2005-04-17 06:20:36 +08:00
|
|
|
/* Updated: Karl MacMillan <kmacmillan@tresys.com>
|
|
|
|
*
|
2008-04-18 02:15:45 +08:00
|
|
|
* Added conditional policy language extensions
|
2005-04-17 06:20:36 +08:00
|
|
|
*
|
2008-01-29 21:38:19 +08:00
|
|
|
* Updated: Hewlett-Packard <paul.moore@hp.com>
|
|
|
|
*
|
2008-04-18 02:15:45 +08:00
|
|
|
* Added support for the policy capability bitmap
|
2008-01-29 21:38:19 +08:00
|
|
|
*
|
|
|
|
* Copyright (C) 2007 Hewlett-Packard Development Company, L.P.
|
2005-04-17 06:20:36 +08:00
|
|
|
* Copyright (C) 2003 - 2004 Tresys Technology, LLC
|
|
|
|
* Copyright (C) 2004 Red Hat, Inc., James Morris <jmorris@redhat.com>
|
|
|
|
* This program is free software; you can redistribute it and/or modify
|
2008-04-18 02:15:45 +08:00
|
|
|
* it under the terms of the GNU General Public License as published by
|
2005-04-17 06:20:36 +08:00
|
|
|
* the Free Software Foundation, version 2.
|
|
|
|
*/
|
|
|
|
|
|
|
|
#include <linux/kernel.h>
|
|
|
|
#include <linux/pagemap.h>
|
|
|
|
#include <linux/slab.h>
|
|
|
|
#include <linux/vmalloc.h>
|
|
|
|
#include <linux/fs.h>
|
2006-03-22 16:09:14 +08:00
|
|
|
#include <linux/mutex.h>
|
2005-04-17 06:20:36 +08:00
|
|
|
#include <linux/init.h>
|
|
|
|
#include <linux/string.h>
|
|
|
|
#include <linux/security.h>
|
|
|
|
#include <linux/major.h>
|
|
|
|
#include <linux/seq_file.h>
|
|
|
|
#include <linux/percpu.h>
|
2006-01-04 22:08:39 +08:00
|
|
|
#include <linux/audit.h>
|
2008-05-14 23:27:45 +08:00
|
|
|
#include <linux/uaccess.h>
|
2005-04-17 06:20:36 +08:00
|
|
|
|
|
|
|
/* selinuxfs pseudo filesystem for exporting the security policy API.
|
|
|
|
Based on the proc code and the fs/nfsd/nfsctl.c code. */
|
|
|
|
|
|
|
|
#include "flask.h"
|
|
|
|
#include "avc.h"
|
|
|
|
#include "avc_ss.h"
|
|
|
|
#include "security.h"
|
|
|
|
#include "objsec.h"
|
|
|
|
#include "conditional.h"
|
|
|
|
|
2008-01-29 21:38:19 +08:00
|
|
|
/* Policy capability filenames */
|
|
|
|
static char *policycap_names[] = {
|
2008-02-29 01:58:40 +08:00
|
|
|
"network_peer_controls",
|
|
|
|
"open_perms"
|
2008-01-29 21:38:19 +08:00
|
|
|
};
|
|
|
|
|
2005-04-17 06:20:36 +08:00
|
|
|
unsigned int selinux_checkreqprot = CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE;
|
|
|
|
|
[SECMARK]: Add new packet controls to SELinux
Add new per-packet access controls to SELinux, replacing the old
packet controls.
Packets are labeled with the iptables SECMARK and CONNSECMARK targets,
then security policy for the packets is enforced with these controls.
To allow for a smooth transition to the new controls, the old code is
still present, but not active by default. To restore previous
behavior, the old controls may be activated at runtime by writing a
'1' to /selinux/compat_net, and also via the kernel boot parameter
selinux_compat_net. Switching between the network control models
requires the security load_policy permission. The old controls will
probably eventually be removed and any continued use is discouraged.
With this patch, the new secmark controls for SElinux are disabled by
default, so existing behavior is entirely preserved, and the user is
not affected at all.
It also provides a config option to enable the secmark controls by
default (which can always be overridden at boot and runtime). It is
also noted in the kconfig help that the user will need updated
userspace if enabling secmark controls for SELinux and that they'll
probably need the SECMARK and CONNMARK targets, and conntrack protocol
helpers, although such decisions are beyond the scope of kernel
configuration.
Signed-off-by: James Morris <jmorris@namei.org>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
2006-06-09 15:33:33 +08:00
|
|
|
#ifdef CONFIG_SECURITY_SELINUX_ENABLE_SECMARK_DEFAULT
|
|
|
|
#define SELINUX_COMPAT_NET_VALUE 0
|
|
|
|
#else
|
|
|
|
#define SELINUX_COMPAT_NET_VALUE 1
|
|
|
|
#endif
|
|
|
|
|
|
|
|
int selinux_compat_net = SELINUX_COMPAT_NET_VALUE;
|
|
|
|
|
2005-04-17 06:20:36 +08:00
|
|
|
static int __init checkreqprot_setup(char *str)
|
|
|
|
{
|
2008-05-14 23:27:45 +08:00
|
|
|
unsigned long checkreqprot;
|
|
|
|
if (!strict_strtoul(str, 0, &checkreqprot))
|
|
|
|
selinux_checkreqprot = checkreqprot ? 1 : 0;
|
2005-04-17 06:20:36 +08:00
|
|
|
return 1;
|
|
|
|
}
|
|
|
|
__setup("checkreqprot=", checkreqprot_setup);
|
|
|
|
|
[SECMARK]: Add new packet controls to SELinux
Add new per-packet access controls to SELinux, replacing the old
packet controls.
Packets are labeled with the iptables SECMARK and CONNSECMARK targets,
then security policy for the packets is enforced with these controls.
To allow for a smooth transition to the new controls, the old code is
still present, but not active by default. To restore previous
behavior, the old controls may be activated at runtime by writing a
'1' to /selinux/compat_net, and also via the kernel boot parameter
selinux_compat_net. Switching between the network control models
requires the security load_policy permission. The old controls will
probably eventually be removed and any continued use is discouraged.
With this patch, the new secmark controls for SElinux are disabled by
default, so existing behavior is entirely preserved, and the user is
not affected at all.
It also provides a config option to enable the secmark controls by
default (which can always be overridden at boot and runtime). It is
also noted in the kconfig help that the user will need updated
userspace if enabling secmark controls for SELinux and that they'll
probably need the SECMARK and CONNMARK targets, and conntrack protocol
helpers, although such decisions are beyond the scope of kernel
configuration.
Signed-off-by: James Morris <jmorris@namei.org>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
2006-06-09 15:33:33 +08:00
|
|
|
static int __init selinux_compat_net_setup(char *str)
|
|
|
|
{
|
2008-05-14 23:27:45 +08:00
|
|
|
unsigned long compat_net;
|
|
|
|
if (!strict_strtoul(str, 0, &compat_net))
|
|
|
|
selinux_compat_net = compat_net ? 1 : 0;
|
[SECMARK]: Add new packet controls to SELinux
Add new per-packet access controls to SELinux, replacing the old
packet controls.
Packets are labeled with the iptables SECMARK and CONNSECMARK targets,
then security policy for the packets is enforced with these controls.
To allow for a smooth transition to the new controls, the old code is
still present, but not active by default. To restore previous
behavior, the old controls may be activated at runtime by writing a
'1' to /selinux/compat_net, and also via the kernel boot parameter
selinux_compat_net. Switching between the network control models
requires the security load_policy permission. The old controls will
probably eventually be removed and any continued use is discouraged.
With this patch, the new secmark controls for SElinux are disabled by
default, so existing behavior is entirely preserved, and the user is
not affected at all.
It also provides a config option to enable the secmark controls by
default (which can always be overridden at boot and runtime). It is
also noted in the kconfig help that the user will need updated
userspace if enabling secmark controls for SELinux and that they'll
probably need the SECMARK and CONNMARK targets, and conntrack protocol
helpers, although such decisions are beyond the scope of kernel
configuration.
Signed-off-by: James Morris <jmorris@namei.org>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
2006-06-09 15:33:33 +08:00
|
|
|
return 1;
|
|
|
|
}
|
|
|
|
__setup("selinux_compat_net=", selinux_compat_net_setup);
|
|
|
|
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2006-03-22 16:09:14 +08:00
|
|
|
static DEFINE_MUTEX(sel_mutex);
|
2005-04-17 06:20:36 +08:00
|
|
|
|
|
|
|
/* global data for booleans */
|
2008-04-18 02:15:45 +08:00
|
|
|
static struct dentry *bool_dir;
|
|
|
|
static int bool_num;
|
2007-11-27 00:12:53 +08:00
|
|
|
static char **bool_pending_names;
|
2008-04-18 02:15:45 +08:00
|
|
|
static int *bool_pending_values;
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2007-05-23 21:12:09 +08:00
|
|
|
/* global data for classes */
|
2008-04-18 02:15:45 +08:00
|
|
|
static struct dentry *class_dir;
|
2007-05-23 21:12:09 +08:00
|
|
|
static unsigned long last_class_ino;
|
|
|
|
|
2008-01-29 21:38:19 +08:00
|
|
|
/* global data for policy capabilities */
|
2008-04-18 02:15:45 +08:00
|
|
|
static struct dentry *policycap_dir;
|
2008-01-29 21:38:19 +08:00
|
|
|
|
2005-04-17 06:20:36 +08:00
|
|
|
extern void selnl_notify_setenforce(int val);
|
|
|
|
|
|
|
|
/* Check whether a task is allowed to use a security operation. */
|
|
|
|
static int task_has_security(struct task_struct *tsk,
|
|
|
|
u32 perms)
|
|
|
|
{
|
|
|
|
struct task_security_struct *tsec;
|
|
|
|
|
|
|
|
tsec = tsk->security;
|
|
|
|
if (!tsec)
|
|
|
|
return -EACCES;
|
|
|
|
|
|
|
|
return avc_has_perm(tsec->sid, SECINITSID_SECURITY,
|
|
|
|
SECCLASS_SECURITY, perms, NULL);
|
|
|
|
}
|
|
|
|
|
|
|
|
enum sel_inos {
|
|
|
|
SEL_ROOT_INO = 2,
|
|
|
|
SEL_LOAD, /* load policy */
|
|
|
|
SEL_ENFORCE, /* get or set enforcing status */
|
|
|
|
SEL_CONTEXT, /* validate context */
|
|
|
|
SEL_ACCESS, /* compute access decision */
|
|
|
|
SEL_CREATE, /* compute create labeling decision */
|
|
|
|
SEL_RELABEL, /* compute relabeling decision */
|
|
|
|
SEL_USER, /* compute reachable user contexts */
|
|
|
|
SEL_POLICYVERS, /* return policy version for this kernel */
|
|
|
|
SEL_COMMIT_BOOLS, /* commit new boolean values */
|
|
|
|
SEL_MLS, /* return if MLS policy is enabled */
|
|
|
|
SEL_DISABLE, /* disable SELinux until next reboot */
|
|
|
|
SEL_MEMBER, /* compute polyinstantiation membership decision */
|
|
|
|
SEL_CHECKREQPROT, /* check requested protection, not kernel-applied one */
|
[SECMARK]: Add new packet controls to SELinux
Add new per-packet access controls to SELinux, replacing the old
packet controls.
Packets are labeled with the iptables SECMARK and CONNSECMARK targets,
then security policy for the packets is enforced with these controls.
To allow for a smooth transition to the new controls, the old code is
still present, but not active by default. To restore previous
behavior, the old controls may be activated at runtime by writing a
'1' to /selinux/compat_net, and also via the kernel boot parameter
selinux_compat_net. Switching between the network control models
requires the security load_policy permission. The old controls will
probably eventually be removed and any continued use is discouraged.
With this patch, the new secmark controls for SElinux are disabled by
default, so existing behavior is entirely preserved, and the user is
not affected at all.
It also provides a config option to enable the secmark controls by
default (which can always be overridden at boot and runtime). It is
also noted in the kconfig help that the user will need updated
userspace if enabling secmark controls for SELinux and that they'll
probably need the SECMARK and CONNMARK targets, and conntrack protocol
helpers, although such decisions are beyond the scope of kernel
configuration.
Signed-off-by: James Morris <jmorris@namei.org>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
2006-06-09 15:33:33 +08:00
|
|
|
SEL_COMPAT_NET, /* whether to use old compat network packet controls */
|
2007-09-22 02:37:10 +08:00
|
|
|
SEL_REJECT_UNKNOWN, /* export unknown reject handling to userspace */
|
|
|
|
SEL_DENY_UNKNOWN, /* export unknown deny handling to userspace */
|
2007-04-05 04:18:39 +08:00
|
|
|
SEL_INO_NEXT, /* The next inode number to use */
|
2005-04-17 06:20:36 +08:00
|
|
|
};
|
|
|
|
|
2007-04-05 04:18:39 +08:00
|
|
|
static unsigned long sel_last_ino = SEL_INO_NEXT - 1;
|
|
|
|
|
2008-01-29 21:38:19 +08:00
|
|
|
#define SEL_INITCON_INO_OFFSET 0x01000000
|
|
|
|
#define SEL_BOOL_INO_OFFSET 0x02000000
|
|
|
|
#define SEL_CLASS_INO_OFFSET 0x04000000
|
|
|
|
#define SEL_POLICYCAP_INO_OFFSET 0x08000000
|
|
|
|
#define SEL_INO_MASK 0x00ffffff
|
2007-04-04 22:11:29 +08:00
|
|
|
|
2005-04-17 06:20:36 +08:00
|
|
|
#define TMPBUFLEN 12
|
|
|
|
static ssize_t sel_read_enforce(struct file *filp, char __user *buf,
|
|
|
|
size_t count, loff_t *ppos)
|
|
|
|
{
|
|
|
|
char tmpbuf[TMPBUFLEN];
|
|
|
|
ssize_t length;
|
|
|
|
|
|
|
|
length = scnprintf(tmpbuf, TMPBUFLEN, "%d", selinux_enforcing);
|
|
|
|
return simple_read_from_buffer(buf, count, ppos, tmpbuf, length);
|
|
|
|
}
|
|
|
|
|
|
|
|
#ifdef CONFIG_SECURITY_SELINUX_DEVELOP
|
2008-04-18 02:15:45 +08:00
|
|
|
static ssize_t sel_write_enforce(struct file *file, const char __user *buf,
|
2005-04-17 06:20:36 +08:00
|
|
|
size_t count, loff_t *ppos)
|
|
|
|
|
|
|
|
{
|
|
|
|
char *page;
|
|
|
|
ssize_t length;
|
|
|
|
int new_value;
|
|
|
|
|
2005-10-31 06:59:24 +08:00
|
|
|
if (count >= PAGE_SIZE)
|
2005-04-17 06:20:36 +08:00
|
|
|
return -ENOMEM;
|
|
|
|
if (*ppos != 0) {
|
|
|
|
/* No partial writes. */
|
|
|
|
return -EINVAL;
|
|
|
|
}
|
2008-04-18 02:15:45 +08:00
|
|
|
page = (char *)get_zeroed_page(GFP_KERNEL);
|
2005-04-17 06:20:36 +08:00
|
|
|
if (!page)
|
|
|
|
return -ENOMEM;
|
|
|
|
length = -EFAULT;
|
|
|
|
if (copy_from_user(page, buf, count))
|
|
|
|
goto out;
|
|
|
|
|
|
|
|
length = -EINVAL;
|
|
|
|
if (sscanf(page, "%d", &new_value) != 1)
|
|
|
|
goto out;
|
|
|
|
|
|
|
|
if (new_value != selinux_enforcing) {
|
|
|
|
length = task_has_security(current, SECURITY__SETENFORCE);
|
|
|
|
if (length)
|
|
|
|
goto out;
|
2006-01-04 22:08:39 +08:00
|
|
|
audit_log(current->audit_context, GFP_KERNEL, AUDIT_MAC_STATUS,
|
2008-01-08 23:06:53 +08:00
|
|
|
"enforcing=%d old_enforcing=%d auid=%u ses=%u",
|
|
|
|
new_value, selinux_enforcing,
|
|
|
|
audit_get_loginuid(current),
|
|
|
|
audit_get_sessionid(current));
|
2005-04-17 06:20:36 +08:00
|
|
|
selinux_enforcing = new_value;
|
|
|
|
if (selinux_enforcing)
|
|
|
|
avc_ss_reset(0);
|
|
|
|
selnl_notify_setenforce(selinux_enforcing);
|
|
|
|
}
|
|
|
|
length = count;
|
|
|
|
out:
|
|
|
|
free_page((unsigned long) page);
|
|
|
|
return length;
|
|
|
|
}
|
|
|
|
#else
|
|
|
|
#define sel_write_enforce NULL
|
|
|
|
#endif
|
|
|
|
|
2007-02-12 16:55:37 +08:00
|
|
|
static const struct file_operations sel_enforce_ops = {
|
2005-04-17 06:20:36 +08:00
|
|
|
.read = sel_read_enforce,
|
|
|
|
.write = sel_write_enforce,
|
|
|
|
};
|
|
|
|
|
2007-09-22 02:37:10 +08:00
|
|
|
static ssize_t sel_read_handle_unknown(struct file *filp, char __user *buf,
|
|
|
|
size_t count, loff_t *ppos)
|
|
|
|
{
|
|
|
|
char tmpbuf[TMPBUFLEN];
|
|
|
|
ssize_t length;
|
|
|
|
ino_t ino = filp->f_path.dentry->d_inode->i_ino;
|
|
|
|
int handle_unknown = (ino == SEL_REJECT_UNKNOWN) ?
|
|
|
|
security_get_reject_unknown() : !security_get_allow_unknown();
|
|
|
|
|
|
|
|
length = scnprintf(tmpbuf, TMPBUFLEN, "%d", handle_unknown);
|
|
|
|
return simple_read_from_buffer(buf, count, ppos, tmpbuf, length);
|
|
|
|
}
|
|
|
|
|
|
|
|
static const struct file_operations sel_handle_unknown_ops = {
|
|
|
|
.read = sel_read_handle_unknown,
|
|
|
|
};
|
|
|
|
|
2005-04-17 06:20:36 +08:00
|
|
|
#ifdef CONFIG_SECURITY_SELINUX_DISABLE
|
2008-04-18 02:15:45 +08:00
|
|
|
static ssize_t sel_write_disable(struct file *file, const char __user *buf,
|
2005-04-17 06:20:36 +08:00
|
|
|
size_t count, loff_t *ppos)
|
|
|
|
|
|
|
|
{
|
|
|
|
char *page;
|
|
|
|
ssize_t length;
|
|
|
|
int new_value;
|
|
|
|
extern int selinux_disable(void);
|
|
|
|
|
2005-10-31 06:59:24 +08:00
|
|
|
if (count >= PAGE_SIZE)
|
2005-04-17 06:20:36 +08:00
|
|
|
return -ENOMEM;
|
|
|
|
if (*ppos != 0) {
|
|
|
|
/* No partial writes. */
|
|
|
|
return -EINVAL;
|
|
|
|
}
|
2008-04-18 02:15:45 +08:00
|
|
|
page = (char *)get_zeroed_page(GFP_KERNEL);
|
2005-04-17 06:20:36 +08:00
|
|
|
if (!page)
|
|
|
|
return -ENOMEM;
|
|
|
|
length = -EFAULT;
|
|
|
|
if (copy_from_user(page, buf, count))
|
|
|
|
goto out;
|
|
|
|
|
|
|
|
length = -EINVAL;
|
|
|
|
if (sscanf(page, "%d", &new_value) != 1)
|
|
|
|
goto out;
|
|
|
|
|
|
|
|
if (new_value) {
|
|
|
|
length = selinux_disable();
|
|
|
|
if (length < 0)
|
|
|
|
goto out;
|
2006-01-04 22:08:39 +08:00
|
|
|
audit_log(current->audit_context, GFP_KERNEL, AUDIT_MAC_STATUS,
|
2008-01-08 23:06:53 +08:00
|
|
|
"selinux=0 auid=%u ses=%u",
|
|
|
|
audit_get_loginuid(current),
|
|
|
|
audit_get_sessionid(current));
|
2005-04-17 06:20:36 +08:00
|
|
|
}
|
|
|
|
|
|
|
|
length = count;
|
|
|
|
out:
|
|
|
|
free_page((unsigned long) page);
|
|
|
|
return length;
|
|
|
|
}
|
|
|
|
#else
|
|
|
|
#define sel_write_disable NULL
|
|
|
|
#endif
|
|
|
|
|
2007-02-12 16:55:37 +08:00
|
|
|
static const struct file_operations sel_disable_ops = {
|
2005-04-17 06:20:36 +08:00
|
|
|
.write = sel_write_disable,
|
|
|
|
};
|
|
|
|
|
|
|
|
static ssize_t sel_read_policyvers(struct file *filp, char __user *buf,
|
2008-04-18 02:15:45 +08:00
|
|
|
size_t count, loff_t *ppos)
|
2005-04-17 06:20:36 +08:00
|
|
|
{
|
|
|
|
char tmpbuf[TMPBUFLEN];
|
|
|
|
ssize_t length;
|
|
|
|
|
|
|
|
length = scnprintf(tmpbuf, TMPBUFLEN, "%u", POLICYDB_VERSION_MAX);
|
|
|
|
return simple_read_from_buffer(buf, count, ppos, tmpbuf, length);
|
|
|
|
}
|
|
|
|
|
2007-02-12 16:55:37 +08:00
|
|
|
static const struct file_operations sel_policyvers_ops = {
|
2005-04-17 06:20:36 +08:00
|
|
|
.read = sel_read_policyvers,
|
|
|
|
};
|
|
|
|
|
|
|
|
/* declaration for sel_write_load */
|
|
|
|
static int sel_make_bools(void);
|
2007-05-23 21:12:09 +08:00
|
|
|
static int sel_make_classes(void);
|
2008-01-29 21:38:19 +08:00
|
|
|
static int sel_make_policycap(void);
|
2007-05-23 21:12:09 +08:00
|
|
|
|
|
|
|
/* declaration for sel_make_class_dirs */
|
|
|
|
static int sel_make_dir(struct inode *dir, struct dentry *dentry,
|
|
|
|
unsigned long *ino);
|
2005-04-17 06:20:36 +08:00
|
|
|
|
|
|
|
static ssize_t sel_read_mls(struct file *filp, char __user *buf,
|
|
|
|
size_t count, loff_t *ppos)
|
|
|
|
{
|
|
|
|
char tmpbuf[TMPBUFLEN];
|
|
|
|
ssize_t length;
|
|
|
|
|
|
|
|
length = scnprintf(tmpbuf, TMPBUFLEN, "%d", selinux_mls_enabled);
|
|
|
|
return simple_read_from_buffer(buf, count, ppos, tmpbuf, length);
|
|
|
|
}
|
|
|
|
|
2007-02-12 16:55:37 +08:00
|
|
|
static const struct file_operations sel_mls_ops = {
|
2005-04-17 06:20:36 +08:00
|
|
|
.read = sel_read_mls,
|
|
|
|
};
|
|
|
|
|
2008-04-18 02:15:45 +08:00
|
|
|
static ssize_t sel_write_load(struct file *file, const char __user *buf,
|
2005-04-17 06:20:36 +08:00
|
|
|
size_t count, loff_t *ppos)
|
|
|
|
|
|
|
|
{
|
|
|
|
int ret;
|
|
|
|
ssize_t length;
|
|
|
|
void *data = NULL;
|
|
|
|
|
2006-03-22 16:09:14 +08:00
|
|
|
mutex_lock(&sel_mutex);
|
2005-04-17 06:20:36 +08:00
|
|
|
|
|
|
|
length = task_has_security(current, SECURITY__LOAD_POLICY);
|
|
|
|
if (length)
|
|
|
|
goto out;
|
|
|
|
|
|
|
|
if (*ppos != 0) {
|
|
|
|
/* No partial writes. */
|
|
|
|
length = -EINVAL;
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
|
2005-10-31 06:59:24 +08:00
|
|
|
if ((count > 64 * 1024 * 1024)
|
2005-04-17 06:20:36 +08:00
|
|
|
|| (data = vmalloc(count)) == NULL) {
|
|
|
|
length = -ENOMEM;
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
|
|
|
|
length = -EFAULT;
|
|
|
|
if (copy_from_user(data, buf, count) != 0)
|
|
|
|
goto out;
|
|
|
|
|
|
|
|
length = security_load_policy(data, count);
|
|
|
|
if (length)
|
|
|
|
goto out;
|
|
|
|
|
|
|
|
ret = sel_make_bools();
|
2007-05-23 21:12:09 +08:00
|
|
|
if (ret) {
|
|
|
|
length = ret;
|
|
|
|
goto out1;
|
|
|
|
}
|
|
|
|
|
|
|
|
ret = sel_make_classes();
|
2008-01-29 21:38:19 +08:00
|
|
|
if (ret) {
|
|
|
|
length = ret;
|
|
|
|
goto out1;
|
|
|
|
}
|
|
|
|
|
|
|
|
ret = sel_make_policycap();
|
2005-04-17 06:20:36 +08:00
|
|
|
if (ret)
|
|
|
|
length = ret;
|
|
|
|
else
|
|
|
|
length = count;
|
2007-05-23 21:12:09 +08:00
|
|
|
|
|
|
|
out1:
|
2006-01-04 22:08:39 +08:00
|
|
|
audit_log(current->audit_context, GFP_KERNEL, AUDIT_MAC_POLICY_LOAD,
|
2008-01-08 23:06:53 +08:00
|
|
|
"policy loaded auid=%u ses=%u",
|
|
|
|
audit_get_loginuid(current),
|
|
|
|
audit_get_sessionid(current));
|
2005-04-17 06:20:36 +08:00
|
|
|
out:
|
2006-03-22 16:09:14 +08:00
|
|
|
mutex_unlock(&sel_mutex);
|
2005-04-17 06:20:36 +08:00
|
|
|
vfree(data);
|
|
|
|
return length;
|
|
|
|
}
|
|
|
|
|
2007-02-12 16:55:37 +08:00
|
|
|
static const struct file_operations sel_load_ops = {
|
2005-04-17 06:20:36 +08:00
|
|
|
.write = sel_write_load,
|
|
|
|
};
|
|
|
|
|
2008-04-18 02:15:45 +08:00
|
|
|
static ssize_t sel_write_context(struct file *file, char *buf, size_t size)
|
2005-04-17 06:20:36 +08:00
|
|
|
{
|
2005-11-09 13:34:33 +08:00
|
|
|
char *canon;
|
|
|
|
u32 sid, len;
|
2005-04-17 06:20:36 +08:00
|
|
|
ssize_t length;
|
|
|
|
|
|
|
|
length = task_has_security(current, SECURITY__CHECK_CONTEXT);
|
|
|
|
if (length)
|
|
|
|
return length;
|
|
|
|
|
2005-11-09 13:34:33 +08:00
|
|
|
length = security_context_to_sid(buf, size, &sid);
|
|
|
|
if (length < 0)
|
|
|
|
return length;
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2005-11-09 13:34:33 +08:00
|
|
|
length = security_sid_to_context(sid, &canon, &len);
|
2005-04-17 06:20:36 +08:00
|
|
|
if (length < 0)
|
2005-11-09 13:34:33 +08:00
|
|
|
return length;
|
|
|
|
|
|
|
|
if (len > SIMPLE_TRANSACTION_LIMIT) {
|
2008-04-17 23:52:44 +08:00
|
|
|
printk(KERN_ERR "SELinux: %s: context size (%u) exceeds "
|
|
|
|
"payload max\n", __func__, len);
|
2005-11-09 13:34:33 +08:00
|
|
|
length = -ERANGE;
|
2005-04-17 06:20:36 +08:00
|
|
|
goto out;
|
2005-11-09 13:34:33 +08:00
|
|
|
}
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2005-11-09 13:34:33 +08:00
|
|
|
memcpy(buf, canon, len);
|
|
|
|
length = len;
|
2005-04-17 06:20:36 +08:00
|
|
|
out:
|
2005-11-09 13:34:33 +08:00
|
|
|
kfree(canon);
|
2005-04-17 06:20:36 +08:00
|
|
|
return length;
|
|
|
|
}
|
|
|
|
|
|
|
|
static ssize_t sel_read_checkreqprot(struct file *filp, char __user *buf,
|
|
|
|
size_t count, loff_t *ppos)
|
|
|
|
{
|
|
|
|
char tmpbuf[TMPBUFLEN];
|
|
|
|
ssize_t length;
|
|
|
|
|
|
|
|
length = scnprintf(tmpbuf, TMPBUFLEN, "%u", selinux_checkreqprot);
|
|
|
|
return simple_read_from_buffer(buf, count, ppos, tmpbuf, length);
|
|
|
|
}
|
|
|
|
|
2008-04-18 02:15:45 +08:00
|
|
|
static ssize_t sel_write_checkreqprot(struct file *file, const char __user *buf,
|
2005-04-17 06:20:36 +08:00
|
|
|
size_t count, loff_t *ppos)
|
|
|
|
{
|
|
|
|
char *page;
|
|
|
|
ssize_t length;
|
|
|
|
unsigned int new_value;
|
|
|
|
|
|
|
|
length = task_has_security(current, SECURITY__SETCHECKREQPROT);
|
|
|
|
if (length)
|
|
|
|
return length;
|
|
|
|
|
2005-10-31 06:59:24 +08:00
|
|
|
if (count >= PAGE_SIZE)
|
2005-04-17 06:20:36 +08:00
|
|
|
return -ENOMEM;
|
|
|
|
if (*ppos != 0) {
|
|
|
|
/* No partial writes. */
|
|
|
|
return -EINVAL;
|
|
|
|
}
|
2008-04-18 02:15:45 +08:00
|
|
|
page = (char *)get_zeroed_page(GFP_KERNEL);
|
2005-04-17 06:20:36 +08:00
|
|
|
if (!page)
|
|
|
|
return -ENOMEM;
|
|
|
|
length = -EFAULT;
|
|
|
|
if (copy_from_user(page, buf, count))
|
|
|
|
goto out;
|
|
|
|
|
|
|
|
length = -EINVAL;
|
|
|
|
if (sscanf(page, "%u", &new_value) != 1)
|
|
|
|
goto out;
|
|
|
|
|
|
|
|
selinux_checkreqprot = new_value ? 1 : 0;
|
|
|
|
length = count;
|
|
|
|
out:
|
|
|
|
free_page((unsigned long) page);
|
|
|
|
return length;
|
|
|
|
}
|
2007-02-12 16:55:37 +08:00
|
|
|
static const struct file_operations sel_checkreqprot_ops = {
|
2005-04-17 06:20:36 +08:00
|
|
|
.read = sel_read_checkreqprot,
|
|
|
|
.write = sel_write_checkreqprot,
|
|
|
|
};
|
|
|
|
|
[SECMARK]: Add new packet controls to SELinux
Add new per-packet access controls to SELinux, replacing the old
packet controls.
Packets are labeled with the iptables SECMARK and CONNSECMARK targets,
then security policy for the packets is enforced with these controls.
To allow for a smooth transition to the new controls, the old code is
still present, but not active by default. To restore previous
behavior, the old controls may be activated at runtime by writing a
'1' to /selinux/compat_net, and also via the kernel boot parameter
selinux_compat_net. Switching between the network control models
requires the security load_policy permission. The old controls will
probably eventually be removed and any continued use is discouraged.
With this patch, the new secmark controls for SElinux are disabled by
default, so existing behavior is entirely preserved, and the user is
not affected at all.
It also provides a config option to enable the secmark controls by
default (which can always be overridden at boot and runtime). It is
also noted in the kconfig help that the user will need updated
userspace if enabling secmark controls for SELinux and that they'll
probably need the SECMARK and CONNMARK targets, and conntrack protocol
helpers, although such decisions are beyond the scope of kernel
configuration.
Signed-off-by: James Morris <jmorris@namei.org>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
2006-06-09 15:33:33 +08:00
|
|
|
static ssize_t sel_read_compat_net(struct file *filp, char __user *buf,
|
|
|
|
size_t count, loff_t *ppos)
|
|
|
|
{
|
|
|
|
char tmpbuf[TMPBUFLEN];
|
|
|
|
ssize_t length;
|
|
|
|
|
|
|
|
length = scnprintf(tmpbuf, TMPBUFLEN, "%d", selinux_compat_net);
|
|
|
|
return simple_read_from_buffer(buf, count, ppos, tmpbuf, length);
|
|
|
|
}
|
|
|
|
|
2008-04-18 02:15:45 +08:00
|
|
|
static ssize_t sel_write_compat_net(struct file *file, const char __user *buf,
|
[SECMARK]: Add new packet controls to SELinux
Add new per-packet access controls to SELinux, replacing the old
packet controls.
Packets are labeled with the iptables SECMARK and CONNSECMARK targets,
then security policy for the packets is enforced with these controls.
To allow for a smooth transition to the new controls, the old code is
still present, but not active by default. To restore previous
behavior, the old controls may be activated at runtime by writing a
'1' to /selinux/compat_net, and also via the kernel boot parameter
selinux_compat_net. Switching between the network control models
requires the security load_policy permission. The old controls will
probably eventually be removed and any continued use is discouraged.
With this patch, the new secmark controls for SElinux are disabled by
default, so existing behavior is entirely preserved, and the user is
not affected at all.
It also provides a config option to enable the secmark controls by
default (which can always be overridden at boot and runtime). It is
also noted in the kconfig help that the user will need updated
userspace if enabling secmark controls for SELinux and that they'll
probably need the SECMARK and CONNMARK targets, and conntrack protocol
helpers, although such decisions are beyond the scope of kernel
configuration.
Signed-off-by: James Morris <jmorris@namei.org>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
2006-06-09 15:33:33 +08:00
|
|
|
size_t count, loff_t *ppos)
|
|
|
|
{
|
|
|
|
char *page;
|
|
|
|
ssize_t length;
|
|
|
|
int new_value;
|
|
|
|
|
|
|
|
length = task_has_security(current, SECURITY__LOAD_POLICY);
|
|
|
|
if (length)
|
|
|
|
return length;
|
|
|
|
|
|
|
|
if (count >= PAGE_SIZE)
|
|
|
|
return -ENOMEM;
|
|
|
|
if (*ppos != 0) {
|
|
|
|
/* No partial writes. */
|
|
|
|
return -EINVAL;
|
|
|
|
}
|
2008-04-18 02:15:45 +08:00
|
|
|
page = (char *)get_zeroed_page(GFP_KERNEL);
|
[SECMARK]: Add new packet controls to SELinux
Add new per-packet access controls to SELinux, replacing the old
packet controls.
Packets are labeled with the iptables SECMARK and CONNSECMARK targets,
then security policy for the packets is enforced with these controls.
To allow for a smooth transition to the new controls, the old code is
still present, but not active by default. To restore previous
behavior, the old controls may be activated at runtime by writing a
'1' to /selinux/compat_net, and also via the kernel boot parameter
selinux_compat_net. Switching between the network control models
requires the security load_policy permission. The old controls will
probably eventually be removed and any continued use is discouraged.
With this patch, the new secmark controls for SElinux are disabled by
default, so existing behavior is entirely preserved, and the user is
not affected at all.
It also provides a config option to enable the secmark controls by
default (which can always be overridden at boot and runtime). It is
also noted in the kconfig help that the user will need updated
userspace if enabling secmark controls for SELinux and that they'll
probably need the SECMARK and CONNMARK targets, and conntrack protocol
helpers, although such decisions are beyond the scope of kernel
configuration.
Signed-off-by: James Morris <jmorris@namei.org>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
2006-06-09 15:33:33 +08:00
|
|
|
if (!page)
|
|
|
|
return -ENOMEM;
|
|
|
|
length = -EFAULT;
|
|
|
|
if (copy_from_user(page, buf, count))
|
|
|
|
goto out;
|
|
|
|
|
|
|
|
length = -EINVAL;
|
|
|
|
if (sscanf(page, "%d", &new_value) != 1)
|
|
|
|
goto out;
|
|
|
|
|
|
|
|
selinux_compat_net = new_value ? 1 : 0;
|
|
|
|
length = count;
|
|
|
|
out:
|
|
|
|
free_page((unsigned long) page);
|
|
|
|
return length;
|
|
|
|
}
|
2007-02-12 16:55:37 +08:00
|
|
|
static const struct file_operations sel_compat_net_ops = {
|
[SECMARK]: Add new packet controls to SELinux
Add new per-packet access controls to SELinux, replacing the old
packet controls.
Packets are labeled with the iptables SECMARK and CONNSECMARK targets,
then security policy for the packets is enforced with these controls.
To allow for a smooth transition to the new controls, the old code is
still present, but not active by default. To restore previous
behavior, the old controls may be activated at runtime by writing a
'1' to /selinux/compat_net, and also via the kernel boot parameter
selinux_compat_net. Switching between the network control models
requires the security load_policy permission. The old controls will
probably eventually be removed and any continued use is discouraged.
With this patch, the new secmark controls for SElinux are disabled by
default, so existing behavior is entirely preserved, and the user is
not affected at all.
It also provides a config option to enable the secmark controls by
default (which can always be overridden at boot and runtime). It is
also noted in the kconfig help that the user will need updated
userspace if enabling secmark controls for SELinux and that they'll
probably need the SECMARK and CONNMARK targets, and conntrack protocol
helpers, although such decisions are beyond the scope of kernel
configuration.
Signed-off-by: James Morris <jmorris@namei.org>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
2006-06-09 15:33:33 +08:00
|
|
|
.read = sel_read_compat_net,
|
|
|
|
.write = sel_write_compat_net,
|
|
|
|
};
|
|
|
|
|
2005-04-17 06:20:36 +08:00
|
|
|
/*
|
|
|
|
* Remaining nodes use transaction based IO methods like nfsd/nfsctl.c
|
|
|
|
*/
|
2008-04-18 02:15:45 +08:00
|
|
|
static ssize_t sel_write_access(struct file *file, char *buf, size_t size);
|
|
|
|
static ssize_t sel_write_create(struct file *file, char *buf, size_t size);
|
|
|
|
static ssize_t sel_write_relabel(struct file *file, char *buf, size_t size);
|
|
|
|
static ssize_t sel_write_user(struct file *file, char *buf, size_t size);
|
|
|
|
static ssize_t sel_write_member(struct file *file, char *buf, size_t size);
|
2005-04-17 06:20:36 +08:00
|
|
|
|
|
|
|
static ssize_t (*write_op[])(struct file *, char *, size_t) = {
|
|
|
|
[SEL_ACCESS] = sel_write_access,
|
|
|
|
[SEL_CREATE] = sel_write_create,
|
|
|
|
[SEL_RELABEL] = sel_write_relabel,
|
|
|
|
[SEL_USER] = sel_write_user,
|
|
|
|
[SEL_MEMBER] = sel_write_member,
|
2005-11-09 13:34:33 +08:00
|
|
|
[SEL_CONTEXT] = sel_write_context,
|
2005-04-17 06:20:36 +08:00
|
|
|
};
|
|
|
|
|
|
|
|
static ssize_t selinux_transaction_write(struct file *file, const char __user *buf, size_t size, loff_t *pos)
|
|
|
|
{
|
2008-04-18 02:15:45 +08:00
|
|
|
ino_t ino = file->f_path.dentry->d_inode->i_ino;
|
2005-04-17 06:20:36 +08:00
|
|
|
char *data;
|
|
|
|
ssize_t rv;
|
|
|
|
|
2006-01-06 16:11:22 +08:00
|
|
|
if (ino >= ARRAY_SIZE(write_op) || !write_op[ino])
|
2005-04-17 06:20:36 +08:00
|
|
|
return -EINVAL;
|
|
|
|
|
|
|
|
data = simple_transaction_get(file, buf, size);
|
|
|
|
if (IS_ERR(data))
|
|
|
|
return PTR_ERR(data);
|
|
|
|
|
2008-04-18 02:15:45 +08:00
|
|
|
rv = write_op[ino](file, data, size);
|
|
|
|
if (rv > 0) {
|
2005-04-17 06:20:36 +08:00
|
|
|
simple_transaction_set(file, rv);
|
|
|
|
rv = size;
|
|
|
|
}
|
|
|
|
return rv;
|
|
|
|
}
|
|
|
|
|
2007-02-12 16:55:37 +08:00
|
|
|
static const struct file_operations transaction_ops = {
|
2005-04-17 06:20:36 +08:00
|
|
|
.write = selinux_transaction_write,
|
|
|
|
.read = simple_transaction_read,
|
|
|
|
.release = simple_transaction_release,
|
|
|
|
};
|
|
|
|
|
|
|
|
/*
|
|
|
|
* payload - write methods
|
|
|
|
* If the method has a response, the response should be put in buf,
|
|
|
|
* and the length returned. Otherwise return 0 or and -error.
|
|
|
|
*/
|
|
|
|
|
2008-04-18 02:15:45 +08:00
|
|
|
static ssize_t sel_write_access(struct file *file, char *buf, size_t size)
|
2005-04-17 06:20:36 +08:00
|
|
|
{
|
|
|
|
char *scon, *tcon;
|
|
|
|
u32 ssid, tsid;
|
|
|
|
u16 tclass;
|
|
|
|
u32 req;
|
|
|
|
struct av_decision avd;
|
|
|
|
ssize_t length;
|
|
|
|
|
|
|
|
length = task_has_security(current, SECURITY__COMPUTE_AV);
|
|
|
|
if (length)
|
|
|
|
return length;
|
|
|
|
|
|
|
|
length = -ENOMEM;
|
2005-10-31 06:59:21 +08:00
|
|
|
scon = kzalloc(size+1, GFP_KERNEL);
|
2005-04-17 06:20:36 +08:00
|
|
|
if (!scon)
|
|
|
|
return length;
|
|
|
|
|
2005-10-31 06:59:21 +08:00
|
|
|
tcon = kzalloc(size+1, GFP_KERNEL);
|
2005-04-17 06:20:36 +08:00
|
|
|
if (!tcon)
|
|
|
|
goto out;
|
|
|
|
|
|
|
|
length = -EINVAL;
|
|
|
|
if (sscanf(buf, "%s %s %hu %x", scon, tcon, &tclass, &req) != 4)
|
|
|
|
goto out2;
|
|
|
|
|
|
|
|
length = security_context_to_sid(scon, strlen(scon)+1, &ssid);
|
|
|
|
if (length < 0)
|
|
|
|
goto out2;
|
|
|
|
length = security_context_to_sid(tcon, strlen(tcon)+1, &tsid);
|
|
|
|
if (length < 0)
|
|
|
|
goto out2;
|
|
|
|
|
|
|
|
length = security_compute_av(ssid, tsid, tclass, req, &avd);
|
|
|
|
if (length < 0)
|
|
|
|
goto out2;
|
|
|
|
|
|
|
|
length = scnprintf(buf, SIMPLE_TRANSACTION_LIMIT,
|
|
|
|
"%x %x %x %x %u",
|
|
|
|
avd.allowed, avd.decided,
|
|
|
|
avd.auditallow, avd.auditdeny,
|
|
|
|
avd.seqno);
|
|
|
|
out2:
|
|
|
|
kfree(tcon);
|
|
|
|
out:
|
|
|
|
kfree(scon);
|
|
|
|
return length;
|
|
|
|
}
|
|
|
|
|
2008-04-18 02:15:45 +08:00
|
|
|
static ssize_t sel_write_create(struct file *file, char *buf, size_t size)
|
2005-04-17 06:20:36 +08:00
|
|
|
{
|
|
|
|
char *scon, *tcon;
|
|
|
|
u32 ssid, tsid, newsid;
|
|
|
|
u16 tclass;
|
|
|
|
ssize_t length;
|
|
|
|
char *newcon;
|
|
|
|
u32 len;
|
|
|
|
|
|
|
|
length = task_has_security(current, SECURITY__COMPUTE_CREATE);
|
|
|
|
if (length)
|
|
|
|
return length;
|
|
|
|
|
|
|
|
length = -ENOMEM;
|
2005-10-31 06:59:21 +08:00
|
|
|
scon = kzalloc(size+1, GFP_KERNEL);
|
2005-04-17 06:20:36 +08:00
|
|
|
if (!scon)
|
|
|
|
return length;
|
|
|
|
|
2005-10-31 06:59:21 +08:00
|
|
|
tcon = kzalloc(size+1, GFP_KERNEL);
|
2005-04-17 06:20:36 +08:00
|
|
|
if (!tcon)
|
|
|
|
goto out;
|
|
|
|
|
|
|
|
length = -EINVAL;
|
|
|
|
if (sscanf(buf, "%s %s %hu", scon, tcon, &tclass) != 3)
|
|
|
|
goto out2;
|
|
|
|
|
|
|
|
length = security_context_to_sid(scon, strlen(scon)+1, &ssid);
|
|
|
|
if (length < 0)
|
|
|
|
goto out2;
|
|
|
|
length = security_context_to_sid(tcon, strlen(tcon)+1, &tsid);
|
|
|
|
if (length < 0)
|
|
|
|
goto out2;
|
|
|
|
|
|
|
|
length = security_transition_sid(ssid, tsid, tclass, &newsid);
|
|
|
|
if (length < 0)
|
|
|
|
goto out2;
|
|
|
|
|
|
|
|
length = security_sid_to_context(newsid, &newcon, &len);
|
|
|
|
if (length < 0)
|
|
|
|
goto out2;
|
|
|
|
|
|
|
|
if (len > SIMPLE_TRANSACTION_LIMIT) {
|
2008-04-17 23:52:44 +08:00
|
|
|
printk(KERN_ERR "SELinux: %s: context size (%u) exceeds "
|
|
|
|
"payload max\n", __func__, len);
|
2005-04-17 06:20:36 +08:00
|
|
|
length = -ERANGE;
|
|
|
|
goto out3;
|
|
|
|
}
|
|
|
|
|
|
|
|
memcpy(buf, newcon, len);
|
|
|
|
length = len;
|
|
|
|
out3:
|
|
|
|
kfree(newcon);
|
|
|
|
out2:
|
|
|
|
kfree(tcon);
|
|
|
|
out:
|
|
|
|
kfree(scon);
|
|
|
|
return length;
|
|
|
|
}
|
|
|
|
|
2008-04-18 02:15:45 +08:00
|
|
|
static ssize_t sel_write_relabel(struct file *file, char *buf, size_t size)
|
2005-04-17 06:20:36 +08:00
|
|
|
{
|
|
|
|
char *scon, *tcon;
|
|
|
|
u32 ssid, tsid, newsid;
|
|
|
|
u16 tclass;
|
|
|
|
ssize_t length;
|
|
|
|
char *newcon;
|
|
|
|
u32 len;
|
|
|
|
|
|
|
|
length = task_has_security(current, SECURITY__COMPUTE_RELABEL);
|
|
|
|
if (length)
|
|
|
|
return length;
|
|
|
|
|
|
|
|
length = -ENOMEM;
|
2005-10-31 06:59:21 +08:00
|
|
|
scon = kzalloc(size+1, GFP_KERNEL);
|
2005-04-17 06:20:36 +08:00
|
|
|
if (!scon)
|
|
|
|
return length;
|
|
|
|
|
2005-10-31 06:59:21 +08:00
|
|
|
tcon = kzalloc(size+1, GFP_KERNEL);
|
2005-04-17 06:20:36 +08:00
|
|
|
if (!tcon)
|
|
|
|
goto out;
|
|
|
|
|
|
|
|
length = -EINVAL;
|
|
|
|
if (sscanf(buf, "%s %s %hu", scon, tcon, &tclass) != 3)
|
|
|
|
goto out2;
|
|
|
|
|
|
|
|
length = security_context_to_sid(scon, strlen(scon)+1, &ssid);
|
|
|
|
if (length < 0)
|
|
|
|
goto out2;
|
|
|
|
length = security_context_to_sid(tcon, strlen(tcon)+1, &tsid);
|
|
|
|
if (length < 0)
|
|
|
|
goto out2;
|
|
|
|
|
|
|
|
length = security_change_sid(ssid, tsid, tclass, &newsid);
|
|
|
|
if (length < 0)
|
|
|
|
goto out2;
|
|
|
|
|
|
|
|
length = security_sid_to_context(newsid, &newcon, &len);
|
|
|
|
if (length < 0)
|
|
|
|
goto out2;
|
|
|
|
|
|
|
|
if (len > SIMPLE_TRANSACTION_LIMIT) {
|
|
|
|
length = -ERANGE;
|
|
|
|
goto out3;
|
|
|
|
}
|
|
|
|
|
|
|
|
memcpy(buf, newcon, len);
|
|
|
|
length = len;
|
|
|
|
out3:
|
|
|
|
kfree(newcon);
|
|
|
|
out2:
|
|
|
|
kfree(tcon);
|
|
|
|
out:
|
|
|
|
kfree(scon);
|
|
|
|
return length;
|
|
|
|
}
|
|
|
|
|
2008-04-18 02:15:45 +08:00
|
|
|
static ssize_t sel_write_user(struct file *file, char *buf, size_t size)
|
2005-04-17 06:20:36 +08:00
|
|
|
{
|
|
|
|
char *con, *user, *ptr;
|
|
|
|
u32 sid, *sids;
|
|
|
|
ssize_t length;
|
|
|
|
char *newcon;
|
|
|
|
int i, rc;
|
|
|
|
u32 len, nsids;
|
|
|
|
|
|
|
|
length = task_has_security(current, SECURITY__COMPUTE_USER);
|
|
|
|
if (length)
|
|
|
|
return length;
|
|
|
|
|
|
|
|
length = -ENOMEM;
|
2005-10-31 06:59:21 +08:00
|
|
|
con = kzalloc(size+1, GFP_KERNEL);
|
2005-04-17 06:20:36 +08:00
|
|
|
if (!con)
|
|
|
|
return length;
|
|
|
|
|
2005-10-31 06:59:21 +08:00
|
|
|
user = kzalloc(size+1, GFP_KERNEL);
|
2005-04-17 06:20:36 +08:00
|
|
|
if (!user)
|
|
|
|
goto out;
|
|
|
|
|
|
|
|
length = -EINVAL;
|
|
|
|
if (sscanf(buf, "%s %s", con, user) != 2)
|
|
|
|
goto out2;
|
|
|
|
|
|
|
|
length = security_context_to_sid(con, strlen(con)+1, &sid);
|
|
|
|
if (length < 0)
|
|
|
|
goto out2;
|
|
|
|
|
|
|
|
length = security_get_user_sids(sid, user, &sids, &nsids);
|
|
|
|
if (length < 0)
|
|
|
|
goto out2;
|
|
|
|
|
|
|
|
length = sprintf(buf, "%u", nsids) + 1;
|
|
|
|
ptr = buf + length;
|
|
|
|
for (i = 0; i < nsids; i++) {
|
|
|
|
rc = security_sid_to_context(sids[i], &newcon, &len);
|
|
|
|
if (rc) {
|
|
|
|
length = rc;
|
|
|
|
goto out3;
|
|
|
|
}
|
|
|
|
if ((length + len) >= SIMPLE_TRANSACTION_LIMIT) {
|
|
|
|
kfree(newcon);
|
|
|
|
length = -ERANGE;
|
|
|
|
goto out3;
|
|
|
|
}
|
|
|
|
memcpy(ptr, newcon, len);
|
|
|
|
kfree(newcon);
|
|
|
|
ptr += len;
|
|
|
|
length += len;
|
|
|
|
}
|
|
|
|
out3:
|
|
|
|
kfree(sids);
|
|
|
|
out2:
|
|
|
|
kfree(user);
|
|
|
|
out:
|
|
|
|
kfree(con);
|
|
|
|
return length;
|
|
|
|
}
|
|
|
|
|
2008-04-18 02:15:45 +08:00
|
|
|
static ssize_t sel_write_member(struct file *file, char *buf, size_t size)
|
2005-04-17 06:20:36 +08:00
|
|
|
{
|
|
|
|
char *scon, *tcon;
|
|
|
|
u32 ssid, tsid, newsid;
|
|
|
|
u16 tclass;
|
|
|
|
ssize_t length;
|
|
|
|
char *newcon;
|
|
|
|
u32 len;
|
|
|
|
|
|
|
|
length = task_has_security(current, SECURITY__COMPUTE_MEMBER);
|
|
|
|
if (length)
|
|
|
|
return length;
|
|
|
|
|
|
|
|
length = -ENOMEM;
|
2005-10-31 06:59:21 +08:00
|
|
|
scon = kzalloc(size+1, GFP_KERNEL);
|
2005-04-17 06:20:36 +08:00
|
|
|
if (!scon)
|
|
|
|
return length;
|
|
|
|
|
2005-10-31 06:59:21 +08:00
|
|
|
tcon = kzalloc(size+1, GFP_KERNEL);
|
2005-04-17 06:20:36 +08:00
|
|
|
if (!tcon)
|
|
|
|
goto out;
|
|
|
|
|
|
|
|
length = -EINVAL;
|
|
|
|
if (sscanf(buf, "%s %s %hu", scon, tcon, &tclass) != 3)
|
|
|
|
goto out2;
|
|
|
|
|
|
|
|
length = security_context_to_sid(scon, strlen(scon)+1, &ssid);
|
|
|
|
if (length < 0)
|
|
|
|
goto out2;
|
|
|
|
length = security_context_to_sid(tcon, strlen(tcon)+1, &tsid);
|
|
|
|
if (length < 0)
|
|
|
|
goto out2;
|
|
|
|
|
|
|
|
length = security_member_sid(ssid, tsid, tclass, &newsid);
|
|
|
|
if (length < 0)
|
|
|
|
goto out2;
|
|
|
|
|
|
|
|
length = security_sid_to_context(newsid, &newcon, &len);
|
|
|
|
if (length < 0)
|
|
|
|
goto out2;
|
|
|
|
|
|
|
|
if (len > SIMPLE_TRANSACTION_LIMIT) {
|
2008-04-17 23:52:44 +08:00
|
|
|
printk(KERN_ERR "SELinux: %s: context size (%u) exceeds "
|
|
|
|
"payload max\n", __func__, len);
|
2005-04-17 06:20:36 +08:00
|
|
|
length = -ERANGE;
|
|
|
|
goto out3;
|
|
|
|
}
|
|
|
|
|
|
|
|
memcpy(buf, newcon, len);
|
|
|
|
length = len;
|
|
|
|
out3:
|
|
|
|
kfree(newcon);
|
|
|
|
out2:
|
|
|
|
kfree(tcon);
|
|
|
|
out:
|
|
|
|
kfree(scon);
|
|
|
|
return length;
|
|
|
|
}
|
|
|
|
|
|
|
|
static struct inode *sel_make_inode(struct super_block *sb, int mode)
|
|
|
|
{
|
|
|
|
struct inode *ret = new_inode(sb);
|
|
|
|
|
|
|
|
if (ret) {
|
|
|
|
ret->i_mode = mode;
|
|
|
|
ret->i_uid = ret->i_gid = 0;
|
|
|
|
ret->i_blocks = 0;
|
|
|
|
ret->i_atime = ret->i_mtime = ret->i_ctime = CURRENT_TIME;
|
|
|
|
}
|
|
|
|
return ret;
|
|
|
|
}
|
|
|
|
|
|
|
|
static ssize_t sel_read_bool(struct file *filep, char __user *buf,
|
|
|
|
size_t count, loff_t *ppos)
|
|
|
|
{
|
|
|
|
char *page = NULL;
|
|
|
|
ssize_t length;
|
|
|
|
ssize_t ret;
|
|
|
|
int cur_enforcing;
|
2007-11-27 00:12:53 +08:00
|
|
|
struct inode *inode = filep->f_path.dentry->d_inode;
|
|
|
|
unsigned index = inode->i_ino & SEL_INO_MASK;
|
|
|
|
const char *name = filep->f_path.dentry->d_name.name;
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2006-03-22 16:09:14 +08:00
|
|
|
mutex_lock(&sel_mutex);
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2007-11-27 00:12:53 +08:00
|
|
|
if (index >= bool_num || strcmp(name, bool_pending_names[index])) {
|
|
|
|
ret = -EINVAL;
|
|
|
|
goto out;
|
|
|
|
}
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2005-10-31 06:59:24 +08:00
|
|
|
if (count > PAGE_SIZE) {
|
2005-04-17 06:20:36 +08:00
|
|
|
ret = -EINVAL;
|
|
|
|
goto out;
|
|
|
|
}
|
2008-04-18 02:15:45 +08:00
|
|
|
page = (char *)get_zeroed_page(GFP_KERNEL);
|
|
|
|
if (!page) {
|
2005-04-17 06:20:36 +08:00
|
|
|
ret = -ENOMEM;
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
|
2007-11-27 00:12:53 +08:00
|
|
|
cur_enforcing = security_get_bool_value(index);
|
2005-04-17 06:20:36 +08:00
|
|
|
if (cur_enforcing < 0) {
|
|
|
|
ret = cur_enforcing;
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
length = scnprintf(page, PAGE_SIZE, "%d %d", cur_enforcing,
|
2007-11-27 00:12:53 +08:00
|
|
|
bool_pending_values[index]);
|
2006-03-22 16:09:15 +08:00
|
|
|
ret = simple_read_from_buffer(buf, count, ppos, page, length);
|
2005-04-17 06:20:36 +08:00
|
|
|
out:
|
2006-03-22 16:09:14 +08:00
|
|
|
mutex_unlock(&sel_mutex);
|
2005-04-17 06:20:36 +08:00
|
|
|
if (page)
|
|
|
|
free_page((unsigned long)page);
|
|
|
|
return ret;
|
|
|
|
}
|
|
|
|
|
|
|
|
static ssize_t sel_write_bool(struct file *filep, const char __user *buf,
|
|
|
|
size_t count, loff_t *ppos)
|
|
|
|
{
|
|
|
|
char *page = NULL;
|
2007-11-27 00:12:53 +08:00
|
|
|
ssize_t length;
|
2005-04-17 06:20:36 +08:00
|
|
|
int new_value;
|
2007-11-27 00:12:53 +08:00
|
|
|
struct inode *inode = filep->f_path.dentry->d_inode;
|
|
|
|
unsigned index = inode->i_ino & SEL_INO_MASK;
|
|
|
|
const char *name = filep->f_path.dentry->d_name.name;
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2006-03-22 16:09:14 +08:00
|
|
|
mutex_lock(&sel_mutex);
|
2005-04-17 06:20:36 +08:00
|
|
|
|
|
|
|
length = task_has_security(current, SECURITY__SETBOOL);
|
|
|
|
if (length)
|
|
|
|
goto out;
|
|
|
|
|
2007-11-27 00:12:53 +08:00
|
|
|
if (index >= bool_num || strcmp(name, bool_pending_names[index])) {
|
|
|
|
length = -EINVAL;
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
|
2005-10-31 06:59:24 +08:00
|
|
|
if (count >= PAGE_SIZE) {
|
2005-04-17 06:20:36 +08:00
|
|
|
length = -ENOMEM;
|
|
|
|
goto out;
|
|
|
|
}
|
2007-11-27 00:12:53 +08:00
|
|
|
|
2005-04-17 06:20:36 +08:00
|
|
|
if (*ppos != 0) {
|
|
|
|
/* No partial writes. */
|
2007-11-27 00:12:53 +08:00
|
|
|
length = -EINVAL;
|
2005-04-17 06:20:36 +08:00
|
|
|
goto out;
|
|
|
|
}
|
2008-04-18 02:15:45 +08:00
|
|
|
page = (char *)get_zeroed_page(GFP_KERNEL);
|
2005-04-17 06:20:36 +08:00
|
|
|
if (!page) {
|
|
|
|
length = -ENOMEM;
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
|
2007-11-27 00:12:53 +08:00
|
|
|
length = -EFAULT;
|
2005-04-17 06:20:36 +08:00
|
|
|
if (copy_from_user(page, buf, count))
|
|
|
|
goto out;
|
|
|
|
|
|
|
|
length = -EINVAL;
|
|
|
|
if (sscanf(page, "%d", &new_value) != 1)
|
|
|
|
goto out;
|
|
|
|
|
|
|
|
if (new_value)
|
|
|
|
new_value = 1;
|
|
|
|
|
2007-11-27 00:12:53 +08:00
|
|
|
bool_pending_values[index] = new_value;
|
2005-04-17 06:20:36 +08:00
|
|
|
length = count;
|
|
|
|
|
|
|
|
out:
|
2006-03-22 16:09:14 +08:00
|
|
|
mutex_unlock(&sel_mutex);
|
2005-04-17 06:20:36 +08:00
|
|
|
if (page)
|
|
|
|
free_page((unsigned long) page);
|
|
|
|
return length;
|
|
|
|
}
|
|
|
|
|
2007-02-12 16:55:37 +08:00
|
|
|
static const struct file_operations sel_bool_ops = {
|
2008-04-18 02:15:45 +08:00
|
|
|
.read = sel_read_bool,
|
|
|
|
.write = sel_write_bool,
|
2005-04-17 06:20:36 +08:00
|
|
|
};
|
|
|
|
|
|
|
|
static ssize_t sel_commit_bools_write(struct file *filep,
|
|
|
|
const char __user *buf,
|
|
|
|
size_t count, loff_t *ppos)
|
|
|
|
{
|
|
|
|
char *page = NULL;
|
2007-11-27 00:12:53 +08:00
|
|
|
ssize_t length;
|
2005-04-17 06:20:36 +08:00
|
|
|
int new_value;
|
|
|
|
|
2006-03-22 16:09:14 +08:00
|
|
|
mutex_lock(&sel_mutex);
|
2005-04-17 06:20:36 +08:00
|
|
|
|
|
|
|
length = task_has_security(current, SECURITY__SETBOOL);
|
|
|
|
if (length)
|
|
|
|
goto out;
|
|
|
|
|
2005-10-31 06:59:24 +08:00
|
|
|
if (count >= PAGE_SIZE) {
|
2005-04-17 06:20:36 +08:00
|
|
|
length = -ENOMEM;
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
if (*ppos != 0) {
|
|
|
|
/* No partial writes. */
|
|
|
|
goto out;
|
|
|
|
}
|
2008-04-18 02:15:45 +08:00
|
|
|
page = (char *)get_zeroed_page(GFP_KERNEL);
|
2005-04-17 06:20:36 +08:00
|
|
|
if (!page) {
|
|
|
|
length = -ENOMEM;
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
|
2007-11-27 00:12:53 +08:00
|
|
|
length = -EFAULT;
|
2005-04-17 06:20:36 +08:00
|
|
|
if (copy_from_user(page, buf, count))
|
|
|
|
goto out;
|
|
|
|
|
|
|
|
length = -EINVAL;
|
|
|
|
if (sscanf(page, "%d", &new_value) != 1)
|
|
|
|
goto out;
|
|
|
|
|
2008-04-18 02:15:45 +08:00
|
|
|
if (new_value && bool_pending_values)
|
2005-04-17 06:20:36 +08:00
|
|
|
security_set_bools(bool_num, bool_pending_values);
|
|
|
|
|
|
|
|
length = count;
|
|
|
|
|
|
|
|
out:
|
2006-03-22 16:09:14 +08:00
|
|
|
mutex_unlock(&sel_mutex);
|
2005-04-17 06:20:36 +08:00
|
|
|
if (page)
|
|
|
|
free_page((unsigned long) page);
|
|
|
|
return length;
|
|
|
|
}
|
|
|
|
|
2007-02-12 16:55:37 +08:00
|
|
|
static const struct file_operations sel_commit_bools_ops = {
|
2008-04-18 02:15:45 +08:00
|
|
|
.write = sel_commit_bools_write,
|
2005-04-17 06:20:36 +08:00
|
|
|
};
|
|
|
|
|
2007-05-23 21:12:07 +08:00
|
|
|
static void sel_remove_entries(struct dentry *de)
|
2005-04-17 06:20:36 +08:00
|
|
|
{
|
2007-11-21 22:01:36 +08:00
|
|
|
struct list_head *node;
|
2005-04-17 06:20:36 +08:00
|
|
|
|
|
|
|
spin_lock(&dcache_lock);
|
|
|
|
node = de->d_subdirs.next;
|
|
|
|
while (node != &de->d_subdirs) {
|
[PATCH] shrink dentry struct
Some long time ago, dentry struct was carefully tuned so that on 32 bits
UP, sizeof(struct dentry) was exactly 128, ie a power of 2, and a multiple
of memory cache lines.
Then RCU was added and dentry struct enlarged by two pointers, with nice
results for SMP, but not so good on UP, because breaking the above tuning
(128 + 8 = 136 bytes)
This patch reverts this unwanted side effect, by using an union (d_u),
where d_rcu and d_child are placed so that these two fields can share their
memory needs.
At the time d_free() is called (and d_rcu is really used), d_child is known
to be empty and not touched by the dentry freeing.
Lockless lookups only access d_name, d_parent, d_lock, d_op, d_flags (so
the previous content of d_child is not needed if said dentry was unhashed
but still accessed by a CPU because of RCU constraints)
As dentry cache easily contains millions of entries, a size reduction is
worth the extra complexity of the ugly C union.
Signed-off-by: Eric Dumazet <dada1@cosmosbay.com>
Cc: Dipankar Sarma <dipankar@in.ibm.com>
Cc: Maneesh Soni <maneesh@in.ibm.com>
Cc: Miklos Szeredi <miklos@szeredi.hu>
Cc: "Paul E. McKenney" <paulmck@us.ibm.com>
Cc: Ian Kent <raven@themaw.net>
Cc: Paul Jackson <pj@sgi.com>
Cc: Al Viro <viro@ftp.linux.org.uk>
Cc: Christoph Hellwig <hch@lst.de>
Cc: Trond Myklebust <trond.myklebust@fys.uio.no>
Cc: Neil Brown <neilb@cse.unsw.edu.au>
Cc: James Morris <jmorris@namei.org>
Cc: Stephen Smalley <sds@epoch.ncsc.mil>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
2006-01-08 17:03:32 +08:00
|
|
|
struct dentry *d = list_entry(node, struct dentry, d_u.d_child);
|
2005-04-17 06:20:36 +08:00
|
|
|
list_del_init(node);
|
|
|
|
|
|
|
|
if (d->d_inode) {
|
|
|
|
d = dget_locked(d);
|
|
|
|
spin_unlock(&dcache_lock);
|
|
|
|
d_delete(d);
|
|
|
|
simple_unlink(de->d_inode, d);
|
|
|
|
dput(d);
|
|
|
|
spin_lock(&dcache_lock);
|
|
|
|
}
|
|
|
|
node = de->d_subdirs.next;
|
|
|
|
}
|
|
|
|
|
|
|
|
spin_unlock(&dcache_lock);
|
|
|
|
}
|
|
|
|
|
|
|
|
#define BOOL_DIR_NAME "booleans"
|
|
|
|
|
|
|
|
static int sel_make_bools(void)
|
|
|
|
{
|
|
|
|
int i, ret = 0;
|
|
|
|
ssize_t len;
|
|
|
|
struct dentry *dentry = NULL;
|
|
|
|
struct dentry *dir = bool_dir;
|
|
|
|
struct inode *inode = NULL;
|
|
|
|
struct inode_security_struct *isec;
|
|
|
|
char **names = NULL, *page;
|
|
|
|
int num;
|
|
|
|
int *values = NULL;
|
|
|
|
u32 sid;
|
|
|
|
|
|
|
|
/* remove any existing files */
|
2007-11-27 00:12:53 +08:00
|
|
|
kfree(bool_pending_names);
|
2005-06-26 05:58:51 +08:00
|
|
|
kfree(bool_pending_values);
|
2007-11-27 00:12:53 +08:00
|
|
|
bool_pending_names = NULL;
|
2005-10-24 03:57:16 +08:00
|
|
|
bool_pending_values = NULL;
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2007-05-23 21:12:07 +08:00
|
|
|
sel_remove_entries(dir);
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2008-04-18 02:15:45 +08:00
|
|
|
page = (char *)get_zeroed_page(GFP_KERNEL);
|
|
|
|
if (!page)
|
2005-04-17 06:20:36 +08:00
|
|
|
return -ENOMEM;
|
|
|
|
|
|
|
|
ret = security_get_bools(&num, &names, &values);
|
|
|
|
if (ret != 0)
|
|
|
|
goto out;
|
|
|
|
|
|
|
|
for (i = 0; i < num; i++) {
|
|
|
|
dentry = d_alloc_name(dir, names[i]);
|
|
|
|
if (!dentry) {
|
|
|
|
ret = -ENOMEM;
|
|
|
|
goto err;
|
|
|
|
}
|
|
|
|
inode = sel_make_inode(dir->d_sb, S_IFREG | S_IRUGO | S_IWUSR);
|
|
|
|
if (!inode) {
|
|
|
|
ret = -ENOMEM;
|
|
|
|
goto err;
|
|
|
|
}
|
|
|
|
|
|
|
|
len = snprintf(page, PAGE_SIZE, "/%s/%s", BOOL_DIR_NAME, names[i]);
|
|
|
|
if (len < 0) {
|
|
|
|
ret = -EINVAL;
|
|
|
|
goto err;
|
|
|
|
} else if (len >= PAGE_SIZE) {
|
|
|
|
ret = -ENAMETOOLONG;
|
|
|
|
goto err;
|
|
|
|
}
|
2008-04-18 02:15:45 +08:00
|
|
|
isec = (struct inode_security_struct *)inode->i_security;
|
|
|
|
ret = security_genfs_sid("selinuxfs", page, SECCLASS_FILE, &sid);
|
|
|
|
if (ret)
|
2005-04-17 06:20:36 +08:00
|
|
|
goto err;
|
|
|
|
isec->sid = sid;
|
|
|
|
isec->initialized = 1;
|
|
|
|
inode->i_fop = &sel_bool_ops;
|
2007-04-05 04:18:50 +08:00
|
|
|
inode->i_ino = i|SEL_BOOL_INO_OFFSET;
|
2005-04-17 06:20:36 +08:00
|
|
|
d_add(dentry, inode);
|
|
|
|
}
|
|
|
|
bool_num = num;
|
2007-11-27 00:12:53 +08:00
|
|
|
bool_pending_names = names;
|
2005-04-17 06:20:36 +08:00
|
|
|
bool_pending_values = values;
|
|
|
|
out:
|
|
|
|
free_page((unsigned long)page);
|
2007-11-27 00:12:53 +08:00
|
|
|
return ret;
|
|
|
|
err:
|
2005-04-17 06:20:36 +08:00
|
|
|
if (names) {
|
2005-06-26 05:58:51 +08:00
|
|
|
for (i = 0; i < num; i++)
|
|
|
|
kfree(names[i]);
|
2005-04-17 06:20:36 +08:00
|
|
|
kfree(names);
|
|
|
|
}
|
2005-10-24 03:57:16 +08:00
|
|
|
kfree(values);
|
2007-05-23 21:12:07 +08:00
|
|
|
sel_remove_entries(dir);
|
2005-04-17 06:20:36 +08:00
|
|
|
ret = -ENOMEM;
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
|
|
|
|
#define NULL_FILE_NAME "null"
|
|
|
|
|
2008-04-18 02:15:45 +08:00
|
|
|
struct dentry *selinux_null;
|
2005-04-17 06:20:36 +08:00
|
|
|
|
|
|
|
static ssize_t sel_read_avc_cache_threshold(struct file *filp, char __user *buf,
|
|
|
|
size_t count, loff_t *ppos)
|
|
|
|
{
|
|
|
|
char tmpbuf[TMPBUFLEN];
|
|
|
|
ssize_t length;
|
|
|
|
|
|
|
|
length = scnprintf(tmpbuf, TMPBUFLEN, "%u", avc_cache_threshold);
|
|
|
|
return simple_read_from_buffer(buf, count, ppos, tmpbuf, length);
|
|
|
|
}
|
|
|
|
|
2008-04-18 02:15:45 +08:00
|
|
|
static ssize_t sel_write_avc_cache_threshold(struct file *file,
|
|
|
|
const char __user *buf,
|
2005-04-17 06:20:36 +08:00
|
|
|
size_t count, loff_t *ppos)
|
|
|
|
|
|
|
|
{
|
|
|
|
char *page;
|
|
|
|
ssize_t ret;
|
|
|
|
int new_value;
|
|
|
|
|
2005-10-31 06:59:24 +08:00
|
|
|
if (count >= PAGE_SIZE) {
|
2005-04-17 06:20:36 +08:00
|
|
|
ret = -ENOMEM;
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
|
|
|
|
if (*ppos != 0) {
|
|
|
|
/* No partial writes. */
|
|
|
|
ret = -EINVAL;
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
|
2008-04-18 02:15:45 +08:00
|
|
|
page = (char *)get_zeroed_page(GFP_KERNEL);
|
2005-04-17 06:20:36 +08:00
|
|
|
if (!page) {
|
|
|
|
ret = -ENOMEM;
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
|
|
|
|
if (copy_from_user(page, buf, count)) {
|
|
|
|
ret = -EFAULT;
|
|
|
|
goto out_free;
|
|
|
|
}
|
|
|
|
|
|
|
|
if (sscanf(page, "%u", &new_value) != 1) {
|
|
|
|
ret = -EINVAL;
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
|
|
|
|
if (new_value != avc_cache_threshold) {
|
|
|
|
ret = task_has_security(current, SECURITY__SETSECPARAM);
|
|
|
|
if (ret)
|
|
|
|
goto out_free;
|
|
|
|
avc_cache_threshold = new_value;
|
|
|
|
}
|
|
|
|
ret = count;
|
|
|
|
out_free:
|
|
|
|
free_page((unsigned long)page);
|
|
|
|
out:
|
|
|
|
return ret;
|
|
|
|
}
|
|
|
|
|
|
|
|
static ssize_t sel_read_avc_hash_stats(struct file *filp, char __user *buf,
|
|
|
|
size_t count, loff_t *ppos)
|
|
|
|
{
|
|
|
|
char *page;
|
|
|
|
ssize_t ret = 0;
|
|
|
|
|
|
|
|
page = (char *)__get_free_page(GFP_KERNEL);
|
|
|
|
if (!page) {
|
|
|
|
ret = -ENOMEM;
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
ret = avc_get_hash_stats(page);
|
|
|
|
if (ret >= 0)
|
|
|
|
ret = simple_read_from_buffer(buf, count, ppos, page, ret);
|
|
|
|
free_page((unsigned long)page);
|
|
|
|
out:
|
|
|
|
return ret;
|
|
|
|
}
|
|
|
|
|
2007-02-12 16:55:37 +08:00
|
|
|
static const struct file_operations sel_avc_cache_threshold_ops = {
|
2005-04-17 06:20:36 +08:00
|
|
|
.read = sel_read_avc_cache_threshold,
|
|
|
|
.write = sel_write_avc_cache_threshold,
|
|
|
|
};
|
|
|
|
|
2007-02-12 16:55:37 +08:00
|
|
|
static const struct file_operations sel_avc_hash_stats_ops = {
|
2005-04-17 06:20:36 +08:00
|
|
|
.read = sel_read_avc_hash_stats,
|
|
|
|
};
|
|
|
|
|
|
|
|
#ifdef CONFIG_SECURITY_SELINUX_AVC_STATS
|
|
|
|
static struct avc_cache_stats *sel_avc_get_stat_idx(loff_t *idx)
|
|
|
|
{
|
|
|
|
int cpu;
|
|
|
|
|
|
|
|
for (cpu = *idx; cpu < NR_CPUS; ++cpu) {
|
|
|
|
if (!cpu_possible(cpu))
|
|
|
|
continue;
|
|
|
|
*idx = cpu + 1;
|
|
|
|
return &per_cpu(avc_cache_stats, cpu);
|
|
|
|
}
|
|
|
|
return NULL;
|
|
|
|
}
|
|
|
|
|
|
|
|
static void *sel_avc_stats_seq_start(struct seq_file *seq, loff_t *pos)
|
|
|
|
{
|
|
|
|
loff_t n = *pos - 1;
|
|
|
|
|
|
|
|
if (*pos == 0)
|
|
|
|
return SEQ_START_TOKEN;
|
|
|
|
|
|
|
|
return sel_avc_get_stat_idx(&n);
|
|
|
|
}
|
|
|
|
|
|
|
|
static void *sel_avc_stats_seq_next(struct seq_file *seq, void *v, loff_t *pos)
|
|
|
|
{
|
|
|
|
return sel_avc_get_stat_idx(pos);
|
|
|
|
}
|
|
|
|
|
|
|
|
static int sel_avc_stats_seq_show(struct seq_file *seq, void *v)
|
|
|
|
{
|
|
|
|
struct avc_cache_stats *st = v;
|
|
|
|
|
|
|
|
if (v == SEQ_START_TOKEN)
|
|
|
|
seq_printf(seq, "lookups hits misses allocations reclaims "
|
|
|
|
"frees\n");
|
|
|
|
else
|
|
|
|
seq_printf(seq, "%u %u %u %u %u %u\n", st->lookups,
|
|
|
|
st->hits, st->misses, st->allocations,
|
|
|
|
st->reclaims, st->frees);
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
static void sel_avc_stats_seq_stop(struct seq_file *seq, void *v)
|
|
|
|
{ }
|
|
|
|
|
2008-01-23 07:02:58 +08:00
|
|
|
static const struct seq_operations sel_avc_cache_stats_seq_ops = {
|
2005-04-17 06:20:36 +08:00
|
|
|
.start = sel_avc_stats_seq_start,
|
|
|
|
.next = sel_avc_stats_seq_next,
|
|
|
|
.show = sel_avc_stats_seq_show,
|
|
|
|
.stop = sel_avc_stats_seq_stop,
|
|
|
|
};
|
|
|
|
|
|
|
|
static int sel_open_avc_cache_stats(struct inode *inode, struct file *file)
|
|
|
|
{
|
|
|
|
return seq_open(file, &sel_avc_cache_stats_seq_ops);
|
|
|
|
}
|
|
|
|
|
2007-02-12 16:55:37 +08:00
|
|
|
static const struct file_operations sel_avc_cache_stats_ops = {
|
2005-04-17 06:20:36 +08:00
|
|
|
.open = sel_open_avc_cache_stats,
|
|
|
|
.read = seq_read,
|
|
|
|
.llseek = seq_lseek,
|
|
|
|
.release = seq_release,
|
|
|
|
};
|
|
|
|
#endif
|
|
|
|
|
|
|
|
static int sel_make_avc_files(struct dentry *dir)
|
|
|
|
{
|
|
|
|
int i, ret = 0;
|
|
|
|
static struct tree_descr files[] = {
|
|
|
|
{ "cache_threshold",
|
|
|
|
&sel_avc_cache_threshold_ops, S_IRUGO|S_IWUSR },
|
|
|
|
{ "hash_stats", &sel_avc_hash_stats_ops, S_IRUGO },
|
|
|
|
#ifdef CONFIG_SECURITY_SELINUX_AVC_STATS
|
|
|
|
{ "cache_stats", &sel_avc_cache_stats_ops, S_IRUGO },
|
|
|
|
#endif
|
|
|
|
};
|
|
|
|
|
2006-01-06 16:11:22 +08:00
|
|
|
for (i = 0; i < ARRAY_SIZE(files); i++) {
|
2005-04-17 06:20:36 +08:00
|
|
|
struct inode *inode;
|
|
|
|
struct dentry *dentry;
|
|
|
|
|
|
|
|
dentry = d_alloc_name(dir, files[i].name);
|
|
|
|
if (!dentry) {
|
|
|
|
ret = -ENOMEM;
|
2006-03-22 16:09:19 +08:00
|
|
|
goto out;
|
2005-04-17 06:20:36 +08:00
|
|
|
}
|
|
|
|
|
|
|
|
inode = sel_make_inode(dir->d_sb, S_IFREG|files[i].mode);
|
|
|
|
if (!inode) {
|
|
|
|
ret = -ENOMEM;
|
2006-03-22 16:09:19 +08:00
|
|
|
goto out;
|
2005-04-17 06:20:36 +08:00
|
|
|
}
|
|
|
|
inode->i_fop = files[i].ops;
|
2007-04-05 04:18:39 +08:00
|
|
|
inode->i_ino = ++sel_last_ino;
|
2005-04-17 06:20:36 +08:00
|
|
|
d_add(dentry, inode);
|
|
|
|
}
|
|
|
|
out:
|
|
|
|
return ret;
|
|
|
|
}
|
|
|
|
|
2008-04-18 02:15:45 +08:00
|
|
|
static ssize_t sel_read_initcon(struct file *file, char __user *buf,
|
2007-04-04 22:11:29 +08:00
|
|
|
size_t count, loff_t *ppos)
|
|
|
|
{
|
|
|
|
struct inode *inode;
|
|
|
|
char *con;
|
|
|
|
u32 sid, len;
|
|
|
|
ssize_t ret;
|
|
|
|
|
|
|
|
inode = file->f_path.dentry->d_inode;
|
|
|
|
sid = inode->i_ino&SEL_INO_MASK;
|
|
|
|
ret = security_sid_to_context(sid, &con, &len);
|
|
|
|
if (ret < 0)
|
|
|
|
return ret;
|
|
|
|
|
|
|
|
ret = simple_read_from_buffer(buf, count, ppos, con, len);
|
|
|
|
kfree(con);
|
|
|
|
return ret;
|
|
|
|
}
|
|
|
|
|
|
|
|
static const struct file_operations sel_initcon_ops = {
|
|
|
|
.read = sel_read_initcon,
|
|
|
|
};
|
|
|
|
|
|
|
|
static int sel_make_initcon_files(struct dentry *dir)
|
|
|
|
{
|
|
|
|
int i, ret = 0;
|
|
|
|
|
|
|
|
for (i = 1; i <= SECINITSID_NUM; i++) {
|
|
|
|
struct inode *inode;
|
|
|
|
struct dentry *dentry;
|
|
|
|
dentry = d_alloc_name(dir, security_get_initial_sid_context(i));
|
|
|
|
if (!dentry) {
|
|
|
|
ret = -ENOMEM;
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
|
|
|
|
inode = sel_make_inode(dir->d_sb, S_IFREG|S_IRUGO);
|
|
|
|
if (!inode) {
|
|
|
|
ret = -ENOMEM;
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
inode->i_fop = &sel_initcon_ops;
|
|
|
|
inode->i_ino = i|SEL_INITCON_INO_OFFSET;
|
|
|
|
d_add(dentry, inode);
|
|
|
|
}
|
|
|
|
out:
|
|
|
|
return ret;
|
|
|
|
}
|
|
|
|
|
2007-05-23 21:12:09 +08:00
|
|
|
static inline unsigned int sel_div(unsigned long a, unsigned long b)
|
|
|
|
{
|
|
|
|
return a / b - (a % b < 0);
|
|
|
|
}
|
|
|
|
|
|
|
|
static inline unsigned long sel_class_to_ino(u16 class)
|
|
|
|
{
|
|
|
|
return (class * (SEL_VEC_MAX + 1)) | SEL_CLASS_INO_OFFSET;
|
|
|
|
}
|
|
|
|
|
|
|
|
static inline u16 sel_ino_to_class(unsigned long ino)
|
|
|
|
{
|
|
|
|
return sel_div(ino & SEL_INO_MASK, SEL_VEC_MAX + 1);
|
|
|
|
}
|
|
|
|
|
|
|
|
static inline unsigned long sel_perm_to_ino(u16 class, u32 perm)
|
|
|
|
{
|
|
|
|
return (class * (SEL_VEC_MAX + 1) + perm) | SEL_CLASS_INO_OFFSET;
|
|
|
|
}
|
|
|
|
|
|
|
|
static inline u32 sel_ino_to_perm(unsigned long ino)
|
|
|
|
{
|
|
|
|
return (ino & SEL_INO_MASK) % (SEL_VEC_MAX + 1);
|
|
|
|
}
|
|
|
|
|
2008-04-18 02:15:45 +08:00
|
|
|
static ssize_t sel_read_class(struct file *file, char __user *buf,
|
2007-05-23 21:12:09 +08:00
|
|
|
size_t count, loff_t *ppos)
|
|
|
|
{
|
|
|
|
ssize_t rc, len;
|
|
|
|
char *page;
|
|
|
|
unsigned long ino = file->f_path.dentry->d_inode->i_ino;
|
|
|
|
|
|
|
|
page = (char *)__get_free_page(GFP_KERNEL);
|
|
|
|
if (!page) {
|
|
|
|
rc = -ENOMEM;
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
|
|
|
|
len = snprintf(page, PAGE_SIZE, "%d", sel_ino_to_class(ino));
|
|
|
|
rc = simple_read_from_buffer(buf, count, ppos, page, len);
|
|
|
|
free_page((unsigned long)page);
|
|
|
|
out:
|
|
|
|
return rc;
|
|
|
|
}
|
|
|
|
|
|
|
|
static const struct file_operations sel_class_ops = {
|
|
|
|
.read = sel_read_class,
|
|
|
|
};
|
|
|
|
|
2008-04-18 02:15:45 +08:00
|
|
|
static ssize_t sel_read_perm(struct file *file, char __user *buf,
|
2007-05-23 21:12:09 +08:00
|
|
|
size_t count, loff_t *ppos)
|
|
|
|
{
|
|
|
|
ssize_t rc, len;
|
|
|
|
char *page;
|
|
|
|
unsigned long ino = file->f_path.dentry->d_inode->i_ino;
|
|
|
|
|
|
|
|
page = (char *)__get_free_page(GFP_KERNEL);
|
|
|
|
if (!page) {
|
|
|
|
rc = -ENOMEM;
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
|
2008-04-18 02:15:45 +08:00
|
|
|
len = snprintf(page, PAGE_SIZE, "%d", sel_ino_to_perm(ino));
|
2007-05-23 21:12:09 +08:00
|
|
|
rc = simple_read_from_buffer(buf, count, ppos, page, len);
|
|
|
|
free_page((unsigned long)page);
|
|
|
|
out:
|
|
|
|
return rc;
|
|
|
|
}
|
|
|
|
|
|
|
|
static const struct file_operations sel_perm_ops = {
|
|
|
|
.read = sel_read_perm,
|
|
|
|
};
|
|
|
|
|
2008-01-29 21:38:19 +08:00
|
|
|
static ssize_t sel_read_policycap(struct file *file, char __user *buf,
|
|
|
|
size_t count, loff_t *ppos)
|
|
|
|
{
|
|
|
|
int value;
|
|
|
|
char tmpbuf[TMPBUFLEN];
|
|
|
|
ssize_t length;
|
|
|
|
unsigned long i_ino = file->f_path.dentry->d_inode->i_ino;
|
|
|
|
|
|
|
|
value = security_policycap_supported(i_ino & SEL_INO_MASK);
|
|
|
|
length = scnprintf(tmpbuf, TMPBUFLEN, "%d", value);
|
|
|
|
|
|
|
|
return simple_read_from_buffer(buf, count, ppos, tmpbuf, length);
|
|
|
|
}
|
|
|
|
|
|
|
|
static const struct file_operations sel_policycap_ops = {
|
|
|
|
.read = sel_read_policycap,
|
|
|
|
};
|
|
|
|
|
2007-05-23 21:12:09 +08:00
|
|
|
static int sel_make_perm_files(char *objclass, int classvalue,
|
|
|
|
struct dentry *dir)
|
|
|
|
{
|
|
|
|
int i, rc = 0, nperms;
|
|
|
|
char **perms;
|
|
|
|
|
|
|
|
rc = security_get_permissions(objclass, &perms, &nperms);
|
|
|
|
if (rc)
|
|
|
|
goto out;
|
|
|
|
|
|
|
|
for (i = 0; i < nperms; i++) {
|
|
|
|
struct inode *inode;
|
|
|
|
struct dentry *dentry;
|
|
|
|
|
|
|
|
dentry = d_alloc_name(dir, perms[i]);
|
|
|
|
if (!dentry) {
|
|
|
|
rc = -ENOMEM;
|
|
|
|
goto out1;
|
|
|
|
}
|
|
|
|
|
|
|
|
inode = sel_make_inode(dir->d_sb, S_IFREG|S_IRUGO);
|
|
|
|
if (!inode) {
|
|
|
|
rc = -ENOMEM;
|
|
|
|
goto out1;
|
|
|
|
}
|
|
|
|
inode->i_fop = &sel_perm_ops;
|
|
|
|
/* i+1 since perm values are 1-indexed */
|
|
|
|
inode->i_ino = sel_perm_to_ino(classvalue, i+1);
|
|
|
|
d_add(dentry, inode);
|
|
|
|
}
|
|
|
|
|
|
|
|
out1:
|
|
|
|
for (i = 0; i < nperms; i++)
|
|
|
|
kfree(perms[i]);
|
|
|
|
kfree(perms);
|
|
|
|
out:
|
|
|
|
return rc;
|
|
|
|
}
|
|
|
|
|
|
|
|
static int sel_make_class_dir_entries(char *classname, int index,
|
|
|
|
struct dentry *dir)
|
|
|
|
{
|
|
|
|
struct dentry *dentry = NULL;
|
|
|
|
struct inode *inode = NULL;
|
|
|
|
int rc;
|
|
|
|
|
|
|
|
dentry = d_alloc_name(dir, "index");
|
|
|
|
if (!dentry) {
|
|
|
|
rc = -ENOMEM;
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
|
|
|
|
inode = sel_make_inode(dir->d_sb, S_IFREG|S_IRUGO);
|
|
|
|
if (!inode) {
|
|
|
|
rc = -ENOMEM;
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
|
|
|
|
inode->i_fop = &sel_class_ops;
|
|
|
|
inode->i_ino = sel_class_to_ino(index);
|
|
|
|
d_add(dentry, inode);
|
|
|
|
|
|
|
|
dentry = d_alloc_name(dir, "perms");
|
|
|
|
if (!dentry) {
|
|
|
|
rc = -ENOMEM;
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
|
|
|
|
rc = sel_make_dir(dir->d_inode, dentry, &last_class_ino);
|
|
|
|
if (rc)
|
|
|
|
goto out;
|
|
|
|
|
|
|
|
rc = sel_make_perm_files(classname, index, dentry);
|
|
|
|
|
|
|
|
out:
|
|
|
|
return rc;
|
|
|
|
}
|
|
|
|
|
|
|
|
static void sel_remove_classes(void)
|
|
|
|
{
|
|
|
|
struct list_head *class_node;
|
|
|
|
|
|
|
|
list_for_each(class_node, &class_dir->d_subdirs) {
|
|
|
|
struct dentry *class_subdir = list_entry(class_node,
|
|
|
|
struct dentry, d_u.d_child);
|
|
|
|
struct list_head *class_subdir_node;
|
|
|
|
|
|
|
|
list_for_each(class_subdir_node, &class_subdir->d_subdirs) {
|
|
|
|
struct dentry *d = list_entry(class_subdir_node,
|
|
|
|
struct dentry, d_u.d_child);
|
|
|
|
|
|
|
|
if (d->d_inode)
|
|
|
|
if (d->d_inode->i_mode & S_IFDIR)
|
|
|
|
sel_remove_entries(d);
|
|
|
|
}
|
|
|
|
|
|
|
|
sel_remove_entries(class_subdir);
|
|
|
|
}
|
|
|
|
|
|
|
|
sel_remove_entries(class_dir);
|
|
|
|
}
|
|
|
|
|
|
|
|
static int sel_make_classes(void)
|
|
|
|
{
|
|
|
|
int rc = 0, nclasses, i;
|
|
|
|
char **classes;
|
|
|
|
|
|
|
|
/* delete any existing entries */
|
|
|
|
sel_remove_classes();
|
|
|
|
|
|
|
|
rc = security_get_classes(&classes, &nclasses);
|
|
|
|
if (rc < 0)
|
|
|
|
goto out;
|
|
|
|
|
|
|
|
/* +2 since classes are 1-indexed */
|
|
|
|
last_class_ino = sel_class_to_ino(nclasses+2);
|
|
|
|
|
|
|
|
for (i = 0; i < nclasses; i++) {
|
|
|
|
struct dentry *class_name_dir;
|
|
|
|
|
|
|
|
class_name_dir = d_alloc_name(class_dir, classes[i]);
|
|
|
|
if (!class_name_dir) {
|
|
|
|
rc = -ENOMEM;
|
|
|
|
goto out1;
|
|
|
|
}
|
|
|
|
|
|
|
|
rc = sel_make_dir(class_dir->d_inode, class_name_dir,
|
|
|
|
&last_class_ino);
|
|
|
|
if (rc)
|
|
|
|
goto out1;
|
|
|
|
|
|
|
|
/* i+1 since class values are 1-indexed */
|
|
|
|
rc = sel_make_class_dir_entries(classes[i], i+1,
|
|
|
|
class_name_dir);
|
|
|
|
if (rc)
|
|
|
|
goto out1;
|
|
|
|
}
|
|
|
|
|
|
|
|
out1:
|
|
|
|
for (i = 0; i < nclasses; i++)
|
|
|
|
kfree(classes[i]);
|
|
|
|
kfree(classes);
|
|
|
|
out:
|
|
|
|
return rc;
|
|
|
|
}
|
|
|
|
|
2008-01-29 21:38:19 +08:00
|
|
|
static int sel_make_policycap(void)
|
|
|
|
{
|
|
|
|
unsigned int iter;
|
|
|
|
struct dentry *dentry = NULL;
|
|
|
|
struct inode *inode = NULL;
|
|
|
|
|
|
|
|
sel_remove_entries(policycap_dir);
|
|
|
|
|
|
|
|
for (iter = 0; iter <= POLICYDB_CAPABILITY_MAX; iter++) {
|
|
|
|
if (iter < ARRAY_SIZE(policycap_names))
|
|
|
|
dentry = d_alloc_name(policycap_dir,
|
|
|
|
policycap_names[iter]);
|
|
|
|
else
|
|
|
|
dentry = d_alloc_name(policycap_dir, "unknown");
|
|
|
|
|
|
|
|
if (dentry == NULL)
|
|
|
|
return -ENOMEM;
|
|
|
|
|
|
|
|
inode = sel_make_inode(policycap_dir->d_sb, S_IFREG | S_IRUGO);
|
|
|
|
if (inode == NULL)
|
|
|
|
return -ENOMEM;
|
|
|
|
|
|
|
|
inode->i_fop = &sel_policycap_ops;
|
|
|
|
inode->i_ino = iter | SEL_POLICYCAP_INO_OFFSET;
|
|
|
|
d_add(dentry, inode);
|
|
|
|
}
|
|
|
|
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
2007-05-23 21:12:08 +08:00
|
|
|
static int sel_make_dir(struct inode *dir, struct dentry *dentry,
|
|
|
|
unsigned long *ino)
|
2005-04-17 06:20:36 +08:00
|
|
|
{
|
|
|
|
int ret = 0;
|
|
|
|
struct inode *inode;
|
|
|
|
|
2006-03-22 16:09:20 +08:00
|
|
|
inode = sel_make_inode(dir->i_sb, S_IFDIR | S_IRUGO | S_IXUGO);
|
2005-04-17 06:20:36 +08:00
|
|
|
if (!inode) {
|
|
|
|
ret = -ENOMEM;
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
inode->i_op = &simple_dir_inode_operations;
|
|
|
|
inode->i_fop = &simple_dir_operations;
|
2007-05-23 21:12:08 +08:00
|
|
|
inode->i_ino = ++(*ino);
|
2006-03-22 16:09:16 +08:00
|
|
|
/* directory inodes start off with i_nlink == 2 (for "." entry) */
|
2006-10-01 14:29:04 +08:00
|
|
|
inc_nlink(inode);
|
2005-04-17 06:20:36 +08:00
|
|
|
d_add(dentry, inode);
|
2006-03-22 16:09:20 +08:00
|
|
|
/* bump link count on parent directory, too */
|
2006-10-01 14:29:04 +08:00
|
|
|
inc_nlink(dir);
|
2005-04-17 06:20:36 +08:00
|
|
|
out:
|
|
|
|
return ret;
|
|
|
|
}
|
|
|
|
|
2008-04-18 02:15:45 +08:00
|
|
|
static int sel_fill_super(struct super_block *sb, void *data, int silent)
|
2005-04-17 06:20:36 +08:00
|
|
|
{
|
|
|
|
int ret;
|
|
|
|
struct dentry *dentry;
|
2006-03-22 16:09:20 +08:00
|
|
|
struct inode *inode, *root_inode;
|
2005-04-17 06:20:36 +08:00
|
|
|
struct inode_security_struct *isec;
|
|
|
|
|
|
|
|
static struct tree_descr selinux_files[] = {
|
|
|
|
[SEL_LOAD] = {"load", &sel_load_ops, S_IRUSR|S_IWUSR},
|
|
|
|
[SEL_ENFORCE] = {"enforce", &sel_enforce_ops, S_IRUGO|S_IWUSR},
|
2005-11-09 13:34:33 +08:00
|
|
|
[SEL_CONTEXT] = {"context", &transaction_ops, S_IRUGO|S_IWUGO},
|
2005-04-17 06:20:36 +08:00
|
|
|
[SEL_ACCESS] = {"access", &transaction_ops, S_IRUGO|S_IWUGO},
|
|
|
|
[SEL_CREATE] = {"create", &transaction_ops, S_IRUGO|S_IWUGO},
|
|
|
|
[SEL_RELABEL] = {"relabel", &transaction_ops, S_IRUGO|S_IWUGO},
|
|
|
|
[SEL_USER] = {"user", &transaction_ops, S_IRUGO|S_IWUGO},
|
|
|
|
[SEL_POLICYVERS] = {"policyvers", &sel_policyvers_ops, S_IRUGO},
|
|
|
|
[SEL_COMMIT_BOOLS] = {"commit_pending_bools", &sel_commit_bools_ops, S_IWUSR},
|
|
|
|
[SEL_MLS] = {"mls", &sel_mls_ops, S_IRUGO},
|
|
|
|
[SEL_DISABLE] = {"disable", &sel_disable_ops, S_IWUSR},
|
|
|
|
[SEL_MEMBER] = {"member", &transaction_ops, S_IRUGO|S_IWUGO},
|
|
|
|
[SEL_CHECKREQPROT] = {"checkreqprot", &sel_checkreqprot_ops, S_IRUGO|S_IWUSR},
|
[SECMARK]: Add new packet controls to SELinux
Add new per-packet access controls to SELinux, replacing the old
packet controls.
Packets are labeled with the iptables SECMARK and CONNSECMARK targets,
then security policy for the packets is enforced with these controls.
To allow for a smooth transition to the new controls, the old code is
still present, but not active by default. To restore previous
behavior, the old controls may be activated at runtime by writing a
'1' to /selinux/compat_net, and also via the kernel boot parameter
selinux_compat_net. Switching between the network control models
requires the security load_policy permission. The old controls will
probably eventually be removed and any continued use is discouraged.
With this patch, the new secmark controls for SElinux are disabled by
default, so existing behavior is entirely preserved, and the user is
not affected at all.
It also provides a config option to enable the secmark controls by
default (which can always be overridden at boot and runtime). It is
also noted in the kconfig help that the user will need updated
userspace if enabling secmark controls for SELinux and that they'll
probably need the SECMARK and CONNMARK targets, and conntrack protocol
helpers, although such decisions are beyond the scope of kernel
configuration.
Signed-off-by: James Morris <jmorris@namei.org>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
2006-06-09 15:33:33 +08:00
|
|
|
[SEL_COMPAT_NET] = {"compat_net", &sel_compat_net_ops, S_IRUGO|S_IWUSR},
|
2007-09-22 02:37:10 +08:00
|
|
|
[SEL_REJECT_UNKNOWN] = {"reject_unknown", &sel_handle_unknown_ops, S_IRUGO},
|
|
|
|
[SEL_DENY_UNKNOWN] = {"deny_unknown", &sel_handle_unknown_ops, S_IRUGO},
|
2005-04-17 06:20:36 +08:00
|
|
|
/* last one */ {""}
|
|
|
|
};
|
|
|
|
ret = simple_fill_super(sb, SELINUX_MAGIC, selinux_files);
|
|
|
|
if (ret)
|
2006-03-22 16:09:17 +08:00
|
|
|
goto err;
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2006-03-22 16:09:20 +08:00
|
|
|
root_inode = sb->s_root->d_inode;
|
|
|
|
|
2005-04-17 06:20:36 +08:00
|
|
|
dentry = d_alloc_name(sb->s_root, BOOL_DIR_NAME);
|
2006-03-22 16:09:17 +08:00
|
|
|
if (!dentry) {
|
|
|
|
ret = -ENOMEM;
|
|
|
|
goto err;
|
|
|
|
}
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2007-05-23 21:12:08 +08:00
|
|
|
ret = sel_make_dir(root_inode, dentry, &sel_last_ino);
|
2006-03-22 16:09:17 +08:00
|
|
|
if (ret)
|
2006-03-22 16:09:17 +08:00
|
|
|
goto err;
|
2006-03-22 16:09:17 +08:00
|
|
|
|
2005-04-17 06:20:36 +08:00
|
|
|
bool_dir = dentry;
|
|
|
|
|
|
|
|
dentry = d_alloc_name(sb->s_root, NULL_FILE_NAME);
|
2006-03-22 16:09:17 +08:00
|
|
|
if (!dentry) {
|
|
|
|
ret = -ENOMEM;
|
|
|
|
goto err;
|
|
|
|
}
|
2005-04-17 06:20:36 +08:00
|
|
|
|
|
|
|
inode = sel_make_inode(sb, S_IFCHR | S_IRUGO | S_IWUGO);
|
2006-03-22 16:09:17 +08:00
|
|
|
if (!inode) {
|
|
|
|
ret = -ENOMEM;
|
|
|
|
goto err;
|
|
|
|
}
|
2007-04-05 04:18:39 +08:00
|
|
|
inode->i_ino = ++sel_last_ino;
|
2008-04-18 02:15:45 +08:00
|
|
|
isec = (struct inode_security_struct *)inode->i_security;
|
2005-04-17 06:20:36 +08:00
|
|
|
isec->sid = SECINITSID_DEVNULL;
|
|
|
|
isec->sclass = SECCLASS_CHR_FILE;
|
|
|
|
isec->initialized = 1;
|
|
|
|
|
|
|
|
init_special_inode(inode, S_IFCHR | S_IRUGO | S_IWUGO, MKDEV(MEM_MAJOR, 3));
|
|
|
|
d_add(dentry, inode);
|
|
|
|
selinux_null = dentry;
|
|
|
|
|
|
|
|
dentry = d_alloc_name(sb->s_root, "avc");
|
2006-03-22 16:09:17 +08:00
|
|
|
if (!dentry) {
|
|
|
|
ret = -ENOMEM;
|
|
|
|
goto err;
|
|
|
|
}
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2007-05-23 21:12:08 +08:00
|
|
|
ret = sel_make_dir(root_inode, dentry, &sel_last_ino);
|
2005-04-17 06:20:36 +08:00
|
|
|
if (ret)
|
2006-03-22 16:09:17 +08:00
|
|
|
goto err;
|
2005-04-17 06:20:36 +08:00
|
|
|
|
|
|
|
ret = sel_make_avc_files(dentry);
|
|
|
|
if (ret)
|
2006-03-22 16:09:17 +08:00
|
|
|
goto err;
|
2007-04-04 22:11:29 +08:00
|
|
|
|
|
|
|
dentry = d_alloc_name(sb->s_root, "initial_contexts");
|
|
|
|
if (!dentry) {
|
|
|
|
ret = -ENOMEM;
|
|
|
|
goto err;
|
|
|
|
}
|
|
|
|
|
2007-05-23 21:12:08 +08:00
|
|
|
ret = sel_make_dir(root_inode, dentry, &sel_last_ino);
|
2007-04-04 22:11:29 +08:00
|
|
|
if (ret)
|
|
|
|
goto err;
|
|
|
|
|
|
|
|
ret = sel_make_initcon_files(dentry);
|
|
|
|
if (ret)
|
|
|
|
goto err;
|
|
|
|
|
2007-05-23 21:12:09 +08:00
|
|
|
dentry = d_alloc_name(sb->s_root, "class");
|
|
|
|
if (!dentry) {
|
|
|
|
ret = -ENOMEM;
|
|
|
|
goto err;
|
|
|
|
}
|
|
|
|
|
|
|
|
ret = sel_make_dir(root_inode, dentry, &sel_last_ino);
|
|
|
|
if (ret)
|
|
|
|
goto err;
|
|
|
|
|
|
|
|
class_dir = dentry;
|
|
|
|
|
2008-01-29 21:38:19 +08:00
|
|
|
dentry = d_alloc_name(sb->s_root, "policy_capabilities");
|
|
|
|
if (!dentry) {
|
|
|
|
ret = -ENOMEM;
|
|
|
|
goto err;
|
|
|
|
}
|
|
|
|
|
|
|
|
ret = sel_make_dir(root_inode, dentry, &sel_last_ino);
|
|
|
|
if (ret)
|
|
|
|
goto err;
|
|
|
|
|
|
|
|
policycap_dir = dentry;
|
|
|
|
|
2005-04-17 06:20:36 +08:00
|
|
|
out:
|
2006-03-22 16:09:17 +08:00
|
|
|
return ret;
|
|
|
|
err:
|
2008-04-17 23:52:44 +08:00
|
|
|
printk(KERN_ERR "SELinux: %s: failed while creating inodes\n",
|
|
|
|
__func__);
|
2006-03-22 16:09:17 +08:00
|
|
|
goto out;
|
2005-04-17 06:20:36 +08:00
|
|
|
}
|
|
|
|
|
[PATCH] VFS: Permit filesystem to override root dentry on mount
Extend the get_sb() filesystem operation to take an extra argument that
permits the VFS to pass in the target vfsmount that defines the mountpoint.
The filesystem is then required to manually set the superblock and root dentry
pointers. For most filesystems, this should be done with simple_set_mnt()
which will set the superblock pointer and then set the root dentry to the
superblock's s_root (as per the old default behaviour).
The get_sb() op now returns an integer as there's now no need to return the
superblock pointer.
This patch permits a superblock to be implicitly shared amongst several mount
points, such as can be done with NFS to avoid potential inode aliasing. In
such a case, simple_set_mnt() would not be called, and instead the mnt_root
and mnt_sb would be set directly.
The patch also makes the following changes:
(*) the get_sb_*() convenience functions in the core kernel now take a vfsmount
pointer argument and return an integer, so most filesystems have to change
very little.
(*) If one of the convenience function is not used, then get_sb() should
normally call simple_set_mnt() to instantiate the vfsmount. This will
always return 0, and so can be tail-called from get_sb().
(*) generic_shutdown_super() now calls shrink_dcache_sb() to clean up the
dcache upon superblock destruction rather than shrink_dcache_anon().
This is required because the superblock may now have multiple trees that
aren't actually bound to s_root, but that still need to be cleaned up. The
currently called functions assume that the whole tree is rooted at s_root,
and that anonymous dentries are not the roots of trees which results in
dentries being left unculled.
However, with the way NFS superblock sharing are currently set to be
implemented, these assumptions are violated: the root of the filesystem is
simply a dummy dentry and inode (the real inode for '/' may well be
inaccessible), and all the vfsmounts are rooted on anonymous[*] dentries
with child trees.
[*] Anonymous until discovered from another tree.
(*) The documentation has been adjusted, including the additional bit of
changing ext2_* into foo_* in the documentation.
[akpm@osdl.org: convert ipath_fs, do other stuff]
Signed-off-by: David Howells <dhowells@redhat.com>
Acked-by: Al Viro <viro@zeniv.linux.org.uk>
Cc: Nathan Scott <nathans@sgi.com>
Cc: Roland Dreier <rolandd@cisco.com>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
2006-06-23 17:02:57 +08:00
|
|
|
static int sel_get_sb(struct file_system_type *fs_type,
|
|
|
|
int flags, const char *dev_name, void *data,
|
|
|
|
struct vfsmount *mnt)
|
2005-04-17 06:20:36 +08:00
|
|
|
{
|
[PATCH] VFS: Permit filesystem to override root dentry on mount
Extend the get_sb() filesystem operation to take an extra argument that
permits the VFS to pass in the target vfsmount that defines the mountpoint.
The filesystem is then required to manually set the superblock and root dentry
pointers. For most filesystems, this should be done with simple_set_mnt()
which will set the superblock pointer and then set the root dentry to the
superblock's s_root (as per the old default behaviour).
The get_sb() op now returns an integer as there's now no need to return the
superblock pointer.
This patch permits a superblock to be implicitly shared amongst several mount
points, such as can be done with NFS to avoid potential inode aliasing. In
such a case, simple_set_mnt() would not be called, and instead the mnt_root
and mnt_sb would be set directly.
The patch also makes the following changes:
(*) the get_sb_*() convenience functions in the core kernel now take a vfsmount
pointer argument and return an integer, so most filesystems have to change
very little.
(*) If one of the convenience function is not used, then get_sb() should
normally call simple_set_mnt() to instantiate the vfsmount. This will
always return 0, and so can be tail-called from get_sb().
(*) generic_shutdown_super() now calls shrink_dcache_sb() to clean up the
dcache upon superblock destruction rather than shrink_dcache_anon().
This is required because the superblock may now have multiple trees that
aren't actually bound to s_root, but that still need to be cleaned up. The
currently called functions assume that the whole tree is rooted at s_root,
and that anonymous dentries are not the roots of trees which results in
dentries being left unculled.
However, with the way NFS superblock sharing are currently set to be
implemented, these assumptions are violated: the root of the filesystem is
simply a dummy dentry and inode (the real inode for '/' may well be
inaccessible), and all the vfsmounts are rooted on anonymous[*] dentries
with child trees.
[*] Anonymous until discovered from another tree.
(*) The documentation has been adjusted, including the additional bit of
changing ext2_* into foo_* in the documentation.
[akpm@osdl.org: convert ipath_fs, do other stuff]
Signed-off-by: David Howells <dhowells@redhat.com>
Acked-by: Al Viro <viro@zeniv.linux.org.uk>
Cc: Nathan Scott <nathans@sgi.com>
Cc: Roland Dreier <rolandd@cisco.com>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
2006-06-23 17:02:57 +08:00
|
|
|
return get_sb_single(fs_type, flags, data, sel_fill_super, mnt);
|
2005-04-17 06:20:36 +08:00
|
|
|
}
|
|
|
|
|
|
|
|
static struct file_system_type sel_fs_type = {
|
|
|
|
.name = "selinuxfs",
|
|
|
|
.get_sb = sel_get_sb,
|
|
|
|
.kill_sb = kill_litter_super,
|
|
|
|
};
|
|
|
|
|
|
|
|
struct vfsmount *selinuxfs_mount;
|
|
|
|
|
|
|
|
static int __init init_sel_fs(void)
|
|
|
|
{
|
|
|
|
int err;
|
|
|
|
|
|
|
|
if (!selinux_enabled)
|
|
|
|
return 0;
|
|
|
|
err = register_filesystem(&sel_fs_type);
|
|
|
|
if (!err) {
|
|
|
|
selinuxfs_mount = kern_mount(&sel_fs_type);
|
|
|
|
if (IS_ERR(selinuxfs_mount)) {
|
|
|
|
printk(KERN_ERR "selinuxfs: could not mount!\n");
|
|
|
|
err = PTR_ERR(selinuxfs_mount);
|
|
|
|
selinuxfs_mount = NULL;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
return err;
|
|
|
|
}
|
|
|
|
|
|
|
|
__initcall(init_sel_fs);
|
|
|
|
|
|
|
|
#ifdef CONFIG_SECURITY_SELINUX_DISABLE
|
|
|
|
void exit_sel_fs(void)
|
|
|
|
{
|
|
|
|
unregister_filesystem(&sel_fs_type);
|
|
|
|
}
|
|
|
|
#endif
|