147 extern int cap_capable(const struct cred *cred, struct user_namespace *ns,
148 		       int cap, unsigned int opts);
149 extern int cap_settime(const struct timespec64 *ts, const struct timezone *tz);
150 extern int cap_ptrace_access_check(struct task_struct *child, unsigned int mode);
151 extern int cap_ptrace_traceme(struct task_struct *parent);
152 extern int cap_capget(const struct task_struct *target, kernel_cap_t *effective,
154 extern int cap_capset(struct cred *new, const struct cred *old,
158 extern int cap_bprm_creds_from_file(struct linux_binprm *bprm, const struct file *file);
159 int cap_inode_setxattr(struct dentry *dentry, const char *name,
160 		       const void *value, size_t size, int flags);
161 int cap_inode_removexattr(struct mnt_idmap *idmap,
163 int cap_inode_need_killpriv(struct dentry *dentry);
164 int cap_inode_killpriv(struct mnt_idmap *idmap, struct dentry *dentry);
165 int cap_inode_getsecurity(struct mnt_idmap *idmap,
168 extern int cap_mmap_addr(unsigned long addr);
169 extern int cap_mmap_file(struct file *file, unsigned long reqprot,
171 extern int cap_task_fix_setuid(struct cred *new, const struct cred *old, int flags);
172 extern int cap_task_prctl(int option, unsigned long arg2, unsigned long arg3,
174 extern int cap_task_setscheduler(struct task_struct *p);
175 extern int cap_task_setioprio(struct task_struct *p, int ioprio);
176 extern int cap_task_setnice(struct task_struct *p, int nice);
177 extern int cap_vm_enough_memory(struct mm_struct *mm, long pages);
230 extern int mmap_min_addr_handler(struct ctl_table *table, int write,
235 typedef int (*initxattrs) (struct inode *inode,
261 int call_blocking_lsm_notifier(enum lsm_event event, void *data);
262 int register_blocking_lsm_notifier(struct notifier_block *nb);
263 int unregister_blocking_lsm_notifier(struct notifier_block *nb);
266 extern int security_init(void);
267 extern int early_security_init(void);
271 int security_binder_set_context_mgr(const struct cred *mgr);
272 int security_binder_transaction(const struct cred *from,
274 int security_binder_transfer_binder(const struct cred *from,
276 int security_binder_transfer_file(const struct cred *from,
278 int security_ptrace_access_check(struct task_struct *child, unsigned int mode);
279 int security_ptrace_traceme(struct task_struct *parent);
280 int security_capget(const struct task_struct *target,
284 int security_capset(struct cred *new, const struct cred *old,
288 int security_capable(const struct cred *cred,
290 		       int cap,
291 		       unsigned int opts);
292 int security_quotactl(int cmds, int type, int id, const struct super_block *sb);
293 int security_quota_on(struct dentry *dentry);
294 int security_syslog(int type);
295 int security_settime64(const struct timespec64 *ts, const struct timezone *tz);
296 int security_vm_enough_memory_mm(struct mm_struct *mm, long pages);
297 int security_bprm_creds_for_exec(struct linux_binprm *bprm);
298 int security_bprm_creds_from_file(struct linux_binprm *bprm, const struct file *file);
299 int security_bprm_check(struct linux_binprm *bprm);
302 int security_fs_context_submount(struct fs_context *fc, struct super_block *reference);
303 int security_fs_context_dup(struct fs_context *fc, struct fs_context *src_fc);
304 int security_fs_context_parse_param(struct fs_context *fc, struct fs_parameter *param);
305 int security_sb_alloc(struct super_block *sb);
309 int security_sb_eat_lsm_opts(char *options, void **mnt_opts);
310 int security_sb_mnt_opts_compat(struct super_block *sb, void *mnt_opts);
311 int security_sb_remount(struct super_block *sb, void *mnt_opts);
312 int security_sb_kern_mount(const struct super_block *sb);
313 int security_sb_show_options(struct seq_file *m, struct super_block *sb);
314 int security_sb_statfs(struct dentry *dentry);
315 int security_sb_mount(const char *dev_name, const struct path *path,
317 int security_sb_umount(struct vfsmount *mnt, int flags);
318 int security_sb_pivotroot(const struct path *old_path, const struct path *new_path);
319 int security_sb_set_mnt_opts(struct super_block *sb,
323 int security_sb_clone_mnt_opts(const struct super_block *oldsb,
327 int security_move_mount(const struct path *from_path, const struct path *to_path);
328 int security_dentry_init_security(struct dentry *dentry, int mode,
332 int security_dentry_create_files_as(struct dentry *dentry, int mode,
336 int security_path_notify(const struct path *path, u64 mask,
337 					unsigned int obj_type);
338 int security_inode_alloc(struct inode *inode);
340 int security_inode_init_security(struct inode *inode, struct inode *dir,
343 int security_inode_init_security_anon(struct inode *inode,
346 int security_inode_create(struct inode *dir, struct dentry *dentry, umode_t mode);
347 int security_inode_link(struct dentry *old_dentry, struct inode *dir,
349 int security_inode_unlink(struct inode *dir, struct dentry *dentry);
350 int security_inode_symlink(struct inode *dir, struct dentry *dentry,
352 int security_inode_mkdir(struct inode *dir, struct dentry *dentry, umode_t mode);
353 int security_inode_rmdir(struct inode *dir, struct dentry *dentry);
354 int security_inode_mknod(struct inode *dir, struct dentry *dentry, umode_t mode, dev_t dev);
355 int security_inode_rename(struct inode *old_dir, struct dentry *old_dentry,
357 			  unsigned int flags);
358 int security_inode_readlink(struct dentry *dentry);
359 int security_inode_follow_link(struct dentry *dentry, struct inode *inode,
361 int security_inode_permission(struct inode *inode, int mask);
362 int security_inode_setattr(struct mnt_idmap *idmap,
364 int security_inode_getattr(const struct path *path);
365 int security_inode_setxattr(struct mnt_idmap *idmap,
367 			    const void *value, size_t size, int flags);
368 int security_inode_set_acl(struct mnt_idmap *idmap,
371 int security_inode_get_acl(struct mnt_idmap *idmap,
373 int security_inode_remove_acl(struct mnt_idmap *idmap,
376 				  const void *value, size_t size, int flags);
377 int security_inode_getxattr(struct dentry *dentry, const char *name);
378 int security_inode_listxattr(struct dentry *dentry);
379 int security_inode_removexattr(struct mnt_idmap *idmap,
381 int security_inode_need_killpriv(struct dentry *dentry);
382 int security_inode_killpriv(struct mnt_idmap *idmap, struct dentry *dentry);
383 int security_inode_getsecurity(struct mnt_idmap *idmap,
386 int security_inode_setsecurity(struct inode *inode, const char *name, const void *value, size_t siz…
387 int security_inode_listsecurity(struct inode *inode, char *buffer, size_t buffer_size);
389 int security_inode_copy_up(struct dentry *src, struct cred **new);
390 int security_inode_copy_up_xattr(const char *name);
391 int security_kernfs_init_security(struct kernfs_node *kn_dir,
393 int security_file_permission(struct file *file, int mask);
394 int security_file_alloc(struct file *file);
396 int security_file_ioctl(struct file *file, unsigned int cmd, unsigned long arg);
397 int security_file_ioctl_compat(struct file *file, unsigned int cmd,
399 int security_mmap_file(struct file *file, unsigned long prot,
401 int security_mmap_addr(unsigned long addr);
402 int security_file_mprotect(struct vm_area_struct *vma, unsigned long reqprot,
404 int security_file_lock(struct file *file, unsigned int cmd);
405 int security_file_fcntl(struct file *file, unsigned int cmd, unsigned long arg);
407 int security_file_send_sigiotask(struct task_struct *tsk,
408 				 struct fown_struct *fown, int sig);
409 int security_file_receive(struct file *file);
410 int security_file_open(struct file *file);
411 int security_file_truncate(struct file *file);
412 int security_task_alloc(struct task_struct *task, unsigned long clone_flags);
414 int security_cred_alloc_blank(struct cred *cred, gfp_t gfp);
416 int security_prepare_creds(struct cred *new, const struct cred *old, gfp_t gfp);
419 int security_kernel_act_as(struct cred *new, u32 secid);
420 int security_kernel_create_files_as(struct cred *new, struct inode *inode);
421 int security_kernel_module_request(char *kmod_name);
422 int security_kernel_load_data(enum kernel_load_data_id id, bool contents);
423 int security_kernel_post_load_data(char *buf, loff_t size,
426 int security_kernel_read_file(struct file *file, enum kernel_read_file_id id,
428 int security_kernel_post_read_file(struct file *file, char *buf, loff_t size,
430 int security_task_fix_setuid(struct cred *new, const struct cred *old,
431 			     int flags);
432 int security_task_fix_setgid(struct cred *new, const struct cred *old,
433 			     int flags);
434 int security_task_fix_setgroups(struct cred *new, const struct cred *old);
435 int security_task_setpgid(struct task_struct *p, pid_t pgid);
436 int security_task_getpgid(struct task_struct *p);
437 int security_task_getsid(struct task_struct *p);
440 int security_task_setnice(struct task_struct *p, int nice);
441 int security_task_setioprio(struct task_struct *p, int ioprio);
442 int security_task_getioprio(struct task_struct *p);
443 int security_task_prlimit(const struct cred *cred, const struct cred *tcred,
444 			  unsigned int flags);
445 int security_task_setrlimit(struct task_struct *p, unsigned int resource,
447 int security_task_setscheduler(struct task_struct *p);
448 int security_task_getscheduler(struct task_struct *p);
449 int security_task_movememory(struct task_struct *p);
450 int security_task_kill(struct task_struct *p, struct kernel_siginfo *info,
451 			int sig, const struct cred *cred);
452 int security_task_prctl(int option, unsigned long arg2, unsigned long arg3,
455 int security_create_user_ns(const struct cred *cred);
456 int security_ipc_permission(struct kern_ipc_perm *ipcp, short flag);
458 int security_msg_msg_alloc(struct msg_msg *msg);
460 int security_msg_queue_alloc(struct kern_ipc_perm *msq);
462 int security_msg_queue_associate(struct kern_ipc_perm *msq, int msqflg);
463 int security_msg_queue_msgctl(struct kern_ipc_perm *msq, int cmd);
464 int security_msg_queue_msgsnd(struct kern_ipc_perm *msq,
465 			      struct msg_msg *msg, int msqflg);
466 int security_msg_queue_msgrcv(struct kern_ipc_perm *msq, struct msg_msg *msg,
467 			      struct task_struct *target, long type, int mode);
468 int security_shm_alloc(struct kern_ipc_perm *shp);
470 int security_shm_associate(struct kern_ipc_perm *shp, int shmflg);
471 int security_shm_shmctl(struct kern_ipc_perm *shp, int cmd);
472 int security_shm_shmat(struct kern_ipc_perm *shp, char __user *shmaddr, int shmflg);
473 int security_sem_alloc(struct kern_ipc_perm *sma);
475 int security_sem_associate(struct kern_ipc_perm *sma, int semflg);
476 int security_sem_semctl(struct kern_ipc_perm *sma, int cmd);
477 int security_sem_semop(struct kern_ipc_perm *sma, struct sembuf *sops,
478 			unsigned nsops, int alter);
480 int security_getselfattr(unsigned int attr, struct lsm_ctx __user *ctx,
482 int security_setselfattr(unsigned int attr, struct lsm_ctx __user *ctx,
484 int security_getprocattr(struct task_struct *p, int lsmid, const char *name,
486 int security_setprocattr(int lsmid, const char *name, void *value, size_t size);
487 int security_netlink_send(struct sock *sk, struct sk_buff *skb);
488 int security_ismaclabel(const char *name);
489 int security_secid_to_secctx(u32 secid, char **secdata, u32 *seclen);
490 int security_secctx_to_secid(const char *secdata, u32 seclen, u32 *secid);
493 int security_inode_notifysecctx(struct inode *inode, void *ctx, u32 ctxlen);
494 int security_inode_setsecctx(struct dentry *dentry, void *ctx, u32 ctxlen);
495 int security_inode_getsecctx(struct inode *inode, void **ctx, u32 *ctxlen);
496 int security_locked_down(enum lockdown_reason what);
497 int lsm_fill_user_ctx(struct lsm_ctx __user *uctx, size_t *uctx_len,
501 static inline int call_blocking_lsm_notifier(enum lsm_event event, void *data)  in call_blocking_lsm_notifier()
506 static inline int register_blocking_lsm_notifier(struct notifier_block *nb)  in register_blocking_lsm_notifier()
511 static inline  int unregister_blocking_lsm_notifier(struct notifier_block *nb)  in unregister_blocking_lsm_notifier()
530 static inline int security_init(void)  in security_init()
535 static inline int early_security_init(void)  in early_security_init()
540 static inline int security_binder_set_context_mgr(const struct cred *mgr)  in security_binder_set_context_mgr()
545 static inline int security_binder_transaction(const struct cred *from,  in security_binder_transaction()
551 static inline int security_binder_transfer_binder(const struct cred *from,  in security_binder_transfer_binder()
557 static inline int security_binder_transfer_file(const struct cred *from,  in security_binder_transfer_file()
564 static inline int security_ptrace_access_check(struct task_struct *child,  in security_ptrace_access_check()
565 					     unsigned int mode)  in security_ptrace_access_check()
570 static inline int security_ptrace_traceme(struct task_struct *parent)  in security_ptrace_traceme()
575 static inline int security_capget(const struct task_struct *target,  in security_capget()
583 static inline int security_capset(struct cred *new,  in security_capset()
592 static inline int security_capable(const struct cred *cred,  in security_capable()
594 				   int cap,  in security_capable()
595 				   unsigned int opts)  in security_capable()
600 static inline int security_quotactl(int cmds, int type, int id,  in security_quotactl()
606 static inline int security_quota_on(struct dentry *dentry)  in security_quota_on()
611 static inline int security_syslog(int type)  in security_syslog()
616 static inline int security_settime64(const struct timespec64 *ts,  in security_settime64()
622 static inline int security_vm_enough_memory_mm(struct mm_struct *mm, long pages)  in security_vm_enough_memory_mm()
627 static inline int security_bprm_creds_for_exec(struct linux_binprm *bprm)  in security_bprm_creds_for_exec()
632 static inline int security_bprm_creds_from_file(struct linux_binprm *bprm,  in security_bprm_creds_from_file()
638 static inline int security_bprm_check(struct linux_binprm *bprm)  in security_bprm_check()
651 static inline int security_fs_context_submount(struct fs_context *fc,  in security_fs_context_submount()
656 static inline int security_fs_context_dup(struct fs_context *fc,  in security_fs_context_dup()
661 static inline int security_fs_context_parse_param(struct fs_context *fc,  in security_fs_context_parse_param()
667 static inline int security_sb_alloc(struct super_block *sb)  in security_sb_alloc()
678 static inline int security_sb_eat_lsm_opts(char *options,  in security_sb_eat_lsm_opts()
684 static inline int security_sb_remount(struct super_block *sb,  in security_sb_remount()
690 static inline int security_sb_mnt_opts_compat(struct super_block *sb,  in security_sb_mnt_opts_compat()
697 static inline int security_sb_kern_mount(struct super_block *sb)  in security_sb_kern_mount()
702 static inline int security_sb_show_options(struct seq_file *m,  in security_sb_show_options()
708 static inline int security_sb_statfs(struct dentry *dentry)  in security_sb_statfs()
713 static inline int security_sb_mount(const char *dev_name, const struct path *path,  in security_sb_mount()
720 static inline int security_sb_umount(struct vfsmount *mnt, int flags)  in security_sb_umount()
725 static inline int security_sb_pivotroot(const struct path *old_path,  in security_sb_pivotroot()
731 static inline int security_sb_set_mnt_opts(struct super_block *sb,  in security_sb_set_mnt_opts()
739 static inline int security_sb_clone_mnt_opts(const struct super_block *oldsb,  in security_sb_clone_mnt_opts()
747 static inline int security_move_mount(const struct path *from_path,  in security_move_mount()
753 static inline int security_path_notify(const struct path *path, u64 mask,  in security_path_notify()
754 				unsigned int obj_type)  in security_path_notify()
759 static inline int security_inode_alloc(struct inode *inode)  in security_inode_alloc()
767 static inline int security_dentry_init_security(struct dentry *dentry,  in security_dentry_init_security()
768 						 int mode,  in security_dentry_init_security()
777 static inline int security_dentry_create_files_as(struct dentry *dentry,  in security_dentry_create_files_as()
778 						  int mode, struct qstr *name,  in security_dentry_create_files_as()
786 static inline int security_inode_init_security(struct inode *inode,  in security_inode_init_security()
795 static inline int security_inode_init_security_anon(struct inode *inode,  in security_inode_init_security_anon()
802 static inline int security_inode_create(struct inode *dir,  in security_inode_create()
809 static inline int security_inode_link(struct dentry *old_dentry,  in security_inode_link()
816 static inline int security_inode_unlink(struct inode *dir,  in security_inode_unlink()
822 static inline int security_inode_symlink(struct inode *dir,  in security_inode_symlink()
829 static inline int security_inode_mkdir(struct inode *dir,  in security_inode_mkdir()
831 					int mode)  in security_inode_mkdir()
836 static inline int security_inode_rmdir(struct inode *dir,  in security_inode_rmdir()
842 static inline int security_inode_mknod(struct inode *dir,  in security_inode_mknod()
844 					int mode, dev_t dev)  in security_inode_mknod()
849 static inline int security_inode_rename(struct inode *old_dir,  in security_inode_rename()
853 					 unsigned int flags)  in security_inode_rename()
858 static inline int security_inode_readlink(struct dentry *dentry)  in security_inode_readlink()
863 static inline int security_inode_follow_link(struct dentry *dentry,  in security_inode_follow_link()
870 static inline int security_inode_permission(struct inode *inode, int mask)  in security_inode_permission()
875 static inline int security_inode_setattr(struct mnt_idmap *idmap,  in security_inode_setattr()
882 static inline int security_inode_getattr(const struct path *path)  in security_inode_getattr()
887 static inline int security_inode_setxattr(struct mnt_idmap *idmap,  in security_inode_setxattr()
889 		size_t size, int flags)  in security_inode_setxattr()
894 static inline int security_inode_set_acl(struct mnt_idmap *idmap,  in security_inode_set_acl()
902 static inline int security_inode_get_acl(struct mnt_idmap *idmap,  in security_inode_get_acl()
909 static inline int security_inode_remove_acl(struct mnt_idmap *idmap,  in security_inode_remove_acl()
917 		const char *name, const void *value, size_t size, int flags)  in security_inode_post_setxattr()
920 static inline int security_inode_getxattr(struct dentry *dentry,  in security_inode_getxattr()
926 static inline int security_inode_listxattr(struct dentry *dentry)  in security_inode_listxattr()
931 static inline int security_inode_removexattr(struct mnt_idmap *idmap,  in security_inode_removexattr()
938 static inline int security_inode_need_killpriv(struct dentry *dentry)  in security_inode_need_killpriv()
943 static inline int security_inode_killpriv(struct mnt_idmap *idmap,  in security_inode_killpriv()
949 static inline int security_inode_getsecurity(struct mnt_idmap *idmap,  in security_inode_getsecurity()
957 static inline int security_inode_setsecurity(struct inode *inode, const char *name, const void *val…  in security_inode_setsecurity()
962 static inline int security_inode_listsecurity(struct inode *inode, char *buffer, size_t buffer_size)  in security_inode_listsecurity()
972 static inline int security_inode_copy_up(struct dentry *src, struct cred **new)  in security_inode_copy_up()
977 static inline int security_kernfs_init_security(struct kernfs_node *kn_dir,  in security_kernfs_init_security()
983 static inline int security_inode_copy_up_xattr(const char *name)  in security_inode_copy_up_xattr()
988 static inline int security_file_permission(struct file *file, int mask)  in security_file_permission()
993 static inline int security_file_alloc(struct file *file)  in security_file_alloc()
1001 static inline int security_file_ioctl(struct file *file, unsigned int cmd,  in security_file_ioctl()
1007 static inline int security_file_ioctl_compat(struct file *file,  in security_file_ioctl_compat()
1008 					     unsigned int cmd,  in security_file_ioctl_compat()
1014 static inline int security_mmap_file(struct file *file, unsigned long prot,  in security_mmap_file()
1020 static inline int security_mmap_addr(unsigned long addr)  in security_mmap_addr()
1025 static inline int security_file_mprotect(struct vm_area_struct *vma,  in security_file_mprotect()
1032 static inline int security_file_lock(struct file *file, unsigned int cmd)  in security_file_lock()
1037 static inline int security_file_fcntl(struct file *file, unsigned int cmd,  in security_file_fcntl()
1048 static inline int security_file_send_sigiotask(struct task_struct *tsk,  in security_file_send_sigiotask()
1050 					       int sig)  in security_file_send_sigiotask()
1055 static inline int security_file_receive(struct file *file)  in security_file_receive()
1060 static inline int security_file_open(struct file *file)  in security_file_open()
1065 static inline int security_file_truncate(struct file *file)  in security_file_truncate()
1070 static inline int security_task_alloc(struct task_struct *task,  in security_task_alloc()
1079 static inline int security_cred_alloc_blank(struct cred *cred, gfp_t gfp)  in security_cred_alloc_blank()
1087 static inline int security_prepare_creds(struct cred *new,  in security_prepare_creds()
1104 static inline int security_kernel_act_as(struct cred *cred, u32 secid)  in security_kernel_act_as()
1109 static inline int security_kernel_create_files_as(struct cred *cred,  in security_kernel_create_files_as()
1115 static inline int security_kernel_module_request(char *kmod_name)  in security_kernel_module_request()
1120 static inline int security_kernel_load_data(enum kernel_load_data_id id, bool contents)  in security_kernel_load_data()
1125 static inline int security_kernel_post_load_data(char *buf, loff_t size,  in security_kernel_post_load_data()
1132 static inline int security_kernel_read_file(struct file *file,  in security_kernel_read_file()
1139 static inline int security_kernel_post_read_file(struct file *file,  in security_kernel_post_read_file()
1146 static inline int security_task_fix_setuid(struct cred *new,  in security_task_fix_setuid()
1148 					   int flags)  in security_task_fix_setuid()
1153 static inline int security_task_fix_setgid(struct cred *new,  in security_task_fix_setgid()
1155 					   int flags)  in security_task_fix_setgid()
1160 static inline int security_task_fix_setgroups(struct cred *new,  in security_task_fix_setgroups()
1166 static inline int security_task_setpgid(struct task_struct *p, pid_t pgid)  in security_task_setpgid()
1171 static inline int security_task_getpgid(struct task_struct *p)  in security_task_getpgid()
1176 static inline int security_task_getsid(struct task_struct *p)  in security_task_getsid()
1191 static inline int security_task_setnice(struct task_struct *p, int nice)  in security_task_setnice()
1196 static inline int security_task_setioprio(struct task_struct *p, int ioprio)  in security_task_setioprio()
1201 static inline int security_task_getioprio(struct task_struct *p)  in security_task_getioprio()
1206 static inline int security_task_prlimit(const struct cred *cred,  in security_task_prlimit()
1208 					unsigned int flags)  in security_task_prlimit()
1213 static inline int security_task_setrlimit(struct task_struct *p,  in security_task_setrlimit()
1214 					  unsigned int resource,  in security_task_setrlimit()
1220 static inline int security_task_setscheduler(struct task_struct *p)  in security_task_setscheduler()
1225 static inline int security_task_getscheduler(struct task_struct *p)  in security_task_getscheduler()
1230 static inline int security_task_movememory(struct task_struct *p)  in security_task_movememory()
1235 static inline int security_task_kill(struct task_struct *p,  in security_task_kill()
1236 				     struct kernel_siginfo *info, int sig,  in security_task_kill()
1242 static inline int security_task_prctl(int option, unsigned long arg2,  in security_task_prctl()
1253 static inline int security_create_user_ns(const struct cred *cred)  in security_create_user_ns()
1258 static inline int security_ipc_permission(struct kern_ipc_perm *ipcp,  in security_ipc_permission()
1269 static inline int security_msg_msg_alloc(struct msg_msg *msg)  in security_msg_msg_alloc()
1277 static inline int security_msg_queue_alloc(struct kern_ipc_perm *msq)  in security_msg_queue_alloc()
1285 static inline int security_msg_queue_associate(struct kern_ipc_perm *msq,  in security_msg_queue_associate()
1286 					       int msqflg)  in security_msg_queue_associate()
1291 static inline int security_msg_queue_msgctl(struct kern_ipc_perm *msq, int cmd)  in security_msg_queue_msgctl()
1296 static inline int security_msg_queue_msgsnd(struct kern_ipc_perm *msq,  in security_msg_queue_msgsnd()
1297 					    struct msg_msg *msg, int msqflg)  in security_msg_queue_msgsnd()
1302 static inline int security_msg_queue_msgrcv(struct kern_ipc_perm *msq,  in security_msg_queue_msgrcv()
1305 					    long type, int mode)  in security_msg_queue_msgrcv()
1310 static inline int security_shm_alloc(struct kern_ipc_perm *shp)  in security_shm_alloc()
1318 static inline int security_shm_associate(struct kern_ipc_perm *shp,  in security_shm_associate()
1319 					 int shmflg)  in security_shm_associate()
1324 static inline int security_shm_shmctl(struct kern_ipc_perm *shp, int cmd)  in security_shm_shmctl()
1329 static inline int security_shm_shmat(struct kern_ipc_perm *shp,  in security_shm_shmat()
1330 				     char __user *shmaddr, int shmflg)  in security_shm_shmat()
1335 static inline int security_sem_alloc(struct kern_ipc_perm *sma)  in security_sem_alloc()
1343 static inline int security_sem_associate(struct kern_ipc_perm *sma, int semflg)  in security_sem_associate()
1348 static inline int security_sem_semctl(struct kern_ipc_perm *sma, int cmd)  in security_sem_semctl()
1353 static inline int security_sem_semop(struct kern_ipc_perm *sma,  in security_sem_semop()
1355 				     int alter)  in security_sem_semop()
1364 static inline int security_getselfattr(unsigned int attr,  in security_getselfattr()
1371 static inline int security_setselfattr(unsigned int attr,  in security_setselfattr()
1378 static inline int security_getprocattr(struct task_struct *p, int lsmid,  in security_getprocattr()
1384 static inline int security_setprocattr(int lsmid, char *name, void *value,  in security_setprocattr()
1390 static inline int security_netlink_send(struct sock *sk, struct sk_buff *skb)  in security_netlink_send()
1395 static inline int security_ismaclabel(const char *name)  in security_ismaclabel()
1400 static inline int security_secid_to_secctx(u32 secid, char **secdata, u32 *seclen)  in security_secid_to_secctx()
1405 static inline int security_secctx_to_secid(const char *secdata,  in security_secctx_to_secid()
1420 static inline int security_inode_notifysecctx(struct inode *inode, void *ctx, u32 ctxlen)  in security_inode_notifysecctx()
1424 static inline int security_inode_setsecctx(struct dentry *dentry, void *ctx, u32 ctxlen)  in security_inode_setsecctx()
1428 static inline int security_inode_getsecctx(struct inode *inode, void **ctx, u32 *ctxlen)  in security_inode_getsecctx()
1432 static inline int security_locked_down(enum lockdown_reason what)  in security_locked_down()
1436 static inline int lsm_fill_user_ctx(struct lsm_ctx __user *uctx,  in lsm_fill_user_ctx()
1445 int security_post_notification(const struct cred *w_cred,
1449 static inline int security_post_notification(const struct cred *w_cred,  in security_post_notification()
1458 int security_watch_key(struct key *key);
1460 static inline int security_watch_key(struct key *key)  in security_watch_key()
1468 int security_unix_stream_connect(struct sock *sock, struct sock *other, struct sock *newsk);
1469 int security_unix_may_send(struct socket *sock,  struct socket *other);
1470 int security_socket_create(int family, int type, int protocol, int kern);
1471 int security_socket_post_create(struct socket *sock, int family,
1472 				int type, int protocol, int kern);
1473 int security_socket_socketpair(struct socket *socka, struct socket *sockb);
1474 int security_socket_bind(struct socket *sock, struct sockaddr *address, int addrlen);
1475 int security_socket_connect(struct socket *sock, struct sockaddr *address, int addrlen);
1476 int security_socket_listen(struct socket *sock, int backlog);
1477 int security_socket_accept(struct socket *sock, struct socket *newsock);
1478 int security_socket_sendmsg(struct socket *sock, struct msghdr *msg, int size);
1479 int security_socket_recvmsg(struct socket *sock, struct msghdr *msg,
1480 			    int size, int flags);
1481 int security_socket_getsockname(struct socket *sock);
1482 int security_socket_getpeername(struct socket *sock);
1483 int security_socket_getsockopt(struct socket *sock, int level, int optname);
1484 int security_socket_setsockopt(struct socket *sock, int level, int optname);
1485 int security_socket_shutdown(struct socket *sock, int how);
1486 int security_sock_rcv_skb(struct sock *sk, struct sk_buff *skb);
1487 int security_socket_getpeersec_stream(struct socket *sock, sockptr_t optval,
1488 				      sockptr_t optlen, unsigned int len);
1489 int security_socket_getpeersec_dgram(struct socket *sock, struct sk_buff *skb, u32 *secid);
1490 int security_sk_alloc(struct sock *sk, int family, gfp_t priority);
1498 int security_inet_conn_request(const struct sock *sk,
1504 int security_secmark_relabel_packet(u32 secid);
1507 int security_tun_dev_alloc_security(void **security);
1509 int security_tun_dev_create(void);
1510 int security_tun_dev_attach_queue(void *security);
1511 int security_tun_dev_attach(struct sock *sk, void *security);
1512 int security_tun_dev_open(void *security);
1513 int security_sctp_assoc_request(struct sctp_association *asoc, struct sk_buff *skb);
1514 int security_sctp_bind_connect(struct sock *sk, int optname,
1515 			       struct sockaddr *address, int addrlen);
1518 int security_sctp_assoc_established(struct sctp_association *asoc,
1520 int security_mptcp_add_subflow(struct sock *sk, struct sock *ssk);
1523 static inline int security_unix_stream_connect(struct sock *sock,  in security_unix_stream_connect()
1530 static inline int security_unix_may_send(struct socket *sock,  in security_unix_may_send()
1536 static inline int security_socket_create(int family, int type,  in security_socket_create()
1537 					 int protocol, int kern)  in security_socket_create()
1542 static inline int security_socket_post_create(struct socket *sock,  in security_socket_post_create()
1543 					      int family,  in security_socket_post_create()
1544 					      int type,  in security_socket_post_create()
1545 					      int protocol, int kern)  in security_socket_post_create()
1550 static inline int security_socket_socketpair(struct socket *socka,  in security_socket_socketpair()
1556 static inline int security_socket_bind(struct socket *sock,  in security_socket_bind()
1558 				       int addrlen)  in security_socket_bind()
1563 static inline int security_socket_connect(struct socket *sock,  in security_socket_connect()
1565 					  int addrlen)  in security_socket_connect()
1570 static inline int security_socket_listen(struct socket *sock, int backlog)  in security_socket_listen()
1575 static inline int security_socket_accept(struct socket *sock,  in security_socket_accept()
1581 static inline int security_socket_sendmsg(struct socket *sock,  in security_socket_sendmsg()
1582 					  struct msghdr *msg, int size)  in security_socket_sendmsg()
1587 static inline int security_socket_recvmsg(struct socket *sock,  in security_socket_recvmsg()
1588 					  struct msghdr *msg, int size,  in security_socket_recvmsg()
1589 					  int flags)  in security_socket_recvmsg()
1594 static inline int security_socket_getsockname(struct socket *sock)  in security_socket_getsockname()
1599 static inline int security_socket_getpeername(struct socket *sock)  in security_socket_getpeername()
1604 static inline int security_socket_getsockopt(struct socket *sock,  in security_socket_getsockopt()
1605 					     int level, int optname)  in security_socket_getsockopt()
1610 static inline int security_socket_setsockopt(struct socket *sock,  in security_socket_setsockopt()
1611 					     int level, int optname)  in security_socket_setsockopt()
1616 static inline int security_socket_shutdown(struct socket *sock, int how)  in security_socket_shutdown()
1620 static inline int security_sock_rcv_skb(struct sock *sk,  in security_sock_rcv_skb()
1626 static inline int security_socket_getpeersec_stream(struct socket *sock,  in security_socket_getpeersec_stream()
1629 						    unsigned int len)  in security_socket_getpeersec_stream()
1634 static inline int security_socket_getpeersec_dgram(struct socket *sock, struct sk_buff *skb, u32 *s…  in security_socket_getpeersec_dgram()
1639 static inline int security_sk_alloc(struct sock *sk, int family, gfp_t priority)  in security_sk_alloc()
1666 static inline int security_inet_conn_request(const struct sock *sk,  in security_inet_conn_request()
1682 static inline int security_secmark_relabel_packet(u32 secid)  in security_secmark_relabel_packet()
1695 static inline int security_tun_dev_alloc_security(void **security)  in security_tun_dev_alloc_security()
1704 static inline int security_tun_dev_create(void)  in security_tun_dev_create()
1709 static inline int security_tun_dev_attach_queue(void *security)  in security_tun_dev_attach_queue()
1714 static inline int security_tun_dev_attach(struct sock *sk, void *security)  in security_tun_dev_attach()
1719 static inline int security_tun_dev_open(void *security)  in security_tun_dev_open()
1724 static inline int security_sctp_assoc_request(struct sctp_association *asoc,  in security_sctp_assoc_request()
1730 static inline int security_sctp_bind_connect(struct sock *sk, int optname,  in security_sctp_bind_connect()
1732 					     int addrlen)  in security_sctp_bind_connect()
1743 static inline int security_sctp_assoc_established(struct sctp_association *asoc,  in security_sctp_assoc_established()
1749 static inline int security_mptcp_add_subflow(struct sock *sk, struct sock *ssk)  in security_mptcp_add_subflow()
1756 int security_ib_pkey_access(void *sec, u64 subnet_prefix, u16 pkey);
1757 int security_ib_endport_manage_subnet(void *sec, const char *name, u8 port_num);
1758 int security_ib_alloc_security(void **sec);
1761 static inline int security_ib_pkey_access(void *sec, u64 subnet_prefix, u16 pkey)  in security_ib_pkey_access()
1766 static inline int security_ib_endport_manage_subnet(void *sec, const char *dev_name, u8 port_num)  in security_ib_endport_manage_subnet()
1771 static inline int security_ib_alloc_security(void **sec)  in security_ib_alloc_security()
1783 int security_xfrm_policy_alloc(struct xfrm_sec_ctx **ctxp,
1785 int security_xfrm_policy_clone(struct xfrm_sec_ctx *old_ctx, struct xfrm_sec_ctx **new_ctxp);
1787 int security_xfrm_policy_delete(struct xfrm_sec_ctx *ctx);
1788 int security_xfrm_state_alloc(struct xfrm_state *x, struct xfrm_user_sec_ctx *sec_ctx);
1789 int security_xfrm_state_alloc_acquire(struct xfrm_state *x,
1791 int security_xfrm_state_delete(struct xfrm_state *x);
1793 int security_xfrm_policy_lookup(struct xfrm_sec_ctx *ctx, u32 fl_secid);
1794 int security_xfrm_state_pol_flow_match(struct xfrm_state *x,
1797 int security_xfrm_decode_session(struct sk_buff *skb, u32 *secid);
1802 static inline int security_xfrm_policy_alloc(struct xfrm_sec_ctx **ctxp,  in security_xfrm_policy_alloc()
1809 static inline int security_xfrm_policy_clone(struct xfrm_sec_ctx *old, struct xfrm_sec_ctx **new_ct…  in security_xfrm_policy_clone()
1818 static inline int security_xfrm_policy_delete(struct xfrm_sec_ctx *ctx)  in security_xfrm_policy_delete()
1823 static inline int security_xfrm_state_alloc(struct xfrm_state *x,  in security_xfrm_state_alloc()
1829 static inline int security_xfrm_state_alloc_acquire(struct xfrm_state *x,  in security_xfrm_state_alloc_acquire()
1839 static inline int security_xfrm_state_delete(struct xfrm_state *x)  in security_xfrm_state_delete()
1844 static inline int security_xfrm_policy_lookup(struct xfrm_sec_ctx *ctx, u32 fl_secid)  in security_xfrm_policy_lookup()
1849 static inline int security_xfrm_state_pol_flow_match(struct xfrm_state *x,  in security_xfrm_state_pol_flow_match()
1856 static inline int security_xfrm_decode_session(struct sk_buff *skb, u32 *secid)  in security_xfrm_decode_session()
1869 int security_path_unlink(const struct path *dir, struct dentry *dentry);
1870 int security_path_mkdir(const struct path *dir, struct dentry *dentry, umode_t mode);
1871 int security_path_rmdir(const struct path *dir, struct dentry *dentry);
1872 int security_path_mknod(const struct path *dir, struct dentry *dentry, umode_t mode,
1873 			unsigned int dev);
1874 int security_path_truncate(const struct path *path);
1875 int security_path_symlink(const struct path *dir, struct dentry *dentry,
1877 int security_path_link(struct dentry *old_dentry, const struct path *new_dir,
1879 int security_path_rename(const struct path *old_dir, struct dentry *old_dentry,
1881 			 unsigned int flags);
1882 int security_path_chmod(const struct path *path, umode_t mode);
1883 int security_path_chown(const struct path *path, kuid_t uid, kgid_t gid);
1884 int security_path_chroot(const struct path *path);
1886 static inline int security_path_unlink(const struct path *dir, struct dentry *dentry)  in security_path_unlink()
1891 static inline int security_path_mkdir(const struct path *dir, struct dentry *dentry,  in security_path_mkdir()
1897 static inline int security_path_rmdir(const struct path *dir, struct dentry *dentry)  in security_path_rmdir()
1902 static inline int security_path_mknod(const struct path *dir, struct dentry *dentry,  in security_path_mknod()
1903 				      umode_t mode, unsigned int dev)  in security_path_mknod()
1908 static inline int security_path_truncate(const struct path *path)  in security_path_truncate()
1913 static inline int security_path_symlink(const struct path *dir, struct dentry *dentry,  in security_path_symlink()
1919 static inline int security_path_link(struct dentry *old_dentry,  in security_path_link()
1926 static inline int security_path_rename(const struct path *old_dir,  in security_path_rename()
1930 				       unsigned int flags)  in security_path_rename()
1935 static inline int security_path_chmod(const struct path *path, umode_t mode)  in security_path_chmod()
1940 static inline int security_path_chown(const struct path *path, kuid_t uid, kgid_t gid)  in security_path_chown()
1945 static inline int security_path_chroot(const struct path *path)  in security_path_chroot()
1954 int security_key_alloc(struct key *key, const struct cred *cred, unsigned long flags);
1956 int security_key_permission(key_ref_t key_ref, const struct cred *cred,
1958 int security_key_getsecurity(struct key *key, char **_buffer);
1962 static inline int security_key_alloc(struct key *key,  in security_key_alloc()
1973 static inline int security_key_permission(key_ref_t key_ref,  in security_key_permission()
1980 static inline int security_key_getsecurity(struct key *key, char **_buffer)  in security_key_getsecurity()
1991 int security_audit_rule_init(u32 field, u32 op, char *rulestr, void **lsmrule);
1992 int security_audit_rule_known(struct audit_krule *krule);
1993 int security_audit_rule_match(u32 secid, u32 field, u32 op, void *lsmrule);
1998 static inline int security_audit_rule_init(u32 field, u32 op, char *rulestr,  in security_audit_rule_init()
2004 static inline int security_audit_rule_known(struct audit_krule *krule)  in security_audit_rule_known()
2009 static inline int security_audit_rule_match(u32 secid, u32 field, u32 op,  in security_audit_rule_match()
2069 extern int security_bpf(int cmd, union bpf_attr *attr, unsigned int size);
2070 extern int security_bpf_map(struct bpf_map *map, fmode_t fmode);
2071 extern int security_bpf_prog(struct bpf_prog *prog);
2072 extern int security_bpf_map_alloc(struct bpf_map *map);
2074 extern int security_bpf_prog_alloc(struct bpf_prog_aux *aux);
2077 static inline int security_bpf(int cmd, union bpf_attr *attr,  in security_bpf()
2078 					     unsigned int size)  in security_bpf()
2083 static inline int security_bpf_map(struct bpf_map *map, fmode_t fmode)  in security_bpf_map()
2088 static inline int security_bpf_prog(struct bpf_prog *prog)  in security_bpf_prog()
2093 static inline int security_bpf_map_alloc(struct bpf_map *map)  in security_bpf_map_alloc()
2101 static inline int security_bpf_prog_alloc(struct bpf_prog_aux *aux)  in security_bpf_prog_alloc()
2116 extern int security_perf_event_open(struct perf_event_attr *attr, int type);
2117 extern int security_perf_event_alloc(struct perf_event *event);
2119 extern int security_perf_event_read(struct perf_event *event);
2120 extern int security_perf_event_write(struct perf_event *event);
2122 static inline int security_perf_event_open(struct perf_event_attr *attr,  in security_perf_event_open()
2123 					   int type)  in security_perf_event_open()
2128 static inline int security_perf_event_alloc(struct perf_event *event)  in security_perf_event_alloc()
2137 static inline int security_perf_event_read(struct perf_event *event)  in security_perf_event_read()
2142 static inline int security_perf_event_write(struct perf_event *event)  in security_perf_event_write()
2151 extern int security_uring_override_creds(const struct cred *new);
2152 extern int security_uring_sqpoll(void);
2153 extern int security_uring_cmd(struct io_uring_cmd *ioucmd);
2155 static inline int security_uring_override_creds(const struct cred *new)  in security_uring_override_creds()
2159 static inline int security_uring_sqpoll(void)  in security_uring_sqpoll()
2163 static inline int security_uring_cmd(struct io_uring_cmd *ioucmd)  in security_uring_cmd()