cachepc-linux

Fork of AMDESE/linux with modifications for CachePC side-channel attack
git clone https://git.sinitax.com/sinitax/cachepc-linux
Log | Files | Refs | README | LICENSE | sfeed.txt

prctl.h (10026B)


      1/* SPDX-License-Identifier: GPL-2.0 WITH Linux-syscall-note */
      2#ifndef _LINUX_PRCTL_H
      3#define _LINUX_PRCTL_H
      4
      5#include <linux/types.h>
      6
      7/* Values to pass as first argument to prctl() */
      8
      9#define PR_SET_PDEATHSIG  1  /* Second arg is a signal */
     10#define PR_GET_PDEATHSIG  2  /* Second arg is a ptr to return the signal */
     11
     12/* Get/set current->mm->dumpable */
     13#define PR_GET_DUMPABLE   3
     14#define PR_SET_DUMPABLE   4
     15
     16/* Get/set unaligned access control bits (if meaningful) */
     17#define PR_GET_UNALIGN	  5
     18#define PR_SET_UNALIGN	  6
     19# define PR_UNALIGN_NOPRINT	1	/* silently fix up unaligned user accesses */
     20# define PR_UNALIGN_SIGBUS	2	/* generate SIGBUS on unaligned user access */
     21
     22/* Get/set whether or not to drop capabilities on setuid() away from
     23 * uid 0 (as per security/commoncap.c) */
     24#define PR_GET_KEEPCAPS   7
     25#define PR_SET_KEEPCAPS   8
     26
     27/* Get/set floating-point emulation control bits (if meaningful) */
     28#define PR_GET_FPEMU  9
     29#define PR_SET_FPEMU 10
     30# define PR_FPEMU_NOPRINT	1	/* silently emulate fp operations accesses */
     31# define PR_FPEMU_SIGFPE	2	/* don't emulate fp operations, send SIGFPE instead */
     32
     33/* Get/set floating-point exception mode (if meaningful) */
     34#define PR_GET_FPEXC	11
     35#define PR_SET_FPEXC	12
     36# define PR_FP_EXC_SW_ENABLE	0x80	/* Use FPEXC for FP exception enables */
     37# define PR_FP_EXC_DIV		0x010000	/* floating point divide by zero */
     38# define PR_FP_EXC_OVF		0x020000	/* floating point overflow */
     39# define PR_FP_EXC_UND		0x040000	/* floating point underflow */
     40# define PR_FP_EXC_RES		0x080000	/* floating point inexact result */
     41# define PR_FP_EXC_INV		0x100000	/* floating point invalid operation */
     42# define PR_FP_EXC_DISABLED	0	/* FP exceptions disabled */
     43# define PR_FP_EXC_NONRECOV	1	/* async non-recoverable exc. mode */
     44# define PR_FP_EXC_ASYNC	2	/* async recoverable exception mode */
     45# define PR_FP_EXC_PRECISE	3	/* precise exception mode */
     46
     47/* Get/set whether we use statistical process timing or accurate timestamp
     48 * based process timing */
     49#define PR_GET_TIMING   13
     50#define PR_SET_TIMING   14
     51# define PR_TIMING_STATISTICAL  0       /* Normal, traditional,
     52                                                   statistical process timing */
     53# define PR_TIMING_TIMESTAMP    1       /* Accurate timestamp based
     54                                                   process timing */
     55
     56#define PR_SET_NAME    15		/* Set process name */
     57#define PR_GET_NAME    16		/* Get process name */
     58
     59/* Get/set process endian */
     60#define PR_GET_ENDIAN	19
     61#define PR_SET_ENDIAN	20
     62# define PR_ENDIAN_BIG		0
     63# define PR_ENDIAN_LITTLE	1	/* True little endian mode */
     64# define PR_ENDIAN_PPC_LITTLE	2	/* "PowerPC" pseudo little endian */
     65
     66/* Get/set process seccomp mode */
     67#define PR_GET_SECCOMP	21
     68#define PR_SET_SECCOMP	22
     69
     70/* Get/set the capability bounding set (as per security/commoncap.c) */
     71#define PR_CAPBSET_READ 23
     72#define PR_CAPBSET_DROP 24
     73
     74/* Get/set the process' ability to use the timestamp counter instruction */
     75#define PR_GET_TSC 25
     76#define PR_SET_TSC 26
     77# define PR_TSC_ENABLE		1	/* allow the use of the timestamp counter */
     78# define PR_TSC_SIGSEGV		2	/* throw a SIGSEGV instead of reading the TSC */
     79
     80/* Get/set securebits (as per security/commoncap.c) */
     81#define PR_GET_SECUREBITS 27
     82#define PR_SET_SECUREBITS 28
     83
     84/*
     85 * Get/set the timerslack as used by poll/select/nanosleep
     86 * A value of 0 means "use default"
     87 */
     88#define PR_SET_TIMERSLACK 29
     89#define PR_GET_TIMERSLACK 30
     90
     91#define PR_TASK_PERF_EVENTS_DISABLE		31
     92#define PR_TASK_PERF_EVENTS_ENABLE		32
     93
     94/*
     95 * Set early/late kill mode for hwpoison memory corruption.
     96 * This influences when the process gets killed on a memory corruption.
     97 */
     98#define PR_MCE_KILL	33
     99# define PR_MCE_KILL_CLEAR   0
    100# define PR_MCE_KILL_SET     1
    101
    102# define PR_MCE_KILL_LATE    0
    103# define PR_MCE_KILL_EARLY   1
    104# define PR_MCE_KILL_DEFAULT 2
    105
    106#define PR_MCE_KILL_GET 34
    107
    108/*
    109 * Tune up process memory map specifics.
    110 */
    111#define PR_SET_MM		35
    112# define PR_SET_MM_START_CODE		1
    113# define PR_SET_MM_END_CODE		2
    114# define PR_SET_MM_START_DATA		3
    115# define PR_SET_MM_END_DATA		4
    116# define PR_SET_MM_START_STACK		5
    117# define PR_SET_MM_START_BRK		6
    118# define PR_SET_MM_BRK			7
    119# define PR_SET_MM_ARG_START		8
    120# define PR_SET_MM_ARG_END		9
    121# define PR_SET_MM_ENV_START		10
    122# define PR_SET_MM_ENV_END		11
    123# define PR_SET_MM_AUXV			12
    124# define PR_SET_MM_EXE_FILE		13
    125# define PR_SET_MM_MAP			14
    126# define PR_SET_MM_MAP_SIZE		15
    127
    128/*
    129 * This structure provides new memory descriptor
    130 * map which mostly modifies /proc/pid/stat[m]
    131 * output for a task. This mostly done in a
    132 * sake of checkpoint/restore functionality.
    133 */
    134struct prctl_mm_map {
    135	__u64	start_code;		/* code section bounds */
    136	__u64	end_code;
    137	__u64	start_data;		/* data section bounds */
    138	__u64	end_data;
    139	__u64	start_brk;		/* heap for brk() syscall */
    140	__u64	brk;
    141	__u64	start_stack;		/* stack starts at */
    142	__u64	arg_start;		/* command line arguments bounds */
    143	__u64	arg_end;
    144	__u64	env_start;		/* environment variables bounds */
    145	__u64	env_end;
    146	__u64	*auxv;			/* auxiliary vector */
    147	__u32	auxv_size;		/* vector size */
    148	__u32	exe_fd;			/* /proc/$pid/exe link file */
    149};
    150
    151/*
    152 * Set specific pid that is allowed to ptrace the current task.
    153 * A value of 0 mean "no process".
    154 */
    155#define PR_SET_PTRACER 0x59616d61
    156# define PR_SET_PTRACER_ANY ((unsigned long)-1)
    157
    158#define PR_SET_CHILD_SUBREAPER	36
    159#define PR_GET_CHILD_SUBREAPER	37
    160
    161/*
    162 * If no_new_privs is set, then operations that grant new privileges (i.e.
    163 * execve) will either fail or not grant them.  This affects suid/sgid,
    164 * file capabilities, and LSMs.
    165 *
    166 * Operations that merely manipulate or drop existing privileges (setresuid,
    167 * capset, etc.) will still work.  Drop those privileges if you want them gone.
    168 *
    169 * Changing LSM security domain is considered a new privilege.  So, for example,
    170 * asking selinux for a specific new context (e.g. with runcon) will result
    171 * in execve returning -EPERM.
    172 *
    173 * See Documentation/userspace-api/no_new_privs.rst for more details.
    174 */
    175#define PR_SET_NO_NEW_PRIVS	38
    176#define PR_GET_NO_NEW_PRIVS	39
    177
    178#define PR_GET_TID_ADDRESS	40
    179
    180#define PR_SET_THP_DISABLE	41
    181#define PR_GET_THP_DISABLE	42
    182
    183/*
    184 * No longer implemented, but left here to ensure the numbers stay reserved:
    185 */
    186#define PR_MPX_ENABLE_MANAGEMENT  43
    187#define PR_MPX_DISABLE_MANAGEMENT 44
    188
    189#define PR_SET_FP_MODE		45
    190#define PR_GET_FP_MODE		46
    191# define PR_FP_MODE_FR		(1 << 0)	/* 64b FP registers */
    192# define PR_FP_MODE_FRE		(1 << 1)	/* 32b compatibility */
    193
    194/* Control the ambient capability set */
    195#define PR_CAP_AMBIENT			47
    196# define PR_CAP_AMBIENT_IS_SET		1
    197# define PR_CAP_AMBIENT_RAISE		2
    198# define PR_CAP_AMBIENT_LOWER		3
    199# define PR_CAP_AMBIENT_CLEAR_ALL	4
    200
    201/* arm64 Scalable Vector Extension controls */
    202/* Flag values must be kept in sync with ptrace NT_ARM_SVE interface */
    203#define PR_SVE_SET_VL			50	/* set task vector length */
    204# define PR_SVE_SET_VL_ONEXEC		(1 << 18) /* defer effect until exec */
    205#define PR_SVE_GET_VL			51	/* get task vector length */
    206/* Bits common to PR_SVE_SET_VL and PR_SVE_GET_VL */
    207# define PR_SVE_VL_LEN_MASK		0xffff
    208# define PR_SVE_VL_INHERIT		(1 << 17) /* inherit across exec */
    209
    210/* Per task speculation control */
    211#define PR_GET_SPECULATION_CTRL		52
    212#define PR_SET_SPECULATION_CTRL		53
    213/* Speculation control variants */
    214# define PR_SPEC_STORE_BYPASS		0
    215# define PR_SPEC_INDIRECT_BRANCH	1
    216# define PR_SPEC_L1D_FLUSH		2
    217/* Return and control values for PR_SET/GET_SPECULATION_CTRL */
    218# define PR_SPEC_NOT_AFFECTED		0
    219# define PR_SPEC_PRCTL			(1UL << 0)
    220# define PR_SPEC_ENABLE			(1UL << 1)
    221# define PR_SPEC_DISABLE		(1UL << 2)
    222# define PR_SPEC_FORCE_DISABLE		(1UL << 3)
    223# define PR_SPEC_DISABLE_NOEXEC		(1UL << 4)
    224
    225/* Reset arm64 pointer authentication keys */
    226#define PR_PAC_RESET_KEYS		54
    227# define PR_PAC_APIAKEY			(1UL << 0)
    228# define PR_PAC_APIBKEY			(1UL << 1)
    229# define PR_PAC_APDAKEY			(1UL << 2)
    230# define PR_PAC_APDBKEY			(1UL << 3)
    231# define PR_PAC_APGAKEY			(1UL << 4)
    232
    233/* Tagged user address controls for arm64 */
    234#define PR_SET_TAGGED_ADDR_CTRL		55
    235#define PR_GET_TAGGED_ADDR_CTRL		56
    236# define PR_TAGGED_ADDR_ENABLE		(1UL << 0)
    237/* MTE tag check fault modes */
    238# define PR_MTE_TCF_NONE		0UL
    239# define PR_MTE_TCF_SYNC		(1UL << 1)
    240# define PR_MTE_TCF_ASYNC		(1UL << 2)
    241# define PR_MTE_TCF_MASK		(PR_MTE_TCF_SYNC | PR_MTE_TCF_ASYNC)
    242/* MTE tag inclusion mask */
    243# define PR_MTE_TAG_SHIFT		3
    244# define PR_MTE_TAG_MASK		(0xffffUL << PR_MTE_TAG_SHIFT)
    245/* Unused; kept only for source compatibility */
    246# define PR_MTE_TCF_SHIFT		1
    247
    248/* Control reclaim behavior when allocating memory */
    249#define PR_SET_IO_FLUSHER		57
    250#define PR_GET_IO_FLUSHER		58
    251
    252/* Dispatch syscalls to a userspace handler */
    253#define PR_SET_SYSCALL_USER_DISPATCH	59
    254# define PR_SYS_DISPATCH_OFF		0
    255# define PR_SYS_DISPATCH_ON		1
    256/* The control values for the user space selector when dispatch is enabled */
    257# define SYSCALL_DISPATCH_FILTER_ALLOW	0
    258# define SYSCALL_DISPATCH_FILTER_BLOCK	1
    259
    260/* Set/get enabled arm64 pointer authentication keys */
    261#define PR_PAC_SET_ENABLED_KEYS		60
    262#define PR_PAC_GET_ENABLED_KEYS		61
    263
    264/* Request the scheduler to share a core */
    265#define PR_SCHED_CORE			62
    266# define PR_SCHED_CORE_GET		0
    267# define PR_SCHED_CORE_CREATE		1 /* create unique core_sched cookie */
    268# define PR_SCHED_CORE_SHARE_TO		2 /* push core_sched cookie to pid */
    269# define PR_SCHED_CORE_SHARE_FROM	3 /* pull core_sched cookie to pid */
    270# define PR_SCHED_CORE_MAX		4
    271# define PR_SCHED_CORE_SCOPE_THREAD		0
    272# define PR_SCHED_CORE_SCOPE_THREAD_GROUP	1
    273# define PR_SCHED_CORE_SCOPE_PROCESS_GROUP	2
    274
    275/* arm64 Scalable Matrix Extension controls */
    276/* Flag values must be in sync with SVE versions */
    277#define PR_SME_SET_VL			63	/* set task vector length */
    278# define PR_SME_SET_VL_ONEXEC		(1 << 18) /* defer effect until exec */
    279#define PR_SME_GET_VL			64	/* get task vector length */
    280/* Bits common to PR_SME_SET_VL and PR_SME_GET_VL */
    281# define PR_SME_VL_LEN_MASK		0xffff
    282# define PR_SME_VL_INHERIT		(1 << 17) /* inherit across exec */
    283
    284#define PR_SET_VMA		0x53564d41
    285# define PR_SET_VMA_ANON_NAME		0
    286
    287#endif /* _LINUX_PRCTL_H */