xref: /linux/security/apparmor/include/mount.h (revision 4b660dbd9ee2059850fd30e0df420ca7a38a1856)
1 /* SPDX-License-Identifier: GPL-2.0-only */
2 /*
3  * AppArmor security module
4  *
5  * This file contains AppArmor file mediation function definitions.
6  *
7  * Copyright 2017 Canonical Ltd.
8  */
9 
10 #ifndef __AA_MOUNT_H
11 #define __AA_MOUNT_H
12 
13 #include <linux/fs.h>
14 #include <linux/path.h>
15 
16 #include "domain.h"
17 #include "policy.h"
18 
19 /* mount perms */
20 #define AA_MAY_PIVOTROOT	0x01
21 #define AA_MAY_MOUNT		0x02
22 #define AA_MAY_UMOUNT		0x04
23 #define AA_AUDIT_DATA		0x40
24 #define AA_MNT_CONT_MATCH	0x40
25 
26 #define AA_MS_IGNORE_MASK (MS_KERNMOUNT | MS_NOSEC | MS_ACTIVE | MS_BORN)
27 
28 int aa_remount(const struct cred *subj_cred,
29 	       struct aa_label *label, const struct path *path,
30 	       unsigned long flags, void *data);
31 
32 int aa_bind_mount(const struct cred *subj_cred,
33 		  struct aa_label *label, const struct path *path,
34 		  const char *old_name, unsigned long flags);
35 
36 
37 int aa_mount_change_type(const struct cred *subj_cred,
38 			 struct aa_label *label, const struct path *path,
39 			 unsigned long flags);
40 
41 int aa_move_mount_old(const struct cred *subj_cred,
42 		      struct aa_label *label, const struct path *path,
43 		      const char *old_name);
44 int aa_move_mount(const struct cred *subj_cred,
45 		  struct aa_label *label, const struct path *from_path,
46 		  const struct path *to_path);
47 
48 int aa_new_mount(const struct cred *subj_cred,
49 		 struct aa_label *label, const char *dev_name,
50 		 const struct path *path, const char *type, unsigned long flags,
51 		 void *data);
52 
53 int aa_umount(const struct cred *subj_cred,
54 	      struct aa_label *label, struct vfsmount *mnt, int flags);
55 
56 int aa_pivotroot(const struct cred *subj_cred,
57 		 struct aa_label *label, const struct path *old_path,
58 		 const struct path *new_path);
59 
60 #endif /* __AA_MOUNT_H */
61