1 /* 2 * Linux Security plug 3 * 4 * Copyright (C) 2001 WireX Communications, Inc <[email protected]> 5 * Copyright (C) 2001 Greg Kroah-Hartman <[email protected]> 6 * Copyright (C) 2001 Networks Associates Technology, Inc <[email protected]> 7 * Copyright (C) 2001 James Morris <[email protected]> 8 * Copyright (C) 2001 Silicon Graphics, Inc. (Trust Technology Group) 9 * 10 * This program is free software; you can redistribute it and/or modify 11 * it under the terms of the GNU General Public License as published by 12 * the Free Software Foundation; either version 2 of the License, or 13 * (at your option) any later version. 14 * 15 * Due to this file being licensed under the GPL there is controversy over 16 * whether this permits you to write a module that #includes this file 17 * without placing your module under the GPL. Please consult a lawyer for 18 * advice before doing this. 19 * 20 */ 21 22 #ifndef __LINUX_SECURITY_H 23 #define __LINUX_SECURITY_H 24 25 #include <linux/key.h> 26 #include <linux/capability.h> 27 #include <linux/slab.h> 28 #include <linux/err.h> 29 #include <linux/string.h> 30 #include <linux/mm.h> 31 32 struct linux_binprm; 33 struct cred; 34 struct rlimit; 35 struct siginfo; 36 struct sem_array; 37 struct sembuf; 38 struct kern_ipc_perm; 39 struct audit_context; 40 struct super_block; 41 struct inode; 42 struct dentry; 43 struct file; 44 struct vfsmount; 45 struct path; 46 struct qstr; 47 struct iattr; 48 struct fown_struct; 49 struct file_operations; 50 struct shmid_kernel; 51 struct msg_msg; 52 struct msg_queue; 53 struct xattr; 54 struct xfrm_sec_ctx; 55 struct mm_struct; 56 57 /* If capable should audit the security request */ 58 #define SECURITY_CAP_NOAUDIT 0 59 #define SECURITY_CAP_AUDIT 1 60 61 /* LSM Agnostic defines for sb_set_mnt_opts */ 62 #define SECURITY_LSM_NATIVE_LABELS 1 63 64 struct ctl_table; 65 struct audit_krule; 66 struct user_namespace; 67 struct timezone; 68 69 /* These functions are in security/commoncap.c */ 70 extern int cap_capable(const struct cred *cred, struct user_namespace *ns, 71 int cap, int audit); 72 extern int cap_settime(const struct timespec *ts, const struct timezone *tz); 73 extern int cap_ptrace_access_check(struct task_struct *child, unsigned int mode); 74 extern int cap_ptrace_traceme(struct task_struct *parent); 75 extern int cap_capget(struct task_struct *target, kernel_cap_t *effective, kernel_cap_t *inheritable, kernel_cap_t *permitted); 76 extern int cap_capset(struct cred *new, const struct cred *old, 77 const kernel_cap_t *effective, 78 const kernel_cap_t *inheritable, 79 const kernel_cap_t *permitted); 80 extern int cap_bprm_set_creds(struct linux_binprm *bprm); 81 extern int cap_bprm_secureexec(struct linux_binprm *bprm); 82 extern int cap_inode_setxattr(struct dentry *dentry, const char *name, 83 const void *value, size_t size, int flags); 84 extern int cap_inode_removexattr(struct dentry *dentry, const char *name); 85 extern int cap_inode_need_killpriv(struct dentry *dentry); 86 extern int cap_inode_killpriv(struct dentry *dentry); 87 extern int cap_mmap_addr(unsigned long addr); 88 extern int cap_mmap_file(struct file *file, unsigned long reqprot, 89 unsigned long prot, unsigned long flags); 90 extern int cap_task_fix_setuid(struct cred *new, const struct cred *old, int flags); 91 extern int cap_task_prctl(int option, unsigned long arg2, unsigned long arg3, 92 unsigned long arg4, unsigned long arg5); 93 extern int cap_task_setscheduler(struct task_struct *p); 94 extern int cap_task_setioprio(struct task_struct *p, int ioprio); 95 extern int cap_task_setnice(struct task_struct *p, int nice); 96 extern int cap_vm_enough_memory(struct mm_struct *mm, long pages); 97 98 struct msghdr; 99 struct sk_buff; 100 struct sock; 101 struct sockaddr; 102 struct socket; 103 struct flowi; 104 struct dst_entry; 105 struct xfrm_selector; 106 struct xfrm_policy; 107 struct xfrm_state; 108 struct xfrm_user_sec_ctx; 109 struct seq_file; 110 111 #ifdef CONFIG_MMU 112 extern unsigned long mmap_min_addr; 113 extern unsigned long dac_mmap_min_addr; 114 #else 115 #define mmap_min_addr 0UL 116 #define dac_mmap_min_addr 0UL 117 #endif 118 119 /* 120 * Values used in the task_security_ops calls 121 */ 122 /* setuid or setgid, id0 == uid or gid */ 123 #define LSM_SETID_ID 1 124 125 /* setreuid or setregid, id0 == real, id1 == eff */ 126 #define LSM_SETID_RE 2 127 128 /* setresuid or setresgid, id0 == real, id1 == eff, uid2 == saved */ 129 #define LSM_SETID_RES 4 130 131 /* setfsuid or setfsgid, id0 == fsuid or fsgid */ 132 #define LSM_SETID_FS 8 133 134 /* forward declares to avoid warnings */ 135 struct sched_param; 136 struct request_sock; 137 138 /* bprm->unsafe reasons */ 139 #define LSM_UNSAFE_SHARE 1 140 #define LSM_UNSAFE_PTRACE 2 141 #define LSM_UNSAFE_PTRACE_CAP 4 142 #define LSM_UNSAFE_NO_NEW_PRIVS 8 143 144 #ifdef CONFIG_MMU 145 extern int mmap_min_addr_handler(struct ctl_table *table, int write, 146 void __user *buffer, size_t *lenp, loff_t *ppos); 147 #endif 148 149 /* security_inode_init_security callback function to write xattrs */ 150 typedef int (*initxattrs) (struct inode *inode, 151 const struct xattr *xattr_array, void *fs_data); 152 153 #ifdef CONFIG_SECURITY 154 155 struct security_mnt_opts { 156 char **mnt_opts; 157 int *mnt_opts_flags; 158 int num_mnt_opts; 159 }; 160 161 static inline void security_init_mnt_opts(struct security_mnt_opts *opts) 162 { 163 opts->mnt_opts = NULL; 164 opts->mnt_opts_flags = NULL; 165 opts->num_mnt_opts = 0; 166 } 167 168 static inline void security_free_mnt_opts(struct security_mnt_opts *opts) 169 { 170 int i; 171 if (opts->mnt_opts) 172 for (i = 0; i < opts->num_mnt_opts; i++) 173 kfree(opts->mnt_opts[i]); 174 kfree(opts->mnt_opts); 175 opts->mnt_opts = NULL; 176 kfree(opts->mnt_opts_flags); 177 opts->mnt_opts_flags = NULL; 178 opts->num_mnt_opts = 0; 179 } 180 181 /* prototypes */ 182 extern int security_init(void); 183 184 /* Security operations */ 185 int security_binder_set_context_mgr(struct task_struct *mgr); 186 int security_binder_transaction(struct task_struct *from, 187 struct task_struct *to); 188 int security_binder_transfer_binder(struct task_struct *from, 189 struct task_struct *to); 190 int security_binder_transfer_file(struct task_struct *from, 191 struct task_struct *to, struct file *file); 192 int security_ptrace_access_check(struct task_struct *child, unsigned int mode); 193 int security_ptrace_traceme(struct task_struct *parent); 194 int security_capget(struct task_struct *target, 195 kernel_cap_t *effective, 196 kernel_cap_t *inheritable, 197 kernel_cap_t *permitted); 198 int security_capset(struct cred *new, const struct cred *old, 199 const kernel_cap_t *effective, 200 const kernel_cap_t *inheritable, 201 const kernel_cap_t *permitted); 202 int security_capable(const struct cred *cred, struct user_namespace *ns, 203 int cap); 204 int security_capable_noaudit(const struct cred *cred, struct user_namespace *ns, 205 int cap); 206 int security_quotactl(int cmds, int type, int id, struct super_block *sb); 207 int security_quota_on(struct dentry *dentry); 208 int security_syslog(int type); 209 int security_settime(const struct timespec *ts, const struct timezone *tz); 210 int security_vm_enough_memory_mm(struct mm_struct *mm, long pages); 211 int security_bprm_set_creds(struct linux_binprm *bprm); 212 int security_bprm_check(struct linux_binprm *bprm); 213 void security_bprm_committing_creds(struct linux_binprm *bprm); 214 void security_bprm_committed_creds(struct linux_binprm *bprm); 215 int security_bprm_secureexec(struct linux_binprm *bprm); 216 int security_sb_alloc(struct super_block *sb); 217 void security_sb_free(struct super_block *sb); 218 int security_sb_copy_data(char *orig, char *copy); 219 int security_sb_remount(struct super_block *sb, void *data); 220 int security_sb_kern_mount(struct super_block *sb, int flags, void *data); 221 int security_sb_show_options(struct seq_file *m, struct super_block *sb); 222 int security_sb_statfs(struct dentry *dentry); 223 int security_sb_mount(const char *dev_name, struct path *path, 224 const char *type, unsigned long flags, void *data); 225 int security_sb_umount(struct vfsmount *mnt, int flags); 226 int security_sb_pivotroot(struct path *old_path, struct path *new_path); 227 int security_sb_set_mnt_opts(struct super_block *sb, 228 struct security_mnt_opts *opts, 229 unsigned long kern_flags, 230 unsigned long *set_kern_flags); 231 int security_sb_clone_mnt_opts(const struct super_block *oldsb, 232 struct super_block *newsb); 233 int security_sb_parse_opts_str(char *options, struct security_mnt_opts *opts); 234 int security_dentry_init_security(struct dentry *dentry, int mode, 235 struct qstr *name, void **ctx, 236 u32 *ctxlen); 237 238 int security_inode_alloc(struct inode *inode); 239 void security_inode_free(struct inode *inode); 240 int security_inode_init_security(struct inode *inode, struct inode *dir, 241 const struct qstr *qstr, 242 initxattrs initxattrs, void *fs_data); 243 int security_old_inode_init_security(struct inode *inode, struct inode *dir, 244 const struct qstr *qstr, const char **name, 245 void **value, size_t *len); 246 int security_inode_create(struct inode *dir, struct dentry *dentry, umode_t mode); 247 int security_inode_link(struct dentry *old_dentry, struct inode *dir, 248 struct dentry *new_dentry); 249 int security_inode_unlink(struct inode *dir, struct dentry *dentry); 250 int security_inode_symlink(struct inode *dir, struct dentry *dentry, 251 const char *old_name); 252 int security_inode_mkdir(struct inode *dir, struct dentry *dentry, umode_t mode); 253 int security_inode_rmdir(struct inode *dir, struct dentry *dentry); 254 int security_inode_mknod(struct inode *dir, struct dentry *dentry, umode_t mode, dev_t dev); 255 int security_inode_rename(struct inode *old_dir, struct dentry *old_dentry, 256 struct inode *new_dir, struct dentry *new_dentry, 257 unsigned int flags); 258 int security_inode_readlink(struct dentry *dentry); 259 int security_inode_follow_link(struct dentry *dentry, struct inode *inode, 260 bool rcu); 261 int security_inode_permission(struct inode *inode, int mask); 262 int security_inode_setattr(struct dentry *dentry, struct iattr *attr); 263 int security_inode_getattr(const struct path *path); 264 int security_inode_setxattr(struct dentry *dentry, const char *name, 265 const void *value, size_t size, int flags); 266 void security_inode_post_setxattr(struct dentry *dentry, const char *name, 267 const void *value, size_t size, int flags); 268 int security_inode_getxattr(struct dentry *dentry, const char *name); 269 int security_inode_listxattr(struct dentry *dentry); 270 int security_inode_removexattr(struct dentry *dentry, const char *name); 271 int security_inode_need_killpriv(struct dentry *dentry); 272 int security_inode_killpriv(struct dentry *dentry); 273 int security_inode_getsecurity(const struct inode *inode, const char *name, void **buffer, bool alloc); 274 int security_inode_setsecurity(struct inode *inode, const char *name, const void *value, size_t size, int flags); 275 int security_inode_listsecurity(struct inode *inode, char *buffer, size_t buffer_size); 276 void security_inode_getsecid(const struct inode *inode, u32 *secid); 277 int security_file_permission(struct file *file, int mask); 278 int security_file_alloc(struct file *file); 279 void security_file_free(struct file *file); 280 int security_file_ioctl(struct file *file, unsigned int cmd, unsigned long arg); 281 int security_mmap_file(struct file *file, unsigned long prot, 282 unsigned long flags); 283 int security_mmap_addr(unsigned long addr); 284 int security_file_mprotect(struct vm_area_struct *vma, unsigned long reqprot, 285 unsigned long prot); 286 int security_file_lock(struct file *file, unsigned int cmd); 287 int security_file_fcntl(struct file *file, unsigned int cmd, unsigned long arg); 288 void security_file_set_fowner(struct file *file); 289 int security_file_send_sigiotask(struct task_struct *tsk, 290 struct fown_struct *fown, int sig); 291 int security_file_receive(struct file *file); 292 int security_file_open(struct file *file, const struct cred *cred); 293 int security_task_create(unsigned long clone_flags); 294 void security_task_free(struct task_struct *task); 295 int security_cred_alloc_blank(struct cred *cred, gfp_t gfp); 296 void security_cred_free(struct cred *cred); 297 int security_prepare_creds(struct cred *new, const struct cred *old, gfp_t gfp); 298 void security_transfer_creds(struct cred *new, const struct cred *old); 299 int security_kernel_act_as(struct cred *new, u32 secid); 300 int security_kernel_create_files_as(struct cred *new, struct inode *inode); 301 int security_kernel_fw_from_file(struct file *file, char *buf, size_t size); 302 int security_kernel_module_request(char *kmod_name); 303 int security_kernel_module_from_file(struct file *file); 304 int security_task_fix_setuid(struct cred *new, const struct cred *old, 305 int flags); 306 int security_task_setpgid(struct task_struct *p, pid_t pgid); 307 int security_task_getpgid(struct task_struct *p); 308 int security_task_getsid(struct task_struct *p); 309 void security_task_getsecid(struct task_struct *p, u32 *secid); 310 int security_task_setnice(struct task_struct *p, int nice); 311 int security_task_setioprio(struct task_struct *p, int ioprio); 312 int security_task_getioprio(struct task_struct *p); 313 int security_task_setrlimit(struct task_struct *p, unsigned int resource, 314 struct rlimit *new_rlim); 315 int security_task_setscheduler(struct task_struct *p); 316 int security_task_getscheduler(struct task_struct *p); 317 int security_task_movememory(struct task_struct *p); 318 int security_task_kill(struct task_struct *p, struct siginfo *info, 319 int sig, u32 secid); 320 int security_task_wait(struct task_struct *p); 321 int security_task_prctl(int option, unsigned long arg2, unsigned long arg3, 322 unsigned long arg4, unsigned long arg5); 323 void security_task_to_inode(struct task_struct *p, struct inode *inode); 324 int security_ipc_permission(struct kern_ipc_perm *ipcp, short flag); 325 void security_ipc_getsecid(struct kern_ipc_perm *ipcp, u32 *secid); 326 int security_msg_msg_alloc(struct msg_msg *msg); 327 void security_msg_msg_free(struct msg_msg *msg); 328 int security_msg_queue_alloc(struct msg_queue *msq); 329 void security_msg_queue_free(struct msg_queue *msq); 330 int security_msg_queue_associate(struct msg_queue *msq, int msqflg); 331 int security_msg_queue_msgctl(struct msg_queue *msq, int cmd); 332 int security_msg_queue_msgsnd(struct msg_queue *msq, 333 struct msg_msg *msg, int msqflg); 334 int security_msg_queue_msgrcv(struct msg_queue *msq, struct msg_msg *msg, 335 struct task_struct *target, long type, int mode); 336 int security_shm_alloc(struct shmid_kernel *shp); 337 void security_shm_free(struct shmid_kernel *shp); 338 int security_shm_associate(struct shmid_kernel *shp, int shmflg); 339 int security_shm_shmctl(struct shmid_kernel *shp, int cmd); 340 int security_shm_shmat(struct shmid_kernel *shp, char __user *shmaddr, int shmflg); 341 int security_sem_alloc(struct sem_array *sma); 342 void security_sem_free(struct sem_array *sma); 343 int security_sem_associate(struct sem_array *sma, int semflg); 344 int security_sem_semctl(struct sem_array *sma, int cmd); 345 int security_sem_semop(struct sem_array *sma, struct sembuf *sops, 346 unsigned nsops, int alter); 347 void security_d_instantiate(struct dentry *dentry, struct inode *inode); 348 int security_getprocattr(struct task_struct *p, char *name, char **value); 349 int security_setprocattr(struct task_struct *p, char *name, void *value, size_t size); 350 int security_netlink_send(struct sock *sk, struct sk_buff *skb); 351 int security_ismaclabel(const char *name); 352 int security_secid_to_secctx(u32 secid, char **secdata, u32 *seclen); 353 int security_secctx_to_secid(const char *secdata, u32 seclen, u32 *secid); 354 void security_release_secctx(char *secdata, u32 seclen); 355 356 int security_inode_notifysecctx(struct inode *inode, void *ctx, u32 ctxlen); 357 int security_inode_setsecctx(struct dentry *dentry, void *ctx, u32 ctxlen); 358 int security_inode_getsecctx(struct inode *inode, void **ctx, u32 *ctxlen); 359 #else /* CONFIG_SECURITY */ 360 struct security_mnt_opts { 361 }; 362 363 static inline void security_init_mnt_opts(struct security_mnt_opts *opts) 364 { 365 } 366 367 static inline void security_free_mnt_opts(struct security_mnt_opts *opts) 368 { 369 } 370 371 /* 372 * This is the default capabilities functionality. Most of these functions 373 * are just stubbed out, but a few must call the proper capable code. 374 */ 375 376 static inline int security_init(void) 377 { 378 return 0; 379 } 380 381 static inline int security_binder_set_context_mgr(struct task_struct *mgr) 382 { 383 return 0; 384 } 385 386 static inline int security_binder_transaction(struct task_struct *from, 387 struct task_struct *to) 388 { 389 return 0; 390 } 391 392 static inline int security_binder_transfer_binder(struct task_struct *from, 393 struct task_struct *to) 394 { 395 return 0; 396 } 397 398 static inline int security_binder_transfer_file(struct task_struct *from, 399 struct task_struct *to, 400 struct file *file) 401 { 402 return 0; 403 } 404 405 static inline int security_ptrace_access_check(struct task_struct *child, 406 unsigned int mode) 407 { 408 return cap_ptrace_access_check(child, mode); 409 } 410 411 static inline int security_ptrace_traceme(struct task_struct *parent) 412 { 413 return cap_ptrace_traceme(parent); 414 } 415 416 static inline int security_capget(struct task_struct *target, 417 kernel_cap_t *effective, 418 kernel_cap_t *inheritable, 419 kernel_cap_t *permitted) 420 { 421 return cap_capget(target, effective, inheritable, permitted); 422 } 423 424 static inline int security_capset(struct cred *new, 425 const struct cred *old, 426 const kernel_cap_t *effective, 427 const kernel_cap_t *inheritable, 428 const kernel_cap_t *permitted) 429 { 430 return cap_capset(new, old, effective, inheritable, permitted); 431 } 432 433 static inline int security_capable(const struct cred *cred, 434 struct user_namespace *ns, int cap) 435 { 436 return cap_capable(cred, ns, cap, SECURITY_CAP_AUDIT); 437 } 438 439 static inline int security_capable_noaudit(const struct cred *cred, 440 struct user_namespace *ns, int cap) { 441 return cap_capable(cred, ns, cap, SECURITY_CAP_NOAUDIT); 442 } 443 444 static inline int security_quotactl(int cmds, int type, int id, 445 struct super_block *sb) 446 { 447 return 0; 448 } 449 450 static inline int security_quota_on(struct dentry *dentry) 451 { 452 return 0; 453 } 454 455 static inline int security_syslog(int type) 456 { 457 return 0; 458 } 459 460 static inline int security_settime(const struct timespec *ts, 461 const struct timezone *tz) 462 { 463 return cap_settime(ts, tz); 464 } 465 466 static inline int security_vm_enough_memory_mm(struct mm_struct *mm, long pages) 467 { 468 return __vm_enough_memory(mm, pages, cap_vm_enough_memory(mm, pages)); 469 } 470 471 static inline int security_bprm_set_creds(struct linux_binprm *bprm) 472 { 473 return cap_bprm_set_creds(bprm); 474 } 475 476 static inline int security_bprm_check(struct linux_binprm *bprm) 477 { 478 return 0; 479 } 480 481 static inline void security_bprm_committing_creds(struct linux_binprm *bprm) 482 { 483 } 484 485 static inline void security_bprm_committed_creds(struct linux_binprm *bprm) 486 { 487 } 488 489 static inline int security_bprm_secureexec(struct linux_binprm *bprm) 490 { 491 return cap_bprm_secureexec(bprm); 492 } 493 494 static inline int security_sb_alloc(struct super_block *sb) 495 { 496 return 0; 497 } 498 499 static inline void security_sb_free(struct super_block *sb) 500 { } 501 502 static inline int security_sb_copy_data(char *orig, char *copy) 503 { 504 return 0; 505 } 506 507 static inline int security_sb_remount(struct super_block *sb, void *data) 508 { 509 return 0; 510 } 511 512 static inline int security_sb_kern_mount(struct super_block *sb, int flags, void *data) 513 { 514 return 0; 515 } 516 517 static inline int security_sb_show_options(struct seq_file *m, 518 struct super_block *sb) 519 { 520 return 0; 521 } 522 523 static inline int security_sb_statfs(struct dentry *dentry) 524 { 525 return 0; 526 } 527 528 static inline int security_sb_mount(const char *dev_name, struct path *path, 529 const char *type, unsigned long flags, 530 void *data) 531 { 532 return 0; 533 } 534 535 static inline int security_sb_umount(struct vfsmount *mnt, int flags) 536 { 537 return 0; 538 } 539 540 static inline int security_sb_pivotroot(struct path *old_path, 541 struct path *new_path) 542 { 543 return 0; 544 } 545 546 static inline int security_sb_set_mnt_opts(struct super_block *sb, 547 struct security_mnt_opts *opts, 548 unsigned long kern_flags, 549 unsigned long *set_kern_flags) 550 { 551 return 0; 552 } 553 554 static inline int security_sb_clone_mnt_opts(const struct super_block *oldsb, 555 struct super_block *newsb) 556 { 557 return 0; 558 } 559 560 static inline int security_sb_parse_opts_str(char *options, struct security_mnt_opts *opts) 561 { 562 return 0; 563 } 564 565 static inline int security_inode_alloc(struct inode *inode) 566 { 567 return 0; 568 } 569 570 static inline void security_inode_free(struct inode *inode) 571 { } 572 573 static inline int security_dentry_init_security(struct dentry *dentry, 574 int mode, 575 struct qstr *name, 576 void **ctx, 577 u32 *ctxlen) 578 { 579 return -EOPNOTSUPP; 580 } 581 582 583 static inline int security_inode_init_security(struct inode *inode, 584 struct inode *dir, 585 const struct qstr *qstr, 586 const initxattrs xattrs, 587 void *fs_data) 588 { 589 return 0; 590 } 591 592 static inline int security_old_inode_init_security(struct inode *inode, 593 struct inode *dir, 594 const struct qstr *qstr, 595 const char **name, 596 void **value, size_t *len) 597 { 598 return -EOPNOTSUPP; 599 } 600 601 static inline int security_inode_create(struct inode *dir, 602 struct dentry *dentry, 603 umode_t mode) 604 { 605 return 0; 606 } 607 608 static inline int security_inode_link(struct dentry *old_dentry, 609 struct inode *dir, 610 struct dentry *new_dentry) 611 { 612 return 0; 613 } 614 615 static inline int security_inode_unlink(struct inode *dir, 616 struct dentry *dentry) 617 { 618 return 0; 619 } 620 621 static inline int security_inode_symlink(struct inode *dir, 622 struct dentry *dentry, 623 const char *old_name) 624 { 625 return 0; 626 } 627 628 static inline int security_inode_mkdir(struct inode *dir, 629 struct dentry *dentry, 630 int mode) 631 { 632 return 0; 633 } 634 635 static inline int security_inode_rmdir(struct inode *dir, 636 struct dentry *dentry) 637 { 638 return 0; 639 } 640 641 static inline int security_inode_mknod(struct inode *dir, 642 struct dentry *dentry, 643 int mode, dev_t dev) 644 { 645 return 0; 646 } 647 648 static inline int security_inode_rename(struct inode *old_dir, 649 struct dentry *old_dentry, 650 struct inode *new_dir, 651 struct dentry *new_dentry, 652 unsigned int flags) 653 { 654 return 0; 655 } 656 657 static inline int security_inode_readlink(struct dentry *dentry) 658 { 659 return 0; 660 } 661 662 static inline int security_inode_follow_link(struct dentry *dentry, 663 struct inode *inode, 664 bool rcu) 665 { 666 return 0; 667 } 668 669 static inline int security_inode_permission(struct inode *inode, int mask) 670 { 671 return 0; 672 } 673 674 static inline int security_inode_setattr(struct dentry *dentry, 675 struct iattr *attr) 676 { 677 return 0; 678 } 679 680 static inline int security_inode_getattr(const struct path *path) 681 { 682 return 0; 683 } 684 685 static inline int security_inode_setxattr(struct dentry *dentry, 686 const char *name, const void *value, size_t size, int flags) 687 { 688 return cap_inode_setxattr(dentry, name, value, size, flags); 689 } 690 691 static inline void security_inode_post_setxattr(struct dentry *dentry, 692 const char *name, const void *value, size_t size, int flags) 693 { } 694 695 static inline int security_inode_getxattr(struct dentry *dentry, 696 const char *name) 697 { 698 return 0; 699 } 700 701 static inline int security_inode_listxattr(struct dentry *dentry) 702 { 703 return 0; 704 } 705 706 static inline int security_inode_removexattr(struct dentry *dentry, 707 const char *name) 708 { 709 return cap_inode_removexattr(dentry, name); 710 } 711 712 static inline int security_inode_need_killpriv(struct dentry *dentry) 713 { 714 return cap_inode_need_killpriv(dentry); 715 } 716 717 static inline int security_inode_killpriv(struct dentry *dentry) 718 { 719 return cap_inode_killpriv(dentry); 720 } 721 722 static inline int security_inode_getsecurity(const struct inode *inode, const char *name, void **buffer, bool alloc) 723 { 724 return -EOPNOTSUPP; 725 } 726 727 static inline int security_inode_setsecurity(struct inode *inode, const char *name, const void *value, size_t size, int flags) 728 { 729 return -EOPNOTSUPP; 730 } 731 732 static inline int security_inode_listsecurity(struct inode *inode, char *buffer, size_t buffer_size) 733 { 734 return 0; 735 } 736 737 static inline void security_inode_getsecid(const struct inode *inode, u32 *secid) 738 { 739 *secid = 0; 740 } 741 742 static inline int security_file_permission(struct file *file, int mask) 743 { 744 return 0; 745 } 746 747 static inline int security_file_alloc(struct file *file) 748 { 749 return 0; 750 } 751 752 static inline void security_file_free(struct file *file) 753 { } 754 755 static inline int security_file_ioctl(struct file *file, unsigned int cmd, 756 unsigned long arg) 757 { 758 return 0; 759 } 760 761 static inline int security_mmap_file(struct file *file, unsigned long prot, 762 unsigned long flags) 763 { 764 return 0; 765 } 766 767 static inline int security_mmap_addr(unsigned long addr) 768 { 769 return cap_mmap_addr(addr); 770 } 771 772 static inline int security_file_mprotect(struct vm_area_struct *vma, 773 unsigned long reqprot, 774 unsigned long prot) 775 { 776 return 0; 777 } 778 779 static inline int security_file_lock(struct file *file, unsigned int cmd) 780 { 781 return 0; 782 } 783 784 static inline int security_file_fcntl(struct file *file, unsigned int cmd, 785 unsigned long arg) 786 { 787 return 0; 788 } 789 790 static inline void security_file_set_fowner(struct file *file) 791 { 792 return; 793 } 794 795 static inline int security_file_send_sigiotask(struct task_struct *tsk, 796 struct fown_struct *fown, 797 int sig) 798 { 799 return 0; 800 } 801 802 static inline int security_file_receive(struct file *file) 803 { 804 return 0; 805 } 806 807 static inline int security_file_open(struct file *file, 808 const struct cred *cred) 809 { 810 return 0; 811 } 812 813 static inline int security_task_create(unsigned long clone_flags) 814 { 815 return 0; 816 } 817 818 static inline void security_task_free(struct task_struct *task) 819 { } 820 821 static inline int security_cred_alloc_blank(struct cred *cred, gfp_t gfp) 822 { 823 return 0; 824 } 825 826 static inline void security_cred_free(struct cred *cred) 827 { } 828 829 static inline int security_prepare_creds(struct cred *new, 830 const struct cred *old, 831 gfp_t gfp) 832 { 833 return 0; 834 } 835 836 static inline void security_transfer_creds(struct cred *new, 837 const struct cred *old) 838 { 839 } 840 841 static inline int security_kernel_act_as(struct cred *cred, u32 secid) 842 { 843 return 0; 844 } 845 846 static inline int security_kernel_create_files_as(struct cred *cred, 847 struct inode *inode) 848 { 849 return 0; 850 } 851 852 static inline int security_kernel_fw_from_file(struct file *file, 853 char *buf, size_t size) 854 { 855 return 0; 856 } 857 858 static inline int security_kernel_module_request(char *kmod_name) 859 { 860 return 0; 861 } 862 863 static inline int security_kernel_module_from_file(struct file *file) 864 { 865 return 0; 866 } 867 868 static inline int security_task_fix_setuid(struct cred *new, 869 const struct cred *old, 870 int flags) 871 { 872 return cap_task_fix_setuid(new, old, flags); 873 } 874 875 static inline int security_task_setpgid(struct task_struct *p, pid_t pgid) 876 { 877 return 0; 878 } 879 880 static inline int security_task_getpgid(struct task_struct *p) 881 { 882 return 0; 883 } 884 885 static inline int security_task_getsid(struct task_struct *p) 886 { 887 return 0; 888 } 889 890 static inline void security_task_getsecid(struct task_struct *p, u32 *secid) 891 { 892 *secid = 0; 893 } 894 895 static inline int security_task_setnice(struct task_struct *p, int nice) 896 { 897 return cap_task_setnice(p, nice); 898 } 899 900 static inline int security_task_setioprio(struct task_struct *p, int ioprio) 901 { 902 return cap_task_setioprio(p, ioprio); 903 } 904 905 static inline int security_task_getioprio(struct task_struct *p) 906 { 907 return 0; 908 } 909 910 static inline int security_task_setrlimit(struct task_struct *p, 911 unsigned int resource, 912 struct rlimit *new_rlim) 913 { 914 return 0; 915 } 916 917 static inline int security_task_setscheduler(struct task_struct *p) 918 { 919 return cap_task_setscheduler(p); 920 } 921 922 static inline int security_task_getscheduler(struct task_struct *p) 923 { 924 return 0; 925 } 926 927 static inline int security_task_movememory(struct task_struct *p) 928 { 929 return 0; 930 } 931 932 static inline int security_task_kill(struct task_struct *p, 933 struct siginfo *info, int sig, 934 u32 secid) 935 { 936 return 0; 937 } 938 939 static inline int security_task_wait(struct task_struct *p) 940 { 941 return 0; 942 } 943 944 static inline int security_task_prctl(int option, unsigned long arg2, 945 unsigned long arg3, 946 unsigned long arg4, 947 unsigned long arg5) 948 { 949 return cap_task_prctl(option, arg2, arg3, arg4, arg5); 950 } 951 952 static inline void security_task_to_inode(struct task_struct *p, struct inode *inode) 953 { } 954 955 static inline int security_ipc_permission(struct kern_ipc_perm *ipcp, 956 short flag) 957 { 958 return 0; 959 } 960 961 static inline void security_ipc_getsecid(struct kern_ipc_perm *ipcp, u32 *secid) 962 { 963 *secid = 0; 964 } 965 966 static inline int security_msg_msg_alloc(struct msg_msg *msg) 967 { 968 return 0; 969 } 970 971 static inline void security_msg_msg_free(struct msg_msg *msg) 972 { } 973 974 static inline int security_msg_queue_alloc(struct msg_queue *msq) 975 { 976 return 0; 977 } 978 979 static inline void security_msg_queue_free(struct msg_queue *msq) 980 { } 981 982 static inline int security_msg_queue_associate(struct msg_queue *msq, 983 int msqflg) 984 { 985 return 0; 986 } 987 988 static inline int security_msg_queue_msgctl(struct msg_queue *msq, int cmd) 989 { 990 return 0; 991 } 992 993 static inline int security_msg_queue_msgsnd(struct msg_queue *msq, 994 struct msg_msg *msg, int msqflg) 995 { 996 return 0; 997 } 998 999 static inline int security_msg_queue_msgrcv(struct msg_queue *msq, 1000 struct msg_msg *msg, 1001 struct task_struct *target, 1002 long type, int mode) 1003 { 1004 return 0; 1005 } 1006 1007 static inline int security_shm_alloc(struct shmid_kernel *shp) 1008 { 1009 return 0; 1010 } 1011 1012 static inline void security_shm_free(struct shmid_kernel *shp) 1013 { } 1014 1015 static inline int security_shm_associate(struct shmid_kernel *shp, 1016 int shmflg) 1017 { 1018 return 0; 1019 } 1020 1021 static inline int security_shm_shmctl(struct shmid_kernel *shp, int cmd) 1022 { 1023 return 0; 1024 } 1025 1026 static inline int security_shm_shmat(struct shmid_kernel *shp, 1027 char __user *shmaddr, int shmflg) 1028 { 1029 return 0; 1030 } 1031 1032 static inline int security_sem_alloc(struct sem_array *sma) 1033 { 1034 return 0; 1035 } 1036 1037 static inline void security_sem_free(struct sem_array *sma) 1038 { } 1039 1040 static inline int security_sem_associate(struct sem_array *sma, int semflg) 1041 { 1042 return 0; 1043 } 1044 1045 static inline int security_sem_semctl(struct sem_array *sma, int cmd) 1046 { 1047 return 0; 1048 } 1049 1050 static inline int security_sem_semop(struct sem_array *sma, 1051 struct sembuf *sops, unsigned nsops, 1052 int alter) 1053 { 1054 return 0; 1055 } 1056 1057 static inline void security_d_instantiate(struct dentry *dentry, struct inode *inode) 1058 { } 1059 1060 static inline int security_getprocattr(struct task_struct *p, char *name, char **value) 1061 { 1062 return -EINVAL; 1063 } 1064 1065 static inline int security_setprocattr(struct task_struct *p, char *name, void *value, size_t size) 1066 { 1067 return -EINVAL; 1068 } 1069 1070 static inline int security_netlink_send(struct sock *sk, struct sk_buff *skb) 1071 { 1072 return 0; 1073 } 1074 1075 static inline int security_ismaclabel(const char *name) 1076 { 1077 return 0; 1078 } 1079 1080 static inline int security_secid_to_secctx(u32 secid, char **secdata, u32 *seclen) 1081 { 1082 return -EOPNOTSUPP; 1083 } 1084 1085 static inline int security_secctx_to_secid(const char *secdata, 1086 u32 seclen, 1087 u32 *secid) 1088 { 1089 return -EOPNOTSUPP; 1090 } 1091 1092 static inline void security_release_secctx(char *secdata, u32 seclen) 1093 { 1094 } 1095 1096 static inline int security_inode_notifysecctx(struct inode *inode, void *ctx, u32 ctxlen) 1097 { 1098 return -EOPNOTSUPP; 1099 } 1100 static inline int security_inode_setsecctx(struct dentry *dentry, void *ctx, u32 ctxlen) 1101 { 1102 return -EOPNOTSUPP; 1103 } 1104 static inline int security_inode_getsecctx(struct inode *inode, void **ctx, u32 *ctxlen) 1105 { 1106 return -EOPNOTSUPP; 1107 } 1108 #endif /* CONFIG_SECURITY */ 1109 1110 #ifdef CONFIG_SECURITY_NETWORK 1111 1112 int security_unix_stream_connect(struct sock *sock, struct sock *other, struct sock *newsk); 1113 int security_unix_may_send(struct socket *sock, struct socket *other); 1114 int security_socket_create(int family, int type, int protocol, int kern); 1115 int security_socket_post_create(struct socket *sock, int family, 1116 int type, int protocol, int kern); 1117 int security_socket_bind(struct socket *sock, struct sockaddr *address, int addrlen); 1118 int security_socket_connect(struct socket *sock, struct sockaddr *address, int addrlen); 1119 int security_socket_listen(struct socket *sock, int backlog); 1120 int security_socket_accept(struct socket *sock, struct socket *newsock); 1121 int security_socket_sendmsg(struct socket *sock, struct msghdr *msg, int size); 1122 int security_socket_recvmsg(struct socket *sock, struct msghdr *msg, 1123 int size, int flags); 1124 int security_socket_getsockname(struct socket *sock); 1125 int security_socket_getpeername(struct socket *sock); 1126 int security_socket_getsockopt(struct socket *sock, int level, int optname); 1127 int security_socket_setsockopt(struct socket *sock, int level, int optname); 1128 int security_socket_shutdown(struct socket *sock, int how); 1129 int security_sock_rcv_skb(struct sock *sk, struct sk_buff *skb); 1130 int security_socket_getpeersec_stream(struct socket *sock, char __user *optval, 1131 int __user *optlen, unsigned len); 1132 int security_socket_getpeersec_dgram(struct socket *sock, struct sk_buff *skb, u32 *secid); 1133 int security_sk_alloc(struct sock *sk, int family, gfp_t priority); 1134 void security_sk_free(struct sock *sk); 1135 void security_sk_clone(const struct sock *sk, struct sock *newsk); 1136 void security_sk_classify_flow(struct sock *sk, struct flowi *fl); 1137 void security_req_classify_flow(const struct request_sock *req, struct flowi *fl); 1138 void security_sock_graft(struct sock*sk, struct socket *parent); 1139 int security_inet_conn_request(struct sock *sk, 1140 struct sk_buff *skb, struct request_sock *req); 1141 void security_inet_csk_clone(struct sock *newsk, 1142 const struct request_sock *req); 1143 void security_inet_conn_established(struct sock *sk, 1144 struct sk_buff *skb); 1145 int security_secmark_relabel_packet(u32 secid); 1146 void security_secmark_refcount_inc(void); 1147 void security_secmark_refcount_dec(void); 1148 int security_tun_dev_alloc_security(void **security); 1149 void security_tun_dev_free_security(void *security); 1150 int security_tun_dev_create(void); 1151 int security_tun_dev_attach_queue(void *security); 1152 int security_tun_dev_attach(struct sock *sk, void *security); 1153 int security_tun_dev_open(void *security); 1154 1155 #else /* CONFIG_SECURITY_NETWORK */ 1156 static inline int security_unix_stream_connect(struct sock *sock, 1157 struct sock *other, 1158 struct sock *newsk) 1159 { 1160 return 0; 1161 } 1162 1163 static inline int security_unix_may_send(struct socket *sock, 1164 struct socket *other) 1165 { 1166 return 0; 1167 } 1168 1169 static inline int security_socket_create(int family, int type, 1170 int protocol, int kern) 1171 { 1172 return 0; 1173 } 1174 1175 static inline int security_socket_post_create(struct socket *sock, 1176 int family, 1177 int type, 1178 int protocol, int kern) 1179 { 1180 return 0; 1181 } 1182 1183 static inline int security_socket_bind(struct socket *sock, 1184 struct sockaddr *address, 1185 int addrlen) 1186 { 1187 return 0; 1188 } 1189 1190 static inline int security_socket_connect(struct socket *sock, 1191 struct sockaddr *address, 1192 int addrlen) 1193 { 1194 return 0; 1195 } 1196 1197 static inline int security_socket_listen(struct socket *sock, int backlog) 1198 { 1199 return 0; 1200 } 1201 1202 static inline int security_socket_accept(struct socket *sock, 1203 struct socket *newsock) 1204 { 1205 return 0; 1206 } 1207 1208 static inline int security_socket_sendmsg(struct socket *sock, 1209 struct msghdr *msg, int size) 1210 { 1211 return 0; 1212 } 1213 1214 static inline int security_socket_recvmsg(struct socket *sock, 1215 struct msghdr *msg, int size, 1216 int flags) 1217 { 1218 return 0; 1219 } 1220 1221 static inline int security_socket_getsockname(struct socket *sock) 1222 { 1223 return 0; 1224 } 1225 1226 static inline int security_socket_getpeername(struct socket *sock) 1227 { 1228 return 0; 1229 } 1230 1231 static inline int security_socket_getsockopt(struct socket *sock, 1232 int level, int optname) 1233 { 1234 return 0; 1235 } 1236 1237 static inline int security_socket_setsockopt(struct socket *sock, 1238 int level, int optname) 1239 { 1240 return 0; 1241 } 1242 1243 static inline int security_socket_shutdown(struct socket *sock, int how) 1244 { 1245 return 0; 1246 } 1247 static inline int security_sock_rcv_skb(struct sock *sk, 1248 struct sk_buff *skb) 1249 { 1250 return 0; 1251 } 1252 1253 static inline int security_socket_getpeersec_stream(struct socket *sock, char __user *optval, 1254 int __user *optlen, unsigned len) 1255 { 1256 return -ENOPROTOOPT; 1257 } 1258 1259 static inline int security_socket_getpeersec_dgram(struct socket *sock, struct sk_buff *skb, u32 *secid) 1260 { 1261 return -ENOPROTOOPT; 1262 } 1263 1264 static inline int security_sk_alloc(struct sock *sk, int family, gfp_t priority) 1265 { 1266 return 0; 1267 } 1268 1269 static inline void security_sk_free(struct sock *sk) 1270 { 1271 } 1272 1273 static inline void security_sk_clone(const struct sock *sk, struct sock *newsk) 1274 { 1275 } 1276 1277 static inline void security_sk_classify_flow(struct sock *sk, struct flowi *fl) 1278 { 1279 } 1280 1281 static inline void security_req_classify_flow(const struct request_sock *req, struct flowi *fl) 1282 { 1283 } 1284 1285 static inline void security_sock_graft(struct sock *sk, struct socket *parent) 1286 { 1287 } 1288 1289 static inline int security_inet_conn_request(struct sock *sk, 1290 struct sk_buff *skb, struct request_sock *req) 1291 { 1292 return 0; 1293 } 1294 1295 static inline void security_inet_csk_clone(struct sock *newsk, 1296 const struct request_sock *req) 1297 { 1298 } 1299 1300 static inline void security_inet_conn_established(struct sock *sk, 1301 struct sk_buff *skb) 1302 { 1303 } 1304 1305 static inline int security_secmark_relabel_packet(u32 secid) 1306 { 1307 return 0; 1308 } 1309 1310 static inline void security_secmark_refcount_inc(void) 1311 { 1312 } 1313 1314 static inline void security_secmark_refcount_dec(void) 1315 { 1316 } 1317 1318 static inline int security_tun_dev_alloc_security(void **security) 1319 { 1320 return 0; 1321 } 1322 1323 static inline void security_tun_dev_free_security(void *security) 1324 { 1325 } 1326 1327 static inline int security_tun_dev_create(void) 1328 { 1329 return 0; 1330 } 1331 1332 static inline int security_tun_dev_attach_queue(void *security) 1333 { 1334 return 0; 1335 } 1336 1337 static inline int security_tun_dev_attach(struct sock *sk, void *security) 1338 { 1339 return 0; 1340 } 1341 1342 static inline int security_tun_dev_open(void *security) 1343 { 1344 return 0; 1345 } 1346 #endif /* CONFIG_SECURITY_NETWORK */ 1347 1348 #ifdef CONFIG_SECURITY_NETWORK_XFRM 1349 1350 int security_xfrm_policy_alloc(struct xfrm_sec_ctx **ctxp, 1351 struct xfrm_user_sec_ctx *sec_ctx, gfp_t gfp); 1352 int security_xfrm_policy_clone(struct xfrm_sec_ctx *old_ctx, struct xfrm_sec_ctx **new_ctxp); 1353 void security_xfrm_policy_free(struct xfrm_sec_ctx *ctx); 1354 int security_xfrm_policy_delete(struct xfrm_sec_ctx *ctx); 1355 int security_xfrm_state_alloc(struct xfrm_state *x, struct xfrm_user_sec_ctx *sec_ctx); 1356 int security_xfrm_state_alloc_acquire(struct xfrm_state *x, 1357 struct xfrm_sec_ctx *polsec, u32 secid); 1358 int security_xfrm_state_delete(struct xfrm_state *x); 1359 void security_xfrm_state_free(struct xfrm_state *x); 1360 int security_xfrm_policy_lookup(struct xfrm_sec_ctx *ctx, u32 fl_secid, u8 dir); 1361 int security_xfrm_state_pol_flow_match(struct xfrm_state *x, 1362 struct xfrm_policy *xp, 1363 const struct flowi *fl); 1364 int security_xfrm_decode_session(struct sk_buff *skb, u32 *secid); 1365 void security_skb_classify_flow(struct sk_buff *skb, struct flowi *fl); 1366 1367 #else /* CONFIG_SECURITY_NETWORK_XFRM */ 1368 1369 static inline int security_xfrm_policy_alloc(struct xfrm_sec_ctx **ctxp, 1370 struct xfrm_user_sec_ctx *sec_ctx, 1371 gfp_t gfp) 1372 { 1373 return 0; 1374 } 1375 1376 static inline int security_xfrm_policy_clone(struct xfrm_sec_ctx *old, struct xfrm_sec_ctx **new_ctxp) 1377 { 1378 return 0; 1379 } 1380 1381 static inline void security_xfrm_policy_free(struct xfrm_sec_ctx *ctx) 1382 { 1383 } 1384 1385 static inline int security_xfrm_policy_delete(struct xfrm_sec_ctx *ctx) 1386 { 1387 return 0; 1388 } 1389 1390 static inline int security_xfrm_state_alloc(struct xfrm_state *x, 1391 struct xfrm_user_sec_ctx *sec_ctx) 1392 { 1393 return 0; 1394 } 1395 1396 static inline int security_xfrm_state_alloc_acquire(struct xfrm_state *x, 1397 struct xfrm_sec_ctx *polsec, u32 secid) 1398 { 1399 return 0; 1400 } 1401 1402 static inline void security_xfrm_state_free(struct xfrm_state *x) 1403 { 1404 } 1405 1406 static inline int security_xfrm_state_delete(struct xfrm_state *x) 1407 { 1408 return 0; 1409 } 1410 1411 static inline int security_xfrm_policy_lookup(struct xfrm_sec_ctx *ctx, u32 fl_secid, u8 dir) 1412 { 1413 return 0; 1414 } 1415 1416 static inline int security_xfrm_state_pol_flow_match(struct xfrm_state *x, 1417 struct xfrm_policy *xp, const struct flowi *fl) 1418 { 1419 return 1; 1420 } 1421 1422 static inline int security_xfrm_decode_session(struct sk_buff *skb, u32 *secid) 1423 { 1424 return 0; 1425 } 1426 1427 static inline void security_skb_classify_flow(struct sk_buff *skb, struct flowi *fl) 1428 { 1429 } 1430 1431 #endif /* CONFIG_SECURITY_NETWORK_XFRM */ 1432 1433 #ifdef CONFIG_SECURITY_PATH 1434 int security_path_unlink(struct path *dir, struct dentry *dentry); 1435 int security_path_mkdir(struct path *dir, struct dentry *dentry, umode_t mode); 1436 int security_path_rmdir(struct path *dir, struct dentry *dentry); 1437 int security_path_mknod(struct path *dir, struct dentry *dentry, umode_t mode, 1438 unsigned int dev); 1439 int security_path_truncate(struct path *path); 1440 int security_path_symlink(struct path *dir, struct dentry *dentry, 1441 const char *old_name); 1442 int security_path_link(struct dentry *old_dentry, struct path *new_dir, 1443 struct dentry *new_dentry); 1444 int security_path_rename(struct path *old_dir, struct dentry *old_dentry, 1445 struct path *new_dir, struct dentry *new_dentry, 1446 unsigned int flags); 1447 int security_path_chmod(struct path *path, umode_t mode); 1448 int security_path_chown(struct path *path, kuid_t uid, kgid_t gid); 1449 int security_path_chroot(struct path *path); 1450 #else /* CONFIG_SECURITY_PATH */ 1451 static inline int security_path_unlink(struct path *dir, struct dentry *dentry) 1452 { 1453 return 0; 1454 } 1455 1456 static inline int security_path_mkdir(struct path *dir, struct dentry *dentry, 1457 umode_t mode) 1458 { 1459 return 0; 1460 } 1461 1462 static inline int security_path_rmdir(struct path *dir, struct dentry *dentry) 1463 { 1464 return 0; 1465 } 1466 1467 static inline int security_path_mknod(struct path *dir, struct dentry *dentry, 1468 umode_t mode, unsigned int dev) 1469 { 1470 return 0; 1471 } 1472 1473 static inline int security_path_truncate(struct path *path) 1474 { 1475 return 0; 1476 } 1477 1478 static inline int security_path_symlink(struct path *dir, struct dentry *dentry, 1479 const char *old_name) 1480 { 1481 return 0; 1482 } 1483 1484 static inline int security_path_link(struct dentry *old_dentry, 1485 struct path *new_dir, 1486 struct dentry *new_dentry) 1487 { 1488 return 0; 1489 } 1490 1491 static inline int security_path_rename(struct path *old_dir, 1492 struct dentry *old_dentry, 1493 struct path *new_dir, 1494 struct dentry *new_dentry, 1495 unsigned int flags) 1496 { 1497 return 0; 1498 } 1499 1500 static inline int security_path_chmod(struct path *path, umode_t mode) 1501 { 1502 return 0; 1503 } 1504 1505 static inline int security_path_chown(struct path *path, kuid_t uid, kgid_t gid) 1506 { 1507 return 0; 1508 } 1509 1510 static inline int security_path_chroot(struct path *path) 1511 { 1512 return 0; 1513 } 1514 #endif /* CONFIG_SECURITY_PATH */ 1515 1516 #ifdef CONFIG_KEYS 1517 #ifdef CONFIG_SECURITY 1518 1519 int security_key_alloc(struct key *key, const struct cred *cred, unsigned long flags); 1520 void security_key_free(struct key *key); 1521 int security_key_permission(key_ref_t key_ref, 1522 const struct cred *cred, unsigned perm); 1523 int security_key_getsecurity(struct key *key, char **_buffer); 1524 1525 #else 1526 1527 static inline int security_key_alloc(struct key *key, 1528 const struct cred *cred, 1529 unsigned long flags) 1530 { 1531 return 0; 1532 } 1533 1534 static inline void security_key_free(struct key *key) 1535 { 1536 } 1537 1538 static inline int security_key_permission(key_ref_t key_ref, 1539 const struct cred *cred, 1540 unsigned perm) 1541 { 1542 return 0; 1543 } 1544 1545 static inline int security_key_getsecurity(struct key *key, char **_buffer) 1546 { 1547 *_buffer = NULL; 1548 return 0; 1549 } 1550 1551 #endif 1552 #endif /* CONFIG_KEYS */ 1553 1554 #ifdef CONFIG_AUDIT 1555 #ifdef CONFIG_SECURITY 1556 int security_audit_rule_init(u32 field, u32 op, char *rulestr, void **lsmrule); 1557 int security_audit_rule_known(struct audit_krule *krule); 1558 int security_audit_rule_match(u32 secid, u32 field, u32 op, void *lsmrule, 1559 struct audit_context *actx); 1560 void security_audit_rule_free(void *lsmrule); 1561 1562 #else 1563 1564 static inline int security_audit_rule_init(u32 field, u32 op, char *rulestr, 1565 void **lsmrule) 1566 { 1567 return 0; 1568 } 1569 1570 static inline int security_audit_rule_known(struct audit_krule *krule) 1571 { 1572 return 0; 1573 } 1574 1575 static inline int security_audit_rule_match(u32 secid, u32 field, u32 op, 1576 void *lsmrule, struct audit_context *actx) 1577 { 1578 return 0; 1579 } 1580 1581 static inline void security_audit_rule_free(void *lsmrule) 1582 { } 1583 1584 #endif /* CONFIG_SECURITY */ 1585 #endif /* CONFIG_AUDIT */ 1586 1587 #ifdef CONFIG_SECURITYFS 1588 1589 extern struct dentry *securityfs_create_file(const char *name, umode_t mode, 1590 struct dentry *parent, void *data, 1591 const struct file_operations *fops); 1592 extern struct dentry *securityfs_create_dir(const char *name, struct dentry *parent); 1593 extern void securityfs_remove(struct dentry *dentry); 1594 1595 #else /* CONFIG_SECURITYFS */ 1596 1597 static inline struct dentry *securityfs_create_dir(const char *name, 1598 struct dentry *parent) 1599 { 1600 return ERR_PTR(-ENODEV); 1601 } 1602 1603 static inline struct dentry *securityfs_create_file(const char *name, 1604 umode_t mode, 1605 struct dentry *parent, 1606 void *data, 1607 const struct file_operations *fops) 1608 { 1609 return ERR_PTR(-ENODEV); 1610 } 1611 1612 static inline void securityfs_remove(struct dentry *dentry) 1613 {} 1614 1615 #endif 1616 1617 #ifdef CONFIG_SECURITY 1618 1619 static inline char *alloc_secdata(void) 1620 { 1621 return (char *)get_zeroed_page(GFP_KERNEL); 1622 } 1623 1624 static inline void free_secdata(void *secdata) 1625 { 1626 free_page((unsigned long)secdata); 1627 } 1628 1629 #else 1630 1631 static inline char *alloc_secdata(void) 1632 { 1633 return (char *)1; 1634 } 1635 1636 static inline void free_secdata(void *secdata) 1637 { } 1638 #endif /* CONFIG_SECURITY */ 1639 1640 #endif /* ! __LINUX_SECURITY_H */ 1641 1642