mirror of
https://github.com/torvalds/linux.git
synced 2026-04-18 06:44:00 -04:00
6af36aeb14
Stacked filesystems such as overlayfs do not currently provide the necessary mechanisms for LSMs to properly enforce access controls on the mmap() and mprotect() operations. In order to resolve this gap, a LSM security blob is being added to the backing_file struct and the following new LSM hooks are being created: security_backing_file_alloc() security_backing_file_free() security_mmap_backing_file() The first two hooks are to manage the lifecycle of the LSM security blob in the backing_file struct, while the third provides a new mmap() access control point for the underlying backing file. It is also expected that LSMs will likely want to update their security_file_mprotect() callback to address issues with their mprotect() controls, but that does not require a change to the security_file_mprotect() LSM hook. There are a three other small changes to support these new LSM hooks: * Pass the user file associated with a backing file down to alloc_empty_backing_file() so it can be included in the security_backing_file_alloc() hook. * Add getter and setter functions for the backing_file struct LSM blob as the backing_file struct remains private to fs/file_table.c. * Constify the file struct field in the LSM common_audit_data struct to better support LSMs that need to pass a const file struct pointer into the common LSM audit code. Thanks to Arnd Bergmann for identifying the missing EXPORT_SYMBOL_GPL() and supplying a fixup. Cc: stable@vger.kernel.org Cc: linux-fsdevel@vger.kernel.org Cc: linux-unionfs@vger.kernel.org Cc: linux-erofs@lists.ozlabs.org Reviewed-by: Amir Goldstein <amir73il@gmail.com> Reviewed-by: Serge Hallyn <serge@hallyn.com> Reviewed-by: Christian Brauner <brauner@kernel.org> Signed-off-by: Paul Moore <paul@paul-moore.com>
51 lines
1.1 KiB
C
51 lines
1.1 KiB
C
// SPDX-License-Identifier: GPL-2.0-or-later
|
|
/*
|
|
* LSM functions
|
|
*/
|
|
|
|
#ifndef _LSM_H_
|
|
#define _LSM_H_
|
|
|
|
#include <linux/printk.h>
|
|
#include <linux/lsm_hooks.h>
|
|
#include <linux/lsm_count.h>
|
|
|
|
/* LSM debugging */
|
|
extern bool lsm_debug;
|
|
#define lsm_pr(...) pr_info(__VA_ARGS__)
|
|
#define lsm_pr_cont(...) pr_cont(__VA_ARGS__)
|
|
#define lsm_pr_dbg(...) \
|
|
do { \
|
|
if (lsm_debug) \
|
|
pr_info(__VA_ARGS__); \
|
|
} while (0)
|
|
|
|
/* List of configured LSMs */
|
|
extern unsigned int lsm_active_cnt;
|
|
extern const struct lsm_id *lsm_idlist[];
|
|
|
|
/* LSM blob configuration */
|
|
extern struct lsm_blob_sizes blob_sizes;
|
|
|
|
/* LSM blob caches */
|
|
extern struct kmem_cache *lsm_file_cache;
|
|
extern struct kmem_cache *lsm_backing_file_cache;
|
|
extern struct kmem_cache *lsm_inode_cache;
|
|
|
|
/* LSM blob allocators */
|
|
int lsm_cred_alloc(struct cred *cred, gfp_t gfp);
|
|
int lsm_task_alloc(struct task_struct *task);
|
|
|
|
/* LSM framework initializers */
|
|
|
|
#ifdef CONFIG_SECURITYFS
|
|
int securityfs_init(void);
|
|
#else
|
|
static inline int securityfs_init(void)
|
|
{
|
|
return 0;
|
|
}
|
|
#endif /* CONFIG_SECURITYFS */
|
|
|
|
#endif /* _LSM_H_ */
|