]> git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/blob - include/linux/seccomp.h
8021q: fix a potential memory leak
[mirror_ubuntu-bionic-kernel.git] / include / linux / seccomp.h
1 #ifndef _LINUX_SECCOMP_H
2 #define _LINUX_SECCOMP_H
3
4 #include <uapi/linux/seccomp.h>
5
6 #ifdef CONFIG_SECCOMP
7
8 #include <linux/thread_info.h>
9 #include <asm/seccomp.h>
10
11 struct seccomp_filter;
12 /**
13 * struct seccomp - the state of a seccomp'ed process
14 *
15 * @mode: indicates one of the valid values above for controlled
16 * system calls available to a process.
17 * @filter: The metadata and ruleset for determining what system calls
18 * are allowed for a task.
19 *
20 * @filter must only be accessed from the context of current as there
21 * is no locking.
22 */
23 struct seccomp {
24 int mode;
25 struct seccomp_filter *filter;
26 };
27
28 extern int __secure_computing(int);
29 static inline int secure_computing(int this_syscall)
30 {
31 if (unlikely(test_thread_flag(TIF_SECCOMP)))
32 return __secure_computing(this_syscall);
33 return 0;
34 }
35
36 /* A wrapper for architectures supporting only SECCOMP_MODE_STRICT. */
37 static inline void secure_computing_strict(int this_syscall)
38 {
39 BUG_ON(secure_computing(this_syscall) != 0);
40 }
41
42 extern long prctl_get_seccomp(void);
43 extern long prctl_set_seccomp(unsigned long, char __user *);
44
45 static inline int seccomp_mode(struct seccomp *s)
46 {
47 return s->mode;
48 }
49
50 #else /* CONFIG_SECCOMP */
51
52 #include <linux/errno.h>
53
54 struct seccomp { };
55 struct seccomp_filter { };
56
57 static inline int secure_computing(int this_syscall) { return 0; }
58 static inline void secure_computing_strict(int this_syscall) { return; }
59
60 static inline long prctl_get_seccomp(void)
61 {
62 return -EINVAL;
63 }
64
65 static inline long prctl_set_seccomp(unsigned long arg2, char __user *arg3)
66 {
67 return -EINVAL;
68 }
69
70 static inline int seccomp_mode(struct seccomp *s)
71 {
72 return 0;
73 }
74 #endif /* CONFIG_SECCOMP */
75
76 #ifdef CONFIG_SECCOMP_FILTER
77 extern void put_seccomp_filter(struct task_struct *tsk);
78 extern void get_seccomp_filter(struct task_struct *tsk);
79 #else /* CONFIG_SECCOMP_FILTER */
80 static inline void put_seccomp_filter(struct task_struct *tsk)
81 {
82 return;
83 }
84 static inline void get_seccomp_filter(struct task_struct *tsk)
85 {
86 return;
87 }
88 #endif /* CONFIG_SECCOMP_FILTER */
89 #endif /* _LINUX_SECCOMP_H */