Something went wrong. Try again.
Linux kernel mirror (for testing) git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Something went wrong. Try again.
12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182// SPDX-License-Identifier: GPL-2.0-only/* * Landlock LSM - Security framework setup * * Copyright © 2016-2020 Mickaël Salaün <mic@digikod.net> * Copyright © 2018-2020 ANSSI */
#include <linux/bits.h>#include <linux/init.h>#include <linux/lsm_hooks.h>#include <uapi/linux/lsm.h>
#include "common.h"#include "cred.h"#include "errata.h"#include "fs.h"#include "id.h"#include "net.h"#include "setup.h"#include "task.h"
bool landlock_initialized __ro_after_init = false;
const struct lsm_id landlock_lsmid = { .name = LANDLOCK_NAME, .id = LSM_ID_LANDLOCK,};
struct lsm_blob_sizes landlock_blob_sizes __ro_after_init = { .lbs_cred = sizeof(struct landlock_cred_security), .lbs_file = sizeof(struct landlock_file_security), .lbs_inode = sizeof(struct landlock_inode_security), .lbs_superblock = sizeof(struct landlock_superblock_security),};
int landlock_errata __ro_after_init;
static void __init compute_errata(void){ size_t i;
#ifndef __has_include /* * This is a safeguard to make sure the compiler implements * __has_include (see errata.h). */ WARN_ON_ONCE(1); return;#endif
for (i = 0; landlock_errata_init[i].number; i++) { const int prev_errata = landlock_errata;
if (WARN_ON_ONCE(landlock_errata_init[i].abi > landlock_abi_version)) continue;
landlock_errata |= BIT(landlock_errata_init[i].number - 1); WARN_ON_ONCE(prev_errata == landlock_errata); }}
static int __init landlock_init(void){ compute_errata(); landlock_add_cred_hooks(); landlock_add_task_hooks(); landlock_add_fs_hooks(); landlock_add_net_hooks(); landlock_init_id(); landlock_initialized = true; pr_info("Up and running.\n"); return 0;}
DEFINE_LSM(LANDLOCK_NAME) = { .id = &landlock_lsmid, .init = landlock_init, .blobs = &landlock_blob_sizes,};