2017-11-08 00:41:35 +08:00
|
|
|
/* SPDX-License-Identifier: GPL-2.0 WITH Linux-syscall-note */
|
2017-10-27 01:41:01 +08:00
|
|
|
#ifndef _LINUX_PRCTL_H
|
|
|
|
#define _LINUX_PRCTL_H
|
|
|
|
|
|
|
|
#include <linux/types.h>
|
|
|
|
|
|
|
|
/* Values to pass as first argument to prctl() */
|
|
|
|
|
|
|
|
#define PR_SET_PDEATHSIG 1 /* Second arg is a signal */
|
|
|
|
#define PR_GET_PDEATHSIG 2 /* Second arg is a ptr to return the signal */
|
|
|
|
|
|
|
|
/* Get/set current->mm->dumpable */
|
|
|
|
#define PR_GET_DUMPABLE 3
|
|
|
|
#define PR_SET_DUMPABLE 4
|
|
|
|
|
|
|
|
/* Get/set unaligned access control bits (if meaningful) */
|
|
|
|
#define PR_GET_UNALIGN 5
|
|
|
|
#define PR_SET_UNALIGN 6
|
|
|
|
# define PR_UNALIGN_NOPRINT 1 /* silently fix up unaligned user accesses */
|
|
|
|
# define PR_UNALIGN_SIGBUS 2 /* generate SIGBUS on unaligned user access */
|
|
|
|
|
|
|
|
/* Get/set whether or not to drop capabilities on setuid() away from
|
|
|
|
* uid 0 (as per security/commoncap.c) */
|
|
|
|
#define PR_GET_KEEPCAPS 7
|
|
|
|
#define PR_SET_KEEPCAPS 8
|
|
|
|
|
|
|
|
/* Get/set floating-point emulation control bits (if meaningful) */
|
|
|
|
#define PR_GET_FPEMU 9
|
|
|
|
#define PR_SET_FPEMU 10
|
|
|
|
# define PR_FPEMU_NOPRINT 1 /* silently emulate fp operations accesses */
|
|
|
|
# define PR_FPEMU_SIGFPE 2 /* don't emulate fp operations, send SIGFPE instead */
|
|
|
|
|
|
|
|
/* Get/set floating-point exception mode (if meaningful) */
|
|
|
|
#define PR_GET_FPEXC 11
|
|
|
|
#define PR_SET_FPEXC 12
|
|
|
|
# define PR_FP_EXC_SW_ENABLE 0x80 /* Use FPEXC for FP exception enables */
|
|
|
|
# define PR_FP_EXC_DIV 0x010000 /* floating point divide by zero */
|
|
|
|
# define PR_FP_EXC_OVF 0x020000 /* floating point overflow */
|
|
|
|
# define PR_FP_EXC_UND 0x040000 /* floating point underflow */
|
|
|
|
# define PR_FP_EXC_RES 0x080000 /* floating point inexact result */
|
|
|
|
# define PR_FP_EXC_INV 0x100000 /* floating point invalid operation */
|
|
|
|
# define PR_FP_EXC_DISABLED 0 /* FP exceptions disabled */
|
|
|
|
# define PR_FP_EXC_NONRECOV 1 /* async non-recoverable exc. mode */
|
|
|
|
# define PR_FP_EXC_ASYNC 2 /* async recoverable exception mode */
|
|
|
|
# define PR_FP_EXC_PRECISE 3 /* precise exception mode */
|
|
|
|
|
|
|
|
/* Get/set whether we use statistical process timing or accurate timestamp
|
|
|
|
* based process timing */
|
|
|
|
#define PR_GET_TIMING 13
|
|
|
|
#define PR_SET_TIMING 14
|
|
|
|
# define PR_TIMING_STATISTICAL 0 /* Normal, traditional,
|
|
|
|
statistical process timing */
|
|
|
|
# define PR_TIMING_TIMESTAMP 1 /* Accurate timestamp based
|
|
|
|
process timing */
|
|
|
|
|
|
|
|
#define PR_SET_NAME 15 /* Set process name */
|
|
|
|
#define PR_GET_NAME 16 /* Get process name */
|
|
|
|
|
|
|
|
/* Get/set process endian */
|
|
|
|
#define PR_GET_ENDIAN 19
|
|
|
|
#define PR_SET_ENDIAN 20
|
|
|
|
# define PR_ENDIAN_BIG 0
|
|
|
|
# define PR_ENDIAN_LITTLE 1 /* True little endian mode */
|
|
|
|
# define PR_ENDIAN_PPC_LITTLE 2 /* "PowerPC" pseudo little endian */
|
|
|
|
|
|
|
|
/* Get/set process seccomp mode */
|
|
|
|
#define PR_GET_SECCOMP 21
|
|
|
|
#define PR_SET_SECCOMP 22
|
|
|
|
|
|
|
|
/* Get/set the capability bounding set (as per security/commoncap.c) */
|
|
|
|
#define PR_CAPBSET_READ 23
|
|
|
|
#define PR_CAPBSET_DROP 24
|
|
|
|
|
|
|
|
/* Get/set the process' ability to use the timestamp counter instruction */
|
|
|
|
#define PR_GET_TSC 25
|
|
|
|
#define PR_SET_TSC 26
|
|
|
|
# define PR_TSC_ENABLE 1 /* allow the use of the timestamp counter */
|
|
|
|
# define PR_TSC_SIGSEGV 2 /* throw a SIGSEGV instead of reading the TSC */
|
|
|
|
|
|
|
|
/* Get/set securebits (as per security/commoncap.c) */
|
|
|
|
#define PR_GET_SECUREBITS 27
|
|
|
|
#define PR_SET_SECUREBITS 28
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Get/set the timerslack as used by poll/select/nanosleep
|
|
|
|
* A value of 0 means "use default"
|
|
|
|
*/
|
|
|
|
#define PR_SET_TIMERSLACK 29
|
|
|
|
#define PR_GET_TIMERSLACK 30
|
|
|
|
|
|
|
|
#define PR_TASK_PERF_EVENTS_DISABLE 31
|
|
|
|
#define PR_TASK_PERF_EVENTS_ENABLE 32
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Set early/late kill mode for hwpoison memory corruption.
|
|
|
|
* This influences when the process gets killed on a memory corruption.
|
|
|
|
*/
|
|
|
|
#define PR_MCE_KILL 33
|
|
|
|
# define PR_MCE_KILL_CLEAR 0
|
|
|
|
# define PR_MCE_KILL_SET 1
|
|
|
|
|
|
|
|
# define PR_MCE_KILL_LATE 0
|
|
|
|
# define PR_MCE_KILL_EARLY 1
|
|
|
|
# define PR_MCE_KILL_DEFAULT 2
|
|
|
|
|
|
|
|
#define PR_MCE_KILL_GET 34
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Tune up process memory map specifics.
|
|
|
|
*/
|
|
|
|
#define PR_SET_MM 35
|
|
|
|
# define PR_SET_MM_START_CODE 1
|
|
|
|
# define PR_SET_MM_END_CODE 2
|
|
|
|
# define PR_SET_MM_START_DATA 3
|
|
|
|
# define PR_SET_MM_END_DATA 4
|
|
|
|
# define PR_SET_MM_START_STACK 5
|
|
|
|
# define PR_SET_MM_START_BRK 6
|
|
|
|
# define PR_SET_MM_BRK 7
|
|
|
|
# define PR_SET_MM_ARG_START 8
|
|
|
|
# define PR_SET_MM_ARG_END 9
|
|
|
|
# define PR_SET_MM_ENV_START 10
|
|
|
|
# define PR_SET_MM_ENV_END 11
|
|
|
|
# define PR_SET_MM_AUXV 12
|
|
|
|
# define PR_SET_MM_EXE_FILE 13
|
|
|
|
# define PR_SET_MM_MAP 14
|
|
|
|
# define PR_SET_MM_MAP_SIZE 15
|
|
|
|
|
|
|
|
/*
|
|
|
|
* This structure provides new memory descriptor
|
|
|
|
* map which mostly modifies /proc/pid/stat[m]
|
|
|
|
* output for a task. This mostly done in a
|
|
|
|
* sake of checkpoint/restore functionality.
|
|
|
|
*/
|
|
|
|
struct prctl_mm_map {
|
|
|
|
__u64 start_code; /* code section bounds */
|
|
|
|
__u64 end_code;
|
|
|
|
__u64 start_data; /* data section bounds */
|
|
|
|
__u64 end_data;
|
|
|
|
__u64 start_brk; /* heap for brk() syscall */
|
|
|
|
__u64 brk;
|
|
|
|
__u64 start_stack; /* stack starts at */
|
|
|
|
__u64 arg_start; /* command line arguments bounds */
|
|
|
|
__u64 arg_end;
|
|
|
|
__u64 env_start; /* environment variables bounds */
|
|
|
|
__u64 env_end;
|
|
|
|
__u64 *auxv; /* auxiliary vector */
|
|
|
|
__u32 auxv_size; /* vector size */
|
|
|
|
__u32 exe_fd; /* /proc/$pid/exe link file */
|
|
|
|
};
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Set specific pid that is allowed to ptrace the current task.
|
|
|
|
* A value of 0 mean "no process".
|
|
|
|
*/
|
|
|
|
#define PR_SET_PTRACER 0x59616d61
|
|
|
|
# define PR_SET_PTRACER_ANY ((unsigned long)-1)
|
|
|
|
|
|
|
|
#define PR_SET_CHILD_SUBREAPER 36
|
|
|
|
#define PR_GET_CHILD_SUBREAPER 37
|
|
|
|
|
|
|
|
/*
|
|
|
|
* If no_new_privs is set, then operations that grant new privileges (i.e.
|
|
|
|
* execve) will either fail or not grant them. This affects suid/sgid,
|
|
|
|
* file capabilities, and LSMs.
|
|
|
|
*
|
|
|
|
* Operations that merely manipulate or drop existing privileges (setresuid,
|
|
|
|
* capset, etc.) will still work. Drop those privileges if you want them gone.
|
|
|
|
*
|
|
|
|
* Changing LSM security domain is considered a new privilege. So, for example,
|
|
|
|
* asking selinux for a specific new context (e.g. with runcon) will result
|
|
|
|
* in execve returning -EPERM.
|
|
|
|
*
|
2018-05-09 02:14:57 +08:00
|
|
|
* See Documentation/userspace-api/no_new_privs.rst for more details.
|
2017-10-27 01:41:01 +08:00
|
|
|
*/
|
|
|
|
#define PR_SET_NO_NEW_PRIVS 38
|
|
|
|
#define PR_GET_NO_NEW_PRIVS 39
|
|
|
|
|
|
|
|
#define PR_GET_TID_ADDRESS 40
|
|
|
|
|
|
|
|
#define PR_SET_THP_DISABLE 41
|
|
|
|
#define PR_GET_THP_DISABLE 42
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Tell the kernel to start/stop helping userspace manage bounds tables.
|
|
|
|
*/
|
|
|
|
#define PR_MPX_ENABLE_MANAGEMENT 43
|
|
|
|
#define PR_MPX_DISABLE_MANAGEMENT 44
|
|
|
|
|
|
|
|
#define PR_SET_FP_MODE 45
|
|
|
|
#define PR_GET_FP_MODE 46
|
|
|
|
# define PR_FP_MODE_FR (1 << 0) /* 64b FP registers */
|
|
|
|
# define PR_FP_MODE_FRE (1 << 1) /* 32b compatibility */
|
|
|
|
|
|
|
|
/* Control the ambient capability set */
|
|
|
|
#define PR_CAP_AMBIENT 47
|
|
|
|
# define PR_CAP_AMBIENT_IS_SET 1
|
|
|
|
# define PR_CAP_AMBIENT_RAISE 2
|
|
|
|
# define PR_CAP_AMBIENT_LOWER 3
|
|
|
|
# define PR_CAP_AMBIENT_CLEAR_ALL 4
|
|
|
|
|
2017-11-27 23:11:02 +08:00
|
|
|
/* arm64 Scalable Vector Extension controls */
|
|
|
|
/* Flag values must be kept in sync with ptrace NT_ARM_SVE interface */
|
|
|
|
#define PR_SVE_SET_VL 50 /* set task vector length */
|
|
|
|
# define PR_SVE_SET_VL_ONEXEC (1 << 18) /* defer effect until exec */
|
|
|
|
#define PR_SVE_GET_VL 51 /* get task vector length */
|
|
|
|
/* Bits common to PR_SVE_SET_VL and PR_SVE_GET_VL */
|
|
|
|
# define PR_SVE_VL_LEN_MASK 0xffff
|
|
|
|
# define PR_SVE_VL_INHERIT (1 << 17) /* inherit across exec */
|
|
|
|
|
2018-06-01 21:42:31 +08:00
|
|
|
/* Per task speculation control */
|
|
|
|
#define PR_GET_SPECULATION_CTRL 52
|
|
|
|
#define PR_SET_SPECULATION_CTRL 53
|
|
|
|
/* Speculation control variants */
|
|
|
|
# define PR_SPEC_STORE_BYPASS 0
|
x86/speculation: Add prctl() control for indirect branch speculation
Add the PR_SPEC_INDIRECT_BRANCH option for the PR_GET_SPECULATION_CTRL and
PR_SET_SPECULATION_CTRL prctls to allow fine grained per task control of
indirect branch speculation via STIBP and IBPB.
Invocations:
Check indirect branch speculation status with
- prctl(PR_GET_SPECULATION_CTRL, PR_SPEC_INDIRECT_BRANCH, 0, 0, 0);
Enable indirect branch speculation with
- prctl(PR_SET_SPECULATION_CTRL, PR_SPEC_INDIRECT_BRANCH, PR_SPEC_ENABLE, 0, 0);
Disable indirect branch speculation with
- prctl(PR_SET_SPECULATION_CTRL, PR_SPEC_INDIRECT_BRANCH, PR_SPEC_DISABLE, 0, 0);
Force disable indirect branch speculation with
- prctl(PR_SET_SPECULATION_CTRL, PR_SPEC_INDIRECT_BRANCH, PR_SPEC_FORCE_DISABLE, 0, 0);
See Documentation/userspace-api/spec_ctrl.rst.
Signed-off-by: Tim Chen <tim.c.chen@linux.intel.com>
Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
Reviewed-by: Ingo Molnar <mingo@kernel.org>
Cc: Peter Zijlstra <peterz@infradead.org>
Cc: Andy Lutomirski <luto@kernel.org>
Cc: Linus Torvalds <torvalds@linux-foundation.org>
Cc: Jiri Kosina <jkosina@suse.cz>
Cc: Tom Lendacky <thomas.lendacky@amd.com>
Cc: Josh Poimboeuf <jpoimboe@redhat.com>
Cc: Andrea Arcangeli <aarcange@redhat.com>
Cc: David Woodhouse <dwmw@amazon.co.uk>
Cc: Andi Kleen <ak@linux.intel.com>
Cc: Dave Hansen <dave.hansen@intel.com>
Cc: Casey Schaufler <casey.schaufler@intel.com>
Cc: Asit Mallick <asit.k.mallick@intel.com>
Cc: Arjan van de Ven <arjan@linux.intel.com>
Cc: Jon Masters <jcm@redhat.com>
Cc: Waiman Long <longman9394@gmail.com>
Cc: Greg KH <gregkh@linuxfoundation.org>
Cc: Dave Stewart <david.c.stewart@intel.com>
Cc: Kees Cook <keescook@chromium.org>
Cc: stable@vger.kernel.org
Link: https://lkml.kernel.org/r/20181125185005.866780996@linutronix.de
2018-11-26 02:33:53 +08:00
|
|
|
# define PR_SPEC_INDIRECT_BRANCH 1
|
2018-06-01 21:42:31 +08:00
|
|
|
/* Return and control values for PR_SET/GET_SPECULATION_CTRL */
|
|
|
|
# define PR_SPEC_NOT_AFFECTED 0
|
|
|
|
# define PR_SPEC_PRCTL (1UL << 0)
|
|
|
|
# define PR_SPEC_ENABLE (1UL << 1)
|
|
|
|
# define PR_SPEC_DISABLE (1UL << 2)
|
|
|
|
# define PR_SPEC_FORCE_DISABLE (1UL << 3)
|
2019-01-17 06:01:36 +08:00
|
|
|
# define PR_SPEC_DISABLE_NOEXEC (1UL << 4)
|
2018-06-01 21:42:31 +08:00
|
|
|
|
2019-01-04 01:56:20 +08:00
|
|
|
/* Reset arm64 pointer authentication keys */
|
|
|
|
#define PR_PAC_RESET_KEYS 54
|
|
|
|
# define PR_PAC_APIAKEY (1UL << 0)
|
|
|
|
# define PR_PAC_APIBKEY (1UL << 1)
|
|
|
|
# define PR_PAC_APDAKEY (1UL << 2)
|
|
|
|
# define PR_PAC_APDBKEY (1UL << 3)
|
|
|
|
# define PR_PAC_APGAKEY (1UL << 4)
|
|
|
|
|
2017-10-27 01:41:01 +08:00
|
|
|
#endif /* _LINUX_PRCTL_H */
|