]>
Commit | Line | Data |
---|---|---|
9d3fdea7 KS |
1 | /* SPDX-License-Identifier: GPL-2.0 */ |
2 | ||
3 | /* | |
4 | * Copyright (C) 2020 Google LLC. | |
5 | */ | |
6 | ||
7 | #ifndef _LINUX_BPF_LSM_H | |
8 | #define _LINUX_BPF_LSM_H | |
9 | ||
4cf1bc1f | 10 | #include <linux/sched.h> |
9d3fdea7 KS |
11 | #include <linux/bpf.h> |
12 | #include <linux/lsm_hooks.h> | |
13 | ||
14 | #ifdef CONFIG_BPF_LSM | |
15 | ||
16 | #define LSM_HOOK(RET, DEFAULT, NAME, ...) \ | |
17 | RET bpf_lsm_##NAME(__VA_ARGS__); | |
18 | #include <linux/lsm_hook_defs.h> | |
19 | #undef LSM_HOOK | |
20 | ||
8ea63684 KS |
21 | struct bpf_storage_blob { |
22 | struct bpf_local_storage __rcu *storage; | |
23 | }; | |
24 | ||
25 | extern struct lsm_blob_sizes bpf_lsm_blob_sizes; | |
26 | ||
9e4e01df KS |
27 | int bpf_lsm_verify_prog(struct bpf_verifier_log *vlog, |
28 | const struct bpf_prog *prog); | |
29 | ||
423f1610 KS |
30 | bool bpf_lsm_is_sleepable_hook(u32 btf_id); |
31 | ||
8ea63684 KS |
32 | static inline struct bpf_storage_blob *bpf_inode( |
33 | const struct inode *inode) | |
34 | { | |
35 | if (unlikely(!inode->i_security)) | |
36 | return NULL; | |
37 | ||
38 | return inode->i_security + bpf_lsm_blob_sizes.lbs_inode; | |
39 | } | |
40 | ||
41 | extern const struct bpf_func_proto bpf_inode_storage_get_proto; | |
42 | extern const struct bpf_func_proto bpf_inode_storage_delete_proto; | |
43 | void bpf_inode_storage_free(struct inode *inode); | |
44 | ||
9e4e01df KS |
45 | #else /* !CONFIG_BPF_LSM */ |
46 | ||
423f1610 KS |
47 | static inline bool bpf_lsm_is_sleepable_hook(u32 btf_id) |
48 | { | |
49 | return false; | |
50 | } | |
51 | ||
9e4e01df KS |
52 | static inline int bpf_lsm_verify_prog(struct bpf_verifier_log *vlog, |
53 | const struct bpf_prog *prog) | |
54 | { | |
55 | return -EOPNOTSUPP; | |
56 | } | |
57 | ||
8ea63684 KS |
58 | static inline struct bpf_storage_blob *bpf_inode( |
59 | const struct inode *inode) | |
60 | { | |
61 | return NULL; | |
62 | } | |
63 | ||
64 | static inline void bpf_inode_storage_free(struct inode *inode) | |
65 | { | |
66 | } | |
67 | ||
9d3fdea7 KS |
68 | #endif /* CONFIG_BPF_LSM */ |
69 | ||
70 | #endif /* _LINUX_BPF_LSM_H */ |