security/landlock/ruleset.c

32 static struct landlock_ruleset *create_ruleset(const u32 num_layers)
37 		kzalloc(struct_size(new_ruleset, access_masks, num_layers),
49 	new_ruleset->num_layers = num_layers;
83 		.num_layers = ~0,
86 	BUILD_BUG_ON(rule.num_layers < LANDLOCK_MAX_NUM_LAYERS);
108 	    const struct landlock_layer (*const layers)[], const u32 num_layers,
117 		if (WARN_ON_ONCE(num_layers >= LANDLOCK_MAX_NUM_LAYERS))
119 		new_num_layers = num_layers + 1;
121 		new_num_layers = num_layers;
135 	new_rule->num_layers = new_num_layers;
138 	       flex_array_size(new_rule, layers, num_layers));
141 		new_rule->layers[new_rule->num_layers - 1] = *new_layer;
178 		.num_layers = ~0,
182 	BUILD_BUG_ON(ruleset.num_layers < LANDLOCK_MAX_NUM_LAYERS);
192  * @num_layers: The number of @layers entries.
206 		       const size_t num_layers)
240 		if (WARN_ON_ONCE(num_layers != 1))
249 			if (WARN_ON_ONCE(this->num_layers != 1))
264 		new_rule = create_rule(id, &this->layers, this->num_layers,
277 	new_rule = create_rule(id, layers, num_layers, NULL);
332 			.level = dst->num_layers,
339 		if (WARN_ON_ONCE(walker_rule->num_layers != 1))
372 	if (WARN_ON_ONCE(src->num_layers != 1 || dst->num_layers < 1)) {
376 	dst->access_masks[dst->num_layers - 1] =
422 				  walker_rule->num_layers);
454 	if (WARN_ON_ONCE(child->num_layers <= parent->num_layers)) {
460 	       flex_array_size(parent, access_masks, parent->num_layers));
535 	u32 num_layers;
543 		if (parent->num_layers >= LANDLOCK_MAX_NUM_LAYERS)
545 		num_layers = parent->num_layers + 1;
547 		num_layers = 1;
551 	new_dom = create_ruleset(num_layers);
638 	for (layer_level = 0; layer_level < rule->num_layers; layer_level++) {
717 	for (layer_level = 0; layer_level < domain->num_layers; layer_level++) {