/* SPDX-License-Identifier: GPL-2.0 */ #ifndef _LINUX_SECCOMP_H#define _LINUX_SECCOMP_H#include <uapi/linux/seccomp.h>#include <linux/seccomp_types.h>#define SECCOMP_FILTER_FLAG_MASK (SECCOMP_FILTER_FLAG_TSYNC | \/* sizeof() the first published struct seccomp_notif_addfd */ #define SECCOMP_NOTIFY_ADDFD_SIZE_VER0 24#define SECCOMP_NOTIFY_ADDFD_SIZE_LATEST SECCOMP_NOTIFY_ADDFD_SIZE_VER0#ifdef CONFIG_SECCOMP#include <linux/thread_info.h>#include <linux/atomic.h>#include <asm /seccomp.h>extern int __secure_computing(void );#ifdef CONFIG_HAVE_ARCH_SECCOMP_FILTERstatic inline int secure_computing(void )if (unlikely(test_syscall_work(SECCOMP)))return __secure_computing();return 0;#else extern void secure_computing_strict(int this_syscall);#endif extern long prctl_get_seccomp(void );extern long prctl_set_seccomp(unsigned long , void __user *);static inline int seccomp_mode(struct seccomp *s)return s->mode;#else /* CONFIG_SECCOMP */ #include <linux/errno.h>struct seccomp_data;#ifdef CONFIG_HAVE_ARCH_SECCOMP_FILTERstatic inline int secure_computing(void ) { return 0; }#else static inline void secure_computing_strict(int this_syscall) { return ; }#endif static inline int __secure_computing(void ) { return 0; }static inline long prctl_get_seccomp(void )return -EINVAL;static inline long prctl_set_seccomp(unsigned long arg2, char __user *arg3)return -EINVAL;static inline int seccomp_mode(struct seccomp *s)return SECCOMP_MODE_DISABLED;#endif /* CONFIG_SECCOMP */ #ifdef CONFIG_SECCOMP_FILTERextern void seccomp_filter_release(struct task_struct *tsk);extern void get_seccomp_filter(struct task_struct *tsk);#else /* CONFIG_SECCOMP_FILTER */ static inline void seccomp_filter_release(struct task_struct *tsk)return ;static inline void get_seccomp_filter(struct task_struct *tsk)return ;#endif /* CONFIG_SECCOMP_FILTER */ #if defined (CONFIG_SECCOMP_FILTER) && defined (CONFIG_CHECKPOINT_RESTORE)extern long seccomp_get_filter(struct task_struct *task,unsigned long filter_off, void __user *data);extern long seccomp_get_metadata(struct task_struct *task,unsigned long filter_off, void __user *data);#else static inline long seccomp_get_filter(struct task_struct *task,unsigned long n, void __user *data)return -EINVAL;static inline long seccomp_get_metadata(struct task_struct *task,unsigned long filter_off,void __user *data)return -EINVAL;#endif /* CONFIG_SECCOMP_FILTER && CONFIG_CHECKPOINT_RESTORE */ #ifdef CONFIG_SECCOMP_CACHE_DEBUGstruct seq_file;struct pid_namespace;struct pid;int proc_pid_seccomp_cache(struct seq_file *m, struct pid_namespace *ns,struct pid *pid, struct task_struct *task);#endif #endif /* _LINUX_SECCOMP_H */ quality 100%
¤ Dauer der Verarbeitung: 0.12 Sekunden
(vorverarbeitet)
¤ *© Formatika GbR, Deutschland
