security/landlock/ruleset.h

1 /* SPDX-License-Identifier: GPL-2.0-only */
3  * Landlock LSM - Ruleset management
5  * Copyright © 2016-2020 Mickaël Salaün <mic@digikod.net>
6  * Copyright © 2018-2020 ANSSI
25  * by a ruleset/layer.  This must be ORed with all ruleset->access_masks[]
28 /* clang-format off */
31 /* clang-format on */
52  * struct landlock_layer - Access rights for a given layer
67  * union landlock_key - Key of a ruleset's red-black tree
75 	 * @data: Raw data to identify an arbitrary 32-bit value
82  * enum landlock_key_type - Type of &union landlock_key
98  * struct landlock_id - Unique rule identifier for a ruleset
113  * struct landlock_rule - Access rights tied to an object
117 	 * @node: Node in the ruleset's red-black tree.
140  * struct landlock_hierarchy - Node in a ruleset hierarchy
156  * struct landlock_ruleset - Landlock ruleset
163 	 * @root_inode: Root of a red-black tree containing &struct
172 	 * @root_net_port: Root of a red-black tree containing &struct
206 			 * @num_rules: Number of non-overlapping (i.e. not for
214 			 * non-merged ruleset (i.e. not a domain).
224 			 * (i.e. future-proof), and to properly handle merged
225 			 * rulesets without overlapping access rights.  These
256 		refcount_inc(&ruleset->usage);  in landlock_get_ruleset()
268 	ruleset->access_masks[layer_level] |=  in landlock_add_fs_access_mask()
281 	ruleset->access_masks[layer_level] |=  in landlock_add_net_access_mask()
289 	return (ruleset->access_masks[layer_level] >>  in landlock_get_raw_fs_access_mask()
307 	return (ruleset->access_masks[layer_level] >>  in landlock_get_net_access_mask()