^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 1) /* SPDX-License-Identifier: GPL-2.0-only */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 2) /*
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 3) * AppArmor security module
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 4) *
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 5) * This file contains AppArmor file mediation function definitions.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 6) *
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 7) * Copyright 2017 Canonical Ltd.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 8) */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 9)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 10) #ifndef __AA_MOUNT_H
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 11) #define __AA_MOUNT_H
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 12)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 13) #include <linux/fs.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 14) #include <linux/path.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 15)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 16) #include "domain.h"
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 17) #include "policy.h"
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 18)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 19) /* mount perms */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 20) #define AA_MAY_PIVOTROOT 0x01
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 21) #define AA_MAY_MOUNT 0x02
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 22) #define AA_MAY_UMOUNT 0x04
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 23) #define AA_AUDIT_DATA 0x40
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 24) #define AA_MNT_CONT_MATCH 0x40
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 25)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 26) #define AA_MS_IGNORE_MASK (MS_KERNMOUNT | MS_NOSEC | MS_ACTIVE | MS_BORN)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 27)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 28) int aa_remount(struct aa_label *label, const struct path *path,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 29) unsigned long flags, void *data);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 30)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 31) int aa_bind_mount(struct aa_label *label, const struct path *path,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 32) const char *old_name, unsigned long flags);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 33)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 34)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 35) int aa_mount_change_type(struct aa_label *label, const struct path *path,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 36) unsigned long flags);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 37)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 38) int aa_move_mount(struct aa_label *label, const struct path *path,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 39) const char *old_name);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 40)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 41) int aa_new_mount(struct aa_label *label, const char *dev_name,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 42) const struct path *path, const char *type, unsigned long flags,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 43) void *data);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 44)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 45) int aa_umount(struct aa_label *label, struct vfsmount *mnt, int flags);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 46)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 47) int aa_pivotroot(struct aa_label *label, const struct path *old_path,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 48) const struct path *new_path);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 49)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 50) #endif /* __AA_MOUNT_H */