1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23#ifndef __LINUX_SECURITY_H
24#define __LINUX_SECURITY_H
25
26#include <linux/key.h>
27#include <linux/capability.h>
28#include <linux/fs.h>
29#include <linux/slab.h>
30#include <linux/err.h>
31#include <linux/string.h>
32#include <linux/mm.h>
33#include <linux/fs.h>
34
35struct linux_binprm;
36struct cred;
37struct rlimit;
38struct kernel_siginfo;
39struct sembuf;
40struct kern_ipc_perm;
41struct audit_context;
42struct super_block;
43struct inode;
44struct dentry;
45struct file;
46struct vfsmount;
47struct path;
48struct qstr;
49struct iattr;
50struct fown_struct;
51struct file_operations;
52struct msg_msg;
53struct xattr;
54struct kernfs_node;
55struct xfrm_sec_ctx;
56struct mm_struct;
57struct fs_context;
58struct fs_parameter;
59enum fs_value_type;
60
61
62#define CAP_OPT_NONE 0x0
63
64#define CAP_OPT_NOAUDIT BIT(1)
65
66#define CAP_OPT_INSETID BIT(2)
67
68
69#define SECURITY_LSM_NATIVE_LABELS 1
70
71struct ctl_table;
72struct audit_krule;
73struct user_namespace;
74struct timezone;
75
76enum lsm_event {
77 LSM_POLICY_CHANGE,
78};
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104enum lockdown_reason {
105 LOCKDOWN_NONE,
106 LOCKDOWN_MODULE_SIGNATURE,
107 LOCKDOWN_DEV_MEM,
108 LOCKDOWN_EFI_TEST,
109 LOCKDOWN_KEXEC,
110 LOCKDOWN_HIBERNATION,
111 LOCKDOWN_PCI_ACCESS,
112 LOCKDOWN_IOPORT,
113 LOCKDOWN_MSR,
114 LOCKDOWN_ACPI_TABLES,
115 LOCKDOWN_PCMCIA_CIS,
116 LOCKDOWN_TIOCSSERIAL,
117 LOCKDOWN_MODULE_PARAMETERS,
118 LOCKDOWN_MMIOTRACE,
119 LOCKDOWN_DEBUGFS,
120 LOCKDOWN_XMON_WR,
121 LOCKDOWN_INTEGRITY_MAX,
122 LOCKDOWN_KCORE,
123 LOCKDOWN_KPROBES,
124 LOCKDOWN_BPF_READ,
125 LOCKDOWN_PERF,
126 LOCKDOWN_TRACEFS,
127 LOCKDOWN_XMON_RW,
128 LOCKDOWN_CONFIDENTIALITY_MAX,
129};
130
131
132extern int cap_capable(const struct cred *cred, struct user_namespace *ns,
133 int cap, unsigned int opts);
134extern int cap_settime(const struct timespec64 *ts, const struct timezone *tz);
135extern int cap_ptrace_access_check(struct task_struct *child, unsigned int mode);
136extern int cap_ptrace_traceme(struct task_struct *parent);
137extern int cap_capget(struct task_struct *target, kernel_cap_t *effective, kernel_cap_t *inheritable, kernel_cap_t *permitted);
138extern int cap_capset(struct cred *new, const struct cred *old,
139 const kernel_cap_t *effective,
140 const kernel_cap_t *inheritable,
141 const kernel_cap_t *permitted);
142extern int cap_bprm_set_creds(struct linux_binprm *bprm);
143extern int cap_inode_setxattr(struct dentry *dentry, const char *name,
144 const void *value, size_t size, int flags);
145extern int cap_inode_removexattr(struct dentry *dentry, const char *name);
146extern int cap_inode_need_killpriv(struct dentry *dentry);
147extern int cap_inode_killpriv(struct dentry *dentry);
148extern int cap_inode_getsecurity(struct inode *inode, const char *name,
149 void **buffer, bool alloc);
150extern int cap_mmap_addr(unsigned long addr);
151extern int cap_mmap_file(struct file *file, unsigned long reqprot,
152 unsigned long prot, unsigned long flags);
153extern int cap_task_fix_setuid(struct cred *new, const struct cred *old, int flags);
154extern int cap_task_prctl(int option, unsigned long arg2, unsigned long arg3,
155 unsigned long arg4, unsigned long arg5);
156extern int cap_task_setscheduler(struct task_struct *p);
157extern int cap_task_setioprio(struct task_struct *p, int ioprio);
158extern int cap_task_setnice(struct task_struct *p, int nice);
159extern int cap_vm_enough_memory(struct mm_struct *mm, long pages);
160
161struct msghdr;
162struct sk_buff;
163struct sock;
164struct sockaddr;
165struct socket;
166struct flowi;
167struct dst_entry;
168struct xfrm_selector;
169struct xfrm_policy;
170struct xfrm_state;
171struct xfrm_user_sec_ctx;
172struct seq_file;
173struct sctp_endpoint;
174
175#ifdef CONFIG_MMU
176extern unsigned long mmap_min_addr;
177extern unsigned long dac_mmap_min_addr;
178#else
179#define mmap_min_addr 0UL
180#define dac_mmap_min_addr 0UL
181#endif
182
183
184
185
186
187#define LSM_SETID_ID 1
188
189
190#define LSM_SETID_RE 2
191
192
193#define LSM_SETID_RES 4
194
195
196#define LSM_SETID_FS 8
197
198
199#define LSM_PRLIMIT_READ 1
200#define LSM_PRLIMIT_WRITE 2
201
202
203struct sched_param;
204struct request_sock;
205
206
207#define LSM_UNSAFE_SHARE 1
208#define LSM_UNSAFE_PTRACE 2
209#define LSM_UNSAFE_NO_NEW_PRIVS 4
210
211#ifdef CONFIG_MMU
212extern int mmap_min_addr_handler(struct ctl_table *table, int write,
213 void __user *buffer, size_t *lenp, loff_t *ppos);
214#endif
215
216
217typedef int (*initxattrs) (struct inode *inode,
218 const struct xattr *xattr_array, void *fs_data);
219
220
221
222#define __data_id_enumify(ENUM, dummy) LOADING_ ## ENUM,
223#define __data_id_stringify(dummy, str) #str,
224
225enum kernel_load_data_id {
226 __kernel_read_file_id(__data_id_enumify)
227};
228
229static const char * const kernel_load_data_str[] = {
230 __kernel_read_file_id(__data_id_stringify)
231};
232
233static inline const char *kernel_load_data_id_str(enum kernel_load_data_id id)
234{
235 if ((unsigned)id >= LOADING_MAX_ID)
236 return kernel_load_data_str[LOADING_UNKNOWN];
237
238 return kernel_load_data_str[id];
239}
240
241#ifdef CONFIG_SECURITY
242
243int call_blocking_lsm_notifier(enum lsm_event event, void *data);
244int register_blocking_lsm_notifier(struct notifier_block *nb);
245int unregister_blocking_lsm_notifier(struct notifier_block *nb);
246
247
248extern int security_init(void);
249extern int early_security_init(void);
250
251
252int security_binder_set_context_mgr(struct task_struct *mgr);
253int security_binder_transaction(struct task_struct *from,
254 struct task_struct *to);
255int security_binder_transfer_binder(struct task_struct *from,
256 struct task_struct *to);
257int security_binder_transfer_file(struct task_struct *from,
258 struct task_struct *to, struct file *file);
259int security_ptrace_access_check(struct task_struct *child, unsigned int mode);
260int security_ptrace_traceme(struct task_struct *parent);
261int security_capget(struct task_struct *target,
262 kernel_cap_t *effective,
263 kernel_cap_t *inheritable,
264 kernel_cap_t *permitted);
265int security_capset(struct cred *new, const struct cred *old,
266 const kernel_cap_t *effective,
267 const kernel_cap_t *inheritable,
268 const kernel_cap_t *permitted);
269int security_capable(const struct cred *cred,
270 struct user_namespace *ns,
271 int cap,
272 unsigned int opts);
273int security_quotactl(int cmds, int type, int id, struct super_block *sb);
274int security_quota_on(struct dentry *dentry);
275int security_syslog(int type);
276int security_settime64(const struct timespec64 *ts, const struct timezone *tz);
277int security_vm_enough_memory_mm(struct mm_struct *mm, long pages);
278int security_bprm_set_creds(struct linux_binprm *bprm);
279int security_bprm_check(struct linux_binprm *bprm);
280void security_bprm_committing_creds(struct linux_binprm *bprm);
281void security_bprm_committed_creds(struct linux_binprm *bprm);
282int security_fs_context_dup(struct fs_context *fc, struct fs_context *src_fc);
283int security_fs_context_parse_param(struct fs_context *fc, struct fs_parameter *param);
284int security_sb_alloc(struct super_block *sb);
285void security_sb_free(struct super_block *sb);
286void security_free_mnt_opts(void **mnt_opts);
287int security_sb_eat_lsm_opts(char *options, void **mnt_opts);
288int security_sb_remount(struct super_block *sb, void *mnt_opts);
289int security_sb_kern_mount(struct super_block *sb);
290int security_sb_show_options(struct seq_file *m, struct super_block *sb);
291int security_sb_statfs(struct dentry *dentry);
292int security_sb_mount(const char *dev_name, const struct path *path,
293 const char *type, unsigned long flags, void *data);
294int security_sb_umount(struct vfsmount *mnt, int flags);
295int security_sb_pivotroot(const struct path *old_path, const struct path *new_path);
296int security_sb_set_mnt_opts(struct super_block *sb,
297 void *mnt_opts,
298 unsigned long kern_flags,
299 unsigned long *set_kern_flags);
300int security_sb_clone_mnt_opts(const struct super_block *oldsb,
301 struct super_block *newsb,
302 unsigned long kern_flags,
303 unsigned long *set_kern_flags);
304int security_add_mnt_opt(const char *option, const char *val,
305 int len, void **mnt_opts);
306int security_move_mount(const struct path *from_path, const struct path *to_path);
307int security_dentry_init_security(struct dentry *dentry, int mode,
308 const struct qstr *name, void **ctx,
309 u32 *ctxlen);
310int security_dentry_create_files_as(struct dentry *dentry, int mode,
311 struct qstr *name,
312 const struct cred *old,
313 struct cred *new);
314int security_path_notify(const struct path *path, u64 mask,
315 unsigned int obj_type);
316int security_inode_alloc(struct inode *inode);
317void security_inode_free(struct inode *inode);
318int security_inode_init_security(struct inode *inode, struct inode *dir,
319 const struct qstr *qstr,
320 initxattrs initxattrs, void *fs_data);
321int security_old_inode_init_security(struct inode *inode, struct inode *dir,
322 const struct qstr *qstr, const char **name,
323 void **value, size_t *len);
324int security_inode_create(struct inode *dir, struct dentry *dentry, umode_t mode);
325int security_inode_link(struct dentry *old_dentry, struct inode *dir,
326 struct dentry *new_dentry);
327int security_inode_unlink(struct inode *dir, struct dentry *dentry);
328int security_inode_symlink(struct inode *dir, struct dentry *dentry,
329 const char *old_name);
330int security_inode_mkdir(struct inode *dir, struct dentry *dentry, umode_t mode);
331int security_inode_rmdir(struct inode *dir, struct dentry *dentry);
332int security_inode_mknod(struct inode *dir, struct dentry *dentry, umode_t mode, dev_t dev);
333int security_inode_rename(struct inode *old_dir, struct dentry *old_dentry,
334 struct inode *new_dir, struct dentry *new_dentry,
335 unsigned int flags);
336int security_inode_readlink(struct dentry *dentry);
337int security_inode_follow_link(struct dentry *dentry, struct inode *inode,
338 bool rcu);
339int security_inode_permission(struct inode *inode, int mask);
340int security_inode_setattr(struct dentry *dentry, struct iattr *attr);
341int security_inode_getattr(const struct path *path);
342int security_inode_setxattr(struct dentry *dentry, const char *name,
343 const void *value, size_t size, int flags);
344void security_inode_post_setxattr(struct dentry *dentry, const char *name,
345 const void *value, size_t size, int flags);
346int security_inode_getxattr(struct dentry *dentry, const char *name);
347int security_inode_listxattr(struct dentry *dentry);
348int security_inode_removexattr(struct dentry *dentry, const char *name);
349int security_inode_need_killpriv(struct dentry *dentry);
350int security_inode_killpriv(struct dentry *dentry);
351int security_inode_getsecurity(struct inode *inode, const char *name, void **buffer, bool alloc);
352int security_inode_setsecurity(struct inode *inode, const char *name, const void *value, size_t size, int flags);
353int security_inode_listsecurity(struct inode *inode, char *buffer, size_t buffer_size);
354void security_inode_getsecid(struct inode *inode, u32 *secid);
355int security_inode_copy_up(struct dentry *src, struct cred **new);
356int security_inode_copy_up_xattr(const char *name);
357int security_kernfs_init_security(struct kernfs_node *kn_dir,
358 struct kernfs_node *kn);
359int security_file_permission(struct file *file, int mask);
360int security_file_alloc(struct file *file);
361void security_file_free(struct file *file);
362int security_file_ioctl(struct file *file, unsigned int cmd, unsigned long arg);
363int security_mmap_file(struct file *file, unsigned long prot,
364 unsigned long flags);
365int security_mmap_addr(unsigned long addr);
366int security_file_mprotect(struct vm_area_struct *vma, unsigned long reqprot,
367 unsigned long prot);
368int security_file_lock(struct file *file, unsigned int cmd);
369int security_file_fcntl(struct file *file, unsigned int cmd, unsigned long arg);
370void security_file_set_fowner(struct file *file);
371int security_file_send_sigiotask(struct task_struct *tsk,
372 struct fown_struct *fown, int sig);
373int security_file_receive(struct file *file);
374int security_file_open(struct file *file);
375int security_task_alloc(struct task_struct *task, unsigned long clone_flags);
376void security_task_free(struct task_struct *task);
377int security_cred_alloc_blank(struct cred *cred, gfp_t gfp);
378void security_cred_free(struct cred *cred);
379int security_prepare_creds(struct cred *new, const struct cred *old, gfp_t gfp);
380void security_transfer_creds(struct cred *new, const struct cred *old);
381void security_cred_getsecid(const struct cred *c, u32 *secid);
382int security_kernel_act_as(struct cred *new, u32 secid);
383int security_kernel_create_files_as(struct cred *new, struct inode *inode);
384int security_kernel_module_request(char *kmod_name);
385int security_kernel_load_data(enum kernel_load_data_id id);
386int security_kernel_read_file(struct file *file, enum kernel_read_file_id id);
387int security_kernel_post_read_file(struct file *file, char *buf, loff_t size,
388 enum kernel_read_file_id id);
389int security_task_fix_setuid(struct cred *new, const struct cred *old,
390 int flags);
391int security_task_setpgid(struct task_struct *p, pid_t pgid);
392int security_task_getpgid(struct task_struct *p);
393int security_task_getsid(struct task_struct *p);
394void security_task_getsecid(struct task_struct *p, u32 *secid);
395int security_task_setnice(struct task_struct *p, int nice);
396int security_task_setioprio(struct task_struct *p, int ioprio);
397int security_task_getioprio(struct task_struct *p);
398int security_task_prlimit(const struct cred *cred, const struct cred *tcred,
399 unsigned int flags);
400int security_task_setrlimit(struct task_struct *p, unsigned int resource,
401 struct rlimit *new_rlim);
402int security_task_setscheduler(struct task_struct *p);
403int security_task_getscheduler(struct task_struct *p);
404int security_task_movememory(struct task_struct *p);
405int security_task_kill(struct task_struct *p, struct kernel_siginfo *info,
406 int sig, const struct cred *cred);
407int security_task_prctl(int option, unsigned long arg2, unsigned long arg3,
408 unsigned long arg4, unsigned long arg5);
409void security_task_to_inode(struct task_struct *p, struct inode *inode);
410int security_ipc_permission(struct kern_ipc_perm *ipcp, short flag);
411void security_ipc_getsecid(struct kern_ipc_perm *ipcp, u32 *secid);
412int security_msg_msg_alloc(struct msg_msg *msg);
413void security_msg_msg_free(struct msg_msg *msg);
414int security_msg_queue_alloc(struct kern_ipc_perm *msq);
415void security_msg_queue_free(struct kern_ipc_perm *msq);
416int security_msg_queue_associate(struct kern_ipc_perm *msq, int msqflg);
417int security_msg_queue_msgctl(struct kern_ipc_perm *msq, int cmd);
418int security_msg_queue_msgsnd(struct kern_ipc_perm *msq,
419 struct msg_msg *msg, int msqflg);
420int security_msg_queue_msgrcv(struct kern_ipc_perm *msq, struct msg_msg *msg,
421 struct task_struct *target, long type, int mode);
422int security_shm_alloc(struct kern_ipc_perm *shp);
423void security_shm_free(struct kern_ipc_perm *shp);
424int security_shm_associate(struct kern_ipc_perm *shp, int shmflg);
425int security_shm_shmctl(struct kern_ipc_perm *shp, int cmd);
426int security_shm_shmat(struct kern_ipc_perm *shp, char __user *shmaddr, int shmflg);
427int security_sem_alloc(struct kern_ipc_perm *sma);
428void security_sem_free(struct kern_ipc_perm *sma);
429int security_sem_associate(struct kern_ipc_perm *sma, int semflg);
430int security_sem_semctl(struct kern_ipc_perm *sma, int cmd);
431int security_sem_semop(struct kern_ipc_perm *sma, struct sembuf *sops,
432 unsigned nsops, int alter);
433void security_d_instantiate(struct dentry *dentry, struct inode *inode);
434int security_getprocattr(struct task_struct *p, const char *lsm, char *name,
435 char **value);
436int security_setprocattr(const char *lsm, const char *name, void *value,
437 size_t size);
438int security_netlink_send(struct sock *sk, struct sk_buff *skb);
439int security_ismaclabel(const char *name);
440int security_secid_to_secctx(u32 secid, char **secdata, u32 *seclen);
441int security_secctx_to_secid(const char *secdata, u32 seclen, u32 *secid);
442void security_release_secctx(char *secdata, u32 seclen);
443void security_inode_invalidate_secctx(struct inode *inode);
444int security_inode_notifysecctx(struct inode *inode, void *ctx, u32 ctxlen);
445int security_inode_setsecctx(struct dentry *dentry, void *ctx, u32 ctxlen);
446int security_inode_getsecctx(struct inode *inode, void **ctx, u32 *ctxlen);
447int security_locked_down(enum lockdown_reason what);
448#else
449
450static inline int call_blocking_lsm_notifier(enum lsm_event event, void *data)
451{
452 return 0;
453}
454
455static inline int register_blocking_lsm_notifier(struct notifier_block *nb)
456{
457 return 0;
458}
459
460static inline int unregister_blocking_lsm_notifier(struct notifier_block *nb)
461{
462 return 0;
463}
464
465static inline void security_free_mnt_opts(void **mnt_opts)
466{
467}
468
469
470
471
472
473
474static inline int security_init(void)
475{
476 return 0;
477}
478
479static inline int early_security_init(void)
480{
481 return 0;
482}
483
484static inline int security_binder_set_context_mgr(struct task_struct *mgr)
485{
486 return 0;
487}
488
489static inline int security_binder_transaction(struct task_struct *from,
490 struct task_struct *to)
491{
492 return 0;
493}
494
495static inline int security_binder_transfer_binder(struct task_struct *from,
496 struct task_struct *to)
497{
498 return 0;
499}
500
501static inline int security_binder_transfer_file(struct task_struct *from,
502 struct task_struct *to,
503 struct file *file)
504{
505 return 0;
506}
507
508static inline int security_ptrace_access_check(struct task_struct *child,
509 unsigned int mode)
510{
511 return cap_ptrace_access_check(child, mode);
512}
513
514static inline int security_ptrace_traceme(struct task_struct *parent)
515{
516 return cap_ptrace_traceme(parent);
517}
518
519static inline int security_capget(struct task_struct *target,
520 kernel_cap_t *effective,
521 kernel_cap_t *inheritable,
522 kernel_cap_t *permitted)
523{
524 return cap_capget(target, effective, inheritable, permitted);
525}
526
527static inline int security_capset(struct cred *new,
528 const struct cred *old,
529 const kernel_cap_t *effective,
530 const kernel_cap_t *inheritable,
531 const kernel_cap_t *permitted)
532{
533 return cap_capset(new, old, effective, inheritable, permitted);
534}
535
536static inline int security_capable(const struct cred *cred,
537 struct user_namespace *ns,
538 int cap,
539 unsigned int opts)
540{
541 return cap_capable(cred, ns, cap, opts);
542}
543
544static inline int security_quotactl(int cmds, int type, int id,
545 struct super_block *sb)
546{
547 return 0;
548}
549
550static inline int security_quota_on(struct dentry *dentry)
551{
552 return 0;
553}
554
555static inline int security_syslog(int type)
556{
557 return 0;
558}
559
560static inline int security_settime64(const struct timespec64 *ts,
561 const struct timezone *tz)
562{
563 return cap_settime(ts, tz);
564}
565
566static inline int security_vm_enough_memory_mm(struct mm_struct *mm, long pages)
567{
568 return __vm_enough_memory(mm, pages, cap_vm_enough_memory(mm, pages));
569}
570
571static inline int security_bprm_set_creds(struct linux_binprm *bprm)
572{
573 return cap_bprm_set_creds(bprm);
574}
575
576static inline int security_bprm_check(struct linux_binprm *bprm)
577{
578 return 0;
579}
580
581static inline void security_bprm_committing_creds(struct linux_binprm *bprm)
582{
583}
584
585static inline void security_bprm_committed_creds(struct linux_binprm *bprm)
586{
587}
588
589static inline int security_fs_context_dup(struct fs_context *fc,
590 struct fs_context *src_fc)
591{
592 return 0;
593}
594static inline int security_fs_context_parse_param(struct fs_context *fc,
595 struct fs_parameter *param)
596{
597 return -ENOPARAM;
598}
599
600static inline int security_sb_alloc(struct super_block *sb)
601{
602 return 0;
603}
604
605static inline void security_sb_free(struct super_block *sb)
606{ }
607
608static inline int security_sb_eat_lsm_opts(char *options,
609 void **mnt_opts)
610{
611 return 0;
612}
613
614static inline int security_sb_remount(struct super_block *sb,
615 void *mnt_opts)
616{
617 return 0;
618}
619
620static inline int security_sb_kern_mount(struct super_block *sb)
621{
622 return 0;
623}
624
625static inline int security_sb_show_options(struct seq_file *m,
626 struct super_block *sb)
627{
628 return 0;
629}
630
631static inline int security_sb_statfs(struct dentry *dentry)
632{
633 return 0;
634}
635
636static inline int security_sb_mount(const char *dev_name, const struct path *path,
637 const char *type, unsigned long flags,
638 void *data)
639{
640 return 0;
641}
642
643static inline int security_sb_umount(struct vfsmount *mnt, int flags)
644{
645 return 0;
646}
647
648static inline int security_sb_pivotroot(const struct path *old_path,
649 const struct path *new_path)
650{
651 return 0;
652}
653
654static inline int security_sb_set_mnt_opts(struct super_block *sb,
655 void *mnt_opts,
656 unsigned long kern_flags,
657 unsigned long *set_kern_flags)
658{
659 return 0;
660}
661
662static inline int security_sb_clone_mnt_opts(const struct super_block *oldsb,
663 struct super_block *newsb,
664 unsigned long kern_flags,
665 unsigned long *set_kern_flags)
666{
667 return 0;
668}
669
670static inline int security_add_mnt_opt(const char *option, const char *val,
671 int len, void **mnt_opts)
672{
673 return 0;
674}
675
676static inline int security_move_mount(const struct path *from_path,
677 const struct path *to_path)
678{
679 return 0;
680}
681
682static inline int security_path_notify(const struct path *path, u64 mask,
683 unsigned int obj_type)
684{
685 return 0;
686}
687
688static inline int security_inode_alloc(struct inode *inode)
689{
690 return 0;
691}
692
693static inline void security_inode_free(struct inode *inode)
694{ }
695
696static inline int security_dentry_init_security(struct dentry *dentry,
697 int mode,
698 const struct qstr *name,
699 void **ctx,
700 u32 *ctxlen)
701{
702 return -EOPNOTSUPP;
703}
704
705static inline int security_dentry_create_files_as(struct dentry *dentry,
706 int mode, struct qstr *name,
707 const struct cred *old,
708 struct cred *new)
709{
710 return 0;
711}
712
713
714static inline int security_inode_init_security(struct inode *inode,
715 struct inode *dir,
716 const struct qstr *qstr,
717 const initxattrs xattrs,
718 void *fs_data)
719{
720 return 0;
721}
722
723static inline int security_old_inode_init_security(struct inode *inode,
724 struct inode *dir,
725 const struct qstr *qstr,
726 const char **name,
727 void **value, size_t *len)
728{
729 return -EOPNOTSUPP;
730}
731
732static inline int security_inode_create(struct inode *dir,
733 struct dentry *dentry,
734 umode_t mode)
735{
736 return 0;
737}
738
739static inline int security_inode_link(struct dentry *old_dentry,
740 struct inode *dir,
741 struct dentry *new_dentry)
742{
743 return 0;
744}
745
746static inline int security_inode_unlink(struct inode *dir,
747 struct dentry *dentry)
748{
749 return 0;
750}
751
752static inline int security_inode_symlink(struct inode *dir,
753 struct dentry *dentry,
754 const char *old_name)
755{
756 return 0;
757}
758
759static inline int security_inode_mkdir(struct inode *dir,
760 struct dentry *dentry,
761 int mode)
762{
763 return 0;
764}
765
766static inline int security_inode_rmdir(struct inode *dir,
767 struct dentry *dentry)
768{
769 return 0;
770}
771
772static inline int security_inode_mknod(struct inode *dir,
773 struct dentry *dentry,
774 int mode, dev_t dev)
775{
776 return 0;
777}
778
779static inline int security_inode_rename(struct inode *old_dir,
780 struct dentry *old_dentry,
781 struct inode *new_dir,
782 struct dentry *new_dentry,
783 unsigned int flags)
784{
785 return 0;
786}
787
788static inline int security_inode_readlink(struct dentry *dentry)
789{
790 return 0;
791}
792
793static inline int security_inode_follow_link(struct dentry *dentry,
794 struct inode *inode,
795 bool rcu)
796{
797 return 0;
798}
799
800static inline int security_inode_permission(struct inode *inode, int mask)
801{
802 return 0;
803}
804
805static inline int security_inode_setattr(struct dentry *dentry,
806 struct iattr *attr)
807{
808 return 0;
809}
810
811static inline int security_inode_getattr(const struct path *path)
812{
813 return 0;
814}
815
816static inline int security_inode_setxattr(struct dentry *dentry,
817 const char *name, const void *value, size_t size, int flags)
818{
819 return cap_inode_setxattr(dentry, name, value, size, flags);
820}
821
822static inline void security_inode_post_setxattr(struct dentry *dentry,
823 const char *name, const void *value, size_t size, int flags)
824{ }
825
826static inline int security_inode_getxattr(struct dentry *dentry,
827 const char *name)
828{
829 return 0;
830}
831
832static inline int security_inode_listxattr(struct dentry *dentry)
833{
834 return 0;
835}
836
837static inline int security_inode_removexattr(struct dentry *dentry,
838 const char *name)
839{
840 return cap_inode_removexattr(dentry, name);
841}
842
843static inline int security_inode_need_killpriv(struct dentry *dentry)
844{
845 return cap_inode_need_killpriv(dentry);
846}
847
848static inline int security_inode_killpriv(struct dentry *dentry)
849{
850 return cap_inode_killpriv(dentry);
851}
852
853static inline int security_inode_getsecurity(struct inode *inode, const char *name, void **buffer, bool alloc)
854{
855 return -EOPNOTSUPP;
856}
857
858static inline int security_inode_setsecurity(struct inode *inode, const char *name, const void *value, size_t size, int flags)
859{
860 return -EOPNOTSUPP;
861}
862
863static inline int security_inode_listsecurity(struct inode *inode, char *buffer, size_t buffer_size)
864{
865 return 0;
866}
867
868static inline void security_inode_getsecid(struct inode *inode, u32 *secid)
869{
870 *secid = 0;
871}
872
873static inline int security_inode_copy_up(struct dentry *src, struct cred **new)
874{
875 return 0;
876}
877
878static inline int security_kernfs_init_security(struct kernfs_node *kn_dir,
879 struct kernfs_node *kn)
880{
881 return 0;
882}
883
884static inline int security_inode_copy_up_xattr(const char *name)
885{
886 return -EOPNOTSUPP;
887}
888
889static inline int security_file_permission(struct file *file, int mask)
890{
891 return 0;
892}
893
894static inline int security_file_alloc(struct file *file)
895{
896 return 0;
897}
898
899static inline void security_file_free(struct file *file)
900{ }
901
902static inline int security_file_ioctl(struct file *file, unsigned int cmd,
903 unsigned long arg)
904{
905 return 0;
906}
907
908static inline int security_mmap_file(struct file *file, unsigned long prot,
909 unsigned long flags)
910{
911 return 0;
912}
913
914static inline int security_mmap_addr(unsigned long addr)
915{
916 return cap_mmap_addr(addr);
917}
918
919static inline int security_file_mprotect(struct vm_area_struct *vma,
920 unsigned long reqprot,
921 unsigned long prot)
922{
923 return 0;
924}
925
926static inline int security_file_lock(struct file *file, unsigned int cmd)
927{
928 return 0;
929}
930
931static inline int security_file_fcntl(struct file *file, unsigned int cmd,
932 unsigned long arg)
933{
934 return 0;
935}
936
937static inline void security_file_set_fowner(struct file *file)
938{
939 return;
940}
941
942static inline int security_file_send_sigiotask(struct task_struct *tsk,
943 struct fown_struct *fown,
944 int sig)
945{
946 return 0;
947}
948
949static inline int security_file_receive(struct file *file)
950{
951 return 0;
952}
953
954static inline int security_file_open(struct file *file)
955{
956 return 0;
957}
958
959static inline int security_task_alloc(struct task_struct *task,
960 unsigned long clone_flags)
961{
962 return 0;
963}
964
965static inline void security_task_free(struct task_struct *task)
966{ }
967
968static inline int security_cred_alloc_blank(struct cred *cred, gfp_t gfp)
969{
970 return 0;
971}
972
973static inline void security_cred_free(struct cred *cred)
974{ }
975
976static inline int security_prepare_creds(struct cred *new,
977 const struct cred *old,
978 gfp_t gfp)
979{
980 return 0;
981}
982
983static inline void security_transfer_creds(struct cred *new,
984 const struct cred *old)
985{
986}
987
988static inline int security_kernel_act_as(struct cred *cred, u32 secid)
989{
990 return 0;
991}
992
993static inline int security_kernel_create_files_as(struct cred *cred,
994 struct inode *inode)
995{
996 return 0;
997}
998
999static inline int security_kernel_module_request(char *kmod_name)
1000{
1001 return 0;
1002}
1003
1004static inline int security_kernel_load_data(enum kernel_load_data_id id)
1005{
1006 return 0;
1007}
1008
1009static inline int security_kernel_read_file(struct file *file,
1010 enum kernel_read_file_id id)
1011{
1012 return 0;
1013}
1014
1015static inline int security_kernel_post_read_file(struct file *file,
1016 char *buf, loff_t size,
1017 enum kernel_read_file_id id)
1018{
1019 return 0;
1020}
1021
1022static inline int security_task_fix_setuid(struct cred *new,
1023 const struct cred *old,
1024 int flags)
1025{
1026 return cap_task_fix_setuid(new, old, flags);
1027}
1028
1029static inline int security_task_setpgid(struct task_struct *p, pid_t pgid)
1030{
1031 return 0;
1032}
1033
1034static inline int security_task_getpgid(struct task_struct *p)
1035{
1036 return 0;
1037}
1038
1039static inline int security_task_getsid(struct task_struct *p)
1040{
1041 return 0;
1042}
1043
1044static inline void security_task_getsecid(struct task_struct *p, u32 *secid)
1045{
1046 *secid = 0;
1047}
1048
1049static inline int security_task_setnice(struct task_struct *p, int nice)
1050{
1051 return cap_task_setnice(p, nice);
1052}
1053
1054static inline int security_task_setioprio(struct task_struct *p, int ioprio)
1055{
1056 return cap_task_setioprio(p, ioprio);
1057}
1058
1059static inline int security_task_getioprio(struct task_struct *p)
1060{
1061 return 0;
1062}
1063
1064static inline int security_task_prlimit(const struct cred *cred,
1065 const struct cred *tcred,
1066 unsigned int flags)
1067{
1068 return 0;
1069}
1070
1071static inline int security_task_setrlimit(struct task_struct *p,
1072 unsigned int resource,
1073 struct rlimit *new_rlim)
1074{
1075 return 0;
1076}
1077
1078static inline int security_task_setscheduler(struct task_struct *p)
1079{
1080 return cap_task_setscheduler(p);
1081}
1082
1083static inline int security_task_getscheduler(struct task_struct *p)
1084{
1085 return 0;
1086}
1087
1088static inline int security_task_movememory(struct task_struct *p)
1089{
1090 return 0;
1091}
1092
1093static inline int security_task_kill(struct task_struct *p,
1094 struct kernel_siginfo *info, int sig,
1095 const struct cred *cred)
1096{
1097 return 0;
1098}
1099
1100static inline int security_task_prctl(int option, unsigned long arg2,
1101 unsigned long arg3,
1102 unsigned long arg4,
1103 unsigned long arg5)
1104{
1105 return cap_task_prctl(option, arg2, arg3, arg4, arg5);
1106}
1107
1108static inline void security_task_to_inode(struct task_struct *p, struct inode *inode)
1109{ }
1110
1111static inline int security_ipc_permission(struct kern_ipc_perm *ipcp,
1112 short flag)
1113{
1114 return 0;
1115}
1116
1117static inline void security_ipc_getsecid(struct kern_ipc_perm *ipcp, u32 *secid)
1118{
1119 *secid = 0;
1120}
1121
1122static inline int security_msg_msg_alloc(struct msg_msg *msg)
1123{
1124 return 0;
1125}
1126
1127static inline void security_msg_msg_free(struct msg_msg *msg)
1128{ }
1129
1130static inline int security_msg_queue_alloc(struct kern_ipc_perm *msq)
1131{
1132 return 0;
1133}
1134
1135static inline void security_msg_queue_free(struct kern_ipc_perm *msq)
1136{ }
1137
1138static inline int security_msg_queue_associate(struct kern_ipc_perm *msq,
1139 int msqflg)
1140{
1141 return 0;
1142}
1143
1144static inline int security_msg_queue_msgctl(struct kern_ipc_perm *msq, int cmd)
1145{
1146 return 0;
1147}
1148
1149static inline int security_msg_queue_msgsnd(struct kern_ipc_perm *msq,
1150 struct msg_msg *msg, int msqflg)
1151{
1152 return 0;
1153}
1154
1155static inline int security_msg_queue_msgrcv(struct kern_ipc_perm *msq,
1156 struct msg_msg *msg,
1157 struct task_struct *target,
1158 long type, int mode)
1159{
1160 return 0;
1161}
1162
1163static inline int security_shm_alloc(struct kern_ipc_perm *shp)
1164{
1165 return 0;
1166}
1167
1168static inline void security_shm_free(struct kern_ipc_perm *shp)
1169{ }
1170
1171static inline int security_shm_associate(struct kern_ipc_perm *shp,
1172 int shmflg)
1173{
1174 return 0;
1175}
1176
1177static inline int security_shm_shmctl(struct kern_ipc_perm *shp, int cmd)
1178{
1179 return 0;
1180}
1181
1182static inline int security_shm_shmat(struct kern_ipc_perm *shp,
1183 char __user *shmaddr, int shmflg)
1184{
1185 return 0;
1186}
1187
1188static inline int security_sem_alloc(struct kern_ipc_perm *sma)
1189{
1190 return 0;
1191}
1192
1193static inline void security_sem_free(struct kern_ipc_perm *sma)
1194{ }
1195
1196static inline int security_sem_associate(struct kern_ipc_perm *sma, int semflg)
1197{
1198 return 0;
1199}
1200
1201static inline int security_sem_semctl(struct kern_ipc_perm *sma, int cmd)
1202{
1203 return 0;
1204}
1205
1206static inline int security_sem_semop(struct kern_ipc_perm *sma,
1207 struct sembuf *sops, unsigned nsops,
1208 int alter)
1209{
1210 return 0;
1211}
1212
1213static inline void security_d_instantiate(struct dentry *dentry,
1214 struct inode *inode)
1215{ }
1216
1217static inline int security_getprocattr(struct task_struct *p, const char *lsm,
1218 char *name, char **value)
1219{
1220 return -EINVAL;
1221}
1222
1223static inline int security_setprocattr(const char *lsm, char *name,
1224 void *value, size_t size)
1225{
1226 return -EINVAL;
1227}
1228
1229static inline int security_netlink_send(struct sock *sk, struct sk_buff *skb)
1230{
1231 return 0;
1232}
1233
1234static inline int security_ismaclabel(const char *name)
1235{
1236 return 0;
1237}
1238
1239static inline int security_secid_to_secctx(u32 secid, char **secdata, u32 *seclen)
1240{
1241 return -EOPNOTSUPP;
1242}
1243
1244static inline int security_secctx_to_secid(const char *secdata,
1245 u32 seclen,
1246 u32 *secid)
1247{
1248 return -EOPNOTSUPP;
1249}
1250
1251static inline void security_release_secctx(char *secdata, u32 seclen)
1252{
1253}
1254
1255static inline void security_inode_invalidate_secctx(struct inode *inode)
1256{
1257}
1258
1259static inline int security_inode_notifysecctx(struct inode *inode, void *ctx, u32 ctxlen)
1260{
1261 return -EOPNOTSUPP;
1262}
1263static inline int security_inode_setsecctx(struct dentry *dentry, void *ctx, u32 ctxlen)
1264{
1265 return -EOPNOTSUPP;
1266}
1267static inline int security_inode_getsecctx(struct inode *inode, void **ctx, u32 *ctxlen)
1268{
1269 return -EOPNOTSUPP;
1270}
1271static inline int security_locked_down(enum lockdown_reason what)
1272{
1273 return 0;
1274}
1275#endif
1276
1277#ifdef CONFIG_SECURITY_NETWORK
1278
1279int security_unix_stream_connect(struct sock *sock, struct sock *other, struct sock *newsk);
1280int security_unix_may_send(struct socket *sock, struct socket *other);
1281int security_socket_create(int family, int type, int protocol, int kern);
1282int security_socket_post_create(struct socket *sock, int family,
1283 int type, int protocol, int kern);
1284int security_socket_socketpair(struct socket *socka, struct socket *sockb);
1285int security_socket_bind(struct socket *sock, struct sockaddr *address, int addrlen);
1286int security_socket_connect(struct socket *sock, struct sockaddr *address, int addrlen);
1287int security_socket_listen(struct socket *sock, int backlog);
1288int security_socket_accept(struct socket *sock, struct socket *newsock);
1289int security_socket_sendmsg(struct socket *sock, struct msghdr *msg, int size);
1290int security_socket_recvmsg(struct socket *sock, struct msghdr *msg,
1291 int size, int flags);
1292int security_socket_getsockname(struct socket *sock);
1293int security_socket_getpeername(struct socket *sock);
1294int security_socket_getsockopt(struct socket *sock, int level, int optname);
1295int security_socket_setsockopt(struct socket *sock, int level, int optname);
1296int security_socket_shutdown(struct socket *sock, int how);
1297int security_sock_rcv_skb(struct sock *sk, struct sk_buff *skb);
1298int security_socket_getpeersec_stream(struct socket *sock, char __user *optval,
1299 int __user *optlen, unsigned len);
1300int security_socket_getpeersec_dgram(struct socket *sock, struct sk_buff *skb, u32 *secid);
1301int security_sk_alloc(struct sock *sk, int family, gfp_t priority);
1302void security_sk_free(struct sock *sk);
1303void security_sk_clone(const struct sock *sk, struct sock *newsk);
1304void security_sk_classify_flow(struct sock *sk, struct flowi *fl);
1305void security_req_classify_flow(const struct request_sock *req, struct flowi *fl);
1306void security_sock_graft(struct sock*sk, struct socket *parent);
1307int security_inet_conn_request(struct sock *sk,
1308 struct sk_buff *skb, struct request_sock *req);
1309void security_inet_csk_clone(struct sock *newsk,
1310 const struct request_sock *req);
1311void security_inet_conn_established(struct sock *sk,
1312 struct sk_buff *skb);
1313int security_secmark_relabel_packet(u32 secid);
1314void security_secmark_refcount_inc(void);
1315void security_secmark_refcount_dec(void);
1316int security_tun_dev_alloc_security(void **security);
1317void security_tun_dev_free_security(void *security);
1318int security_tun_dev_create(void);
1319int security_tun_dev_attach_queue(void *security);
1320int security_tun_dev_attach(struct sock *sk, void *security);
1321int security_tun_dev_open(void *security);
1322int security_sctp_assoc_request(struct sctp_endpoint *ep, struct sk_buff *skb);
1323int security_sctp_bind_connect(struct sock *sk, int optname,
1324 struct sockaddr *address, int addrlen);
1325void security_sctp_sk_clone(struct sctp_endpoint *ep, struct sock *sk,
1326 struct sock *newsk);
1327
1328#else
1329static inline int security_unix_stream_connect(struct sock *sock,
1330 struct sock *other,
1331 struct sock *newsk)
1332{
1333 return 0;
1334}
1335
1336static inline int security_unix_may_send(struct socket *sock,
1337 struct socket *other)
1338{
1339 return 0;
1340}
1341
1342static inline int security_socket_create(int family, int type,
1343 int protocol, int kern)
1344{
1345 return 0;
1346}
1347
1348static inline int security_socket_post_create(struct socket *sock,
1349 int family,
1350 int type,
1351 int protocol, int kern)
1352{
1353 return 0;
1354}
1355
1356static inline int security_socket_socketpair(struct socket *socka,
1357 struct socket *sockb)
1358{
1359 return 0;
1360}
1361
1362static inline int security_socket_bind(struct socket *sock,
1363 struct sockaddr *address,
1364 int addrlen)
1365{
1366 return 0;
1367}
1368
1369static inline int security_socket_connect(struct socket *sock,
1370 struct sockaddr *address,
1371 int addrlen)
1372{
1373 return 0;
1374}
1375
1376static inline int security_socket_listen(struct socket *sock, int backlog)
1377{
1378 return 0;
1379}
1380
1381static inline int security_socket_accept(struct socket *sock,
1382 struct socket *newsock)
1383{
1384 return 0;
1385}
1386
1387static inline int security_socket_sendmsg(struct socket *sock,
1388 struct msghdr *msg, int size)
1389{
1390 return 0;
1391}
1392
1393static inline int security_socket_recvmsg(struct socket *sock,
1394 struct msghdr *msg, int size,
1395 int flags)
1396{
1397 return 0;
1398}
1399
1400static inline int security_socket_getsockname(struct socket *sock)
1401{
1402 return 0;
1403}
1404
1405static inline int security_socket_getpeername(struct socket *sock)
1406{
1407 return 0;
1408}
1409
1410static inline int security_socket_getsockopt(struct socket *sock,
1411 int level, int optname)
1412{
1413 return 0;
1414}
1415
1416static inline int security_socket_setsockopt(struct socket *sock,
1417 int level, int optname)
1418{
1419 return 0;
1420}
1421
1422static inline int security_socket_shutdown(struct socket *sock, int how)
1423{
1424 return 0;
1425}
1426static inline int security_sock_rcv_skb(struct sock *sk,
1427 struct sk_buff *skb)
1428{
1429 return 0;
1430}
1431
1432static inline int security_socket_getpeersec_stream(struct socket *sock, char __user *optval,
1433 int __user *optlen, unsigned len)
1434{
1435 return -ENOPROTOOPT;
1436}
1437
1438static inline int security_socket_getpeersec_dgram(struct socket *sock, struct sk_buff *skb, u32 *secid)
1439{
1440 return -ENOPROTOOPT;
1441}
1442
1443static inline int security_sk_alloc(struct sock *sk, int family, gfp_t priority)
1444{
1445 return 0;
1446}
1447
1448static inline void security_sk_free(struct sock *sk)
1449{
1450}
1451
1452static inline void security_sk_clone(const struct sock *sk, struct sock *newsk)
1453{
1454}
1455
1456static inline void security_sk_classify_flow(struct sock *sk, struct flowi *fl)
1457{
1458}
1459
1460static inline void security_req_classify_flow(const struct request_sock *req, struct flowi *fl)
1461{
1462}
1463
1464static inline void security_sock_graft(struct sock *sk, struct socket *parent)
1465{
1466}
1467
1468static inline int security_inet_conn_request(struct sock *sk,
1469 struct sk_buff *skb, struct request_sock *req)
1470{
1471 return 0;
1472}
1473
1474static inline void security_inet_csk_clone(struct sock *newsk,
1475 const struct request_sock *req)
1476{
1477}
1478
1479static inline void security_inet_conn_established(struct sock *sk,
1480 struct sk_buff *skb)
1481{
1482}
1483
1484static inline int security_secmark_relabel_packet(u32 secid)
1485{
1486 return 0;
1487}
1488
1489static inline void security_secmark_refcount_inc(void)
1490{
1491}
1492
1493static inline void security_secmark_refcount_dec(void)
1494{
1495}
1496
1497static inline int security_tun_dev_alloc_security(void **security)
1498{
1499 return 0;
1500}
1501
1502static inline void security_tun_dev_free_security(void *security)
1503{
1504}
1505
1506static inline int security_tun_dev_create(void)
1507{
1508 return 0;
1509}
1510
1511static inline int security_tun_dev_attach_queue(void *security)
1512{
1513 return 0;
1514}
1515
1516static inline int security_tun_dev_attach(struct sock *sk, void *security)
1517{
1518 return 0;
1519}
1520
1521static inline int security_tun_dev_open(void *security)
1522{
1523 return 0;
1524}
1525
1526static inline int security_sctp_assoc_request(struct sctp_endpoint *ep,
1527 struct sk_buff *skb)
1528{
1529 return 0;
1530}
1531
1532static inline int security_sctp_bind_connect(struct sock *sk, int optname,
1533 struct sockaddr *address,
1534 int addrlen)
1535{
1536 return 0;
1537}
1538
1539static inline void security_sctp_sk_clone(struct sctp_endpoint *ep,
1540 struct sock *sk,
1541 struct sock *newsk)
1542{
1543}
1544#endif
1545
1546#ifdef CONFIG_SECURITY_INFINIBAND
1547int security_ib_pkey_access(void *sec, u64 subnet_prefix, u16 pkey);
1548int security_ib_endport_manage_subnet(void *sec, const char *name, u8 port_num);
1549int security_ib_alloc_security(void **sec);
1550void security_ib_free_security(void *sec);
1551#else
1552static inline int security_ib_pkey_access(void *sec, u64 subnet_prefix, u16 pkey)
1553{
1554 return 0;
1555}
1556
1557static inline int security_ib_endport_manage_subnet(void *sec, const char *dev_name, u8 port_num)
1558{
1559 return 0;
1560}
1561
1562static inline int security_ib_alloc_security(void **sec)
1563{
1564 return 0;
1565}
1566
1567static inline void security_ib_free_security(void *sec)
1568{
1569}
1570#endif
1571
1572#ifdef CONFIG_SECURITY_NETWORK_XFRM
1573
1574int security_xfrm_policy_alloc(struct xfrm_sec_ctx **ctxp,
1575 struct xfrm_user_sec_ctx *sec_ctx, gfp_t gfp);
1576int security_xfrm_policy_clone(struct xfrm_sec_ctx *old_ctx, struct xfrm_sec_ctx **new_ctxp);
1577void security_xfrm_policy_free(struct xfrm_sec_ctx *ctx);
1578int security_xfrm_policy_delete(struct xfrm_sec_ctx *ctx);
1579int security_xfrm_state_alloc(struct xfrm_state *x, struct xfrm_user_sec_ctx *sec_ctx);
1580int security_xfrm_state_alloc_acquire(struct xfrm_state *x,
1581 struct xfrm_sec_ctx *polsec, u32 secid);
1582int security_xfrm_state_delete(struct xfrm_state *x);
1583void security_xfrm_state_free(struct xfrm_state *x);
1584int security_xfrm_policy_lookup(struct xfrm_sec_ctx *ctx, u32 fl_secid, u8 dir);
1585int security_xfrm_state_pol_flow_match(struct xfrm_state *x,
1586 struct xfrm_policy *xp,
1587 const struct flowi *fl);
1588int security_xfrm_decode_session(struct sk_buff *skb, u32 *secid);
1589void security_skb_classify_flow(struct sk_buff *skb, struct flowi *fl);
1590
1591#else
1592
1593static inline int security_xfrm_policy_alloc(struct xfrm_sec_ctx **ctxp,
1594 struct xfrm_user_sec_ctx *sec_ctx,
1595 gfp_t gfp)
1596{
1597 return 0;
1598}
1599
1600static inline int security_xfrm_policy_clone(struct xfrm_sec_ctx *old, struct xfrm_sec_ctx **new_ctxp)
1601{
1602 return 0;
1603}
1604
1605static inline void security_xfrm_policy_free(struct xfrm_sec_ctx *ctx)
1606{
1607}
1608
1609static inline int security_xfrm_policy_delete(struct xfrm_sec_ctx *ctx)
1610{
1611 return 0;
1612}
1613
1614static inline int security_xfrm_state_alloc(struct xfrm_state *x,
1615 struct xfrm_user_sec_ctx *sec_ctx)
1616{
1617 return 0;
1618}
1619
1620static inline int security_xfrm_state_alloc_acquire(struct xfrm_state *x,
1621 struct xfrm_sec_ctx *polsec, u32 secid)
1622{
1623 return 0;
1624}
1625
1626static inline void security_xfrm_state_free(struct xfrm_state *x)
1627{
1628}
1629
1630static inline int security_xfrm_state_delete(struct xfrm_state *x)
1631{
1632 return 0;
1633}
1634
1635static inline int security_xfrm_policy_lookup(struct xfrm_sec_ctx *ctx, u32 fl_secid, u8 dir)
1636{
1637 return 0;
1638}
1639
1640static inline int security_xfrm_state_pol_flow_match(struct xfrm_state *x,
1641 struct xfrm_policy *xp, const struct flowi *fl)
1642{
1643 return 1;
1644}
1645
1646static inline int security_xfrm_decode_session(struct sk_buff *skb, u32 *secid)
1647{
1648 return 0;
1649}
1650
1651static inline void security_skb_classify_flow(struct sk_buff *skb, struct flowi *fl)
1652{
1653}
1654
1655#endif
1656
1657#ifdef CONFIG_SECURITY_PATH
1658int security_path_unlink(const struct path *dir, struct dentry *dentry);
1659int security_path_mkdir(const struct path *dir, struct dentry *dentry, umode_t mode);
1660int security_path_rmdir(const struct path *dir, struct dentry *dentry);
1661int security_path_mknod(const struct path *dir, struct dentry *dentry, umode_t mode,
1662 unsigned int dev);
1663int security_path_truncate(const struct path *path);
1664int security_path_symlink(const struct path *dir, struct dentry *dentry,
1665 const char *old_name);
1666int security_path_link(struct dentry *old_dentry, const struct path *new_dir,
1667 struct dentry *new_dentry);
1668int security_path_rename(const struct path *old_dir, struct dentry *old_dentry,
1669 const struct path *new_dir, struct dentry *new_dentry,
1670 unsigned int flags);
1671int security_path_chmod(const struct path *path, umode_t mode);
1672int security_path_chown(const struct path *path, kuid_t uid, kgid_t gid);
1673int security_path_chroot(const struct path *path);
1674#else
1675static inline int security_path_unlink(const struct path *dir, struct dentry *dentry)
1676{
1677 return 0;
1678}
1679
1680static inline int security_path_mkdir(const struct path *dir, struct dentry *dentry,
1681 umode_t mode)
1682{
1683 return 0;
1684}
1685
1686static inline int security_path_rmdir(const struct path *dir, struct dentry *dentry)
1687{
1688 return 0;
1689}
1690
1691static inline int security_path_mknod(const struct path *dir, struct dentry *dentry,
1692 umode_t mode, unsigned int dev)
1693{
1694 return 0;
1695}
1696
1697static inline int security_path_truncate(const struct path *path)
1698{
1699 return 0;
1700}
1701
1702static inline int security_path_symlink(const struct path *dir, struct dentry *dentry,
1703 const char *old_name)
1704{
1705 return 0;
1706}
1707
1708static inline int security_path_link(struct dentry *old_dentry,
1709 const struct path *new_dir,
1710 struct dentry *new_dentry)
1711{
1712 return 0;
1713}
1714
1715static inline int security_path_rename(const struct path *old_dir,
1716 struct dentry *old_dentry,
1717 const struct path *new_dir,
1718 struct dentry *new_dentry,
1719 unsigned int flags)
1720{
1721 return 0;
1722}
1723
1724static inline int security_path_chmod(const struct path *path, umode_t mode)
1725{
1726 return 0;
1727}
1728
1729static inline int security_path_chown(const struct path *path, kuid_t uid, kgid_t gid)
1730{
1731 return 0;
1732}
1733
1734static inline int security_path_chroot(const struct path *path)
1735{
1736 return 0;
1737}
1738#endif
1739
1740#ifdef CONFIG_KEYS
1741#ifdef CONFIG_SECURITY
1742
1743int security_key_alloc(struct key *key, const struct cred *cred, unsigned long flags);
1744void security_key_free(struct key *key);
1745int security_key_permission(key_ref_t key_ref,
1746 const struct cred *cred, unsigned perm);
1747int security_key_getsecurity(struct key *key, char **_buffer);
1748
1749#else
1750
1751static inline int security_key_alloc(struct key *key,
1752 const struct cred *cred,
1753 unsigned long flags)
1754{
1755 return 0;
1756}
1757
1758static inline void security_key_free(struct key *key)
1759{
1760}
1761
1762static inline int security_key_permission(key_ref_t key_ref,
1763 const struct cred *cred,
1764 unsigned perm)
1765{
1766 return 0;
1767}
1768
1769static inline int security_key_getsecurity(struct key *key, char **_buffer)
1770{
1771 *_buffer = NULL;
1772 return 0;
1773}
1774
1775#endif
1776#endif
1777
1778#ifdef CONFIG_AUDIT
1779#ifdef CONFIG_SECURITY
1780int security_audit_rule_init(u32 field, u32 op, char *rulestr, void **lsmrule);
1781int security_audit_rule_known(struct audit_krule *krule);
1782int security_audit_rule_match(u32 secid, u32 field, u32 op, void *lsmrule);
1783void security_audit_rule_free(void *lsmrule);
1784
1785#else
1786
1787static inline int security_audit_rule_init(u32 field, u32 op, char *rulestr,
1788 void **lsmrule)
1789{
1790 return 0;
1791}
1792
1793static inline int security_audit_rule_known(struct audit_krule *krule)
1794{
1795 return 0;
1796}
1797
1798static inline int security_audit_rule_match(u32 secid, u32 field, u32 op,
1799 void *lsmrule)
1800{
1801 return 0;
1802}
1803
1804static inline void security_audit_rule_free(void *lsmrule)
1805{ }
1806
1807#endif
1808#endif
1809
1810#ifdef CONFIG_SECURITYFS
1811
1812extern struct dentry *securityfs_create_file(const char *name, umode_t mode,
1813 struct dentry *parent, void *data,
1814 const struct file_operations *fops);
1815extern struct dentry *securityfs_create_dir(const char *name, struct dentry *parent);
1816struct dentry *securityfs_create_symlink(const char *name,
1817 struct dentry *parent,
1818 const char *target,
1819 const struct inode_operations *iops);
1820extern void securityfs_remove(struct dentry *dentry);
1821
1822#else
1823
1824static inline struct dentry *securityfs_create_dir(const char *name,
1825 struct dentry *parent)
1826{
1827 return ERR_PTR(-ENODEV);
1828}
1829
1830static inline struct dentry *securityfs_create_file(const char *name,
1831 umode_t mode,
1832 struct dentry *parent,
1833 void *data,
1834 const struct file_operations *fops)
1835{
1836 return ERR_PTR(-ENODEV);
1837}
1838
1839static inline struct dentry *securityfs_create_symlink(const char *name,
1840 struct dentry *parent,
1841 const char *target,
1842 const struct inode_operations *iops)
1843{
1844 return ERR_PTR(-ENODEV);
1845}
1846
1847static inline void securityfs_remove(struct dentry *dentry)
1848{}
1849
1850#endif
1851
1852#ifdef CONFIG_BPF_SYSCALL
1853union bpf_attr;
1854struct bpf_map;
1855struct bpf_prog;
1856struct bpf_prog_aux;
1857#ifdef CONFIG_SECURITY
1858extern int security_bpf(int cmd, union bpf_attr *attr, unsigned int size);
1859extern int security_bpf_map(struct bpf_map *map, fmode_t fmode);
1860extern int security_bpf_prog(struct bpf_prog *prog);
1861extern int security_bpf_map_alloc(struct bpf_map *map);
1862extern void security_bpf_map_free(struct bpf_map *map);
1863extern int security_bpf_prog_alloc(struct bpf_prog_aux *aux);
1864extern void security_bpf_prog_free(struct bpf_prog_aux *aux);
1865#else
1866static inline int security_bpf(int cmd, union bpf_attr *attr,
1867 unsigned int size)
1868{
1869 return 0;
1870}
1871
1872static inline int security_bpf_map(struct bpf_map *map, fmode_t fmode)
1873{
1874 return 0;
1875}
1876
1877static inline int security_bpf_prog(struct bpf_prog *prog)
1878{
1879 return 0;
1880}
1881
1882static inline int security_bpf_map_alloc(struct bpf_map *map)
1883{
1884 return 0;
1885}
1886
1887static inline void security_bpf_map_free(struct bpf_map *map)
1888{ }
1889
1890static inline int security_bpf_prog_alloc(struct bpf_prog_aux *aux)
1891{
1892 return 0;
1893}
1894
1895static inline void security_bpf_prog_free(struct bpf_prog_aux *aux)
1896{ }
1897#endif
1898#endif
1899
1900#ifdef CONFIG_PERF_EVENTS
1901struct perf_event_attr;
1902struct perf_event;
1903
1904#ifdef CONFIG_SECURITY
1905extern int security_perf_event_open(struct perf_event_attr *attr, int type);
1906extern int security_perf_event_alloc(struct perf_event *event);
1907extern void security_perf_event_free(struct perf_event *event);
1908extern int security_perf_event_read(struct perf_event *event);
1909extern int security_perf_event_write(struct perf_event *event);
1910#else
1911static inline int security_perf_event_open(struct perf_event_attr *attr,
1912 int type)
1913{
1914 return 0;
1915}
1916
1917static inline int security_perf_event_alloc(struct perf_event *event)
1918{
1919 return 0;
1920}
1921
1922static inline void security_perf_event_free(struct perf_event *event)
1923{
1924}
1925
1926static inline int security_perf_event_read(struct perf_event *event)
1927{
1928 return 0;
1929}
1930
1931static inline int security_perf_event_write(struct perf_event *event)
1932{
1933 return 0;
1934}
1935#endif
1936#endif
1937
1938#endif
1939
