mirror of https://github.com/Qortal/Brooklyn
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
40 lines
944 B
40 lines
944 B
// SPDX-License-Identifier: GPL-2.0-only |
|
/* |
|
* Landlock LSM - Security framework setup |
|
* |
|
* Copyright © 2016-2020 Mickaël Salaün <[email protected]> |
|
* Copyright © 2018-2020 ANSSI |
|
*/ |
|
|
|
#include <linux/init.h> |
|
#include <linux/lsm_hooks.h> |
|
|
|
#include "common.h" |
|
#include "cred.h" |
|
#include "fs.h" |
|
#include "ptrace.h" |
|
#include "setup.h" |
|
|
|
bool landlock_initialized __lsm_ro_after_init = false; |
|
|
|
struct lsm_blob_sizes landlock_blob_sizes __lsm_ro_after_init = { |
|
.lbs_cred = sizeof(struct landlock_cred_security), |
|
.lbs_inode = sizeof(struct landlock_inode_security), |
|
.lbs_superblock = sizeof(struct landlock_superblock_security), |
|
}; |
|
|
|
static int __init landlock_init(void) |
|
{ |
|
landlock_add_cred_hooks(); |
|
landlock_add_ptrace_hooks(); |
|
landlock_add_fs_hooks(); |
|
landlock_initialized = true; |
|
pr_info("Up and running.\n"); |
|
return 0; |
|
} |
|
|
|
DEFINE_LSM(LANDLOCK_NAME) = { |
|
.name = LANDLOCK_NAME, |
|
.init = landlock_init, |
|
.blobs = &landlock_blob_sizes, |
|
};
|
|
|