| /linux/tools/testing/selftests/landlock/ |
| H A D | base_test.c | 29 struct landlock_ruleset_attr *const ruleset_attr = (void *)buf; in TEST() local
34 ASSERT_EQ(-1, landlock_create_ruleset(ruleset_attr, 0, 0)); in TEST()
37 ASSERT_EQ(-1, landlock_create_ruleset(ruleset_attr, 1, 0)); in TEST()
39 ASSERT_EQ(-1, landlock_create_ruleset(ruleset_attr, 7, 0)); in TEST()
50 ASSERT_EQ(-1, landlock_create_ruleset(ruleset_attr, page_size + 1, 0)); in TEST()
54 ASSERT_EQ(-1, landlock_create_ruleset(ruleset_attr, 8, 0)); in TEST()
57 ruleset_attr, in TEST()
60 ASSERT_EQ(-1, landlock_create_ruleset(ruleset_attr, page_size, 0)); in TEST()
65 ASSERT_EQ(-1, landlock_create_ruleset(ruleset_attr, page_size, 0)); in TEST()
68 ASSERT_EQ(-1, landlock_create_ruleset(ruleset_attr, page_size + 1, 0)); in TEST()
[all …]
|
| H A D | net_test.c | 640 const struct landlock_ruleset_attr ruleset_attr = { in TEST_F() local
655 ruleset_fd = landlock_create_ruleset(&ruleset_attr, in TEST_F()
656 sizeof(ruleset_attr), 0); in TEST_F()
690 const struct landlock_ruleset_attr ruleset_attr = { in TEST_F() local
705 ruleset_fd = landlock_create_ruleset(&ruleset_attr, in TEST_F()
706 sizeof(ruleset_attr), 0); in TEST_F()
735 const struct landlock_ruleset_attr ruleset_attr = { in TEST_F() local
746 &ruleset_attr, sizeof(ruleset_attr), 0); in TEST_F()
775 &ruleset_attr, sizeof(ruleset_attr), 0); in TEST_F()
816 const struct landlock_ruleset_attr ruleset_attr = { in TEST_F() local
[all …]
|
| H A D | scoped_test.c | 23 struct landlock_ruleset_attr ruleset_attr = { in TEST() local
27 ASSERT_EQ(-1, landlock_create_ruleset(&ruleset_attr, in TEST()
28 sizeof(ruleset_attr), 0)); in TEST()
|
| H A D | scoped_common.h | 16 const struct landlock_ruleset_attr ruleset_attr = { in create_scoped_domain() local
21 landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0); in create_scoped_domain()
|
| H A D | sandbox-and-launch.c | 21 struct landlock_ruleset_attr ruleset_attr = { in main() local
40 landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0); in main()
|
| H A D | ptrace_test.c | 29 struct landlock_ruleset_attr ruleset_attr = { in create_domain() local
34 landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0); in create_domain()
|
| H A D | scoped_abstract_unix_test.c | 32 struct landlock_ruleset_attr ruleset_attr = { in create_fs_domain() local
37 landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0); in create_fs_domain()
|
| /linux/security/landlock/ |
| H A D | syscalls.c | 89 struct landlock_ruleset_attr ruleset_attr; in build_check_abi() local
99 ruleset_size = sizeof(ruleset_attr.handled_access_fs); in build_check_abi()
100 ruleset_size += sizeof(ruleset_attr.handled_access_net); in build_check_abi()
101 ruleset_size += sizeof(ruleset_attr.scoped); in build_check_abi()
102 BUILD_BUG_ON(sizeof(ruleset_attr) != ruleset_size); in build_check_abi()
103 BUILD_BUG_ON(sizeof(ruleset_attr) != 24); in build_check_abi()
184 struct landlock_ruleset_attr ruleset_attr; in SYSCALL_DEFINE3() local
202 err = copy_min_struct_from_user(&ruleset_attr, sizeof(ruleset_attr), in SYSCALL_DEFINE3()
203 offsetofend(typeof(ruleset_attr), in SYSCALL_DEFINE3()
210 if ((ruleset_attr.handled_access_fs | LANDLOCK_MASK_ACCESS_FS) != in SYSCALL_DEFINE3()
[all …]
|
| /linux/samples/landlock/ |
| H A D | sandboxer.c | 227 struct landlock_ruleset_attr *ruleset_attr) in check_ruleset_scope() argument
235 if (!(ruleset_attr->scoped & in check_ruleset_scope()
266 ruleset_attr->scoped &= ~LANDLOCK_SCOPE_ABSTRACT_UNIX_SOCKET; in check_ruleset_scope()
268 ruleset_attr->scoped &= ~LANDLOCK_SCOPE_SIGNAL; in check_ruleset_scope()
347 struct landlock_ruleset_attr ruleset_attr = { in main() local
404 ruleset_attr.handled_access_fs &= ~LANDLOCK_ACCESS_FS_REFER; in main()
408 ruleset_attr.handled_access_fs &= ~LANDLOCK_ACCESS_FS_TRUNCATE; in main()
412 ruleset_attr.handled_access_net &= in main()
418 ruleset_attr.handled_access_fs &= ~LANDLOCK_ACCESS_FS_IOCTL_DEV; in main()
423 ruleset_attr.scoped &= ~(LANDLOCK_SCOPE_ABSTRACT_UNIX_SOCKET | in main()
[all …]
|
| /linux/Documentation/userspace-api/ |
| H A D | landlock.rst | 63 struct landlock_ruleset_attr ruleset_attr = {
110 ruleset_attr.handled_access_fs &= ~LANDLOCK_ACCESS_FS_REFER;
114 ruleset_attr.handled_access_fs &= ~LANDLOCK_ACCESS_FS_TRUNCATE;
118 ruleset_attr.handled_access_net &=
124 ruleset_attr.handled_access_fs &= ~LANDLOCK_ACCESS_FS_IOCTL_DEV;
128 ruleset_attr.scoped &= ~(LANDLOCK_SCOPE_ABSTRACT_UNIX_SOCKET |
138 ruleset_fd = landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0);
|