1325
1326static inline int security_socket_setsockopt(struct socket *sock,
1327 int level, int optname)
1328{
1329 return 0;
1330}
1331
1332static inline int security_socket_shutdown(struct socket *sock, int how)
1333{
1334 return 0;
1335}
1336static inline int security_sock_rcv_skb(struct sock *sk,
1337 struct sk_buff *skb)
1338{
1339 return 0;
1340}
1341
1342static inline int security_socket_getpeersec_stream(struct socket *sock, char __user *optval,
1343 int __user *optlen, unsigned len)
1344{
1345 return -ENOPROTOOPT;
1346}
1347
1348static inline int security_socket_getpeersec_dgram(struct socket *sock, struct sk_buff *skb, u32 *secid)
1349{
1350 return -ENOPROTOOPT;
1351}
1352
1353static inline int security_sk_alloc(struct sock *sk, int family, gfp_t priority)
1354{
1355 return 0;
1356}
1357
1358static inline void security_sk_free(struct sock *sk)
1359{
1360}
1361
1362static inline void security_sk_clone(const struct sock *sk, struct sock *newsk)
1363{
1364}
1365
1366static inline void security_sk_classify_flow(struct sock *sk, struct flowi *fl)
1367{
1368}
1369
1370static inline void security_req_classify_flow(const struct request_sock *req, struct flowi *fl)
1371{
1372}
1373
1374static inline void security_sock_graft(struct sock *sk, struct socket *parent)
1375{
1376}
1377
1378static inline int security_inet_conn_request(struct sock *sk,
1379 struct sk_buff *skb, struct request_sock *req)
1380{
1381 return 0;
1382}
1383
1384static inline void security_inet_csk_clone(struct sock *newsk,
1385 const struct request_sock *req)
1386{
1387}
1388
1389static inline void security_inet_conn_established(struct sock *sk,
1390 struct sk_buff *skb)
1391{
1392}
1393
1394static inline int security_secmark_relabel_packet(u32 secid)
1395{
1396 return 0;
1397}
1398
1399static inline void security_secmark_refcount_inc(void)
1400{
1401}
1402
1403static inline void security_secmark_refcount_dec(void)
1404{
1405}
1406
1407static inline int security_tun_dev_alloc_security(void **security)
1408{
1409 return 0;
1410}
1411
1412static inline void security_tun_dev_free_security(void *security)
1413{
1414}
1415
1416static inline int security_tun_dev_create(void)
1417{
1418 return 0;
1419}
1420
1421static inline int security_tun_dev_attach_queue(void *security)
1422{
1423 return 0;
1424}
1425
1426static inline int security_tun_dev_attach(struct sock *sk, void *security)
1427{
1428 return 0;
1429}
1430
1431static inline int security_tun_dev_open(void *security)
1432{
1433 return 0;
1434}
1435#endif
1436
1437#ifdef CONFIG_SECURITY_INFINIBAND
1438int security_ib_pkey_access(void *sec, u64 subnet_prefix, u16 pkey);
1439int security_ib_endport_manage_subnet(void *sec, const char *name, u8 port_num);
1440int security_ib_alloc_security(void **sec);
1441void security_ib_free_security(void *sec);
1442#else
1443static inline int security_ib_pkey_access(void *sec, u64 subnet_prefix, u16 pkey)
1444{
1445 return 0;
1446}
1447
1448static inline int security_ib_endport_manage_subnet(void *sec, const char *dev_name, u8 port_num)
1449{
1450 return 0;
1451}
1452
1453static inline int security_ib_alloc_security(void **sec)
1454{
1455 return 0;
1456}
1457
1458static inline void security_ib_free_security(void *sec)
1459{
1460}
1461#endif
1462
1463#ifdef CONFIG_SECURITY_NETWORK_XFRM
1464
1465int security_xfrm_policy_alloc(struct xfrm_sec_ctx **ctxp,
1466 struct xfrm_user_sec_ctx *sec_ctx, gfp_t gfp);
1467int security_xfrm_policy_clone(struct xfrm_sec_ctx *old_ctx, struct xfrm_sec_ctx **new_ctxp);
1468void security_xfrm_policy_free(struct xfrm_sec_ctx *ctx);
1469int security_xfrm_policy_delete(struct xfrm_sec_ctx *ctx);
1470int security_xfrm_state_alloc(struct xfrm_state *x, struct xfrm_user_sec_ctx *sec_ctx);
1471int security_xfrm_state_alloc_acquire(struct xfrm_state *x,
1472 struct xfrm_sec_ctx *polsec, u32 secid);
1473int security_xfrm_state_delete(struct xfrm_state *x);
1474void security_xfrm_state_free(struct xfrm_state *x);
1475int security_xfrm_policy_lookup(struct xfrm_sec_ctx *ctx, u32 fl_secid, u8 dir);
1476int security_xfrm_state_pol_flow_match(struct xfrm_state *x,
1477 struct xfrm_policy *xp,
1478 const struct flowi *fl);
1479int security_xfrm_decode_session(struct sk_buff *skb, u32 *secid);
1480void security_skb_classify_flow(struct sk_buff *skb, struct flowi *fl);
1481
1482#else
1483
1484static inline int security_xfrm_policy_alloc(struct xfrm_sec_ctx **ctxp,
1485 struct xfrm_user_sec_ctx *sec_ctx,
1486 gfp_t gfp)
1487{
1488 return 0;
1489}
1490
1491static inline int security_xfrm_policy_clone(struct xfrm_sec_ctx *old, struct xfrm_sec_ctx **new_ctxp)
1492{
1493 return 0;
1494}
1495
1496static inline void security_xfrm_policy_free(struct xfrm_sec_ctx *ctx)
1497{
1498}
1499
1500static inline int security_xfrm_policy_delete(struct xfrm_sec_ctx *ctx)
1501{
1502 return 0;
1503}
1504
1505static inline int security_xfrm_state_alloc(struct xfrm_state *x,
1506 struct xfrm_user_sec_ctx *sec_ctx)
1507{
1508 return 0;
1509}
1510
1511static inline int security_xfrm_state_alloc_acquire(struct xfrm_state *x,
1512 struct xfrm_sec_ctx *polsec, u32 secid)
1513{
1514 return 0;
1515}
1516
1517static inline void security_xfrm_state_free(struct xfrm_state *x)
1518{
1519}
1520
1521static inline int security_xfrm_state_delete(struct xfrm_state *x)
1522{
1523 return 0;
1524}
1525
1526static inline int security_xfrm_policy_lookup(struct xfrm_sec_ctx *ctx, u32 fl_secid, u8 dir)
1527{
1528 return 0;
1529}
1530
1531static inline int security_xfrm_state_pol_flow_match(struct xfrm_state *x,
1532 struct xfrm_policy *xp, const struct flowi *fl)
1533{
1534 return 1;
1535}
1536
1537static inline int security_xfrm_decode_session(struct sk_buff *skb, u32 *secid)
1538{
1539 return 0;
1540}
1541
1542static inline void security_skb_classify_flow(struct sk_buff *skb, struct flowi *fl)
1543{
1544}
1545
1546#endif
1547
1548#ifdef CONFIG_SECURITY_PATH
1549int security_path_unlink(const struct path *dir, struct dentry *dentry);
1550int security_path_mkdir(const struct path *dir, struct dentry *dentry, umode_t mode);
1551int security_path_rmdir(const struct path *dir, struct dentry *dentry);
1552int security_path_mknod(const struct path *dir, struct dentry *dentry, umode_t mode,
1553 unsigned int dev);
1554int security_path_truncate(const struct path *path);
1555int security_path_symlink(const struct path *dir, struct dentry *dentry,
1556 const char *old_name);
1557int security_path_link(struct dentry *old_dentry, const struct path *new_dir,
1558 struct dentry *new_dentry);
1559int security_path_rename(const struct path *old_dir, struct dentry *old_dentry,
1560 const struct path *new_dir, struct dentry *new_dentry,
1561 unsigned int flags);
1562int security_path_chmod(const struct path *path, umode_t mode);
1563int security_path_chown(const struct path *path, kuid_t uid, kgid_t gid);
1564int security_path_chroot(const struct path *path);
1565#else
1566static inline int security_path_unlink(const struct path *dir, struct dentry *dentry)
1567{
1568 return 0;
1569}
1570
1571static inline int security_path_mkdir(const struct path *dir, struct dentry *dentry,
1572 umode_t mode)
1573{
1574 return 0;
1575}
1576
1577static inline int security_path_rmdir(const struct path *dir, struct dentry *dentry)
1578{
1579 return 0;
1580}
1581
1582static inline int security_path_mknod(const struct path *dir, struct dentry *dentry,
1583 umode_t mode, unsigned int dev)
1584{
1585 return 0;
1586}
1587
1588static inline int security_path_truncate(const struct path *path)
1589{
1590 return 0;
1591}
1592
1593static inline int security_path_symlink(const struct path *dir, struct dentry *dentry,
1594 const char *old_name)
1595{
1596 return 0;
1597}
1598
1599static inline int security_path_link(struct dentry *old_dentry,
1600 const struct path *new_dir,
1601 struct dentry *new_dentry)
1602{
1603 return 0;
1604}
1605
1606static inline int security_path_rename(const struct path *old_dir,
1607 struct dentry *old_dentry,
1608 const struct path *new_dir,
1609 struct dentry *new_dentry,
1610 unsigned int flags)
1611{
1612 return 0;
1613}
1614
1615static inline int security_path_chmod(const struct path *path, umode_t mode)
1616{
1617 return 0;
1618}
1619
1620static inline int security_path_chown(const struct path *path, kuid_t uid, kgid_t gid)
1621{
1622 return 0;
1623}
1624
1625static inline int security_path_chroot(const struct path *path)
1626{
1627 return 0;
1628}
1629#endif
1630
1631#ifdef CONFIG_KEYS
1632#ifdef CONFIG_SECURITY
1633
1634int security_key_alloc(struct key *key, const struct cred *cred, unsigned long flags);
1635void security_key_free(struct key *key);
1636int security_key_permission(key_ref_t key_ref,
1637 const struct cred *cred, unsigned perm);
1638int security_key_getsecurity(struct key *key, char **_buffer);
1639
1640#else
1641
1642static inline int security_key_alloc(struct key *key,
1643 const struct cred *cred,
1644 unsigned long flags)
1645{
1646 return 0;
1647}
1648
1649static inline void security_key_free(struct key *key)
1650{
1651}
1652
1653static inline int security_key_permission(key_ref_t key_ref,
1654 const struct cred *cred,
1655 unsigned perm)
1656{
1657 return 0;
1658}
1659
1660static inline int security_key_getsecurity(struct key *key, char **_buffer)
1661{
1662 *_buffer = NULL;
1663 return 0;
1664}
1665
1666#endif
1667#endif
1668
1669#ifdef CONFIG_AUDIT
1670#ifdef CONFIG_SECURITY
1671int security_audit_rule_init(u32 field, u32 op, char *rulestr, void **lsmrule);
1672int security_audit_rule_known(struct audit_krule *krule);
1673int security_audit_rule_match(u32 secid, u32 field, u32 op, void *lsmrule,
1674 struct audit_context *actx);
1675void security_audit_rule_free(void *lsmrule);
1676
1677#else
1678
1679static inline int security_audit_rule_init(u32 field, u32 op, char *rulestr,
1680 void **lsmrule)
1681{
1682 return 0;
1683}
1684
1685static inline int security_audit_rule_known(struct audit_krule *krule)
1686{
1687 return 0;
1688}
1689
1690static inline int security_audit_rule_match(u32 secid, u32 field, u32 op,
1691 void *lsmrule, struct audit_context *actx)
1692{
1693 return 0;
1694}
1695
1696static inline void security_audit_rule_free(void *lsmrule)
1697{ }
1698
1699#endif
1700#endif
1701
1702#ifdef CONFIG_SECURITYFS
1703
1704extern struct dentry *securityfs_create_file(const char *name, umode_t mode,
1705 struct dentry *parent, void *data,
1706 const struct file_operations *fops);
1707extern struct dentry *securityfs_create_dir(const char *name, struct dentry *parent);
1708struct dentry *securityfs_create_symlink(const char *name,
1709 struct dentry *parent,
1710 const char *target,
1711 const struct inode_operations *iops);
1712extern void securityfs_remove(struct dentry *dentry);
1713
1714#else
1715
1716static inline struct dentry *securityfs_create_dir(const char *name,
1717 struct dentry *parent)
1718{
1719 return ERR_PTR(-ENODEV);
1720}
1721
1722static inline struct dentry *securityfs_create_file(const char *name,
1723 umode_t mode,
1724 struct dentry *parent,
1725 void *data,
1726 const struct file_operations *fops)
1727{
1728 return ERR_PTR(-ENODEV);
1729}
1730
1731static inline struct dentry *securityfs_create_symlink(const char *name,
1732 struct dentry *parent,
1733 const char *target,
1734 const struct inode_operations *iops)
1735{
1736 return ERR_PTR(-ENODEV);
1737}
1738
1739static inline void securityfs_remove(struct dentry *dentry)
1740{}
1741
1742#endif
1743
1744#ifdef CONFIG_SECURITY
1745
1746static inline char *alloc_secdata(void)
1747{
1748 return (char *)get_zeroed_page(GFP_KERNEL);
1749}
1750
1751static inline void free_secdata(void *secdata)
1752{
1753 free_page((unsigned long)secdata);
1754}
1755
1756#else
1757
1758static inline char *alloc_secdata(void)
1759{
1760 return (char *)1;
1761}
1762
1763static inline void free_secdata(void *secdata)
1764{ }
1765#endif
1766
1767#endif
1768
1769
