174 extern int cap_capable(const struct cred *cred, struct user_namespace *ns,
175 		       int cap, unsigned int opts);
176 extern int cap_settime(const struct timespec64 *ts, const struct timezone *tz);
177 extern int cap_ptrace_access_check(struct task_struct *child, unsigned int mode);
178 extern int cap_ptrace_traceme(struct task_struct *parent);
179 extern int cap_capget(const struct task_struct *target, kernel_cap_t *effective,
181 extern int cap_capset(struct cred *new, const struct cred *old,
185 extern int cap_bprm_creds_from_file(struct linux_binprm *bprm, const struct file *file);
186 int cap_inode_setxattr(struct dentry *dentry, const char *name,
187 		       const void *value, size_t size, int flags);
188 int cap_inode_removexattr(struct mnt_idmap *idmap,
190 int cap_inode_need_killpriv(struct dentry *dentry);
191 int cap_inode_killpriv(struct mnt_idmap *idmap, struct dentry *dentry);
192 int cap_inode_getsecurity(struct mnt_idmap *idmap,
195 extern int cap_mmap_addr(unsigned long addr);
196 extern int cap_mmap_file(struct file *file, unsigned long reqprot,
198 extern int cap_task_fix_setuid(struct cred *new, const struct cred *old, int flags);
199 extern int cap_task_prctl(int option, unsigned long arg2, unsigned long arg3,
201 extern int cap_task_setscheduler(struct task_struct *p);
202 extern int cap_task_setioprio(struct task_struct *p, int ioprio);
203 extern int cap_task_setnice(struct task_struct *p, int nice);
204 extern int cap_vm_enough_memory(struct mm_struct *mm, long pages);
237 	int	id;		/* Identifies the module */
269 extern int mmap_min_addr_handler(const struct ctl_table *table, int write,
274 typedef int (*initxattrs) (struct inode *inode,
324 int call_blocking_lsm_notifier(enum lsm_event event, void *data);
325 int register_blocking_lsm_notifier(struct notifier_block *nb);
326 int unregister_blocking_lsm_notifier(struct notifier_block *nb);
329 extern int security_init(void);
330 extern int early_security_init(void);
334 int security_binder_set_context_mgr(const struct cred *mgr);
335 int security_binder_transaction(const struct cred *from,
337 int security_binder_transfer_binder(const struct cred *from,
339 int security_binder_transfer_file(const struct cred *from,
341 int security_ptrace_access_check(struct task_struct *child, unsigned int mode);
342 int security_ptrace_traceme(struct task_struct *parent);
343 int security_capget(const struct task_struct *target,
347 int security_capset(struct cred *new, const struct cred *old,
351 int security_capable(const struct cred *cred,
353 		       int cap,
354 		       unsigned int opts);
355 int security_quotactl(int cmds, int type, int id, const struct super_block *sb);
356 int security_quota_on(struct dentry *dentry);
357 int security_syslog(int type);
358 int security_settime64(const struct timespec64 *ts, const struct timezone *tz);
359 int security_vm_enough_memory_mm(struct mm_struct *mm, long pages);
360 int security_bprm_creds_for_exec(struct linux_binprm *bprm);
361 int security_bprm_creds_from_file(struct linux_binprm *bprm, const struct file *file);
362 int security_bprm_check(struct linux_binprm *bprm);
365 int security_fs_context_submount(struct fs_context *fc, struct super_block *reference);
366 int security_fs_context_dup(struct fs_context *fc, struct fs_context *src_fc);
367 int security_fs_context_parse_param(struct fs_context *fc, struct fs_parameter *param);
368 int security_sb_alloc(struct super_block *sb);
372 int security_sb_eat_lsm_opts(char *options, void **mnt_opts);
373 int security_sb_mnt_opts_compat(struct super_block *sb, void *mnt_opts);
374 int security_sb_remount(struct super_block *sb, void *mnt_opts);
375 int security_sb_kern_mount(const struct super_block *sb);
376 int security_sb_show_options(struct seq_file *m, struct super_block *sb);
377 int security_sb_statfs(struct dentry *dentry);
378 int security_sb_mount(const char *dev_name, const struct path *path,
380 int security_sb_umount(struct vfsmount *mnt, int flags);
381 int security_sb_pivotroot(const struct path *old_path, const struct path *new_path);
382 int security_sb_set_mnt_opts(struct super_block *sb,
386 int security_sb_clone_mnt_opts(const struct super_block *oldsb,
390 int security_move_mount(const struct path *from_path, const struct path *to_path);
391 int security_dentry_init_security(struct dentry *dentry, int mode,
395 int security_dentry_create_files_as(struct dentry *dentry, int mode,
399 int security_path_notify(const struct path *path, u64 mask,
400 					unsigned int obj_type);
401 int security_inode_alloc(struct inode *inode, gfp_t gfp);
403 int security_inode_init_security(struct inode *inode, struct inode *dir,
406 int security_inode_init_security_anon(struct inode *inode,
409 int security_inode_create(struct inode *dir, struct dentry *dentry, umode_t mode);
412 int security_inode_link(struct dentry *old_dentry, struct inode *dir,
414 int security_inode_unlink(struct inode *dir, struct dentry *dentry);
415 int security_inode_symlink(struct inode *dir, struct dentry *dentry,
417 int security_inode_mkdir(struct inode *dir, struct dentry *dentry, umode_t mode);
418 int security_inode_rmdir(struct inode *dir, struct dentry *dentry);
419 int security_inode_mknod(struct inode *dir, struct dentry *dentry, umode_t mode, dev_t dev);
420 int security_inode_rename(struct inode *old_dir, struct dentry *old_dentry,
422 			  unsigned int flags);
423 int security_inode_readlink(struct dentry *dentry);
424 int security_inode_follow_link(struct dentry *dentry, struct inode *inode,
426 int security_inode_permission(struct inode *inode, int mask);
427 int security_inode_setattr(struct mnt_idmap *idmap,
430 				 int ia_valid);
431 int security_inode_getattr(const struct path *path);
432 int security_inode_setxattr(struct mnt_idmap *idmap,
434 			    const void *value, size_t size, int flags);
435 int security_inode_set_acl(struct mnt_idmap *idmap,
440 int security_inode_get_acl(struct mnt_idmap *idmap,
442 int security_inode_remove_acl(struct mnt_idmap *idmap,
448 				  const void *value, size_t size, int flags);
449 int security_inode_getxattr(struct dentry *dentry, const char *name);
450 int security_inode_listxattr(struct dentry *dentry);
451 int security_inode_removexattr(struct mnt_idmap *idmap,
454 int security_inode_need_killpriv(struct dentry *dentry);
455 int security_inode_killpriv(struct mnt_idmap *idmap, struct dentry *dentry);
456 int security_inode_getsecurity(struct mnt_idmap *idmap,
459 int security_inode_setsecurity(struct inode *inode, const char *name, const void *value, size_t siz…
460 int security_inode_listsecurity(struct inode *inode, char *buffer, size_t buffer_size);
462 int security_inode_copy_up(struct dentry *src, struct cred **new);
463 int security_inode_copy_up_xattr(struct dentry *src, const char *name);
464 int security_inode_setintegrity(const struct inode *inode,
467 int security_kernfs_init_security(struct kernfs_node *kn_dir,
469 int security_file_permission(struct file *file, int mask);
470 int security_file_alloc(struct file *file);
473 int security_file_ioctl(struct file *file, unsigned int cmd, unsigned long arg);
474 int security_file_ioctl_compat(struct file *file, unsigned int cmd,
476 int security_mmap_file(struct file *file, unsigned long prot,
478 int security_mmap_addr(unsigned long addr);
479 int security_file_mprotect(struct vm_area_struct *vma, unsigned long reqprot,
481 int security_file_lock(struct file *file, unsigned int cmd);
482 int security_file_fcntl(struct file *file, unsigned int cmd, unsigned long arg);
484 int security_file_send_sigiotask(struct task_struct *tsk,
485 				 struct fown_struct *fown, int sig);
486 int security_file_receive(struct file *file);
487 int security_file_open(struct file *file);
488 int security_file_post_open(struct file *file, int mask);
489 int security_file_truncate(struct file *file);
490 int security_task_alloc(struct task_struct *task, unsigned long clone_flags);
492 int security_cred_alloc_blank(struct cred *cred, gfp_t gfp);
494 int security_prepare_creds(struct cred *new, const struct cred *old, gfp_t gfp);
498 int security_kernel_act_as(struct cred *new, u32 secid);
499 int security_kernel_create_files_as(struct cred *new, struct inode *inode);
500 int security_kernel_module_request(char *kmod_name);
501 int security_kernel_load_data(enum kernel_load_data_id id, bool contents);
502 int security_kernel_post_load_data(char *buf, loff_t size,
505 int security_kernel_read_file(struct file *file, enum kernel_read_file_id id,
507 int security_kernel_post_read_file(struct file *file, char *buf, loff_t size,
509 int security_task_fix_setuid(struct cred *new, const struct cred *old,
510 			     int flags);
511 int security_task_fix_setgid(struct cred *new, const struct cred *old,
512 			     int flags);
513 int security_task_fix_setgroups(struct cred *new, const struct cred *old);
514 int security_task_setpgid(struct task_struct *p, pid_t pgid);
515 int security_task_getpgid(struct task_struct *p);
516 int security_task_getsid(struct task_struct *p);
519 int security_task_setnice(struct task_struct *p, int nice);
520 int security_task_setioprio(struct task_struct *p, int ioprio);
521 int security_task_getioprio(struct task_struct *p);
522 int security_task_prlimit(const struct cred *cred, const struct cred *tcred,
523 			  unsigned int flags);
524 int security_task_setrlimit(struct task_struct *p, unsigned int resource,
526 int security_task_setscheduler(struct task_struct *p);
527 int security_task_getscheduler(struct task_struct *p);
528 int security_task_movememory(struct task_struct *p);
529 int security_task_kill(struct task_struct *p, struct kernel_siginfo *info,
530 			int sig, const struct cred *cred);
531 int security_task_prctl(int option, unsigned long arg2, unsigned long arg3,
534 int security_create_user_ns(const struct cred *cred);
535 int security_ipc_permission(struct kern_ipc_perm *ipcp, short flag);
537 int security_msg_msg_alloc(struct msg_msg *msg);
539 int security_msg_queue_alloc(struct kern_ipc_perm *msq);
541 int security_msg_queue_associate(struct kern_ipc_perm *msq, int msqflg);
542 int security_msg_queue_msgctl(struct kern_ipc_perm *msq, int cmd);
543 int security_msg_queue_msgsnd(struct kern_ipc_perm *msq,
544 			      struct msg_msg *msg, int msqflg);
545 int security_msg_queue_msgrcv(struct kern_ipc_perm *msq, struct msg_msg *msg,
546 			      struct task_struct *target, long type, int mode);
547 int security_shm_alloc(struct kern_ipc_perm *shp);
549 int security_shm_associate(struct kern_ipc_perm *shp, int shmflg);
550 int security_shm_shmctl(struct kern_ipc_perm *shp, int cmd);
551 int security_shm_shmat(struct kern_ipc_perm *shp, char __user *shmaddr, int shmflg);
552 int security_sem_alloc(struct kern_ipc_perm *sma);
554 int security_sem_associate(struct kern_ipc_perm *sma, int semflg);
555 int security_sem_semctl(struct kern_ipc_perm *sma, int cmd);
556 int security_sem_semop(struct kern_ipc_perm *sma, struct sembuf *sops,
557 			unsigned nsops, int alter);
559 int security_getselfattr(unsigned int attr, struct lsm_ctx __user *ctx,
561 int security_setselfattr(unsigned int attr, struct lsm_ctx __user *ctx,
563 int security_getprocattr(struct task_struct *p, int lsmid, const char *name,
565 int security_setprocattr(int lsmid, const char *name, void *value, size_t size);
566 int security_netlink_send(struct sock *sk, struct sk_buff *skb);
567 int security_ismaclabel(const char *name);
568 int security_secid_to_secctx(u32 secid, struct lsm_context *cp);
569 int security_lsmprop_to_secctx(struct lsm_prop *prop, struct lsm_context *cp);
570 int security_secctx_to_secid(const char *secdata, u32 seclen, u32 *secid);
573 int security_inode_notifysecctx(struct inode *inode, void *ctx, u32 ctxlen);
574 int security_inode_setsecctx(struct dentry *dentry, void *ctx, u32 ctxlen);
575 int security_inode_getsecctx(struct inode *inode, struct lsm_context *cp);
576 int security_locked_down(enum lockdown_reason what);
577 int lsm_fill_user_ctx(struct lsm_ctx __user *uctx, u32 *uctx_len,
579 int security_bdev_alloc(struct block_device *bdev);
581 int security_bdev_setintegrity(struct block_device *bdev,
597 static inline int call_blocking_lsm_notifier(enum lsm_event event, void *data)  in call_blocking_lsm_notifier()
602 static inline int register_blocking_lsm_notifier(struct notifier_block *nb)  in register_blocking_lsm_notifier()
607 static inline  int unregister_blocking_lsm_notifier(struct notifier_block *nb)  in unregister_blocking_lsm_notifier()
626 static inline int security_init(void)  in security_init()
631 static inline int early_security_init(void)  in early_security_init()
636 static inline int security_binder_set_context_mgr(const struct cred *mgr)  in security_binder_set_context_mgr()
641 static inline int security_binder_transaction(const struct cred *from,  in security_binder_transaction()
647 static inline int security_binder_transfer_binder(const struct cred *from,  in security_binder_transfer_binder()
653 static inline int security_binder_transfer_file(const struct cred *from,  in security_binder_transfer_file()
660 static inline int security_ptrace_access_check(struct task_struct *child,  in security_ptrace_access_check()
661 					     unsigned int mode)  in security_ptrace_access_check()
666 static inline int security_ptrace_traceme(struct task_struct *parent)  in security_ptrace_traceme()
671 static inline int security_capget(const struct task_struct *target,  in security_capget()
679 static inline int security_capset(struct cred *new,  in security_capset()
688 static inline int security_capable(const struct cred *cred,  in security_capable()
690 				   int cap,  in security_capable()
691 				   unsigned int opts)  in security_capable()
696 static inline int security_quotactl(int cmds, int type, int id,  in security_quotactl()
702 static inline int security_quota_on(struct dentry *dentry)  in security_quota_on()
707 static inline int security_syslog(int type)  in security_syslog()
712 static inline int security_settime64(const struct timespec64 *ts,  in security_settime64()
718 static inline int security_vm_enough_memory_mm(struct mm_struct *mm, long pages)  in security_vm_enough_memory_mm()
723 static inline int security_bprm_creds_for_exec(struct linux_binprm *bprm)  in security_bprm_creds_for_exec()
728 static inline int security_bprm_creds_from_file(struct linux_binprm *bprm,  in security_bprm_creds_from_file()
734 static inline int security_bprm_check(struct linux_binprm *bprm)  in security_bprm_check()
747 static inline int security_fs_context_submount(struct fs_context *fc,  in security_fs_context_submount()
752 static inline int security_fs_context_dup(struct fs_context *fc,  in security_fs_context_dup()
757 static inline int security_fs_context_parse_param(struct fs_context *fc,  in security_fs_context_parse_param()
763 static inline int security_sb_alloc(struct super_block *sb)  in security_sb_alloc()
774 static inline int security_sb_eat_lsm_opts(char *options,  in security_sb_eat_lsm_opts()
780 static inline int security_sb_remount(struct super_block *sb,  in security_sb_remount()
786 static inline int security_sb_mnt_opts_compat(struct super_block *sb,  in security_sb_mnt_opts_compat()
793 static inline int security_sb_kern_mount(struct super_block *sb)  in security_sb_kern_mount()
798 static inline int security_sb_show_options(struct seq_file *m,  in security_sb_show_options()
804 static inline int security_sb_statfs(struct dentry *dentry)  in security_sb_statfs()
809 static inline int security_sb_mount(const char *dev_name, const struct path *path,  in security_sb_mount()
816 static inline int security_sb_umount(struct vfsmount *mnt, int flags)  in security_sb_umount()
821 static inline int security_sb_pivotroot(const struct path *old_path,  in security_sb_pivotroot()
827 static inline int security_sb_set_mnt_opts(struct super_block *sb,  in security_sb_set_mnt_opts()
835 static inline int security_sb_clone_mnt_opts(const struct super_block *oldsb,  in security_sb_clone_mnt_opts()
843 static inline int security_move_mount(const struct path *from_path,  in security_move_mount()
849 static inline int security_path_notify(const struct path *path, u64 mask,  in security_path_notify()
850 				unsigned int obj_type)  in security_path_notify()
855 static inline int security_inode_alloc(struct inode *inode, gfp_t gfp)  in security_inode_alloc()
863 static inline int security_dentry_init_security(struct dentry *dentry,  in security_dentry_init_security()
864 						 int mode,  in security_dentry_init_security()
872 static inline int security_dentry_create_files_as(struct dentry *dentry,  in security_dentry_create_files_as()
873 						  int mode, struct qstr *name,  in security_dentry_create_files_as()
881 static inline int security_inode_init_security(struct inode *inode,  in security_inode_init_security()
890 static inline int security_inode_init_security_anon(struct inode *inode,  in security_inode_init_security_anon()
897 static inline int security_inode_create(struct inode *dir,  in security_inode_create()
908 static inline int security_inode_link(struct dentry *old_dentry,  in security_inode_link()
915 static inline int security_inode_unlink(struct inode *dir,  in security_inode_unlink()
921 static inline int security_inode_symlink(struct inode *dir,  in security_inode_symlink()
928 static inline int security_inode_mkdir(struct inode *dir,  in security_inode_mkdir()
930 					int mode)  in security_inode_mkdir()
935 static inline int security_inode_rmdir(struct inode *dir,  in security_inode_rmdir()
941 static inline int security_inode_mknod(struct inode *dir,  in security_inode_mknod()
943 					int mode, dev_t dev)  in security_inode_mknod()
948 static inline int security_inode_rename(struct inode *old_dir,  in security_inode_rename()
952 					 unsigned int flags)  in security_inode_rename()
957 static inline int security_inode_readlink(struct dentry *dentry)  in security_inode_readlink()
962 static inline int security_inode_follow_link(struct dentry *dentry,  in security_inode_follow_link()
969 static inline int security_inode_permission(struct inode *inode, int mask)  in security_inode_permission()
974 static inline int security_inode_setattr(struct mnt_idmap *idmap,  in security_inode_setattr()
983 			    int ia_valid)  in security_inode_post_setattr()
986 static inline int security_inode_getattr(const struct path *path)  in security_inode_getattr()
991 static inline int security_inode_setxattr(struct mnt_idmap *idmap,  in security_inode_setxattr()
993 		size_t size, int flags)  in security_inode_setxattr()
998 static inline int security_inode_set_acl(struct mnt_idmap *idmap,  in security_inode_set_acl()
1011 static inline int security_inode_get_acl(struct mnt_idmap *idmap,  in security_inode_get_acl()
1018 static inline int security_inode_remove_acl(struct mnt_idmap *idmap,  in security_inode_remove_acl()
1031 		const char *name, const void *value, size_t size, int flags)  in security_inode_post_setxattr()
1034 static inline int security_inode_getxattr(struct dentry *dentry,  in security_inode_getxattr()
1040 static inline int security_inode_listxattr(struct dentry *dentry)  in security_inode_listxattr()
1045 static inline int security_inode_removexattr(struct mnt_idmap *idmap,  in security_inode_removexattr()
1056 static inline int security_inode_need_killpriv(struct dentry *dentry)  in security_inode_need_killpriv()
1061 static inline int security_inode_killpriv(struct mnt_idmap *idmap,  in security_inode_killpriv()
1067 static inline int security_inode_getsecurity(struct mnt_idmap *idmap,  in security_inode_getsecurity()
1075 static inline int security_inode_setsecurity(struct inode *inode, const char *name, const void *val…  in security_inode_setsecurity()
1080 static inline int security_inode_listsecurity(struct inode *inode, char *buffer, size_t buffer_size)  in security_inode_listsecurity()
1091 static inline int security_inode_copy_up(struct dentry *src, struct cred **new)  in security_inode_copy_up()
1096 static inline int security_inode_setintegrity(const struct inode *inode,  in security_inode_setintegrity()
1103 static inline int security_kernfs_init_security(struct kernfs_node *kn_dir,  in security_kernfs_init_security()
1109 static inline int security_inode_copy_up_xattr(struct dentry *src, const char *name)  in security_inode_copy_up_xattr()
1114 static inline int security_file_permission(struct file *file, int mask)  in security_file_permission()
1119 static inline int security_file_alloc(struct file *file)  in security_file_alloc()
1130 static inline int security_file_ioctl(struct file *file, unsigned int cmd,  in security_file_ioctl()
1136 static inline int security_file_ioctl_compat(struct file *file,  in security_file_ioctl_compat()
1137 					     unsigned int cmd,  in security_file_ioctl_compat()
1143 static inline int security_mmap_file(struct file *file, unsigned long prot,  in security_mmap_file()
1149 static inline int security_mmap_addr(unsigned long addr)  in security_mmap_addr()
1154 static inline int security_file_mprotect(struct vm_area_struct *vma,  in security_file_mprotect()
1161 static inline int security_file_lock(struct file *file, unsigned int cmd)  in security_file_lock()
1166 static inline int security_file_fcntl(struct file *file, unsigned int cmd,  in security_file_fcntl()
1177 static inline int security_file_send_sigiotask(struct task_struct *tsk,  in security_file_send_sigiotask()
1179 					       int sig)  in security_file_send_sigiotask()
1184 static inline int security_file_receive(struct file *file)  in security_file_receive()
1189 static inline int security_file_open(struct file *file)  in security_file_open()
1194 static inline int security_file_post_open(struct file *file, int mask)  in security_file_post_open()
1199 static inline int security_file_truncate(struct file *file)  in security_file_truncate()
1204 static inline int security_task_alloc(struct task_struct *task,  in security_task_alloc()
1213 static inline int security_cred_alloc_blank(struct cred *cred, gfp_t gfp)  in security_cred_alloc_blank()
1221 static inline int security_prepare_creds(struct cred *new,  in security_prepare_creds()
1242 static inline int security_kernel_act_as(struct cred *cred, u32 secid)  in security_kernel_act_as()
1247 static inline int security_kernel_create_files_as(struct cred *cred,  in security_kernel_create_files_as()
1253 static inline int security_kernel_module_request(char *kmod_name)  in security_kernel_module_request()
1258 static inline int security_kernel_load_data(enum kernel_load_data_id id, bool contents)  in security_kernel_load_data()
1263 static inline int security_kernel_post_load_data(char *buf, loff_t size,  in security_kernel_post_load_data()
1270 static inline int security_kernel_read_file(struct file *file,  in security_kernel_read_file()
1277 static inline int security_kernel_post_read_file(struct file *file,  in security_kernel_post_read_file()
1284 static inline int security_task_fix_setuid(struct cred *new,  in security_task_fix_setuid()
1286 					   int flags)  in security_task_fix_setuid()
1291 static inline int security_task_fix_setgid(struct cred *new,  in security_task_fix_setgid()
1293 					   int flags)  in security_task_fix_setgid()
1298 static inline int security_task_fix_setgroups(struct cred *new,  in security_task_fix_setgroups()
1304 static inline int security_task_setpgid(struct task_struct *p, pid_t pgid)  in security_task_setpgid()
1309 static inline int security_task_getpgid(struct task_struct *p)  in security_task_getpgid()
1314 static inline int security_task_getsid(struct task_struct *p)  in security_task_getsid()
1330 static inline int security_task_setnice(struct task_struct *p, int nice)  in security_task_setnice()
1335 static inline int security_task_setioprio(struct task_struct *p, int ioprio)  in security_task_setioprio()
1340 static inline int security_task_getioprio(struct task_struct *p)  in security_task_getioprio()
1345 static inline int security_task_prlimit(const struct cred *cred,  in security_task_prlimit()
1347 					unsigned int flags)  in security_task_prlimit()
1352 static inline int security_task_setrlimit(struct task_struct *p,  in security_task_setrlimit()
1353 					  unsigned int resource,  in security_task_setrlimit()
1359 static inline int security_task_setscheduler(struct task_struct *p)  in security_task_setscheduler()
1364 static inline int security_task_getscheduler(struct task_struct *p)  in security_task_getscheduler()
1369 static inline int security_task_movememory(struct task_struct *p)  in security_task_movememory()
1374 static inline int security_task_kill(struct task_struct *p,  in security_task_kill()
1375 				     struct kernel_siginfo *info, int sig,  in security_task_kill()
1381 static inline int security_task_prctl(int option, unsigned long arg2,  in security_task_prctl()
1392 static inline int security_create_user_ns(const struct cred *cred)  in security_create_user_ns()
1397 static inline int security_ipc_permission(struct kern_ipc_perm *ipcp,  in security_ipc_permission()
1409 static inline int security_msg_msg_alloc(struct msg_msg *msg)  in security_msg_msg_alloc()
1417 static inline int security_msg_queue_alloc(struct kern_ipc_perm *msq)  in security_msg_queue_alloc()
1425 static inline int security_msg_queue_associate(struct kern_ipc_perm *msq,  in security_msg_queue_associate()
1426 					       int msqflg)  in security_msg_queue_associate()
1431 static inline int security_msg_queue_msgctl(struct kern_ipc_perm *msq, int cmd)  in security_msg_queue_msgctl()
1436 static inline int security_msg_queue_msgsnd(struct kern_ipc_perm *msq,  in security_msg_queue_msgsnd()
1437 					    struct msg_msg *msg, int msqflg)  in security_msg_queue_msgsnd()
1442 static inline int security_msg_queue_msgrcv(struct kern_ipc_perm *msq,  in security_msg_queue_msgrcv()
1445 					    long type, int mode)  in security_msg_queue_msgrcv()
1450 static inline int security_shm_alloc(struct kern_ipc_perm *shp)  in security_shm_alloc()
1458 static inline int security_shm_associate(struct kern_ipc_perm *shp,  in security_shm_associate()
1459 					 int shmflg)  in security_shm_associate()
1464 static inline int security_shm_shmctl(struct kern_ipc_perm *shp, int cmd)  in security_shm_shmctl()
1469 static inline int security_shm_shmat(struct kern_ipc_perm *shp,  in security_shm_shmat()
1470 				     char __user *shmaddr, int shmflg)  in security_shm_shmat()
1475 static inline int security_sem_alloc(struct kern_ipc_perm *sma)  in security_sem_alloc()
1483 static inline int security_sem_associate(struct kern_ipc_perm *sma, int semflg)  in security_sem_associate()
1488 static inline int security_sem_semctl(struct kern_ipc_perm *sma, int cmd)  in security_sem_semctl()
1493 static inline int security_sem_semop(struct kern_ipc_perm *sma,  in security_sem_semop()
1495 				     int alter)  in security_sem_semop()
1504 static inline int security_getselfattr(unsigned int attr,  in security_getselfattr()
1511 static inline int security_setselfattr(unsigned int attr,  in security_setselfattr()
1518 static inline int security_getprocattr(struct task_struct *p, int lsmid,  in security_getprocattr()
1524 static inline int security_setprocattr(int lsmid, char *name, void *value,  in security_setprocattr()
1530 static inline int security_netlink_send(struct sock *sk, struct sk_buff *skb)  in security_netlink_send()
1535 static inline int security_ismaclabel(const char *name)  in security_ismaclabel()
1540 static inline int security_secid_to_secctx(u32 secid, struct lsm_context *cp)  in security_secid_to_secctx()
1545 static inline int security_lsmprop_to_secctx(struct lsm_prop *prop,  in security_lsmprop_to_secctx()
1551 static inline int security_secctx_to_secid(const char *secdata,  in security_secctx_to_secid()
1566 static inline int security_inode_notifysecctx(struct inode *inode, void *ctx, u32 ctxlen)  in security_inode_notifysecctx()
1570 static inline int security_inode_setsecctx(struct dentry *dentry, void *ctx, u32 ctxlen)  in security_inode_setsecctx()
1574 static inline int security_inode_getsecctx(struct inode *inode,  in security_inode_getsecctx()
1579 static inline int security_locked_down(enum lockdown_reason what)  in security_locked_down()
1583 static inline int lsm_fill_user_ctx(struct lsm_ctx __user *uctx,  in lsm_fill_user_ctx()
1590 static inline int security_bdev_alloc(struct block_device *bdev)  in security_bdev_alloc()
1599 static inline int security_bdev_setintegrity(struct block_device *bdev,  in security_bdev_setintegrity()
1609 int security_post_notification(const struct cred *w_cred,
1613 static inline int security_post_notification(const struct cred *w_cred,  in security_post_notification()
1622 int security_watch_key(struct key *key);
1624 static inline int security_watch_key(struct key *key)  in security_watch_key()
1632 int security_unix_stream_connect(struct sock *sock, struct sock *other, struct sock *newsk);
1633 int security_unix_may_send(struct socket *sock,  struct socket *other);
1634 int security_socket_create(int family, int type, int protocol, int kern);
1635 int security_socket_post_create(struct socket *sock, int family,
1636 				int type, int protocol, int kern);
1637 int security_socket_socketpair(struct socket *socka, struct socket *sockb);
1638 int security_socket_bind(struct socket *sock, struct sockaddr *address, int addrlen);
1639 int security_socket_connect(struct socket *sock, struct sockaddr *address, int addrlen);
1640 int security_socket_listen(struct socket *sock, int backlog);
1641 int security_socket_accept(struct socket *sock, struct socket *newsock);
1642 int security_socket_sendmsg(struct socket *sock, struct msghdr *msg, int size);
1643 int security_socket_recvmsg(struct socket *sock, struct msghdr *msg,
1644 			    int size, int flags);
1645 int security_socket_getsockname(struct socket *sock);
1646 int security_socket_getpeername(struct socket *sock);
1647 int security_socket_getsockopt(struct socket *sock, int level, int optname);
1648 int security_socket_setsockopt(struct socket *sock, int level, int optname);
1649 int security_socket_shutdown(struct socket *sock, int how);
1650 int security_sock_rcv_skb(struct sock *sk, struct sk_buff *skb);
1651 int security_socket_getpeersec_stream(struct socket *sock, sockptr_t optval,
1652 				      sockptr_t optlen, unsigned int len);
1653 int security_socket_getpeersec_dgram(struct socket *sock, struct sk_buff *skb, u32 *secid);
1654 int security_sk_alloc(struct sock *sk, int family, gfp_t priority);
1662 int security_inet_conn_request(const struct sock *sk,
1668 int security_secmark_relabel_packet(u32 secid);
1671 int security_tun_dev_alloc_security(void **security);
1673 int security_tun_dev_create(void);
1674 int security_tun_dev_attach_queue(void *security);
1675 int security_tun_dev_attach(struct sock *sk, void *security);
1676 int security_tun_dev_open(void *security);
1677 int security_sctp_assoc_request(struct sctp_association *asoc, struct sk_buff *skb);
1678 int security_sctp_bind_connect(struct sock *sk, int optname,
1679 			       struct sockaddr *address, int addrlen);
1682 int security_sctp_assoc_established(struct sctp_association *asoc,
1684 int security_mptcp_add_subflow(struct sock *sk, struct sock *ssk);
1687 static inline int security_unix_stream_connect(struct sock *sock,  in security_unix_stream_connect()
1694 static inline int security_unix_may_send(struct socket *sock,  in security_unix_may_send()
1700 static inline int security_socket_create(int family, int type,  in security_socket_create()
1701 					 int protocol, int kern)  in security_socket_create()
1706 static inline int security_socket_post_create(struct socket *sock,  in security_socket_post_create()
1707 					      int family,  in security_socket_post_create()
1708 					      int type,  in security_socket_post_create()
1709 					      int protocol, int kern)  in security_socket_post_create()
1714 static inline int security_socket_socketpair(struct socket *socka,  in security_socket_socketpair()
1720 static inline int security_socket_bind(struct socket *sock,  in security_socket_bind()
1722 				       int addrlen)  in security_socket_bind()
1727 static inline int security_socket_connect(struct socket *sock,  in security_socket_connect()
1729 					  int addrlen)  in security_socket_connect()
1734 static inline int security_socket_listen(struct socket *sock, int backlog)  in security_socket_listen()
1739 static inline int security_socket_accept(struct socket *sock,  in security_socket_accept()
1745 static inline int security_socket_sendmsg(struct socket *sock,  in security_socket_sendmsg()
1746 					  struct msghdr *msg, int size)  in security_socket_sendmsg()
1751 static inline int security_socket_recvmsg(struct socket *sock,  in security_socket_recvmsg()
1752 					  struct msghdr *msg, int size,  in security_socket_recvmsg()
1753 					  int flags)  in security_socket_recvmsg()
1758 static inline int security_socket_getsockname(struct socket *sock)  in security_socket_getsockname()
1763 static inline int security_socket_getpeername(struct socket *sock)  in security_socket_getpeername()
1768 static inline int security_socket_getsockopt(struct socket *sock,  in security_socket_getsockopt()
1769 					     int level, int optname)  in security_socket_getsockopt()
1774 static inline int security_socket_setsockopt(struct socket *sock,  in security_socket_setsockopt()
1775 					     int level, int optname)  in security_socket_setsockopt()
1780 static inline int security_socket_shutdown(struct socket *sock, int how)  in security_socket_shutdown()
1784 static inline int security_sock_rcv_skb(struct sock *sk,  in security_sock_rcv_skb()
1790 static inline int security_socket_getpeersec_stream(struct socket *sock,  in security_socket_getpeersec_stream()
1793 						    unsigned int len)  in security_socket_getpeersec_stream()
1798 static inline int security_socket_getpeersec_dgram(struct socket *sock, struct sk_buff *skb, u32 *s…  in security_socket_getpeersec_dgram()
1803 static inline int security_sk_alloc(struct sock *sk, int family, gfp_t priority)  in security_sk_alloc()
1830 static inline int security_inet_conn_request(const struct sock *sk,  in security_inet_conn_request()
1846 static inline int security_secmark_relabel_packet(u32 secid)  in security_secmark_relabel_packet()
1859 static inline int security_tun_dev_alloc_security(void **security)  in security_tun_dev_alloc_security()
1868 static inline int security_tun_dev_create(void)  in security_tun_dev_create()
1873 static inline int security_tun_dev_attach_queue(void *security)  in security_tun_dev_attach_queue()
1878 static inline int security_tun_dev_attach(struct sock *sk, void *security)  in security_tun_dev_attach()
1883 static inline int security_tun_dev_open(void *security)  in security_tun_dev_open()
1888 static inline int security_sctp_assoc_request(struct sctp_association *asoc,  in security_sctp_assoc_request()
1894 static inline int security_sctp_bind_connect(struct sock *sk, int optname,  in security_sctp_bind_connect()
1896 					     int addrlen)  in security_sctp_bind_connect()
1907 static inline int security_sctp_assoc_established(struct sctp_association *asoc,  in security_sctp_assoc_established()
1913 static inline int security_mptcp_add_subflow(struct sock *sk, struct sock *ssk)  in security_mptcp_add_subflow()
1920 int security_ib_pkey_access(void *sec, u64 subnet_prefix, u16 pkey);
1921 int security_ib_endport_manage_subnet(void *sec, const char *name, u8 port_num);
1922 int security_ib_alloc_security(void **sec);
1925 static inline int security_ib_pkey_access(void *sec, u64 subnet_prefix, u16 pkey)  in security_ib_pkey_access()
1930 static inline int security_ib_endport_manage_subnet(void *sec, const char *dev_name, u8 port_num)  in security_ib_endport_manage_subnet()
1935 static inline int security_ib_alloc_security(void **sec)  in security_ib_alloc_security()
1947 int security_xfrm_policy_alloc(struct xfrm_sec_ctx **ctxp,
1949 int security_xfrm_policy_clone(struct xfrm_sec_ctx *old_ctx, struct xfrm_sec_ctx **new_ctxp);
1951 int security_xfrm_policy_delete(struct xfrm_sec_ctx *ctx);
1952 int security_xfrm_state_alloc(struct xfrm_state *x, struct xfrm_user_sec_ctx *sec_ctx);
1953 int security_xfrm_state_alloc_acquire(struct xfrm_state *x,
1955 int security_xfrm_state_delete(struct xfrm_state *x);
1957 int security_xfrm_policy_lookup(struct xfrm_sec_ctx *ctx, u32 fl_secid);
1958 int security_xfrm_state_pol_flow_match(struct xfrm_state *x,
1961 int security_xfrm_decode_session(struct sk_buff *skb, u32 *secid);
1966 static inline int security_xfrm_policy_alloc(struct xfrm_sec_ctx **ctxp,  in security_xfrm_policy_alloc()
1973 static inline int security_xfrm_policy_clone(struct xfrm_sec_ctx *old, struct xfrm_sec_ctx **new_ct…  in security_xfrm_policy_clone()
1982 static inline int security_xfrm_policy_delete(struct xfrm_sec_ctx *ctx)  in security_xfrm_policy_delete()
1987 static inline int security_xfrm_state_alloc(struct xfrm_state *x,  in security_xfrm_state_alloc()
1993 static inline int security_xfrm_state_alloc_acquire(struct xfrm_state *x,  in security_xfrm_state_alloc_acquire()
2003 static inline int security_xfrm_state_delete(struct xfrm_state *x)  in security_xfrm_state_delete()
2008 static inline int security_xfrm_policy_lookup(struct xfrm_sec_ctx *ctx, u32 fl_secid)  in security_xfrm_policy_lookup()
2013 static inline int security_xfrm_state_pol_flow_match(struct xfrm_state *x,  in security_xfrm_state_pol_flow_match()
2020 static inline int security_xfrm_decode_session(struct sk_buff *skb, u32 *secid)  in security_xfrm_decode_session()
2033 int security_path_unlink(const struct path *dir, struct dentry *dentry);
2034 int security_path_mkdir(const struct path *dir, struct dentry *dentry, umode_t mode);
2035 int security_path_rmdir(const struct path *dir, struct dentry *dentry);
2036 int security_path_mknod(const struct path *dir, struct dentry *dentry, umode_t mode,
2037 			unsigned int dev);
2039 int security_path_truncate(const struct path *path);
2040 int security_path_symlink(const struct path *dir, struct dentry *dentry,
2042 int security_path_link(struct dentry *old_dentry, const struct path *new_dir,
2044 int security_path_rename(const struct path *old_dir, struct dentry *old_dentry,
2046 			 unsigned int flags);
2047 int security_path_chmod(const struct path *path, umode_t mode);
2048 int security_path_chown(const struct path *path, kuid_t uid, kgid_t gid);
2049 int security_path_chroot(const struct path *path);
2051 static inline int security_path_unlink(const struct path *dir, struct dentry *dentry)  in security_path_unlink()
2056 static inline int security_path_mkdir(const struct path *dir, struct dentry *dentry,  in security_path_mkdir()
2062 static inline int security_path_rmdir(const struct path *dir, struct dentry *dentry)  in security_path_rmdir()
2067 static inline int security_path_mknod(const struct path *dir, struct dentry *dentry,  in security_path_mknod()
2068 				      umode_t mode, unsigned int dev)  in security_path_mknod()
2077 static inline int security_path_truncate(const struct path *path)  in security_path_truncate()
2082 static inline int security_path_symlink(const struct path *dir, struct dentry *dentry,  in security_path_symlink()
2088 static inline int security_path_link(struct dentry *old_dentry,  in security_path_link()
2095 static inline int security_path_rename(const struct path *old_dir,  in security_path_rename()
2099 				       unsigned int flags)  in security_path_rename()
2104 static inline int security_path_chmod(const struct path *path, umode_t mode)  in security_path_chmod()
2109 static inline int security_path_chown(const struct path *path, kuid_t uid, kgid_t gid)  in security_path_chown()
2114 static inline int security_path_chroot(const struct path *path)  in security_path_chroot()
2123 int security_key_alloc(struct key *key, const struct cred *cred, unsigned long flags);
2125 int security_key_permission(key_ref_t key_ref, const struct cred *cred,
2127 int security_key_getsecurity(struct key *key, char **_buffer);
2134 static inline int security_key_alloc(struct key *key,  in security_key_alloc()
2145 static inline int security_key_permission(key_ref_t key_ref,  in security_key_permission()
2152 static inline int security_key_getsecurity(struct key *key, char **_buffer)  in security_key_getsecurity()
2171 int security_audit_rule_init(u32 field, u32 op, char *rulestr, void **lsmrule,
2173 int security_audit_rule_known(struct audit_krule *krule);
2174 int security_audit_rule_match(struct lsm_prop *prop, u32 field, u32 op,
2180 static inline int security_audit_rule_init(u32 field, u32 op, char *rulestr,  in security_audit_rule_init()
2186 static inline int security_audit_rule_known(struct audit_krule *krule)  in security_audit_rule_known()
2191 static inline int security_audit_rule_match(struct lsm_prop *prop, u32 field,  in security_audit_rule_match()
2252 extern int security_bpf(int cmd, union bpf_attr *attr, unsigned int size);
2253 extern int security_bpf_map(struct bpf_map *map, fmode_t fmode);
2254 extern int security_bpf_prog(struct bpf_prog *prog);
2255 extern int security_bpf_map_create(struct bpf_map *map, union bpf_attr *attr,
2258 extern int security_bpf_prog_load(struct bpf_prog *prog, union bpf_attr *attr,
2261 extern int security_bpf_token_create(struct bpf_token *token, union bpf_attr *attr,
2264 extern int security_bpf_token_cmd(const struct bpf_token *token, enum bpf_cmd cmd);
2265 extern int security_bpf_token_capable(const struct bpf_token *token, int cap);
2267 static inline int security_bpf(int cmd, union bpf_attr *attr,  in security_bpf()
2268 					     unsigned int size)  in security_bpf()
2273 static inline int security_bpf_map(struct bpf_map *map, fmode_t fmode)  in security_bpf_map()
2278 static inline int security_bpf_prog(struct bpf_prog *prog)  in security_bpf_prog()
2283 static inline int security_bpf_map_create(struct bpf_map *map, union bpf_attr *attr,  in security_bpf_map_create()
2292 static inline int security_bpf_prog_load(struct bpf_prog *prog, union bpf_attr *attr,  in security_bpf_prog_load()
2301 static inline int security_bpf_token_create(struct bpf_token *token, union bpf_attr *attr,  in security_bpf_token_create()
2310 static inline int security_bpf_token_cmd(const struct bpf_token *token, enum bpf_cmd cmd)  in security_bpf_token_cmd()
2315 static inline int security_bpf_token_capable(const struct bpf_token *token, int cap)  in security_bpf_token_capable()
2327 extern int security_perf_event_open(struct perf_event_attr *attr, int type);
2328 extern int security_perf_event_alloc(struct perf_event *event);
2330 extern int security_perf_event_read(struct perf_event *event);
2331 extern int security_perf_event_write(struct perf_event *event);
2333 static inline int security_perf_event_open(struct perf_event_attr *attr,  in security_perf_event_open()
2334 					   int type)  in security_perf_event_open()
2339 static inline int security_perf_event_alloc(struct perf_event *event)  in security_perf_event_alloc()
2348 static inline int security_perf_event_read(struct perf_event *event)  in security_perf_event_read()
2353 static inline int security_perf_event_write(struct perf_event *event)  in security_perf_event_write()
2362 extern int security_uring_override_creds(const struct cred *new);
2363 extern int security_uring_sqpoll(void);
2364 extern int security_uring_cmd(struct io_uring_cmd *ioucmd);
2366 static inline int security_uring_override_creds(const struct cred *new)  in security_uring_override_creds()
2370 static inline int security_uring_sqpoll(void)  in security_uring_sqpoll()
2374 static inline int security_uring_cmd(struct io_uring_cmd *ioucmd)  in security_uring_cmd()