Home
last modified time | relevance | path

Searched refs:ruleset_fd (Results 1 – 14 of 14) sorted by relevance

/linux/tools/testing/selftests/landlock/
H A Dnet_test.c940 int ruleset_fd; in TEST_F()
942 ruleset_fd = landlock_create_ruleset(&ruleset_attr, in TEST_F()
944 ASSERT_LE(0, ruleset_fd); in TEST_F()
948 landlock_add_rule(ruleset_fd, LANDLOCK_RULE_NET_PORT, in TEST_F()
953 landlock_add_rule(ruleset_fd, LANDLOCK_RULE_NET_PORT, in TEST_F()
965 ASSERT_EQ(0, landlock_add_rule(ruleset_fd, in TEST_F()
970 enforce_ruleset(_metadata, ruleset_fd); in TEST_F()
971 EXPECT_EQ(0, close(ruleset_fd)); in TEST_F()
1011 int ruleset_fd; in TEST_F()
1013 ruleset_fd in TEST_F()
936 int ruleset_fd; TEST_F() local
1007 int ruleset_fd; TEST_F() local
1067 const int ruleset_fd = landlock_create_ruleset( TEST_F() local
1104 const int ruleset_fd = landlock_create_ruleset( TEST_F() local
1198 const int ruleset_fd = landlock_create_ruleset( TEST_F() local
1230 const int ruleset_fd = landlock_create_ruleset( TEST_F() local
1317 const int ruleset_fd = landlock_create_ruleset( TEST_F() local
1400 const int ruleset_fd = landlock_create_ruleset( TEST_F() local
1508 const int ruleset_fd = landlock_create_ruleset( TEST_F() local
1548 const int ruleset_fd = landlock_create_ruleset( TEST_F() local
1598 const int ruleset_fd = landlock_create_ruleset( TEST_F() local
1660 const int ruleset_fd = landlock_create_ruleset( TEST_F() local
1714 const int ruleset_fd = landlock_create_ruleset( TEST_F() local
1907 int ruleset_fd; TEST_F() local
2052 int ruleset_fd; TEST_F() local
2071 int ruleset_fd; TEST_F() local
2087 int ruleset_fd; TEST_F() local
2121 int ruleset_fd; TEST_F() local
2150 int ruleset_fd; TEST_F() local
2175 int ruleset_fd; TEST_F() local
2229 int ruleset_fd; TEST_F() local
2274 int ruleset_fd; TEST_F() local
2299 int ruleset_fd; TEST_F() local
2341 int ruleset_fd; TEST_F() local
2397 int ruleset_fd; TEST_F() local
2487 int ruleset_fd; TEST_F() local
2521 int ruleset_fd, bind_fd, dir_fd; TEST_F() local
2669 int ruleset_fd; TEST_F() local
2761 int ruleset_fd; TEST_F() local
2987 int ruleset_fd, sock_fd; TEST_F() local
3046 int ruleset_fd, sock_fd; TEST_F() local
3119 int ruleset_fd, sock_fd; TEST_F() local
3204 int ruleset_fd, sock_fd; TEST_F() local
3243 int ruleset_fd; TEST_F() local
[all...]
H A Dfs_test.c490 int ruleset_fd; in TEST_F_FORK()
496 ruleset_fd = open(dir_s1d1, O_PATH | O_DIRECTORY | O_CLOEXEC); in TEST_F_FORK()
497 ASSERT_LE(0, ruleset_fd); in TEST_F_FORK()
498 ASSERT_EQ(-1, landlock_add_rule(ruleset_fd, LANDLOCK_RULE_PATH_BENEATH, in TEST_F_FORK()
500 /* Returns EBADF because ruleset_fd is not a landlock-ruleset FD. */ in TEST_F_FORK()
502 ASSERT_EQ(0, close(ruleset_fd)); in TEST_F_FORK()
504 ruleset_fd = open(dir_s1d1, O_DIRECTORY | O_CLOEXEC); in TEST_F_FORK()
505 ASSERT_LE(0, ruleset_fd); in TEST_F_FORK()
506 ASSERT_EQ(-1, landlock_add_rule(ruleset_fd, LANDLOCK_RULE_PATH_BENEATH, in TEST_F_FORK()
508 /* Returns EBADFD because ruleset_fd i in TEST_F_FORK()
486 int ruleset_fd; TEST_F_FORK() local
607 const int ruleset_fd = TEST_F_FORK() local
665 const int ruleset_fd = TEST_F_FORK() local
691 int ruleset_fd; TEST_F_FORK() local
720 add_path_beneath(struct __test_metadata * const _metadata,const int ruleset_fd,const __u64 allowed_access,const char * const path) add_path_beneath() argument
763 int ruleset_fd, i; create_ruleset() local
805 const int ruleset_fd = create_ruleset( TEST_F_FORK() local
852 int ruleset_fd; TEST_F_FORK() local
880 const int ruleset_fd = create_ruleset(_metadata, ACCESS_RW, rules); TEST_F_FORK() local
934 const int ruleset_fd = create_ruleset(_metadata, ACCESS_RO, rules); TEST_F_FORK() local
967 const int ruleset_fd = create_ruleset(_metadata, ACCESS_RW, rules); TEST_F_FORK() local
1023 int ruleset_fd = create_ruleset(_metadata, ACCESS_RW, layer1); TEST_F_FORK() local
1115 int ruleset_fd; TEST_F_FORK() local
1239 int ruleset_fd; TEST_F_FORK() local
1343 const int ruleset_fd = create_ruleset(_metadata, ACCESS_RW, rules); TEST_F_FORK() local
1459 const int ruleset_fd = create_ruleset(_metadata, ACCESS_RW, rules); TEST_F_FORK() local
1497 const int ruleset_fd = create_ruleset(_metadata, ACCESS_RW, rules); TEST_F_FORK() local
1514 int ruleset_fd; TEST_F_FORK() local
1559 const int ruleset_fd = create_ruleset(_metadata, ACCESS_RW, rules); TEST_F_FORK() local
1588 const int ruleset_fd = create_ruleset(_metadata, ACCESS_RW, rules); TEST_F_FORK() local
1616 int ruleset_fd = create_ruleset(_metadata, ACCESS_RW, rules); TEST_F_FORK() local
1646 const int ruleset_fd = create_ruleset(_metadata, ACCESS_RW, rules); TEST_F_FORK() local
1666 int ruleset_fd; TEST_F_FORK() local
1694 const int ruleset_fd = create_ruleset(_metadata, ACCESS_RW, rules); TEST_F_FORK() local
1717 const int ruleset_fd = create_ruleset(_metadata, ACCESS_RW, rules); TEST_F_FORK() local
1748 int ruleset_fd; TEST_F_FORK() local
1776 int ruleset_fd; TEST_F_FORK() local
1818 const int ruleset_fd = create_ruleset(_metadata, ACCESS_RW, rules); TEST_F_FORK() local
1849 int ruleset_fd; TEST_F_FORK() local
1907 int dirfd, ruleset_fd; test_relative_path() local
2093 const int ruleset_fd = TEST_F_FORK() local
2217 int ruleset_fd = create_ruleset(_metadata, layer1[0].access, layer1); TEST_F_FORK() local
2299 const int ruleset_fd = TEST_F_FORK() local
2381 const int ruleset_fd = TEST_F_FORK() local
2445 int ruleset_fd = TEST_F_FORK() local
2480 int ruleset_fd; refer_denied_by_default() local
2591 int root_fd, ruleset_fd; TEST_F_FORK() local
2642 int ruleset_fd; TEST_F_FORK() local
2679 const int ruleset_fd = create_ruleset( TEST_F_FORK() local
2757 const int ruleset_fd = create_ruleset( TEST_F_FORK() local
2903 const int ruleset_fd = create_ruleset( reparent_exdev_layers_enforce1() local
2926 const int ruleset_fd = reparent_exdev_layers_enforce2() local
3200 const int ruleset_fd = create_ruleset( TEST_F_FORK() local
3272 int ruleset_fd = create_ruleset(_metadata, TEST_F_FORK() local
3345 const int ruleset_fd = TEST_F_FORK() local
3382 const int ruleset_fd = TEST_F_FORK() local
3408 const int ruleset_fd = create_ruleset(_metadata, access, rules); test_make_file() local
3496 const int ruleset_fd = TEST_F_FORK() local
3541 const int ruleset_fd = TEST_F_FORK() local
3582 const int ruleset_fd = create_ruleset( TEST_F_FORK() local
3626 const int ruleset_fd = TEST_F_FORK() local
3723 int ruleset_fd; TEST_F_FORK() local
3806 int ruleset_fd; TEST_F_FORK() local
3913 int fd_layer0, fd_layer1, fd_layer2, fd_layer3, ruleset_fd; TEST_F_FORK() local
4032 int fd, ruleset_fd; TEST_F_FORK() local
4073 int fd, ruleset_fd; TEST_F_FORK() local
4126 int ruleset_fd, fd, i; TEST() local
4169 int ruleset_fd, fd; TEST_F_FORK() local
4265 int ruleset_fd, fd; TEST_F_FORK() local
4324 int fd, ruleset_fd; TEST_F_FORK() local
4364 int srv_fd, cli_fd, ruleset_fd; TEST_F_FORK() local
4464 int file_fd, ruleset_fd; TEST_F_FORK() local
4499 int dir_fd, ruleset_fd; TEST_F_FORK() local
4544 int file_fd, ruleset_fd; TEST_F_FORK() local
4713 int ruleset_fd; TEST_F_FORK() local
4814 int ruleset_fd = create_ruleset( TEST_F_FORK() local
5131 int ruleset_fd, bind_s1d3_fd; TEST_F_FORK() local
5692 int ruleset_fd, s1d41_bind_fd, s1d42_bind_fd; TEST_F_FORK() local
6202 int ruleset_fd, s1d3_bind_fd; TEST_F_FORK() local
6628 int ruleset_fd; TEST_F_FORK() local
6947 int ruleset_fd; layer3_fs_tag_inode() local
7014 int ruleset_fd; TEST_F_FORK() local
7564 int ruleset_fd = TEST_F() local
[all...]
H A Dtsync_test.c23 const int ruleset_fd = in create_ruleset() local
26 ASSERT_LE(0, ruleset_fd) in create_ruleset()
30 return ruleset_fd; in create_ruleset()
35 const int ruleset_fd = create_ruleset(_metadata); in TEST() local
40 ASSERT_EQ(0, landlock_restrict_self(ruleset_fd, in TEST()
43 EXPECT_EQ(0, close(ruleset_fd)); in TEST()
67 int ruleset_fd; in TEST()
110 self->ruleset_fd = create_ruleset(_metadata); in TEST()
116 landlock_restrict_self(self->ruleset_fd, 0)); in TEST()
124 EXPECT_EQ(0, close(self->ruleset_fd)); member
69 const int ruleset_fd = create_ruleset(_metadata); TEST() local
96 const int ruleset_fd = create_ruleset(_metadata); TEST() local
139 const int ruleset_fd = create_ruleset(_metadata); TEST() local
209 const int ruleset_fd = create_ruleset(_metadata); TEST() local
[all...]
H A Dbase_test.c150 int ruleset_fd; in TEST()
182 ruleset_fd = in TEST()
184 ASSERT_LE(0, ruleset_fd); in TEST()
185 ASSERT_EQ(0, close(ruleset_fd)); in TEST()
198 const int ruleset_fd = in TEST()
201 ASSERT_LE(0, ruleset_fd); in TEST() local
212 ASSERT_EQ(-1, landlock_add_rule(ruleset_fd, 0, NULL, 0)); in TEST()
216 ASSERT_EQ(-1, landlock_add_rule(ruleset_fd, LANDLOCK_RULE_PATH_BENEATH, in TEST()
221 ASSERT_EQ(-1, landlock_add_rule(ruleset_fd, LANDLOCK_RULE_PATH_BENEATH, in TEST()
229 ASSERT_EQ(0, landlock_add_rule(ruleset_fd, LANDLOCK_RULE_PATH_BENEAT in TEST()
106 int ruleset_fd; TEST() local
154 const int ruleset_fd = TEST() local
241 int ruleset_fd; TEST() local
335 int ruleset_fd, dir_fd; TEST() local
[all...]
H A Dscoped_common.h15 int ruleset_fd; in create_scoped_domain() local
20 ruleset_fd = in create_scoped_domain()
22 ASSERT_LE(0, ruleset_fd) in create_scoped_domain()
26 enforce_ruleset(_metadata, ruleset_fd); in create_scoped_domain()
27 EXPECT_EQ(0, close(ruleset_fd)); in create_scoped_domain()
H A Daudit_test.c78 int status, ruleset_fd, i; in TEST_F() local
88 ruleset_fd = in TEST_F()
90 ASSERT_LE(0, ruleset_fd); in TEST_F()
100 EXPECT_EQ(0, landlock_restrict_self(ruleset_fd, 0)); in TEST_F()
122 EXPECT_EQ(-1, landlock_restrict_self(ruleset_fd, 0)); in TEST_F()
160 EXPECT_EQ(0, close(ruleset_fd)); in TEST_F()
165 int ruleset_fd, pipe_child, pipe_parent;
181 if (landlock_restrict_self(data->ruleset_fd, 0)) { in thread_audit_test()
186 if (close(data->ruleset_fd)) { in thread_audit_test()
239 child_data.ruleset_fd in TEST_F()
164 int ruleset_fd, pipe_child, pipe_parent; global() member
366 int ruleset_fd; TEST_F() local
562 int ruleset_fd; TEST_F() local
[all...]
H A Dsandbox-and-launch.c24 int pipe_child, pipe_parent, ruleset_fd; in main() local
39 ruleset_fd = in main()
41 if (ruleset_fd < 0) { in main()
51 if (landlock_restrict_self(ruleset_fd, 0)) { in main()
56 if (close(ruleset_fd)) { in main()
H A Dwrappers.h26 static inline int landlock_add_rule(const int ruleset_fd, in landlock_add_rule() argument
31 return syscall(__NR_landlock_add_rule, ruleset_fd, rule_type, rule_attr, in landlock_add_rule()
37 static inline int landlock_restrict_self(const int ruleset_fd, in landlock_restrict_self() argument
40 return syscall(__NR_landlock_restrict_self, ruleset_fd, flags); in landlock_restrict_self()
H A Dcommon.h200 enforce_ruleset(struct __test_metadata *const _metadata, const int ruleset_fd) in enforce_ruleset()
203 ASSERT_EQ(0, landlock_restrict_self(ruleset_fd, 0)) in enforce_ruleset()
213 int ruleset_fd; in drop_access_rights()
215 ruleset_fd = in drop_access_rights()
217 EXPECT_LE(0, ruleset_fd) in drop_access_rights()
221 enforce_ruleset(_metadata, ruleset_fd); in drop_access_rights()
222 EXPECT_EQ(0, close(ruleset_fd));
198 enforce_ruleset(struct __test_metadata * const _metadata,const int ruleset_fd) enforce_ruleset() argument
211 int ruleset_fd; drop_access_rights() local
H A Dptrace_test.c33 int ruleset_fd; in create_domain()
38 ruleset_fd = in create_domain()
40 EXPECT_LE(0, ruleset_fd) in create_domain()
45 EXPECT_EQ(0, landlock_restrict_self(ruleset_fd, 0));
46 EXPECT_EQ(0, close(ruleset_fd)); in test_ptrace_read()
550 int ruleset_fd;
556 ruleset_fd = landlock_create_ruleset(
558 if (ruleset_fd < 0)
562 if (landlock_restrict_self(ruleset_fd, 0)) {
563 close(ruleset_fd);
30 int ruleset_fd; create_domain() local
[all...]
H A Dscoped_signal_test.c687 int ruleset_fd; in thread_setown_scoped()
693 ruleset_fd = in thread_setown_scoped()
695 if (ruleset_fd < 0) in thread_setown_scoped()
698 landlock_restrict_self(ruleset_fd, 0)) { in thread_setown_scoped()
699 close(ruleset_fd); in thread_setown_scoped()
702 close(ruleset_fd); in thread_setown_scoped()
876 int ruleset_fd;
878 ruleset_fd = landlock_create_ruleset(
880 if (ruleset_fd < 0)
884 if (landlock_restrict_self(ruleset_fd,
682 int ruleset_fd; thread_setown_scoped() local
[all...]
H A Dscoped_abstract_unix_test.c36 int ruleset_fd; in create_fs_domain()
41 ruleset_fd = in create_fs_domain()
43 EXPECT_LE(0, ruleset_fd) in create_fs_domain()
48 EXPECT_EQ(0, landlock_restrict_self(ruleset_fd, 0)); in FIXTURE()
49 EXPECT_EQ(0, close(ruleset_fd)); in FIXTURE()
354 int ruleset_fd; in TEST_F()
398 ruleset_fd = in FIXTURE_SETUP()
400 ASSERT_LE(0, ruleset_fd) in FIXTURE_SETUP()
404 enforce_ruleset(_metadata, ruleset_fd); in FIXTURE_SETUP()
405 EXPECT_EQ(0, close(ruleset_fd)); in FIXTURE_SETUP()
32 int ruleset_fd; create_fs_domain() local
[all...]
/linux/samples/landlock/
H A Dsandboxer.c41 static inline int landlock_add_rule(const int ruleset_fd, in landlock_add_rule() argument
46 return syscall(__NR_landlock_add_rule, ruleset_fd, rule_type, rule_attr, in landlock_add_rule()
52 static inline int landlock_restrict_self(const int ruleset_fd, in landlock_restrict_self() argument
55 return syscall(__NR_landlock_restrict_self, ruleset_fd, flags); in landlock_restrict_self()
124 static int populate_ruleset_fs(const char *const env_var, const int ruleset_fd, in populate_ruleset_fs()
174 if (landlock_add_rule(ruleset_fd, LANDLOCK_RULE_PATH_BENEATH, in populate_ruleset_fs()
192 static int populate_ruleset_net(const char *const env_var, const int ruleset_fd, in populate_ruleset_net()
220 if (landlock_add_rule(ruleset_fd, LANDLOCK_RULE_NET_PORT, in populate_ruleset_net()
438 int ruleset_fd, abi; in main()
640 ruleset_fd
119 populate_ruleset_fs(const char * const env_var,const int ruleset_fd,const __u64 allowed_access) populate_ruleset_fs() argument
187 populate_ruleset_net(const char * const env_var,const int ruleset_fd,const __u64 allowed_access) populate_ruleset_net() argument
351 int ruleset_fd, abi; main() local
[all...]
/linux/security/landlock/
H A Dsyscalls.c218 int err, ruleset_fd; in SYSCALL_DEFINE3()
297 ruleset_fd = anon_inode_getfd("[landlock-ruleset]", &ruleset_fops, in get_path_from_fd()
299 if (ruleset_fd < 0) in get_path_from_fd()
301 return ruleset_fd; in get_path_from_fd()
441 * @ruleset_fd: File descriptor tied to the ruleset that should be extended in SYSCALL_DEFINE4()
466 * - %EBADF: @ruleset_fd is not a file descriptor for the current thread, or a
468 * - %EBADFD: @ruleset_fd is not a ruleset file descriptor, or a member of
470 * - %EPERM: @ruleset_fd has no write access to the underlying ruleset;
476 SYSCALL_DEFINE4(landlock_add_rule, const int, ruleset_fd,
489 ruleset = get_ruleset_from_fd(ruleset_fd, FMODE_CAN_WRIT in SYSCALL_DEFINE2()
201 int err, ruleset_fd; SYSCALL_DEFINE3() local
418 SYSCALL_DEFINE4(landlock_add_rule,const int,ruleset_fd,const enum landlock_rule_type,rule_type,const void __user * const,rule_attr,const __u32,flags) SYSCALL_DEFINE4() argument
478 SYSCALL_DEFINE2(landlock_restrict_self,const int,ruleset_fd,const __u32,flags) SYSCALL_DEFINE2() argument
[all...]