![David Howells](/assets/img/avatar_default.png)
Put security flags, such as SECURITY_LSM_NATIVE_LABELS, into the filesystem context so that the filesystem can communicate them to the LSM more easily. Signed-off-by: David Howells <dhowells@redhat.com> Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
157 lines
4.8 KiB
C
157 lines
4.8 KiB
C
/* Filesystem superblock creation and reconfiguration context.
|
|
*
|
|
* Copyright (C) 2018 Red Hat, Inc. All Rights Reserved.
|
|
* Written by David Howells (dhowells@redhat.com)
|
|
*
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU General Public Licence
|
|
* as published by the Free Software Foundation; either version
|
|
* 2 of the Licence, or (at your option) any later version.
|
|
*/
|
|
|
|
#ifndef _LINUX_FS_CONTEXT_H
|
|
#define _LINUX_FS_CONTEXT_H
|
|
|
|
#include <linux/kernel.h>
|
|
#include <linux/errno.h>
|
|
#include <linux/security.h>
|
|
|
|
struct cred;
|
|
struct dentry;
|
|
struct file_operations;
|
|
struct file_system_type;
|
|
struct mnt_namespace;
|
|
struct net;
|
|
struct pid_namespace;
|
|
struct super_block;
|
|
struct user_namespace;
|
|
struct vfsmount;
|
|
struct path;
|
|
|
|
enum fs_context_purpose {
|
|
FS_CONTEXT_FOR_MOUNT, /* New superblock for explicit mount */
|
|
FS_CONTEXT_FOR_SUBMOUNT, /* New superblock for automatic submount */
|
|
FS_CONTEXT_FOR_RECONFIGURE, /* Superblock reconfiguration (remount) */
|
|
};
|
|
|
|
/*
|
|
* Type of parameter value.
|
|
*/
|
|
enum fs_value_type {
|
|
fs_value_is_undefined,
|
|
fs_value_is_flag, /* Value not given a value */
|
|
fs_value_is_string, /* Value is a string */
|
|
fs_value_is_blob, /* Value is a binary blob */
|
|
fs_value_is_filename, /* Value is a filename* + dirfd */
|
|
fs_value_is_filename_empty, /* Value is a filename* + dirfd + AT_EMPTY_PATH */
|
|
fs_value_is_file, /* Value is a file* */
|
|
};
|
|
|
|
/*
|
|
* Configuration parameter.
|
|
*/
|
|
struct fs_parameter {
|
|
const char *key; /* Parameter name */
|
|
enum fs_value_type type:8; /* The type of value here */
|
|
union {
|
|
char *string;
|
|
void *blob;
|
|
struct filename *name;
|
|
struct file *file;
|
|
};
|
|
size_t size;
|
|
int dirfd;
|
|
};
|
|
|
|
/*
|
|
* Filesystem context for holding the parameters used in the creation or
|
|
* reconfiguration of a superblock.
|
|
*
|
|
* Superblock creation fills in ->root whereas reconfiguration begins with this
|
|
* already set.
|
|
*
|
|
* See Documentation/filesystems/mounting.txt
|
|
*/
|
|
struct fs_context {
|
|
const struct fs_context_operations *ops;
|
|
struct file_system_type *fs_type;
|
|
void *fs_private; /* The filesystem's context */
|
|
struct dentry *root; /* The root and superblock */
|
|
struct user_namespace *user_ns; /* The user namespace for this mount */
|
|
struct net *net_ns; /* The network namespace for this mount */
|
|
const struct cred *cred; /* The mounter's credentials */
|
|
const char *source; /* The source name (eg. dev path) */
|
|
const char *subtype; /* The subtype to set on the superblock */
|
|
void *security; /* Linux S&M options */
|
|
unsigned int sb_flags; /* Proposed superblock flags (SB_*) */
|
|
unsigned int sb_flags_mask; /* Superblock flags that were changed */
|
|
unsigned int lsm_flags; /* Information flags from the fs to the LSM */
|
|
enum fs_context_purpose purpose:8;
|
|
bool need_free:1; /* Need to call ops->free() */
|
|
};
|
|
|
|
struct fs_context_operations {
|
|
void (*free)(struct fs_context *fc);
|
|
int (*parse_monolithic)(struct fs_context *fc, void *data);
|
|
int (*get_tree)(struct fs_context *fc);
|
|
int (*reconfigure)(struct fs_context *fc);
|
|
};
|
|
|
|
/*
|
|
* fs_context manipulation functions.
|
|
*/
|
|
extern struct fs_context *fs_context_for_mount(struct file_system_type *fs_type,
|
|
unsigned int sb_flags);
|
|
extern struct fs_context *fs_context_for_reconfigure(struct dentry *dentry,
|
|
unsigned int sb_flags,
|
|
unsigned int sb_flags_mask);
|
|
extern struct fs_context *fs_context_for_submount(struct file_system_type *fs_type,
|
|
struct dentry *reference);
|
|
|
|
extern int vfs_get_tree(struct fs_context *fc);
|
|
extern void put_fs_context(struct fs_context *fc);
|
|
|
|
#define logfc(FC, FMT, ...) pr_notice(FMT, ## __VA_ARGS__)
|
|
|
|
/**
|
|
* infof - Store supplementary informational message
|
|
* @fc: The context in which to log the informational message
|
|
* @fmt: The format string
|
|
*
|
|
* Store the supplementary informational message for the process if the process
|
|
* has enabled the facility.
|
|
*/
|
|
#define infof(fc, fmt, ...) ({ logfc(fc, fmt, ## __VA_ARGS__); })
|
|
|
|
/**
|
|
* warnf - Store supplementary warning message
|
|
* @fc: The context in which to log the error message
|
|
* @fmt: The format string
|
|
*
|
|
* Store the supplementary warning message for the process if the process has
|
|
* enabled the facility.
|
|
*/
|
|
#define warnf(fc, fmt, ...) ({ logfc(fc, fmt, ## __VA_ARGS__); })
|
|
|
|
/**
|
|
* errorf - Store supplementary error message
|
|
* @fc: The context in which to log the error message
|
|
* @fmt: The format string
|
|
*
|
|
* Store the supplementary error message for the process if the process has
|
|
* enabled the facility.
|
|
*/
|
|
#define errorf(fc, fmt, ...) ({ logfc(fc, fmt, ## __VA_ARGS__); })
|
|
|
|
/**
|
|
* invalf - Store supplementary invalid argument error message
|
|
* @fc: The context in which to log the error message
|
|
* @fmt: The format string
|
|
*
|
|
* Store the supplementary error message for the process if the process has
|
|
* enabled the facility and return -EINVAL.
|
|
*/
|
|
#define invalf(fc, fmt, ...) ({ errorf(fc, fmt, ## __VA_ARGS__); -EINVAL; })
|
|
|
|
#endif /* _LINUX_FS_CONTEXT_H */
|