include/linux/security.h

1374 struct security_operations {  struct
1375 	char name[SECURITY_NAME_MAX + 1];
1377 	int (*ptrace_access_check) (struct task_struct *child, unsigned int mode);
1378 	int (*ptrace_traceme) (struct task_struct *parent);
1379 	int (*capget) (struct task_struct *target,
1382 	int (*capset) (struct cred *new,
1387 	int (*capable) (const struct cred *cred, struct user_namespace *ns,
1389 	int (*quotactl) (int cmds, int type, int id, struct super_block *sb);
1390 	int (*quota_on) (struct dentry *dentry);
1391 	int (*syslog) (int type);
1392 	int (*settime) (const struct timespec *ts, const struct timezone *tz);
1393 	int (*vm_enough_memory) (struct mm_struct *mm, long pages);
1395 	int (*bprm_set_creds) (struct linux_binprm *bprm);
1396 	int (*bprm_check_security) (struct linux_binprm *bprm);
1397 	int (*bprm_secureexec) (struct linux_binprm *bprm);
1398 	void (*bprm_committing_creds) (struct linux_binprm *bprm);
1399 	void (*bprm_committed_creds) (struct linux_binprm *bprm);
1401 	int (*sb_alloc_security) (struct super_block *sb);
1402 	void (*sb_free_security) (struct super_block *sb);
1403 	int (*sb_copy_data) (char *orig, char *copy);
1404 	int (*sb_remount) (struct super_block *sb, void *data);
1405 	int (*sb_kern_mount) (struct super_block *sb, int flags, void *data);
1406 	int (*sb_show_options) (struct seq_file *m, struct super_block *sb);
1407 	int (*sb_statfs) (struct dentry *dentry);
1408 	int (*sb_mount) (char *dev_name, struct path *path,
1410 	int (*sb_umount) (struct vfsmount *mnt, int flags);
1411 	int (*sb_pivotroot) (struct path *old_path,
1413 	int (*sb_set_mnt_opts) (struct super_block *sb,
1415 	void (*sb_clone_mnt_opts) (const struct super_block *oldsb,
1417 	int (*sb_parse_opts_str) (char *options, struct security_mnt_opts *opts);
1420 	int (*path_unlink) (struct path *dir, struct dentry *dentry);
1421 	int (*path_mkdir) (struct path *dir, struct dentry *dentry, umode_t mode);
1422 	int (*path_rmdir) (struct path *dir, struct dentry *dentry);
1423 	int (*path_mknod) (struct path *dir, struct dentry *dentry, umode_t mode,
1425 	int (*path_truncate) (struct path *path);
1426 	int (*path_symlink) (struct path *dir, struct dentry *dentry,
1428 	int (*path_link) (struct dentry *old_dentry, struct path *new_dir,
1430 	int (*path_rename) (struct path *old_dir, struct dentry *old_dentry,
1432 	int (*path_chmod) (struct path *path, umode_t mode);
1433 	int (*path_chown) (struct path *path, uid_t uid, gid_t gid);
1434 	int (*path_chroot) (struct path *path);
1437 	int (*inode_alloc_security) (struct inode *inode);
1438 	void (*inode_free_security) (struct inode *inode);
1439 	int (*inode_init_security) (struct inode *inode, struct inode *dir,
1442 	int (*inode_create) (struct inode *dir,
1444 	int (*inode_link) (struct dentry *old_dentry,
1446 	int (*inode_unlink) (struct inode *dir, struct dentry *dentry);
1447 	int (*inode_symlink) (struct inode *dir,
1449 	int (*inode_mkdir) (struct inode *dir, struct dentry *dentry, umode_t mode);
1450 	int (*inode_rmdir) (struct inode *dir, struct dentry *dentry);
1451 	int (*inode_mknod) (struct inode *dir, struct dentry *dentry,
1453 	int (*inode_rename) (struct inode *old_dir, struct dentry *old_dentry,
1455 	int (*inode_readlink) (struct dentry *dentry);
1456 	int (*inode_follow_link) (struct dentry *dentry, struct nameidata *nd);
1457 	int (*inode_permission) (struct inode *inode, int mask);
1458 	int (*inode_setattr)	(struct dentry *dentry, struct iattr *attr);
1459 	int (*inode_getattr) (struct vfsmount *mnt, struct dentry *dentry);
1460 	int (*inode_setxattr) (struct dentry *dentry, const char *name,
1462 	void (*inode_post_setxattr) (struct dentry *dentry, const char *name,
1464 	int (*inode_getxattr) (struct dentry *dentry, const char *name);
1465 	int (*inode_listxattr) (struct dentry *dentry);
1466 	int (*inode_removexattr) (struct dentry *dentry, const char *name);
1467 	int (*inode_need_killpriv) (struct dentry *dentry);
1468 	int (*inode_killpriv) (struct dentry *dentry);
1469 	int (*inode_getsecurity) (const struct inode *inode, const char *name, void **buffer, bool alloc);
1470 …de_setsecurity) (struct inode *inode, const char *name, const void *value, size_t size, int flags);
1471 	int (*inode_listsecurity) (struct inode *inode, char *buffer, size_t buffer_size);
1472 	void (*inode_getsecid) (const struct inode *inode, u32 *secid);
1474 	int (*file_permission) (struct file *file, int mask);
1475 	int (*file_alloc_security) (struct file *file);
1476 	void (*file_free_security) (struct file *file);
1477 	int (*file_ioctl) (struct file *file, unsigned int cmd,
1479 	int (*file_mmap) (struct file *file,
1483 	int (*file_mprotect) (struct vm_area_struct *vma,
1486 	int (*file_lock) (struct file *file, unsigned int cmd);
1487 	int (*file_fcntl) (struct file *file, unsigned int cmd,
1489 	int (*file_set_fowner) (struct file *file);
1490 	int (*file_send_sigiotask) (struct task_struct *tsk,
1492 	int (*file_receive) (struct file *file);
1493 	int (*dentry_open) (struct file *file, const struct cred *cred);
1495 	int (*task_create) (unsigned long clone_flags);
1496 	int (*cred_alloc_blank) (struct cred *cred, gfp_t gfp);
1497 	void (*cred_free) (struct cred *cred);
1498 	int (*cred_prepare)(struct cred *new, const struct cred *old,
1500 	void (*cred_transfer)(struct cred *new, const struct cred *old);
1501 	int (*kernel_act_as)(struct cred *new, u32 secid);
1502 	int (*kernel_create_files_as)(struct cred *new, struct inode *inode);
1503 	int (*kernel_module_request)(char *kmod_name);
1504 	int (*task_fix_setuid) (struct cred *new, const struct cred *old,
1506 	int (*task_setpgid) (struct task_struct *p, pid_t pgid);
1507 	int (*task_getpgid) (struct task_struct *p);
1508 	int (*task_getsid) (struct task_struct *p);
1509 	void (*task_getsecid) (struct task_struct *p, u32 *secid);
1510 	int (*task_setnice) (struct task_struct *p, int nice);
1511 	int (*task_setioprio) (struct task_struct *p, int ioprio);
1512 	int (*task_getioprio) (struct task_struct *p);
1513 	int (*task_setrlimit) (struct task_struct *p, unsigned int resource,
1515 	int (*task_setscheduler) (struct task_struct *p);
1516 	int (*task_getscheduler) (struct task_struct *p);
1517 	int (*task_movememory) (struct task_struct *p);
1518 	int (*task_kill) (struct task_struct *p,
1520 	int (*task_wait) (struct task_struct *p);
1521 	int (*task_prctl) (int option, unsigned long arg2,
1524 	void (*task_to_inode) (struct task_struct *p, struct inode *inode);
1526 	int (*ipc_permission) (struct kern_ipc_perm *ipcp, short flag);
1527 	void (*ipc_getsecid) (struct kern_ipc_perm *ipcp, u32 *secid);
1529 	int (*msg_msg_alloc_security) (struct msg_msg *msg);
1530 	void (*msg_msg_free_security) (struct msg_msg *msg);
1532 	int (*msg_queue_alloc_security) (struct msg_queue *msq);
1533 	void (*msg_queue_free_security) (struct msg_queue *msq);
1534 	int (*msg_queue_associate) (struct msg_queue *msq, int msqflg);
1535 	int (*msg_queue_msgctl) (struct msg_queue *msq, int cmd);
1536 	int (*msg_queue_msgsnd) (struct msg_queue *msq,
1538 	int (*msg_queue_msgrcv) (struct msg_queue *msq,
1543 	int (*shm_alloc_security) (struct shmid_kernel *shp);
1544 	void (*shm_free_security) (struct shmid_kernel *shp);
1545 	int (*shm_associate) (struct shmid_kernel *shp, int shmflg);
1546 	int (*shm_shmctl) (struct shmid_kernel *shp, int cmd);
1547 	int (*shm_shmat) (struct shmid_kernel *shp,
1550 	int (*sem_alloc_security) (struct sem_array *sma);
1551 	void (*sem_free_security) (struct sem_array *sma);
1552 	int (*sem_associate) (struct sem_array *sma, int semflg);
1553 	int (*sem_semctl) (struct sem_array *sma, int cmd);
1554 	int (*sem_semop) (struct sem_array *sma,
1557 	int (*netlink_send) (struct sock *sk, struct sk_buff *skb);
1559 	void (*d_instantiate) (struct dentry *dentry, struct inode *inode);
1561 	int (*getprocattr) (struct task_struct *p, char *name, char **value);
1562 	int (*setprocattr) (struct task_struct *p, char *name, void *value, size_t size);
1563 	int (*secid_to_secctx) (u32 secid, char **secdata, u32 *seclen);
1564 	int (*secctx_to_secid) (const char *secdata, u32 seclen, u32 *secid);
1565 	void (*release_secctx) (char *secdata, u32 seclen);
1567 	int (*inode_notifysecctx)(struct inode *inode, void *ctx, u32 ctxlen);
1568 	int (*inode_setsecctx)(struct dentry *dentry, void *ctx, u32 ctxlen);
1569 	int (*inode_getsecctx)(struct inode *inode, void **ctx, u32 *ctxlen);
1572 	int (*unix_stream_connect) (struct sock *sock, struct sock *other, struct sock *newsk);
1573 	int (*unix_may_send) (struct socket *sock, struct socket *other);
1575 	int (*socket_create) (int family, int type, int protocol, int kern);
1576 	int (*socket_post_create) (struct socket *sock, int family,
1578 	int (*socket_bind) (struct socket *sock,
1580 	int (*socket_connect) (struct socket *sock,
1582 	int (*socket_listen) (struct socket *sock, int backlog);
1583 	int (*socket_accept) (struct socket *sock, struct socket *newsock);
1584 	int (*socket_sendmsg) (struct socket *sock,
1586 	int (*socket_recvmsg) (struct socket *sock,
1588 	int (*socket_getsockname) (struct socket *sock);
1589 	int (*socket_getpeername) (struct socket *sock);
1590 	int (*socket_getsockopt) (struct socket *sock, int level, int optname);
1591 	int (*socket_setsockopt) (struct socket *sock, int level, int optname);
1592 	int (*socket_shutdown) (struct socket *sock, int how);
1593 	int (*socket_sock_rcv_skb) (struct sock *sk, struct sk_buff *skb);
1594 …et_getpeersec_stream) (struct socket *sock, char __user *optval, int __user *optlen, unsigned len);
1595 	int (*socket_getpeersec_dgram) (struct socket *sock, struct sk_buff *skb, u32 *secid);
1596 	int (*sk_alloc_security) (struct sock *sk, int family, gfp_t priority);
1597 	void (*sk_free_security) (struct sock *sk);
1598 	void (*sk_clone_security) (const struct sock *sk, struct sock *newsk);
1599 	void (*sk_getsecid) (struct sock *sk, u32 *secid);
1600 	void (*sock_graft) (struct sock *sk, struct socket *parent);
1601 	int (*inet_conn_request) (struct sock *sk, struct sk_buff *skb,
1603 	void (*inet_csk_clone) (struct sock *newsk, const struct request_sock *req);
1604 	void (*inet_conn_established) (struct sock *sk, struct sk_buff *skb);
1605 	int (*secmark_relabel_packet) (u32 secid);
1606 	void (*secmark_refcount_inc) (void);
1607 	void (*secmark_refcount_dec) (void);
1608 	void (*req_classify_flow) (const struct request_sock *req, struct flowi *fl);
1609 	int (*tun_dev_create)(void);
1610 	void (*tun_dev_post_create)(struct sock *sk);
1611 	int (*tun_dev_attach)(struct sock *sk);
1615 	int (*xfrm_policy_alloc_security) (struct xfrm_sec_ctx **ctxp,
1617 	int (*xfrm_policy_clone_security) (struct xfrm_sec_ctx *old_ctx, struct xfrm_sec_ctx **new_ctx);
1618 	void (*xfrm_policy_free_security) (struct xfrm_sec_ctx *ctx);
1619 	int (*xfrm_policy_delete_security) (struct xfrm_sec_ctx *ctx);
1620 	int (*xfrm_state_alloc_security) (struct xfrm_state *x,
1623 	void (*xfrm_state_free_security) (struct xfrm_state *x);
1624 	int (*xfrm_state_delete_security) (struct xfrm_state *x);
1625 	int (*xfrm_policy_lookup) (struct xfrm_sec_ctx *ctx, u32 fl_secid, u8 dir);
1626 	int (*xfrm_state_pol_flow_match) (struct xfrm_state *x,
1629 	int (*xfrm_decode_session) (struct sk_buff *skb, u32 *secid, int ckall);
1653 extern int security_module_enable(struct security_operations *ops);  argument