| /linux-6.15/tools/testing/selftests/landlock/ |
| H A D | base_test.c | 57 ruleset_attr, in TEST() 91 landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), in TEST() 131 landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), in TEST() 167 landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), in TEST() 183 landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0); in TEST() 199 landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0); in TEST() 246 landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0); in TEST() 364 struct landlock_ruleset_attr ruleset_attr = { in TEST() local 372 landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0); in TEST() 401 landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0); in TEST() [all …]
|
| H A D | net_test.c | 747 &ruleset_attr, sizeof(ruleset_attr), 0); in TEST_F() 776 &ruleset_attr, sizeof(ruleset_attr), 0); in TEST_F() 856 &ruleset_attr, sizeof(ruleset_attr), 0); in TEST_F() 887 &ruleset_attr, sizeof(ruleset_attr), 0); in TEST_F() 1323 landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0); in TEST_F() 1368 landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0); in TEST_F() 1393 landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0); in TEST_F() 1434 landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0); in TEST_F() 1497 landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0); in TEST_F() 1580 landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0); in TEST_F() [all …]
|
| H A D | scoped_test.c | 23 struct landlock_ruleset_attr ruleset_attr = { in TEST() local 27 ASSERT_EQ(-1, landlock_create_ruleset(&ruleset_attr, in TEST() 28 sizeof(ruleset_attr), 0)); in TEST()
|
| H A D | scoped_common.h | 16 const struct landlock_ruleset_attr ruleset_attr = { in create_scoped_domain() local 21 landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0); in create_scoped_domain()
|
| H A D | sandbox-and-launch.c | 21 struct landlock_ruleset_attr ruleset_attr = { in main() local 40 landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0); in main()
|
| H A D | audit_test.c | 74 const struct landlock_ruleset_attr ruleset_attr = { in TEST_F() local 88 landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0); in TEST_F() 220 const struct landlock_ruleset_attr ruleset_attr = { in TEST_F() local 237 landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0); in TEST_F() 362 const struct landlock_ruleset_attr ruleset_attr = { in TEST_F() local 368 ruleset_fd = landlock_create_ruleset(&ruleset_attr, in TEST_F() 369 sizeof(ruleset_attr), 0); in TEST_F()
|
| H A D | common.h | 213 const struct landlock_ruleset_attr *const ruleset_attr) in drop_access_rights() argument 218 landlock_create_ruleset(ruleset_attr, sizeof(*ruleset_attr), 0); in drop_access_rights()
|
| H A D | ptrace_test.c | 31 struct landlock_ruleset_attr ruleset_attr = { in create_domain() local 36 landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0); in create_domain()
|
| H A D | fs_test.c | 482 struct landlock_ruleset_attr ruleset_attr = { in TEST_F_FORK() local 510 landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0); in TEST_F_FORK() 608 landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0); in TEST_F_FORK() 653 sizeof(ruleset_attr), 0)); in TEST_F_FORK() 666 landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0); in TEST_F_FORK() 695 landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0); in TEST_F_FORK() 778 landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0); in create_ruleset() 1518 landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0); in TEST_F_FORK() 1525 landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0); in TEST_F_FORK() 1534 landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0); in TEST_F_FORK() [all …]
|
| H A D | scoped_abstract_unix_test.c | 33 struct landlock_ruleset_attr ruleset_attr = { in create_fs_domain() local 38 landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0); in create_fs_domain()
|
| /linux-6.15/samples/landlock/ |
| H A D | sandboxer.c | 228 struct landlock_ruleset_attr *ruleset_attr) in check_ruleset_scope() argument 236 if (!(ruleset_attr->scoped & in check_ruleset_scope() 269 ruleset_attr->scoped &= ~LANDLOCK_SCOPE_SIGNAL; in check_ruleset_scope() 351 struct landlock_ruleset_attr ruleset_attr = { in main() local 418 ruleset_attr.handled_access_net &= in main() 453 access_fs_ro &= ruleset_attr.handled_access_fs; in main() 454 access_fs_rw &= ruleset_attr.handled_access_fs; in main() 459 ruleset_attr.handled_access_net &= in main() 465 ruleset_attr.handled_access_net &= in main() 469 if (check_ruleset_scope(ENV_SCOPED_NAME, &ruleset_attr)) in main() [all …]
|
| /linux-6.15/security/landlock/ |
| H A D | syscalls.c | 92 struct landlock_ruleset_attr ruleset_attr; in build_check_abi() local 102 ruleset_size = sizeof(ruleset_attr.handled_access_fs); in build_check_abi() 103 ruleset_size += sizeof(ruleset_attr.handled_access_net); in build_check_abi() 104 ruleset_size += sizeof(ruleset_attr.scoped); in build_check_abi() 105 BUILD_BUG_ON(sizeof(ruleset_attr) != ruleset_size); in build_check_abi() 106 BUILD_BUG_ON(sizeof(ruleset_attr) != 24); in build_check_abi() 199 struct landlock_ruleset_attr ruleset_attr; in SYSCALL_DEFINE3() local 223 err = copy_min_struct_from_user(&ruleset_attr, sizeof(ruleset_attr), in SYSCALL_DEFINE3() 224 offsetofend(typeof(ruleset_attr), in SYSCALL_DEFINE3() 246 ruleset_attr.handled_access_net, in SYSCALL_DEFINE3() [all …]
|
| /linux-6.15/Documentation/userspace-api/ |
| H A D | landlock.rst | 63 struct landlock_ruleset_attr ruleset_attr = { 110 ruleset_attr.handled_access_fs &= ~LANDLOCK_ACCESS_FS_REFER; 114 ruleset_attr.handled_access_fs &= ~LANDLOCK_ACCESS_FS_TRUNCATE; 118 ruleset_attr.handled_access_net &= 124 ruleset_attr.handled_access_fs &= ~LANDLOCK_ACCESS_FS_IOCTL_DEV; 128 ruleset_attr.scoped &= ~(LANDLOCK_SCOPE_ABSTRACT_UNIX_SOCKET | 138 ruleset_fd = landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0);
|