1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23#ifndef __LINUX_SECURITY_H
24#define __LINUX_SECURITY_H
25
26#include <linux/key.h>
27#include <linux/capability.h>
28#include <linux/fs.h>
29#include <linux/slab.h>
30#include <linux/err.h>
31#include <linux/string.h>
32#include <linux/mm.h>
33#include <linux/fs.h>
34
35struct linux_binprm;
36struct cred;
37struct rlimit;
38struct siginfo;
39struct sembuf;
40struct kern_ipc_perm;
41struct audit_context;
42struct super_block;
43struct inode;
44struct dentry;
45struct file;
46struct vfsmount;
47struct path;
48struct qstr;
49struct iattr;
50struct fown_struct;
51struct file_operations;
52struct msg_msg;
53struct xattr;
54struct xfrm_sec_ctx;
55struct mm_struct;
56
57
58#define SECURITY_CAP_NOAUDIT 0
59#define SECURITY_CAP_AUDIT 1
60
61
62#define SECURITY_LSM_NATIVE_LABELS 1
63
64struct ctl_table;
65struct audit_krule;
66struct user_namespace;
67struct timezone;
68
69enum lsm_event {
70 LSM_POLICY_CHANGE,
71};
72
73
74extern int cap_capable(const struct cred *cred, struct user_namespace *ns,
75 int cap, int audit);
76extern int cap_settime(const struct timespec64 *ts, const struct timezone *tz);
77extern int cap_ptrace_access_check(struct task_struct *child, unsigned int mode);
78extern int cap_ptrace_traceme(struct task_struct *parent);
79extern int cap_capget(struct task_struct *target, kernel_cap_t *effective, kernel_cap_t *inheritable, kernel_cap_t *permitted);
80extern int cap_capset(struct cred *new, const struct cred *old,
81 const kernel_cap_t *effective,
82 const kernel_cap_t *inheritable,
83 const kernel_cap_t *permitted);
84extern int cap_bprm_set_creds(struct linux_binprm *bprm);
85extern int cap_inode_setxattr(struct dentry *dentry, const char *name,
86 const void *value, size_t size, int flags);
87extern int cap_inode_removexattr(struct dentry *dentry, const char *name);
88extern int cap_inode_need_killpriv(struct dentry *dentry);
89extern int cap_inode_killpriv(struct dentry *dentry);
90extern int cap_inode_getsecurity(struct inode *inode, const char *name,
91 void **buffer, bool alloc);
92extern int cap_mmap_addr(unsigned long addr);
93extern int cap_mmap_file(struct file *file, unsigned long reqprot,
94 unsigned long prot, unsigned long flags);
95extern int cap_task_fix_setuid(struct cred *new, const struct cred *old, int flags);
96extern int cap_task_prctl(int option, unsigned long arg2, unsigned long arg3,
97 unsigned long arg4, unsigned long arg5);
98extern int cap_task_setscheduler(struct task_struct *p);
99extern int cap_task_setioprio(struct task_struct *p, int ioprio);
100extern int cap_task_setnice(struct task_struct *p, int nice);
101extern int cap_vm_enough_memory(struct mm_struct *mm, long pages);
102
103struct msghdr;
104struct sk_buff;
105struct sock;
106struct sockaddr;
107struct socket;
108struct flowi;
109struct dst_entry;
110struct xfrm_selector;
111struct xfrm_policy;
112struct xfrm_state;
113struct xfrm_user_sec_ctx;
114struct seq_file;
115struct sctp_endpoint;
116
117#ifdef CONFIG_MMU
118extern unsigned long mmap_min_addr;
119extern unsigned long dac_mmap_min_addr;
120#else
121#define mmap_min_addr 0UL
122#define dac_mmap_min_addr 0UL
123#endif
124
125
126
127
128
129#define LSM_SETID_ID 1
130
131
132#define LSM_SETID_RE 2
133
134
135#define LSM_SETID_RES 4
136
137
138#define LSM_SETID_FS 8
139
140
141#define LSM_PRLIMIT_READ 1
142#define LSM_PRLIMIT_WRITE 2
143
144
145struct sched_param;
146struct request_sock;
147
148
149#define LSM_UNSAFE_SHARE 1
150#define LSM_UNSAFE_PTRACE 2
151#define LSM_UNSAFE_NO_NEW_PRIVS 4
152
153#ifdef CONFIG_MMU
154extern int mmap_min_addr_handler(struct ctl_table *table, int write,
155 void __user *buffer, size_t *lenp, loff_t *ppos);
156#endif
157
158
159typedef int (*initxattrs) (struct inode *inode,
160 const struct xattr *xattr_array, void *fs_data);
161
162#ifdef CONFIG_SECURITY
163
164struct security_mnt_opts {
165 char **mnt_opts;
166 int *mnt_opts_flags;
167 int num_mnt_opts;
168};
169
170int call_lsm_notifier(enum lsm_event event, void *data);
171int register_lsm_notifier(struct notifier_block *nb);
172int unregister_lsm_notifier(struct notifier_block *nb);
173
174static inline void security_init_mnt_opts(struct security_mnt_opts *opts)
175{
176 opts->mnt_opts = NULL;
177 opts->mnt_opts_flags = NULL;
178 opts->num_mnt_opts = 0;
179}
180
181static inline void security_free_mnt_opts(struct security_mnt_opts *opts)
182{
183 int i;
184 if (opts->mnt_opts)
185 for (i = 0; i < opts->num_mnt_opts; i++)
186 kfree(opts->mnt_opts[i]);
187 kfree(opts->mnt_opts);
188 opts->mnt_opts = NULL;
189 kfree(opts->mnt_opts_flags);
190 opts->mnt_opts_flags = NULL;
191 opts->num_mnt_opts = 0;
192}
193
194
195extern int security_init(void);
196
197
198int security_binder_set_context_mgr(struct task_struct *mgr);
199int security_binder_transaction(struct task_struct *from,
200 struct task_struct *to);
201int security_binder_transfer_binder(struct task_struct *from,
202 struct task_struct *to);
203int security_binder_transfer_file(struct task_struct *from,
204 struct task_struct *to, struct file *file);
205int security_ptrace_access_check(struct task_struct *child, unsigned int mode);
206int security_ptrace_traceme(struct task_struct *parent);
207int security_capget(struct task_struct *target,
208 kernel_cap_t *effective,
209 kernel_cap_t *inheritable,
210 kernel_cap_t *permitted);
211int security_capset(struct cred *new, const struct cred *old,
212 const kernel_cap_t *effective,
213 const kernel_cap_t *inheritable,
214 const kernel_cap_t *permitted);
215int security_capable(const struct cred *cred, struct user_namespace *ns,
216 int cap);
217int security_capable_noaudit(const struct cred *cred, struct user_namespace *ns,
218 int cap);
219int security_quotactl(int cmds, int type, int id, struct super_block *sb);
220int security_quota_on(struct dentry *dentry);
221int security_syslog(int type);
222int security_settime64(const struct timespec64 *ts, const struct timezone *tz);
223static inline int security_settime(const struct timespec *ts, const struct timezone *tz)
224{
225 struct timespec64 ts64 = timespec_to_timespec64(*ts);
226
227 return security_settime64(&ts64, tz);
228}
229int security_vm_enough_memory_mm(struct mm_struct *mm, long pages);
230int security_bprm_set_creds(struct linux_binprm *bprm);
231int security_bprm_check(struct linux_binprm *bprm);
232void security_bprm_committing_creds(struct linux_binprm *bprm);
233void security_bprm_committed_creds(struct linux_binprm *bprm);
234int security_sb_alloc(struct super_block *sb);
235void security_sb_free(struct super_block *sb);
236int security_sb_copy_data(char *orig, char *copy);
237int security_sb_remount(struct super_block *sb, void *data);
238int security_sb_kern_mount(struct super_block *sb, int flags, void *data);
239int security_sb_show_options(struct seq_file *m, struct super_block *sb);
240int security_sb_statfs(struct dentry *dentry);
241int security_sb_mount(const char *dev_name, const struct path *path,
242 const char *type, unsigned long flags, void *data);
243int security_sb_umount(struct vfsmount *mnt, int flags);
244int security_sb_pivotroot(const struct path *old_path, const struct path *new_path);
245int security_sb_set_mnt_opts(struct super_block *sb,
246 struct security_mnt_opts *opts,
247 unsigned long kern_flags,
248 unsigned long *set_kern_flags);
249int security_sb_clone_mnt_opts(const struct super_block *oldsb,
250 struct super_block *newsb,
251 unsigned long kern_flags,
252 unsigned long *set_kern_flags);
253int security_sb_parse_opts_str(char *options, struct security_mnt_opts *opts);
254int security_dentry_init_security(struct dentry *dentry, int mode,
255 const struct qstr *name, void **ctx,
256 u32 *ctxlen);
257int security_dentry_create_files_as(struct dentry *dentry, int mode,
258 struct qstr *name,
259 const struct cred *old,
260 struct cred *new);
261
262int security_inode_alloc(struct inode *inode);
263void security_inode_free(struct inode *inode);
264int security_inode_init_security(struct inode *inode, struct inode *dir,
265 const struct qstr *qstr,
266 initxattrs initxattrs, void *fs_data);
267int security_old_inode_init_security(struct inode *inode, struct inode *dir,
268 const struct qstr *qstr, const char **name,
269 void **value, size_t *len);
270int security_inode_create(struct inode *dir, struct dentry *dentry, umode_t mode);
271int security_inode_link(struct dentry *old_dentry, struct inode *dir,
272 struct dentry *new_dentry);
273int security_inode_unlink(struct inode *dir, struct dentry *dentry);
274int security_inode_symlink(struct inode *dir, struct dentry *dentry,
275 const char *old_name);
276int security_inode_mkdir(struct inode *dir, struct dentry *dentry, umode_t mode);
277int security_inode_rmdir(struct inode *dir, struct dentry *dentry);
278int security_inode_mknod(struct inode *dir, struct dentry *dentry, umode_t mode, dev_t dev);
279int security_inode_rename(struct inode *old_dir, struct dentry *old_dentry,
280 struct inode *new_dir, struct dentry *new_dentry,
281 unsigned int flags);
282int security_inode_readlink(struct dentry *dentry);
283int security_inode_follow_link(struct dentry *dentry, struct inode *inode,
284 bool rcu);
285int security_inode_permission(struct inode *inode, int mask);
286int security_inode_setattr(struct dentry *dentry, struct iattr *attr);
287int security_inode_getattr(const struct path *path);
288int security_inode_setxattr(struct dentry *dentry, const char *name,
289 const void *value, size_t size, int flags);
290void security_inode_post_setxattr(struct dentry *dentry, const char *name,
291 const void *value, size_t size, int flags);
292int security_inode_getxattr(struct dentry *dentry, const char *name);
293int security_inode_listxattr(struct dentry *dentry);
294int security_inode_removexattr(struct dentry *dentry, const char *name);
295int security_inode_need_killpriv(struct dentry *dentry);
296int security_inode_killpriv(struct dentry *dentry);
297int security_inode_getsecurity(struct inode *inode, const char *name, void **buffer, bool alloc);
298int security_inode_setsecurity(struct inode *inode, const char *name, const void *value, size_t size, int flags);
299int security_inode_listsecurity(struct inode *inode, char *buffer, size_t buffer_size);
300void security_inode_getsecid(struct inode *inode, u32 *secid);
301int security_inode_copy_up(struct dentry *src, struct cred **new);
302int security_inode_copy_up_xattr(const char *name);
303int security_file_permission(struct file *file, int mask);
304int security_file_alloc(struct file *file);
305void security_file_free(struct file *file);
306int security_file_ioctl(struct file *file, unsigned int cmd, unsigned long arg);
307int security_mmap_file(struct file *file, unsigned long prot,
308 unsigned long flags);
309int security_mmap_addr(unsigned long addr);
310int security_file_mprotect(struct vm_area_struct *vma, unsigned long reqprot,
311 unsigned long prot);
312int security_file_lock(struct file *file, unsigned int cmd);
313int security_file_fcntl(struct file *file, unsigned int cmd, unsigned long arg);
314void security_file_set_fowner(struct file *file);
315int security_file_send_sigiotask(struct task_struct *tsk,
316 struct fown_struct *fown, int sig);
317int security_file_receive(struct file *file);
318int security_file_open(struct file *file, const struct cred *cred);
319int security_task_alloc(struct task_struct *task, unsigned long clone_flags);
320void security_task_free(struct task_struct *task);
321int security_cred_alloc_blank(struct cred *cred, gfp_t gfp);
322void security_cred_free(struct cred *cred);
323int security_prepare_creds(struct cred *new, const struct cred *old, gfp_t gfp);
324void security_transfer_creds(struct cred *new, const struct cred *old);
325void security_cred_getsecid(const struct cred *c, u32 *secid);
326int security_kernel_act_as(struct cred *new, u32 secid);
327int security_kernel_create_files_as(struct cred *new, struct inode *inode);
328int security_kernel_module_request(char *kmod_name);
329int security_kernel_read_file(struct file *file, enum kernel_read_file_id id);
330int security_kernel_post_read_file(struct file *file, char *buf, loff_t size,
331 enum kernel_read_file_id id);
332int security_task_fix_setuid(struct cred *new, const struct cred *old,
333 int flags);
334int security_task_setpgid(struct task_struct *p, pid_t pgid);
335int security_task_getpgid(struct task_struct *p);
336int security_task_getsid(struct task_struct *p);
337void security_task_getsecid(struct task_struct *p, u32 *secid);
338int security_task_setnice(struct task_struct *p, int nice);
339int security_task_setioprio(struct task_struct *p, int ioprio);
340int security_task_getioprio(struct task_struct *p);
341int security_task_prlimit(const struct cred *cred, const struct cred *tcred,
342 unsigned int flags);
343int security_task_setrlimit(struct task_struct *p, unsigned int resource,
344 struct rlimit *new_rlim);
345int security_task_setscheduler(struct task_struct *p);
346int security_task_getscheduler(struct task_struct *p);
347int security_task_movememory(struct task_struct *p);
348int security_task_kill(struct task_struct *p, struct siginfo *info,
349 int sig, const struct cred *cred);
350int security_task_prctl(int option, unsigned long arg2, unsigned long arg3,
351 unsigned long arg4, unsigned long arg5);
352void security_task_to_inode(struct task_struct *p, struct inode *inode);
353int security_ipc_permission(struct kern_ipc_perm *ipcp, short flag);
354void security_ipc_getsecid(struct kern_ipc_perm *ipcp, u32 *secid);
355int security_msg_msg_alloc(struct msg_msg *msg);
356void security_msg_msg_free(struct msg_msg *msg);
357int security_msg_queue_alloc(struct kern_ipc_perm *msq);
358void security_msg_queue_free(struct kern_ipc_perm *msq);
359int security_msg_queue_associate(struct kern_ipc_perm *msq, int msqflg);
360int security_msg_queue_msgctl(struct kern_ipc_perm *msq, int cmd);
361int security_msg_queue_msgsnd(struct kern_ipc_perm *msq,
362 struct msg_msg *msg, int msqflg);
363int security_msg_queue_msgrcv(struct kern_ipc_perm *msq, struct msg_msg *msg,
364 struct task_struct *target, long type, int mode);
365int security_shm_alloc(struct kern_ipc_perm *shp);
366void security_shm_free(struct kern_ipc_perm *shp);
367int security_shm_associate(struct kern_ipc_perm *shp, int shmflg);
368int security_shm_shmctl(struct kern_ipc_perm *shp, int cmd);
369int security_shm_shmat(struct kern_ipc_perm *shp, char __user *shmaddr, int shmflg);
370int security_sem_alloc(struct kern_ipc_perm *sma);
371void security_sem_free(struct kern_ipc_perm *sma);
372int security_sem_associate(struct kern_ipc_perm *sma, int semflg);
373int security_sem_semctl(struct kern_ipc_perm *sma, int cmd);
374int security_sem_semop(struct kern_ipc_perm *sma, struct sembuf *sops,
375 unsigned nsops, int alter);
376void security_d_instantiate(struct dentry *dentry, struct inode *inode);
377int security_getprocattr(struct task_struct *p, char *name, char **value);
378int security_setprocattr(const char *name, void *value, size_t size);
379int security_netlink_send(struct sock *sk, struct sk_buff *skb);
380int security_ismaclabel(const char *name);
381int security_secid_to_secctx(u32 secid, char **secdata, u32 *seclen);
382int security_secctx_to_secid(const char *secdata, u32 seclen, u32 *secid);
383void security_release_secctx(char *secdata, u32 seclen);
384
385void security_inode_invalidate_secctx(struct inode *inode);
386int security_inode_notifysecctx(struct inode *inode, void *ctx, u32 ctxlen);
387int security_inode_setsecctx(struct dentry *dentry, void *ctx, u32 ctxlen);
388int security_inode_getsecctx(struct inode *inode, void **ctx, u32 *ctxlen);
389#else
390struct security_mnt_opts {
391};
392
393static inline int call_lsm_notifier(enum lsm_event event, void *data)
394{
395 return 0;
396}
397
398static inline int register_lsm_notifier(struct notifier_block *nb)
399{
400 return 0;
401}
402
403static inline int unregister_lsm_notifier(struct notifier_block *nb)
404{
405 return 0;
406}
407
408static inline void security_init_mnt_opts(struct security_mnt_opts *opts)
409{
410}
411
412static inline void security_free_mnt_opts(struct security_mnt_opts *opts)
413{
414}
415
416
417
418
419
420
421static inline int security_init(void)
422{
423 return 0;
424}
425
426static inline int security_binder_set_context_mgr(struct task_struct *mgr)
427{
428 return 0;
429}
430
431static inline int security_binder_transaction(struct task_struct *from,
432 struct task_struct *to)
433{
434 return 0;
435}
436
437static inline int security_binder_transfer_binder(struct task_struct *from,
438 struct task_struct *to)
439{
440 return 0;
441}
442
443static inline int security_binder_transfer_file(struct task_struct *from,
444 struct task_struct *to,
445 struct file *file)
446{
447 return 0;
448}
449
450static inline int security_ptrace_access_check(struct task_struct *child,
451 unsigned int mode)
452{
453 return cap_ptrace_access_check(child, mode);
454}
455
456static inline int security_ptrace_traceme(struct task_struct *parent)
457{
458 return cap_ptrace_traceme(parent);
459}
460
461static inline int security_capget(struct task_struct *target,
462 kernel_cap_t *effective,
463 kernel_cap_t *inheritable,
464 kernel_cap_t *permitted)
465{
466 return cap_capget(target, effective, inheritable, permitted);
467}
468
469static inline int security_capset(struct cred *new,
470 const struct cred *old,
471 const kernel_cap_t *effective,
472 const kernel_cap_t *inheritable,
473 const kernel_cap_t *permitted)
474{
475 return cap_capset(new, old, effective, inheritable, permitted);
476}
477
478static inline int security_capable(const struct cred *cred,
479 struct user_namespace *ns, int cap)
480{
481 return cap_capable(cred, ns, cap, SECURITY_CAP_AUDIT);
482}
483
484static inline int security_capable_noaudit(const struct cred *cred,
485 struct user_namespace *ns, int cap) {
486 return cap_capable(cred, ns, cap, SECURITY_CAP_NOAUDIT);
487}
488
489static inline int security_quotactl(int cmds, int type, int id,
490 struct super_block *sb)
491{
492 return 0;
493}
494
495static inline int security_quota_on(struct dentry *dentry)
496{
497 return 0;
498}
499
500static inline int security_syslog(int type)
501{
502 return 0;
503}
504
505static inline int security_settime64(const struct timespec64 *ts,
506 const struct timezone *tz)
507{
508 return cap_settime(ts, tz);
509}
510
511static inline int security_settime(const struct timespec *ts,
512 const struct timezone *tz)
513{
514 struct timespec64 ts64 = timespec_to_timespec64(*ts);
515
516 return cap_settime(&ts64, tz);
517}
518
519static inline int security_vm_enough_memory_mm(struct mm_struct *mm, long pages)
520{
521 return __vm_enough_memory(mm, pages, cap_vm_enough_memory(mm, pages));
522}
523
524static inline int security_bprm_set_creds(struct linux_binprm *bprm)
525{
526 return cap_bprm_set_creds(bprm);
527}
528
529static inline int security_bprm_check(struct linux_binprm *bprm)
530{
531 return 0;
532}
533
534static inline void security_bprm_committing_creds(struct linux_binprm *bprm)
535{
536}
537
538static inline void security_bprm_committed_creds(struct linux_binprm *bprm)
539{
540}
541
542static inline int security_sb_alloc(struct super_block *sb)
543{
544 return 0;
545}
546
547static inline void security_sb_free(struct super_block *sb)
548{ }
549
550static inline int security_sb_copy_data(char *orig, char *copy)
551{
552 return 0;
553}
554
555static inline int security_sb_remount(struct super_block *sb, void *data)
556{
557 return 0;
558}
559
560static inline int security_sb_kern_mount(struct super_block *sb, int flags, void *data)
561{
562 return 0;
563}
564
565static inline int security_sb_show_options(struct seq_file *m,
566 struct super_block *sb)
567{
568 return 0;
569}
570
571static inline int security_sb_statfs(struct dentry *dentry)
572{
573 return 0;
574}
575
576static inline int security_sb_mount(const char *dev_name, const struct path *path,
577 const char *type, unsigned long flags,
578 void *data)
579{
580 return 0;
581}
582
583static inline int security_sb_umount(struct vfsmount *mnt, int flags)
584{
585 return 0;
586}
587
588static inline int security_sb_pivotroot(const struct path *old_path,
589 const struct path *new_path)
590{
591 return 0;
592}
593
594static inline int security_sb_set_mnt_opts(struct super_block *sb,
595 struct security_mnt_opts *opts,
596 unsigned long kern_flags,
597 unsigned long *set_kern_flags)
598{
599 return 0;
600}
601
602static inline int security_sb_clone_mnt_opts(const struct super_block *oldsb,
603 struct super_block *newsb,
604 unsigned long kern_flags,
605 unsigned long *set_kern_flags)
606{
607 return 0;
608}
609
610static inline int security_sb_parse_opts_str(char *options, struct security_mnt_opts *opts)
611{
612 return 0;
613}
614
615static inline int security_inode_alloc(struct inode *inode)
616{
617 return 0;
618}
619
620static inline void security_inode_free(struct inode *inode)
621{ }
622
623static inline int security_dentry_init_security(struct dentry *dentry,
624 int mode,
625 const struct qstr *name,
626 void **ctx,
627 u32 *ctxlen)
628{
629 return -EOPNOTSUPP;
630}
631
632static inline int security_dentry_create_files_as(struct dentry *dentry,
633 int mode, struct qstr *name,
634 const struct cred *old,
635 struct cred *new)
636{
637 return 0;
638}
639
640
641static inline int security_inode_init_security(struct inode *inode,
642 struct inode *dir,
643 const struct qstr *qstr,
644 const initxattrs xattrs,
645 void *fs_data)
646{
647 return 0;
648}
649
650static inline int security_old_inode_init_security(struct inode *inode,
651 struct inode *dir,
652 const struct qstr *qstr,
653 const char **name,
654 void **value, size_t *len)
655{
656 return -EOPNOTSUPP;
657}
658
659static inline int security_inode_create(struct inode *dir,
660 struct dentry *dentry,
661 umode_t mode)
662{
663 return 0;
664}
665
666static inline int security_inode_link(struct dentry *old_dentry,
667 struct inode *dir,
668 struct dentry *new_dentry)
669{
670 return 0;
671}
672
673static inline int security_inode_unlink(struct inode *dir,
674 struct dentry *dentry)
675{
676 return 0;
677}
678
679static inline int security_inode_symlink(struct inode *dir,
680 struct dentry *dentry,
681 const char *old_name)
682{
683 return 0;
684}
685
686static inline int security_inode_mkdir(struct inode *dir,
687 struct dentry *dentry,
688 int mode)
689{
690 return 0;
691}
692
693static inline int security_inode_rmdir(struct inode *dir,
694 struct dentry *dentry)
695{
696 return 0;
697}
698
699static inline int security_inode_mknod(struct inode *dir,
700 struct dentry *dentry,
701 int mode, dev_t dev)
702{
703 return 0;
704}
705
706static inline int security_inode_rename(struct inode *old_dir,
707 struct dentry *old_dentry,
708 struct inode *new_dir,
709 struct dentry *new_dentry,
710 unsigned int flags)
711{
712 return 0;
713}
714
715static inline int security_inode_readlink(struct dentry *dentry)
716{
717 return 0;
718}
719
720static inline int security_inode_follow_link(struct dentry *dentry,
721 struct inode *inode,
722 bool rcu)
723{
724 return 0;
725}
726
727static inline int security_inode_permission(struct inode *inode, int mask)
728{
729 return 0;
730}
731
732static inline int security_inode_setattr(struct dentry *dentry,
733 struct iattr *attr)
734{
735 return 0;
736}
737
738static inline int security_inode_getattr(const struct path *path)
739{
740 return 0;
741}
742
743static inline int security_inode_setxattr(struct dentry *dentry,
744 const char *name, const void *value, size_t size, int flags)
745{
746 return cap_inode_setxattr(dentry, name, value, size, flags);
747}
748
749static inline void security_inode_post_setxattr(struct dentry *dentry,
750 const char *name, const void *value, size_t size, int flags)
751{ }
752
753static inline int security_inode_getxattr(struct dentry *dentry,
754 const char *name)
755{
756 return 0;
757}
758
759static inline int security_inode_listxattr(struct dentry *dentry)
760{
761 return 0;
762}
763
764static inline int security_inode_removexattr(struct dentry *dentry,
765 const char *name)
766{
767 return cap_inode_removexattr(dentry, name);
768}
769
770static inline int security_inode_need_killpriv(struct dentry *dentry)
771{
772 return cap_inode_need_killpriv(dentry);
773}
774
775static inline int security_inode_killpriv(struct dentry *dentry)
776{
777 return cap_inode_killpriv(dentry);
778}
779
780static inline int security_inode_getsecurity(struct inode *inode, const char *name, void **buffer, bool alloc)
781{
782 return -EOPNOTSUPP;
783}
784
785static inline int security_inode_setsecurity(struct inode *inode, const char *name, const void *value, size_t size, int flags)
786{
787 return -EOPNOTSUPP;
788}
789
790static inline int security_inode_listsecurity(struct inode *inode, char *buffer, size_t buffer_size)
791{
792 return 0;
793}
794
795static inline void security_inode_getsecid(struct inode *inode, u32 *secid)
796{
797 *secid = 0;
798}
799
800static inline int security_inode_copy_up(struct dentry *src, struct cred **new)
801{
802 return 0;
803}
804
805static inline int security_inode_copy_up_xattr(const char *name)
806{
807 return -EOPNOTSUPP;
808}
809
810static inline int security_file_permission(struct file *file, int mask)
811{
812 return 0;
813}
814
815static inline int security_file_alloc(struct file *file)
816{
817 return 0;
818}
819
820static inline void security_file_free(struct file *file)
821{ }
822
823static inline int security_file_ioctl(struct file *file, unsigned int cmd,
824 unsigned long arg)
825{
826 return 0;
827}
828
829static inline int security_mmap_file(struct file *file, unsigned long prot,
830 unsigned long flags)
831{
832 return 0;
833}
834
835static inline int security_mmap_addr(unsigned long addr)
836{
837 return cap_mmap_addr(addr);
838}
839
840static inline int security_file_mprotect(struct vm_area_struct *vma,
841 unsigned long reqprot,
842 unsigned long prot)
843{
844 return 0;
845}
846
847static inline int security_file_lock(struct file *file, unsigned int cmd)
848{
849 return 0;
850}
851
852static inline int security_file_fcntl(struct file *file, unsigned int cmd,
853 unsigned long arg)
854{
855 return 0;
856}
857
858static inline void security_file_set_fowner(struct file *file)
859{
860 return;
861}
862
863static inline int security_file_send_sigiotask(struct task_struct *tsk,
864 struct fown_struct *fown,
865 int sig)
866{
867 return 0;
868}
869
870static inline int security_file_receive(struct file *file)
871{
872 return 0;
873}
874
875static inline int security_file_open(struct file *file,
876 const struct cred *cred)
877{
878 return 0;
879}
880
881static inline int security_task_alloc(struct task_struct *task,
882 unsigned long clone_flags)
883{
884 return 0;
885}
886
887static inline void security_task_free(struct task_struct *task)
888{ }
889
890static inline int security_cred_alloc_blank(struct cred *cred, gfp_t gfp)
891{
892 return 0;
893}
894
895static inline void security_cred_free(struct cred *cred)
896{ }
897
898static inline int security_prepare_creds(struct cred *new,
899 const struct cred *old,
900 gfp_t gfp)
901{
902 return 0;
903}
904
905static inline void security_transfer_creds(struct cred *new,
906 const struct cred *old)
907{
908}
909
910static inline int security_kernel_act_as(struct cred *cred, u32 secid)
911{
912 return 0;
913}
914
915static inline int security_kernel_create_files_as(struct cred *cred,
916 struct inode *inode)
917{
918 return 0;
919}
920
921static inline int security_kernel_module_request(char *kmod_name)
922{
923 return 0;
924}
925
926static inline int security_kernel_read_file(struct file *file,
927 enum kernel_read_file_id id)
928{
929 return 0;
930}
931
932static inline int security_kernel_post_read_file(struct file *file,
933 char *buf, loff_t size,
934 enum kernel_read_file_id id)
935{
936 return 0;
937}
938
939static inline int security_task_fix_setuid(struct cred *new,
940 const struct cred *old,
941 int flags)
942{
943 return cap_task_fix_setuid(new, old, flags);
944}
945
946static inline int security_task_setpgid(struct task_struct *p, pid_t pgid)
947{
948 return 0;
949}
950
951static inline int security_task_getpgid(struct task_struct *p)
952{
953 return 0;
954}
955
956static inline int security_task_getsid(struct task_struct *p)
957{
958 return 0;
959}
960
961static inline void security_task_getsecid(struct task_struct *p, u32 *secid)
962{
963 *secid = 0;
964}
965
966static inline int security_task_setnice(struct task_struct *p, int nice)
967{
968 return cap_task_setnice(p, nice);
969}
970
971static inline int security_task_setioprio(struct task_struct *p, int ioprio)
972{
973 return cap_task_setioprio(p, ioprio);
974}
975
976static inline int security_task_getioprio(struct task_struct *p)
977{
978 return 0;
979}
980
981static inline int security_task_prlimit(const struct cred *cred,
982 const struct cred *tcred,
983 unsigned int flags)
984{
985 return 0;
986}
987
988static inline int security_task_setrlimit(struct task_struct *p,
989 unsigned int resource,
990 struct rlimit *new_rlim)
991{
992 return 0;
993}
994
995static inline int security_task_setscheduler(struct task_struct *p)
996{
997 return cap_task_setscheduler(p);
998}
999
1000static inline int security_task_getscheduler(struct task_struct *p)
1001{
1002 return 0;
1003}
1004
1005static inline int security_task_movememory(struct task_struct *p)
1006{
1007 return 0;
1008}
1009
1010static inline int security_task_kill(struct task_struct *p,
1011 struct siginfo *info, int sig,
1012 const struct cred *cred)
1013{
1014 return 0;
1015}
1016
1017static inline int security_task_prctl(int option, unsigned long arg2,
1018 unsigned long arg3,
1019 unsigned long arg4,
1020 unsigned long arg5)
1021{
1022 return cap_task_prctl(option, arg2, arg3, arg4, arg5);
1023}
1024
1025static inline void security_task_to_inode(struct task_struct *p, struct inode *inode)
1026{ }
1027
1028static inline int security_ipc_permission(struct kern_ipc_perm *ipcp,
1029 short flag)
1030{
1031 return 0;
1032}
1033
1034static inline void security_ipc_getsecid(struct kern_ipc_perm *ipcp, u32 *secid)
1035{
1036 *secid = 0;
1037}
1038
1039static inline int security_msg_msg_alloc(struct msg_msg *msg)
1040{
1041 return 0;
1042}
1043
1044static inline void security_msg_msg_free(struct msg_msg *msg)
1045{ }
1046
1047static inline int security_msg_queue_alloc(struct kern_ipc_perm *msq)
1048{
1049 return 0;
1050}
1051
1052static inline void security_msg_queue_free(struct kern_ipc_perm *msq)
1053{ }
1054
1055static inline int security_msg_queue_associate(struct kern_ipc_perm *msq,
1056 int msqflg)
1057{
1058 return 0;
1059}
1060
1061static inline int security_msg_queue_msgctl(struct kern_ipc_perm *msq, int cmd)
1062{
1063 return 0;
1064}
1065
1066static inline int security_msg_queue_msgsnd(struct kern_ipc_perm *msq,
1067 struct msg_msg *msg, int msqflg)
1068{
1069 return 0;
1070}
1071
1072static inline int security_msg_queue_msgrcv(struct kern_ipc_perm *msq,
1073 struct msg_msg *msg,
1074 struct task_struct *target,
1075 long type, int mode)
1076{
1077 return 0;
1078}
1079
1080static inline int security_shm_alloc(struct kern_ipc_perm *shp)
1081{
1082 return 0;
1083}
1084
1085static inline void security_shm_free(struct kern_ipc_perm *shp)
1086{ }
1087
1088static inline int security_shm_associate(struct kern_ipc_perm *shp,
1089 int shmflg)
1090{
1091 return 0;
1092}
1093
1094static inline int security_shm_shmctl(struct kern_ipc_perm *shp, int cmd)
1095{
1096 return 0;
1097}
1098
1099static inline int security_shm_shmat(struct kern_ipc_perm *shp,
1100 char __user *shmaddr, int shmflg)
1101{
1102 return 0;
1103}
1104
1105static inline int security_sem_alloc(struct kern_ipc_perm *sma)
1106{
1107 return 0;
1108}
1109
1110static inline void security_sem_free(struct kern_ipc_perm *sma)
1111{ }
1112
1113static inline int security_sem_associate(struct kern_ipc_perm *sma, int semflg)
1114{
1115 return 0;
1116}
1117
1118static inline int security_sem_semctl(struct kern_ipc_perm *sma, int cmd)
1119{
1120 return 0;
1121}
1122
1123static inline int security_sem_semop(struct kern_ipc_perm *sma,
1124 struct sembuf *sops, unsigned nsops,
1125 int alter)
1126{
1127 return 0;
1128}
1129
1130static inline void security_d_instantiate(struct dentry *dentry, struct inode *inode)
1131{ }
1132
1133static inline int security_getprocattr(struct task_struct *p, char *name, char **value)
1134{
1135 return -EINVAL;
1136}
1137
1138static inline int security_setprocattr(char *name, void *value, size_t size)
1139{
1140 return -EINVAL;
1141}
1142
1143static inline int security_netlink_send(struct sock *sk, struct sk_buff *skb)
1144{
1145 return 0;
1146}
1147
1148static inline int security_ismaclabel(const char *name)
1149{
1150 return 0;
1151}
1152
1153static inline int security_secid_to_secctx(u32 secid, char **secdata, u32 *seclen)
1154{
1155 return -EOPNOTSUPP;
1156}
1157
1158static inline int security_secctx_to_secid(const char *secdata,
1159 u32 seclen,
1160 u32 *secid)
1161{
1162 return -EOPNOTSUPP;
1163}
1164
1165static inline void security_release_secctx(char *secdata, u32 seclen)
1166{
1167}
1168
1169static inline void security_inode_invalidate_secctx(struct inode *inode)
1170{
1171}
1172
1173static inline int security_inode_notifysecctx(struct inode *inode, void *ctx, u32 ctxlen)
1174{
1175 return -EOPNOTSUPP;
1176}
1177static inline int security_inode_setsecctx(struct dentry *dentry, void *ctx, u32 ctxlen)
1178{
1179 return -EOPNOTSUPP;
1180}
1181static inline int security_inode_getsecctx(struct inode *inode, void **ctx, u32 *ctxlen)
1182{
1183 return -EOPNOTSUPP;
1184}
1185#endif
1186
1187#ifdef CONFIG_SECURITY_NETWORK
1188
1189int security_unix_stream_connect(struct sock *sock, struct sock *other, struct sock *newsk);
1190int security_unix_may_send(struct socket *sock, struct socket *other);
1191int security_socket_create(int family, int type, int protocol, int kern);
1192int security_socket_post_create(struct socket *sock, int family,
1193 int type, int protocol, int kern);
1194int security_socket_bind(struct socket *sock, struct sockaddr *address, int addrlen);
1195int security_socket_connect(struct socket *sock, struct sockaddr *address, int addrlen);
1196int security_socket_listen(struct socket *sock, int backlog);
1197int security_socket_accept(struct socket *sock, struct socket *newsock);
1198int security_socket_sendmsg(struct socket *sock, struct msghdr *msg, int size);
1199int security_socket_recvmsg(struct socket *sock, struct msghdr *msg,
1200 int size, int flags);
1201int security_socket_getsockname(struct socket *sock);
1202int security_socket_getpeername(struct socket *sock);
1203int security_socket_getsockopt(struct socket *sock, int level, int optname);
1204int security_socket_setsockopt(struct socket *sock, int level, int optname);
1205int security_socket_shutdown(struct socket *sock, int how);
1206int security_sock_rcv_skb(struct sock *sk, struct sk_buff *skb);
1207int security_socket_getpeersec_stream(struct socket *sock, char __user *optval,
1208 int __user *optlen, unsigned len);
1209int security_socket_getpeersec_dgram(struct socket *sock, struct sk_buff *skb, u32 *secid);
1210int security_sk_alloc(struct sock *sk, int family, gfp_t priority);
1211void security_sk_free(struct sock *sk);
1212void security_sk_clone(const struct sock *sk, struct sock *newsk);
1213void security_sk_classify_flow(struct sock *sk, struct flowi *fl);
1214void security_req_classify_flow(const struct request_sock *req, struct flowi *fl);
1215void security_sock_graft(struct sock*sk, struct socket *parent);
1216int security_inet_conn_request(struct sock *sk,
1217 struct sk_buff *skb, struct request_sock *req);
1218void security_inet_csk_clone(struct sock *newsk,
1219 const struct request_sock *req);
1220void security_inet_conn_established(struct sock *sk,
1221 struct sk_buff *skb);
1222int security_secmark_relabel_packet(u32 secid);
1223void security_secmark_refcount_inc(void);
1224void security_secmark_refcount_dec(void);
1225int security_tun_dev_alloc_security(void **security);
1226void security_tun_dev_free_security(void *security);
1227int security_tun_dev_create(void);
1228int security_tun_dev_attach_queue(void *security);
1229int security_tun_dev_attach(struct sock *sk, void *security);
1230int security_tun_dev_open(void *security);
1231int security_sctp_assoc_request(struct sctp_endpoint *ep, struct sk_buff *skb);
1232int security_sctp_bind_connect(struct sock *sk, int optname,
1233 struct sockaddr *address, int addrlen);
1234void security_sctp_sk_clone(struct sctp_endpoint *ep, struct sock *sk,
1235 struct sock *newsk);
1236
1237#else
1238static inline int security_unix_stream_connect(struct sock *sock,
1239 struct sock *other,
1240 struct sock *newsk)
1241{
1242 return 0;
1243}
1244
1245static inline int security_unix_may_send(struct socket *sock,
1246 struct socket *other)
1247{
1248 return 0;
1249}
1250
1251static inline int security_socket_create(int family, int type,
1252 int protocol, int kern)
1253{
1254 return 0;
1255}
1256
1257static inline int security_socket_post_create(struct socket *sock,
1258 int family,
1259 int type,
1260 int protocol, int kern)
1261{
1262 return 0;
1263}
1264
1265static inline int security_socket_bind(struct socket *sock,
1266 struct sockaddr *address,
1267 int addrlen)
1268{
1269 return 0;
1270}
1271
1272static inline int security_socket_connect(struct socket *sock,
1273 struct sockaddr *address,
1274 int addrlen)
1275{
1276 return 0;
1277}
1278
1279static inline int security_socket_listen(struct socket *sock, int backlog)
1280{
1281 return 0;
1282}
1283
1284static inline int security_socket_accept(struct socket *sock,
1285 struct socket *newsock)
1286{
1287 return 0;
1288}
1289
1290static inline int security_socket_sendmsg(struct socket *sock,
1291 struct msghdr *msg, int size)
1292{
1293 return 0;
1294}
1295
1296static inline int security_socket_recvmsg(struct socket *sock,
1297 struct msghdr *msg, int size,
1298 int flags)
1299{
1300 return 0;
1301}
1302
1303static inline int security_socket_getsockname(struct socket *sock)
1304{
1305 return 0;
1306}
1307
1308static inline int security_socket_getpeername(struct socket *sock)
1309{
1310 return 0;
1311}
1312
1313static inline int security_socket_getsockopt(struct socket *sock,
1314 int level, int optname)
1315{
1316 return 0;
1317}
1318
1319static inline int security_socket_setsockopt(struct socket *sock,
1320 int level, int optname)
1321{
1322 return 0;
1323}
1324
1325static inline int security_socket_shutdown(struct socket *sock, int how)
1326{
1327 return 0;
1328}
1329static inline int security_sock_rcv_skb(struct sock *sk,
1330 struct sk_buff *skb)
1331{
1332 return 0;
1333}
1334
1335static inline int security_socket_getpeersec_stream(struct socket *sock, char __user *optval,
1336 int __user *optlen, unsigned len)
1337{
1338 return -ENOPROTOOPT;
1339}
1340
1341static inline int security_socket_getpeersec_dgram(struct socket *sock, struct sk_buff *skb, u32 *secid)
1342{
1343 return -ENOPROTOOPT;
1344}
1345
1346static inline int security_sk_alloc(struct sock *sk, int family, gfp_t priority)
1347{
1348 return 0;
1349}
1350
1351static inline void security_sk_free(struct sock *sk)
1352{
1353}
1354
1355static inline void security_sk_clone(const struct sock *sk, struct sock *newsk)
1356{
1357}
1358
1359static inline void security_sk_classify_flow(struct sock *sk, struct flowi *fl)
1360{
1361}
1362
1363static inline void security_req_classify_flow(const struct request_sock *req, struct flowi *fl)
1364{
1365}
1366
1367static inline void security_sock_graft(struct sock *sk, struct socket *parent)
1368{
1369}
1370
1371static inline int security_inet_conn_request(struct sock *sk,
1372 struct sk_buff *skb, struct request_sock *req)
1373{
1374 return 0;
1375}
1376
1377static inline void security_inet_csk_clone(struct sock *newsk,
1378 const struct request_sock *req)
1379{
1380}
1381
1382static inline void security_inet_conn_established(struct sock *sk,
1383 struct sk_buff *skb)
1384{
1385}
1386
1387static inline int security_secmark_relabel_packet(u32 secid)
1388{
1389 return 0;
1390}
1391
1392static inline void security_secmark_refcount_inc(void)
1393{
1394}
1395
1396static inline void security_secmark_refcount_dec(void)
1397{
1398}
1399
1400static inline int security_tun_dev_alloc_security(void **security)
1401{
1402 return 0;
1403}
1404
1405static inline void security_tun_dev_free_security(void *security)
1406{
1407}
1408
1409static inline int security_tun_dev_create(void)
1410{
1411 return 0;
1412}
1413
1414static inline int security_tun_dev_attach_queue(void *security)
1415{
1416 return 0;
1417}
1418
1419static inline int security_tun_dev_attach(struct sock *sk, void *security)
1420{
1421 return 0;
1422}
1423
1424static inline int security_tun_dev_open(void *security)
1425{
1426 return 0;
1427}
1428
1429static inline int security_sctp_assoc_request(struct sctp_endpoint *ep,
1430 struct sk_buff *skb)
1431{
1432 return 0;
1433}
1434
1435static inline int security_sctp_bind_connect(struct sock *sk, int optname,
1436 struct sockaddr *address,
1437 int addrlen)
1438{
1439 return 0;
1440}
1441
1442static inline void security_sctp_sk_clone(struct sctp_endpoint *ep,
1443 struct sock *sk,
1444 struct sock *newsk)
1445{
1446}
1447#endif
1448
1449#ifdef CONFIG_SECURITY_INFINIBAND
1450int security_ib_pkey_access(void *sec, u64 subnet_prefix, u16 pkey);
1451int security_ib_endport_manage_subnet(void *sec, const char *name, u8 port_num);
1452int security_ib_alloc_security(void **sec);
1453void security_ib_free_security(void *sec);
1454#else
1455static inline int security_ib_pkey_access(void *sec, u64 subnet_prefix, u16 pkey)
1456{
1457 return 0;
1458}
1459
1460static inline int security_ib_endport_manage_subnet(void *sec, const char *dev_name, u8 port_num)
1461{
1462 return 0;
1463}
1464
1465static inline int security_ib_alloc_security(void **sec)
1466{
1467 return 0;
1468}
1469
1470static inline void security_ib_free_security(void *sec)
1471{
1472}
1473#endif
1474
1475#ifdef CONFIG_SECURITY_NETWORK_XFRM
1476
1477int security_xfrm_policy_alloc(struct xfrm_sec_ctx **ctxp,
1478 struct xfrm_user_sec_ctx *sec_ctx, gfp_t gfp);
1479int security_xfrm_policy_clone(struct xfrm_sec_ctx *old_ctx, struct xfrm_sec_ctx **new_ctxp);
1480void security_xfrm_policy_free(struct xfrm_sec_ctx *ctx);
1481int security_xfrm_policy_delete(struct xfrm_sec_ctx *ctx);
1482int security_xfrm_state_alloc(struct xfrm_state *x, struct xfrm_user_sec_ctx *sec_ctx);
1483int security_xfrm_state_alloc_acquire(struct xfrm_state *x,
1484 struct xfrm_sec_ctx *polsec, u32 secid);
1485int security_xfrm_state_delete(struct xfrm_state *x);
1486void security_xfrm_state_free(struct xfrm_state *x);
1487int security_xfrm_policy_lookup(struct xfrm_sec_ctx *ctx, u32 fl_secid, u8 dir);
1488int security_xfrm_state_pol_flow_match(struct xfrm_state *x,
1489 struct xfrm_policy *xp,
1490 const struct flowi *fl);
1491int security_xfrm_decode_session(struct sk_buff *skb, u32 *secid);
1492void security_skb_classify_flow(struct sk_buff *skb, struct flowi *fl);
1493
1494#else
1495
1496static inline int security_xfrm_policy_alloc(struct xfrm_sec_ctx **ctxp,
1497 struct xfrm_user_sec_ctx *sec_ctx,
1498 gfp_t gfp)
1499{
1500 return 0;
1501}
1502
1503static inline int security_xfrm_policy_clone(struct xfrm_sec_ctx *old, struct xfrm_sec_ctx **new_ctxp)
1504{
1505 return 0;
1506}
1507
1508static inline void security_xfrm_policy_free(struct xfrm_sec_ctx *ctx)
1509{
1510}
1511
1512static inline int security_xfrm_policy_delete(struct xfrm_sec_ctx *ctx)
1513{
1514 return 0;
1515}
1516
1517static inline int security_xfrm_state_alloc(struct xfrm_state *x,
1518 struct xfrm_user_sec_ctx *sec_ctx)
1519{
1520 return 0;
1521}
1522
1523static inline int security_xfrm_state_alloc_acquire(struct xfrm_state *x,
1524 struct xfrm_sec_ctx *polsec, u32 secid)
1525{
1526 return 0;
1527}
1528
1529static inline void security_xfrm_state_free(struct xfrm_state *x)
1530{
1531}
1532
1533static inline int security_xfrm_state_delete(struct xfrm_state *x)
1534{
1535 return 0;
1536}
1537
1538static inline int security_xfrm_policy_lookup(struct xfrm_sec_ctx *ctx, u32 fl_secid, u8 dir)
1539{
1540 return 0;
1541}
1542
1543static inline int security_xfrm_state_pol_flow_match(struct xfrm_state *x,
1544 struct xfrm_policy *xp, const struct flowi *fl)
1545{
1546 return 1;
1547}
1548
1549static inline int security_xfrm_decode_session(struct sk_buff *skb, u32 *secid)
1550{
1551 return 0;
1552}
1553
1554static inline void security_skb_classify_flow(struct sk_buff *skb, struct flowi *fl)
1555{
1556}
1557
1558#endif
1559
1560#ifdef CONFIG_SECURITY_PATH
1561int security_path_unlink(const struct path *dir, struct dentry *dentry);
1562int security_path_mkdir(const struct path *dir, struct dentry *dentry, umode_t mode);
1563int security_path_rmdir(const struct path *dir, struct dentry *dentry);
1564int security_path_mknod(const struct path *dir, struct dentry *dentry, umode_t mode,
1565 unsigned int dev);
1566int security_path_truncate(const struct path *path);
1567int security_path_symlink(const struct path *dir, struct dentry *dentry,
1568 const char *old_name);
1569int security_path_link(struct dentry *old_dentry, const struct path *new_dir,
1570 struct dentry *new_dentry);
1571int security_path_rename(const struct path *old_dir, struct dentry *old_dentry,
1572 const struct path *new_dir, struct dentry *new_dentry,
1573 unsigned int flags);
1574int security_path_chmod(const struct path *path, umode_t mode);
1575int security_path_chown(const struct path *path, kuid_t uid, kgid_t gid);
1576int security_path_chroot(const struct path *path);
1577#else
1578static inline int security_path_unlink(const struct path *dir, struct dentry *dentry)
1579{
1580 return 0;
1581}
1582
1583static inline int security_path_mkdir(const struct path *dir, struct dentry *dentry,
1584 umode_t mode)
1585{
1586 return 0;
1587}
1588
1589static inline int security_path_rmdir(const struct path *dir, struct dentry *dentry)
1590{
1591 return 0;
1592}
1593
1594static inline int security_path_mknod(const struct path *dir, struct dentry *dentry,
1595 umode_t mode, unsigned int dev)
1596{
1597 return 0;
1598}
1599
1600static inline int security_path_truncate(const struct path *path)
1601{
1602 return 0;
1603}
1604
1605static inline int security_path_symlink(const struct path *dir, struct dentry *dentry,
1606 const char *old_name)
1607{
1608 return 0;
1609}
1610
1611static inline int security_path_link(struct dentry *old_dentry,
1612 const struct path *new_dir,
1613 struct dentry *new_dentry)
1614{
1615 return 0;
1616}
1617
1618static inline int security_path_rename(const struct path *old_dir,
1619 struct dentry *old_dentry,
1620 const struct path *new_dir,
1621 struct dentry *new_dentry,
1622 unsigned int flags)
1623{
1624 return 0;
1625}
1626
1627static inline int security_path_chmod(const struct path *path, umode_t mode)
1628{
1629 return 0;
1630}
1631
1632static inline int security_path_chown(const struct path *path, kuid_t uid, kgid_t gid)
1633{
1634 return 0;
1635}
1636
1637static inline int security_path_chroot(const struct path *path)
1638{
1639 return 0;
1640}
1641#endif
1642
1643#ifdef CONFIG_KEYS
1644#ifdef CONFIG_SECURITY
1645
1646int security_key_alloc(struct key *key, const struct cred *cred, unsigned long flags);
1647void security_key_free(struct key *key);
1648int security_key_permission(key_ref_t key_ref,
1649 const struct cred *cred, unsigned perm);
1650int security_key_getsecurity(struct key *key, char **_buffer);
1651
1652#else
1653
1654static inline int security_key_alloc(struct key *key,
1655 const struct cred *cred,
1656 unsigned long flags)
1657{
1658 return 0;
1659}
1660
1661static inline void security_key_free(struct key *key)
1662{
1663}
1664
1665static inline int security_key_permission(key_ref_t key_ref,
1666 const struct cred *cred,
1667 unsigned perm)
1668{
1669 return 0;
1670}
1671
1672static inline int security_key_getsecurity(struct key *key, char **_buffer)
1673{
1674 *_buffer = NULL;
1675 return 0;
1676}
1677
1678#endif
1679#endif
1680
1681#ifdef CONFIG_AUDIT
1682#ifdef CONFIG_SECURITY
1683int security_audit_rule_init(u32 field, u32 op, char *rulestr, void **lsmrule);
1684int security_audit_rule_known(struct audit_krule *krule);
1685int security_audit_rule_match(u32 secid, u32 field, u32 op, void *lsmrule,
1686 struct audit_context *actx);
1687void security_audit_rule_free(void *lsmrule);
1688
1689#else
1690
1691static inline int security_audit_rule_init(u32 field, u32 op, char *rulestr,
1692 void **lsmrule)
1693{
1694 return 0;
1695}
1696
1697static inline int security_audit_rule_known(struct audit_krule *krule)
1698{
1699 return 0;
1700}
1701
1702static inline int security_audit_rule_match(u32 secid, u32 field, u32 op,
1703 void *lsmrule, struct audit_context *actx)
1704{
1705 return 0;
1706}
1707
1708static inline void security_audit_rule_free(void *lsmrule)
1709{ }
1710
1711#endif
1712#endif
1713
1714#ifdef CONFIG_SECURITYFS
1715
1716extern struct dentry *securityfs_create_file(const char *name, umode_t mode,
1717 struct dentry *parent, void *data,
1718 const struct file_operations *fops);
1719extern struct dentry *securityfs_create_dir(const char *name, struct dentry *parent);
1720struct dentry *securityfs_create_symlink(const char *name,
1721 struct dentry *parent,
1722 const char *target,
1723 const struct inode_operations *iops);
1724extern void securityfs_remove(struct dentry *dentry);
1725
1726#else
1727
1728static inline struct dentry *securityfs_create_dir(const char *name,
1729 struct dentry *parent)
1730{
1731 return ERR_PTR(-ENODEV);
1732}
1733
1734static inline struct dentry *securityfs_create_file(const char *name,
1735 umode_t mode,
1736 struct dentry *parent,
1737 void *data,
1738 const struct file_operations *fops)
1739{
1740 return ERR_PTR(-ENODEV);
1741}
1742
1743static inline struct dentry *securityfs_create_symlink(const char *name,
1744 struct dentry *parent,
1745 const char *target,
1746 const struct inode_operations *iops)
1747{
1748 return ERR_PTR(-ENODEV);
1749}
1750
1751static inline void securityfs_remove(struct dentry *dentry)
1752{}
1753
1754#endif
1755
1756#ifdef CONFIG_BPF_SYSCALL
1757union bpf_attr;
1758struct bpf_map;
1759struct bpf_prog;
1760struct bpf_prog_aux;
1761#ifdef CONFIG_SECURITY
1762extern int security_bpf(int cmd, union bpf_attr *attr, unsigned int size);
1763extern int security_bpf_map(struct bpf_map *map, fmode_t fmode);
1764extern int security_bpf_prog(struct bpf_prog *prog);
1765extern int security_bpf_map_alloc(struct bpf_map *map);
1766extern void security_bpf_map_free(struct bpf_map *map);
1767extern int security_bpf_prog_alloc(struct bpf_prog_aux *aux);
1768extern void security_bpf_prog_free(struct bpf_prog_aux *aux);
1769#else
1770static inline int security_bpf(int cmd, union bpf_attr *attr,
1771 unsigned int size)
1772{
1773 return 0;
1774}
1775
1776static inline int security_bpf_map(struct bpf_map *map, fmode_t fmode)
1777{
1778 return 0;
1779}
1780
1781static inline int security_bpf_prog(struct bpf_prog *prog)
1782{
1783 return 0;
1784}
1785
1786static inline int security_bpf_map_alloc(struct bpf_map *map)
1787{
1788 return 0;
1789}
1790
1791static inline void security_bpf_map_free(struct bpf_map *map)
1792{ }
1793
1794static inline int security_bpf_prog_alloc(struct bpf_prog_aux *aux)
1795{
1796 return 0;
1797}
1798
1799static inline void security_bpf_prog_free(struct bpf_prog_aux *aux)
1800{ }
1801#endif
1802#endif
1803
1804#ifdef CONFIG_SECURITY
1805
1806static inline char *alloc_secdata(void)
1807{
1808 return (char *)get_zeroed_page(GFP_KERNEL);
1809}
1810
1811static inline void free_secdata(void *secdata)
1812{
1813 free_page((unsigned long)secdata);
1814}
1815
1816#else
1817
1818static inline char *alloc_secdata(void)
1819{
1820 return (char *)1;
1821}
1822
1823static inline void free_secdata(void *secdata)
1824{ }
1825#endif
1826
1827#endif
1828
1829
