40 lines · 944 B · C
RawDownload
// SPDX-License-Identifier: GPL-2.0-only/* * Landlock LSM - Security framework setup * * Copyright © 2016-2020 Mickaël Salaün <mic@digikod.net> * Copyright © 2018-2020 ANSSI */ #include <linux/init.h>#include <linux/lsm_hooks.h> #include "common.h"#include "cred.h"#include "fs.h"#include "ptrace.h"#include "setup.h" bool landlock_initialized __lsm_ro_after_init = false; struct lsm_blob_sizes landlock_blob_sizes __lsm_ro_after_init = {	.lbs_cred = sizeof(struct landlock_cred_security),	.lbs_inode = sizeof(struct landlock_inode_security),	.lbs_superblock = sizeof(struct landlock_superblock_security),}; static int __init landlock_init(void){	landlock_add_cred_hooks();	landlock_add_ptrace_hooks();	landlock_add_fs_hooks();	landlock_initialized = true;	pr_info("Up and running.\n");	return 0;} DEFINE_LSM(LANDLOCK_NAME) = {	.name = LANDLOCK_NAME,	.init = landlock_init,	.blobs = &landlock_blob_sizes,};