// SPDX-License-Identifier: GPL-2.0-only/* * Landlock LSM - Security framework setup * * Copyright © 2016-2020 Mickaël Salaün <mic@digikod.net> * Copyright © 2018-2020 ANSSI */ #include <linux/bits.h>#include <linux/init.h>#include <linux/lsm_hooks.h>#include <uapi/linux/lsm.h> #include "common.h"#include "cred.h"#include "errata.h"#include "fs.h"#include "id.h"#include "net.h"#include "setup.h"#include "task.h" bool landlock_initialized __ro_after_init = false; const struct lsm_id landlock_lsmid = {	.name = LANDLOCK_NAME,	.id = LSM_ID_LANDLOCK,}; struct lsm_blob_sizes landlock_blob_sizes __ro_after_init = {	.lbs_cred = sizeof(struct landlock_cred_security),	.lbs_file = sizeof(struct landlock_file_security),	.lbs_inode = sizeof(struct landlock_inode_security),	.lbs_superblock = sizeof(struct landlock_superblock_security),}; int landlock_errata __ro_after_init; static void __init compute_errata(void){	size_t i; #ifndef __has_include	/*	 * This is a safeguard to make sure the compiler implements	 * __has_include (see errata.h).	 */	WARN_ON_ONCE(1);	return;#endif 	for (i = 0; landlock_errata_init[i].number; i++) {		const int prev_errata = landlock_errata; 		if (WARN_ON_ONCE(landlock_errata_init[i].abi >				 landlock_abi_version))			continue; 		landlock_errata |= BIT(landlock_errata_init[i].number - 1);		WARN_ON_ONCE(prev_errata == landlock_errata);	}} static int __init landlock_init(void){	compute_errata();	landlock_add_cred_hooks();	landlock_add_task_hooks();	landlock_add_fs_hooks();	landlock_add_net_hooks();	landlock_init_id();	landlock_initialized = true;	pr_info("Up and running.\n");	return 0;} DEFINE_LSM(LANDLOCK_NAME) = {	.id = &landlock_lsmid,	.init = landlock_init,	.blobs = &landlock_blob_sizes,};