cachepc-linux

Fork of AMDESE/linux with modifications for CachePC side-channel attack
git clone https://git.sinitax.com/sinitax/cachepc-linux
Log | Files | Refs | README | LICENSE | sfeed.txt

setup.c (944B)


      1// SPDX-License-Identifier: GPL-2.0-only
      2/*
      3 * Landlock LSM - Security framework setup
      4 *
      5 * Copyright © 2016-2020 Mickaël Salaün <mic@digikod.net>
      6 * Copyright © 2018-2020 ANSSI
      7 */
      8
      9#include <linux/init.h>
     10#include <linux/lsm_hooks.h>
     11
     12#include "common.h"
     13#include "cred.h"
     14#include "fs.h"
     15#include "ptrace.h"
     16#include "setup.h"
     17
     18bool landlock_initialized __lsm_ro_after_init = false;
     19
     20struct lsm_blob_sizes landlock_blob_sizes __lsm_ro_after_init = {
     21	.lbs_cred = sizeof(struct landlock_cred_security),
     22	.lbs_inode = sizeof(struct landlock_inode_security),
     23	.lbs_superblock = sizeof(struct landlock_superblock_security),
     24};
     25
     26static int __init landlock_init(void)
     27{
     28	landlock_add_cred_hooks();
     29	landlock_add_ptrace_hooks();
     30	landlock_add_fs_hooks();
     31	landlock_initialized = true;
     32	pr_info("Up and running.\n");
     33	return 0;
     34}
     35
     36DEFINE_LSM(LANDLOCK_NAME) = {
     37	.name = LANDLOCK_NAME,
     38	.init = landlock_init,
     39	.blobs = &landlock_blob_sizes,
     40};