mirror of
git://git.yoctoproject.org/linux-yocto.git
synced 2025-10-22 23:13:01 +02:00
622e2f5954
Move LANDLOCK_ACCESS_FS_INITIALLY_DENIED, access_mask_t, struct access_mask, and struct access_masks_all to a dedicated access.h file. Rename LANDLOCK_ACCESS_FS_INITIALLY_DENIED to _LANDLOCK_ACCESS_FS_INITIALLY_DENIED to make it clear that it's not part of UAPI. Add some newlines when appropriate. This file will be extended with following commits, and it will help to avoid dependency loops. Cc: Günther Noack <gnoack@google.com> Link: https://lore.kernel.org/r/20250108154338.1129069-6-mic@digikod.net [mic: Fix rebase conflict because of the new cleanup headers] Signed-off-by: Mickaël Salaün <mic@digikod.net>
104 lines
3.2 KiB
C
104 lines
3.2 KiB
C
/* SPDX-License-Identifier: GPL-2.0-only */
|
|
/*
|
|
* Landlock LSM - Filesystem management and hooks
|
|
*
|
|
* Copyright © 2017-2020 Mickaël Salaün <mic@digikod.net>
|
|
* Copyright © 2018-2020 ANSSI
|
|
*/
|
|
|
|
#ifndef _SECURITY_LANDLOCK_FS_H
|
|
#define _SECURITY_LANDLOCK_FS_H
|
|
|
|
#include <linux/fs.h>
|
|
#include <linux/init.h>
|
|
#include <linux/rcupdate.h>
|
|
|
|
#include "access.h"
|
|
#include "ruleset.h"
|
|
#include "setup.h"
|
|
|
|
/**
|
|
* struct landlock_inode_security - Inode security blob
|
|
*
|
|
* Enable to reference a &struct landlock_object tied to an inode (i.e.
|
|
* underlying object).
|
|
*/
|
|
struct landlock_inode_security {
|
|
/**
|
|
* @object: Weak pointer to an allocated object. All assignments of a
|
|
* new object are protected by the underlying inode->i_lock. However,
|
|
* atomically disassociating @object from the inode is only protected
|
|
* by @object->lock, from the time @object's usage refcount drops to
|
|
* zero to the time this pointer is nulled out (cf. release_inode() and
|
|
* hook_sb_delete()). Indeed, such disassociation doesn't require
|
|
* inode->i_lock thanks to the careful rcu_access_pointer() check
|
|
* performed by get_inode_object().
|
|
*/
|
|
struct landlock_object __rcu *object;
|
|
};
|
|
|
|
/**
|
|
* struct landlock_file_security - File security blob
|
|
*
|
|
* This information is populated when opening a file in hook_file_open, and
|
|
* tracks the relevant Landlock access rights that were available at the time
|
|
* of opening the file. Other LSM hooks use these rights in order to authorize
|
|
* operations on already opened files.
|
|
*/
|
|
struct landlock_file_security {
|
|
/**
|
|
* @allowed_access: Access rights that were available at the time of
|
|
* opening the file. This is not necessarily the full set of access
|
|
* rights available at that time, but it's the necessary subset as
|
|
* needed to authorize later operations on the open file.
|
|
*/
|
|
access_mask_t allowed_access;
|
|
/**
|
|
* @fown_domain: Domain of the task that set the PID that may receive a
|
|
* signal e.g., SIGURG when writing MSG_OOB to the related socket.
|
|
* This pointer is protected by the related file->f_owner->lock, as for
|
|
* fown_struct's members: pid, uid, and euid.
|
|
*/
|
|
struct landlock_ruleset *fown_domain;
|
|
};
|
|
|
|
/**
|
|
* struct landlock_superblock_security - Superblock security blob
|
|
*
|
|
* Enable hook_sb_delete() to wait for concurrent calls to release_inode().
|
|
*/
|
|
struct landlock_superblock_security {
|
|
/**
|
|
* @inode_refs: Number of pending inodes (from this superblock) that
|
|
* are being released by release_inode().
|
|
* Cf. struct super_block->s_fsnotify_inode_refs .
|
|
*/
|
|
atomic_long_t inode_refs;
|
|
};
|
|
|
|
static inline struct landlock_file_security *
|
|
landlock_file(const struct file *const file)
|
|
{
|
|
return file->f_security + landlock_blob_sizes.lbs_file;
|
|
}
|
|
|
|
static inline struct landlock_inode_security *
|
|
landlock_inode(const struct inode *const inode)
|
|
{
|
|
return inode->i_security + landlock_blob_sizes.lbs_inode;
|
|
}
|
|
|
|
static inline struct landlock_superblock_security *
|
|
landlock_superblock(const struct super_block *const superblock)
|
|
{
|
|
return superblock->s_security + landlock_blob_sizes.lbs_superblock;
|
|
}
|
|
|
|
__init void landlock_add_fs_hooks(void);
|
|
|
|
int landlock_append_fs_rule(struct landlock_ruleset *const ruleset,
|
|
const struct path *const path,
|
|
access_mask_t access_hierarchy);
|
|
|
|
#endif /* _SECURITY_LANDLOCK_FS_H */
|