12345678910111213141516171819202122232425262728293031323334353637383940 |
- // SPDX-License-Identifier: GPL-2.0-only
- /*
- * Landlock LSM - Security framework setup
- *
- * Copyright © 2016-2020 Mickaël Salaün <[email protected]>
- * Copyright © 2018-2020 ANSSI
- */
- #include <linux/init.h>
- #include <linux/lsm_hooks.h>
- #include "common.h"
- #include "cred.h"
- #include "fs.h"
- #include "ptrace.h"
- #include "setup.h"
- bool landlock_initialized __lsm_ro_after_init = false;
- struct lsm_blob_sizes landlock_blob_sizes __lsm_ro_after_init = {
- .lbs_cred = sizeof(struct landlock_cred_security),
- .lbs_inode = sizeof(struct landlock_inode_security),
- .lbs_superblock = sizeof(struct landlock_superblock_security),
- };
- static int __init landlock_init(void)
- {
- landlock_add_cred_hooks();
- landlock_add_ptrace_hooks();
- landlock_add_fs_hooks();
- landlock_initialized = true;
- pr_info("Up and running.\n");
- return 0;
- }
- DEFINE_LSM(LANDLOCK_NAME) = {
- .name = LANDLOCK_NAME,
- .init = landlock_init,
- .blobs = &landlock_blob_sizes,
- };
|