4 * Copyright (C) 2005 Greg Kroah-Hartman <gregkh@suse.de>
6 * This program is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU General Public License version
8 * 2 as published by the Free Software Foundation.
10 * Based on fs/debugfs/inode.c which had the following copyright notice:
11 * Copyright (C) 2004 Greg Kroah-Hartman <greg@kroah.com>
12 * Copyright (C) 2004 IBM Inc.
16 #include <linux/module.h>
18 #include <linux/mount.h>
19 #include <linux/pagemap.h>
20 #include <linux/init.h>
21 #include <linux/namei.h>
22 #include <linux/security.h>
23 #include <linux/magic.h>
25 static struct vfsmount
*mount
;
26 static int mount_count
;
28 static int fill_super(struct super_block
*sb
, void *data
, int silent
)
30 static struct tree_descr files
[] = {{""}};
32 return simple_fill_super(sb
, SECURITYFS_MAGIC
, files
);
35 static struct dentry
*get_sb(struct file_system_type
*fs_type
,
36 int flags
, const char *dev_name
,
39 return mount_single(fs_type
, flags
, data
, fill_super
);
42 static struct file_system_type fs_type
= {
46 .kill_sb
= kill_litter_super
,
49 int securityfs_pin_fs(void)
51 return simple_pin_fs(&fs_type
, &mount
, &mount_count
);
54 void securityfs_release_fs(void)
56 simple_release_fs(&mount
, &mount_count
);
59 int __securityfs_setup_d_inode(struct inode
*dir
, struct dentry
*dentry
,
60 umode_t mode
, void *data
,
61 const struct file_operations
*fops
,
62 const struct inode_operations
*iops
)
64 bool is_dir
= S_ISDIR(mode
);
65 struct inode
*inode
= new_inode(dir
->i_sb
);
69 inode
->i_ino
= get_next_ino();
71 inode
->i_atime
= inode
->i_mtime
= inode
->i_ctime
= CURRENT_TIME
;
72 inode
->i_private
= data
;
74 inode
->i_op
= iops
? iops
: &simple_dir_inode_operations
;
75 inode
->i_fop
= &simple_dir_operations
;
81 d_instantiate(dentry
, inode
);
86 EXPORT_SYMBOL_GPL(__securityfs_setup_d_inode
);
89 * securityfs_create_dentry - create a file/dir in the securityfs filesystem
91 * @name: a pointer to a string containing the name of the file to create.
92 * @mode: the permission that the file should have
93 * @parent: a pointer to the parent dentry for this file. This should be a
94 * directory dentry if set. If this parameter is %NULL, then the
95 * file will be created in the root of the securityfs filesystem.
96 * @data: a pointer to something that the caller will want to get to later
97 * on. The inode.i_private pointer will point to this value on
99 * @fops: a pointer to a struct file_operations that should be used for
101 * @iops: a point to a struct of inode_operations that should be used for
104 * This is the basic "create a xxx" function for securityfs. It allows for a
105 * wide range of flexibility in creating a file, or a directory (if you
106 * want to create a directory, the securityfs_create_dir() function is
107 * recommended to be used instead).
109 * This function returns a pointer to a dentry if it succeeds. This
110 * pointer must be passed to the securityfs_remove() function when the file is
111 * to be removed (no automatic cleanup happens if your module is unloaded,
112 * you are responsible here). If an error occurs, the function will return
113 * the error value (via ERR_PTR).
115 * If securityfs is not enabled in the kernel, the value %-ENODEV is
118 struct dentry
*securityfs_create_dentry(const char *name
, umode_t mode
,
119 struct dentry
*parent
, void *data
,
120 const struct file_operations
*fops
,
121 const struct inode_operations
*iops
)
123 struct dentry
*dentry
;
124 int is_dir
= S_ISDIR(mode
);
130 mode
= (mode
& S_IALLUGO
) | S_IFREG
;
133 pr_debug("securityfs: creating file '%s'\n",name
);
135 error
= simple_pin_fs(&fs_type
, &mount
, &mount_count
);
137 return ERR_PTR(error
);
140 parent
= mount
->mnt_root
;
142 dir
= d_inode(parent
);
145 dentry
= lookup_one_len(name
, parent
, strlen(name
));
149 if (d_really_is_positive(dentry
)) {
154 error
= __securityfs_setup_d_inode(dir
, dentry
, mode
, data
, fops
, iops
);
162 dentry
= ERR_PTR(error
);
165 simple_release_fs(&mount
, &mount_count
);
168 EXPORT_SYMBOL_GPL(securityfs_create_dentry
);
171 * securityfs_create_file - create a file in the securityfs filesystem
173 * @name: a pointer to a string containing the name of the file to create.
174 * @mode: the permission that the file should have
175 * @parent: a pointer to the parent dentry for this file. This should be a
176 * directory dentry if set. If this parameter is %NULL, then the
177 * file will be created in the root of the securityfs filesystem.
178 * @data: a pointer to something that the caller will want to get to later
179 * on. The inode.i_private pointer will point to this value on
181 * @fops: a pointer to a struct file_operations that should be used for
184 * This function creates a file in securityfs with the given @name.
186 * This function returns a pointer to a dentry if it succeeds. This
187 * pointer must be passed to the securityfs_remove() function when the file is
188 * to be removed (no automatic cleanup happens if your module is unloaded,
189 * you are responsible here). If an error occurs, the function will return
190 * the error value (via ERR_PTR).
192 * If securityfs is not enabled in the kernel, the value %-ENODEV is
195 struct dentry
*securityfs_create_file(const char *name
, umode_t mode
,
196 struct dentry
*parent
, void *data
,
197 const struct file_operations
*fops
)
199 return securityfs_create_dentry(name
, mode
, parent
, data
, fops
, NULL
);
201 EXPORT_SYMBOL_GPL(securityfs_create_file
);
204 * securityfs_create_dir - create a directory in the securityfs filesystem
206 * @name: a pointer to a string containing the name of the directory to
208 * @parent: a pointer to the parent dentry for this file. This should be a
209 * directory dentry if set. If this parameter is %NULL, then the
210 * directory will be created in the root of the securityfs filesystem.
212 * This function creates a directory in securityfs with the given @name.
214 * This function returns a pointer to a dentry if it succeeds. This
215 * pointer must be passed to the securityfs_remove() function when the file is
216 * to be removed (no automatic cleanup happens if your module is unloaded,
217 * you are responsible here). If an error occurs, the function will return
218 * the error value (via ERR_PTR).
220 * If securityfs is not enabled in the kernel, the value %-ENODEV is
223 struct dentry
*securityfs_create_dir(const char *name
, struct dentry
*parent
)
225 return securityfs_create_file(name
,
226 S_IFDIR
| S_IRWXU
| S_IRUGO
| S_IXUGO
,
229 EXPORT_SYMBOL_GPL(securityfs_create_dir
);
232 * securityfs_remove - removes a file or directory from the securityfs filesystem
234 * @dentry: a pointer to a the dentry of the file or directory to be removed.
236 * This function removes a file or directory in securityfs that was previously
237 * created with a call to another securityfs function (like
238 * securityfs_create_file() or variants thereof.)
240 * This function is required to be called in order for the file to be
241 * removed. No automatic cleanup of files will happen when a module is
242 * removed; you are responsible here.
244 void securityfs_remove(struct dentry
*dentry
)
248 if (!dentry
|| IS_ERR(dentry
))
251 dir
= d_inode(dentry
->d_parent
);
253 if (simple_positive(dentry
)) {
254 if (d_is_dir(dentry
))
255 simple_rmdir(dir
, dentry
);
257 simple_unlink(dir
, dentry
);
261 simple_release_fs(&mount
, &mount_count
);
263 EXPORT_SYMBOL_GPL(securityfs_remove
);
265 static int __init
securityfs_init(void)
269 retval
= sysfs_create_mount_point(kernel_kobj
, "security");
273 retval
= register_filesystem(&fs_type
);
275 sysfs_remove_mount_point(kernel_kobj
, "security");
279 core_initcall(securityfs_init
);
280 MODULE_LICENSE("GPL");