1b886d83cSThomas Gleixner // SPDX-License-Identifier: GPL-2.0-only 263e2b423SJohn Johansen /* 363e2b423SJohn Johansen * AppArmor security module 463e2b423SJohn Johansen * 563e2b423SJohn Johansen * This file contains AppArmor /sys/kernel/security/apparmor interface functions 663e2b423SJohn Johansen * 763e2b423SJohn Johansen * Copyright (C) 1998-2008 Novell/SUSE 863e2b423SJohn Johansen * Copyright 2009-2010 Canonical Ltd. 963e2b423SJohn Johansen */ 1063e2b423SJohn Johansen 110d259f04SJohn Johansen #include <linux/ctype.h> 1263e2b423SJohn Johansen #include <linux/security.h> 1363e2b423SJohn Johansen #include <linux/vmalloc.h> 14876979c9SPaul Gortmaker #include <linux/init.h> 1563e2b423SJohn Johansen #include <linux/seq_file.h> 1663e2b423SJohn Johansen #include <linux/uaccess.h> 17a71ada30SJohn Johansen #include <linux/mount.h> 1863e2b423SJohn Johansen #include <linux/namei.h> 19e74abcf3SKees Cook #include <linux/capability.h> 2029b3822fSJohn Johansen #include <linux/rcupdate.h> 21a71ada30SJohn Johansen #include <linux/fs.h> 22b0ecc9daSDavid Howells #include <linux/fs_context.h> 23d9bf2c26SJohn Johansen #include <linux/poll.h> 2463c16c3aSChris Coulson #include <linux/zlib.h> 25a481f4d9SJohn Johansen #include <uapi/linux/major.h> 26a481f4d9SJohn Johansen #include <uapi/linux/magic.h> 2763e2b423SJohn Johansen 2863e2b423SJohn Johansen #include "include/apparmor.h" 2963e2b423SJohn Johansen #include "include/apparmorfs.h" 3063e2b423SJohn Johansen #include "include/audit.h" 31d8889d49SJohn Johansen #include "include/cred.h" 32f8eb8a13SJohn Johansen #include "include/crypto.h" 33cd1dbf76SJohn Johansen #include "include/ipc.h" 34317d9a05SJohn Johansen #include "include/label.h" 3563e2b423SJohn Johansen #include "include/policy.h" 36cff281f6SJohn Johansen #include "include/policy_ns.h" 37d384b0a1SKees Cook #include "include/resource.h" 385ac8c355SJohn Johansen #include "include/policy_unpack.h" 3963e2b423SJohn Johansen 40c97204baSJohn Johansen /* 41c97204baSJohn Johansen * The apparmor filesystem interface used for policy load and introspection 42c97204baSJohn Johansen * The interface is split into two main components based on their function 43c97204baSJohn Johansen * a securityfs component: 44c97204baSJohn Johansen * used for static files that are always available, and which allows 45c97204baSJohn Johansen * userspace to specificy the location of the security filesystem. 46c97204baSJohn Johansen * 47c97204baSJohn Johansen * fns and data are prefixed with 48c97204baSJohn Johansen * aa_sfs_ 49c97204baSJohn Johansen * 50c97204baSJohn Johansen * an apparmorfs component: 51c97204baSJohn Johansen * used loaded policy content and introspection. It is not part of a 52c97204baSJohn Johansen * regular mounted filesystem and is available only through the magic 53c97204baSJohn Johansen * policy symlink in the root of the securityfs apparmor/ directory. 54c97204baSJohn Johansen * Tasks queries will be magically redirected to the correct portion 55c97204baSJohn Johansen * of the policy tree based on their confinement. 56c97204baSJohn Johansen * 57c97204baSJohn Johansen * fns and data are prefixed with 58c97204baSJohn Johansen * aafs_ 59c97204baSJohn Johansen * 60c97204baSJohn Johansen * The aa_fs_ prefix is used to indicate the fn is used by both the 61c97204baSJohn Johansen * securityfs and apparmorfs filesystems. 62c97204baSJohn Johansen */ 63c97204baSJohn Johansen 64c97204baSJohn Johansen 65c97204baSJohn Johansen /* 66c97204baSJohn Johansen * support fns 67c97204baSJohn Johansen */ 68c97204baSJohn Johansen 6963c16c3aSChris Coulson struct rawdata_f_data { 7063c16c3aSChris Coulson struct aa_loaddata *loaddata; 7163c16c3aSChris Coulson }; 7263c16c3aSChris Coulson 7363c16c3aSChris Coulson #define RAWDATA_F_DATA_BUF(p) (char *)(p + 1) 7463c16c3aSChris Coulson 7563c16c3aSChris Coulson static void rawdata_f_data_free(struct rawdata_f_data *private) 7663c16c3aSChris Coulson { 7763c16c3aSChris Coulson if (!private) 7863c16c3aSChris Coulson return; 7963c16c3aSChris Coulson 8063c16c3aSChris Coulson aa_put_loaddata(private->loaddata); 8163c16c3aSChris Coulson kvfree(private); 8263c16c3aSChris Coulson } 8363c16c3aSChris Coulson 8463c16c3aSChris Coulson static struct rawdata_f_data *rawdata_f_data_alloc(size_t size) 8563c16c3aSChris Coulson { 8663c16c3aSChris Coulson struct rawdata_f_data *ret; 8763c16c3aSChris Coulson 8863c16c3aSChris Coulson if (size > SIZE_MAX - sizeof(*ret)) 8963c16c3aSChris Coulson return ERR_PTR(-EINVAL); 9063c16c3aSChris Coulson 9163c16c3aSChris Coulson ret = kvzalloc(sizeof(*ret) + size, GFP_KERNEL); 9263c16c3aSChris Coulson if (!ret) 9363c16c3aSChris Coulson return ERR_PTR(-ENOMEM); 9463c16c3aSChris Coulson 9563c16c3aSChris Coulson return ret; 9663c16c3aSChris Coulson } 9763c16c3aSChris Coulson 9863e2b423SJohn Johansen /** 990d259f04SJohn Johansen * aa_mangle_name - mangle a profile name to std profile layout form 1000d259f04SJohn Johansen * @name: profile name to mangle (NOT NULL) 1010d259f04SJohn Johansen * @target: buffer to store mangled name, same length as @name (MAYBE NULL) 1020d259f04SJohn Johansen * 1030d259f04SJohn Johansen * Returns: length of mangled name 1040d259f04SJohn Johansen */ 105bbe4a7c8SJohn Johansen static int mangle_name(const char *name, char *target) 1060d259f04SJohn Johansen { 1070d259f04SJohn Johansen char *t = target; 1080d259f04SJohn Johansen 1090d259f04SJohn Johansen while (*name == '/' || *name == '.') 1100d259f04SJohn Johansen name++; 1110d259f04SJohn Johansen 1120d259f04SJohn Johansen if (target) { 1130d259f04SJohn Johansen for (; *name; name++) { 1140d259f04SJohn Johansen if (*name == '/') 1150d259f04SJohn Johansen *(t)++ = '.'; 1160d259f04SJohn Johansen else if (isspace(*name)) 1170d259f04SJohn Johansen *(t)++ = '_'; 1180d259f04SJohn Johansen else if (isalnum(*name) || strchr("._-", *name)) 1190d259f04SJohn Johansen *(t)++ = *name; 1200d259f04SJohn Johansen } 1210d259f04SJohn Johansen 1220d259f04SJohn Johansen *t = 0; 1230d259f04SJohn Johansen } else { 1240d259f04SJohn Johansen int len = 0; 1250d259f04SJohn Johansen for (; *name; name++) { 1260d259f04SJohn Johansen if (isalnum(*name) || isspace(*name) || 1270d259f04SJohn Johansen strchr("/._-", *name)) 1280d259f04SJohn Johansen len++; 1290d259f04SJohn Johansen } 1300d259f04SJohn Johansen 1310d259f04SJohn Johansen return len; 1320d259f04SJohn Johansen } 1330d259f04SJohn Johansen 1340d259f04SJohn Johansen return t - target; 1350d259f04SJohn Johansen } 1360d259f04SJohn Johansen 137a481f4d9SJohn Johansen 138a481f4d9SJohn Johansen /* 139a481f4d9SJohn Johansen * aafs - core fns and data for the policy tree 140a481f4d9SJohn Johansen */ 141a481f4d9SJohn Johansen 142a481f4d9SJohn Johansen #define AAFS_NAME "apparmorfs" 143a481f4d9SJohn Johansen static struct vfsmount *aafs_mnt; 144a481f4d9SJohn Johansen static int aafs_count; 145a481f4d9SJohn Johansen 146a481f4d9SJohn Johansen 147a481f4d9SJohn Johansen static int aafs_show_path(struct seq_file *seq, struct dentry *dentry) 148a481f4d9SJohn Johansen { 149a0781209SJohn Johansen seq_printf(seq, "%s:[%lu]", AAFS_NAME, d_inode(dentry)->i_ino); 150a481f4d9SJohn Johansen return 0; 151a481f4d9SJohn Johansen } 152a481f4d9SJohn Johansen 15327afa27dSAl Viro static void aafs_free_inode(struct inode *inode) 154a481f4d9SJohn Johansen { 155a481f4d9SJohn Johansen if (S_ISLNK(inode->i_mode)) 156a481f4d9SJohn Johansen kfree(inode->i_link); 157f51dcd0fSAl Viro free_inode_nonrcu(inode); 158f51dcd0fSAl Viro } 159f51dcd0fSAl Viro 160a481f4d9SJohn Johansen static const struct super_operations aafs_super_ops = { 161a481f4d9SJohn Johansen .statfs = simple_statfs, 16227afa27dSAl Viro .free_inode = aafs_free_inode, 163a481f4d9SJohn Johansen .show_path = aafs_show_path, 164a481f4d9SJohn Johansen }; 165a481f4d9SJohn Johansen 166b0ecc9daSDavid Howells static int apparmorfs_fill_super(struct super_block *sb, struct fs_context *fc) 167a481f4d9SJohn Johansen { 168a481f4d9SJohn Johansen static struct tree_descr files[] = { {""} }; 169a481f4d9SJohn Johansen int error; 170a481f4d9SJohn Johansen 171a481f4d9SJohn Johansen error = simple_fill_super(sb, AAFS_MAGIC, files); 172a481f4d9SJohn Johansen if (error) 173a481f4d9SJohn Johansen return error; 174a481f4d9SJohn Johansen sb->s_op = &aafs_super_ops; 175a481f4d9SJohn Johansen 176a481f4d9SJohn Johansen return 0; 177a481f4d9SJohn Johansen } 178a481f4d9SJohn Johansen 179b0ecc9daSDavid Howells static int apparmorfs_get_tree(struct fs_context *fc) 180a481f4d9SJohn Johansen { 181b0ecc9daSDavid Howells return get_tree_single(fc, apparmorfs_fill_super); 182b0ecc9daSDavid Howells } 183b0ecc9daSDavid Howells 184b0ecc9daSDavid Howells static const struct fs_context_operations apparmorfs_context_ops = { 185b0ecc9daSDavid Howells .get_tree = apparmorfs_get_tree, 186b0ecc9daSDavid Howells }; 187b0ecc9daSDavid Howells 188b0ecc9daSDavid Howells static int apparmorfs_init_fs_context(struct fs_context *fc) 189b0ecc9daSDavid Howells { 190b0ecc9daSDavid Howells fc->ops = &apparmorfs_context_ops; 191b0ecc9daSDavid Howells return 0; 192a481f4d9SJohn Johansen } 193a481f4d9SJohn Johansen 194a481f4d9SJohn Johansen static struct file_system_type aafs_ops = { 195a481f4d9SJohn Johansen .owner = THIS_MODULE, 196a481f4d9SJohn Johansen .name = AAFS_NAME, 197b0ecc9daSDavid Howells .init_fs_context = apparmorfs_init_fs_context, 198a481f4d9SJohn Johansen .kill_sb = kill_anon_super, 199a481f4d9SJohn Johansen }; 200a481f4d9SJohn Johansen 201a481f4d9SJohn Johansen /** 202a481f4d9SJohn Johansen * __aafs_setup_d_inode - basic inode setup for apparmorfs 203a481f4d9SJohn Johansen * @dir: parent directory for the dentry 204a481f4d9SJohn Johansen * @dentry: dentry we are seting the inode up for 205a481f4d9SJohn Johansen * @mode: permissions the file should have 206a481f4d9SJohn Johansen * @data: data to store on inode.i_private, available in open() 207a481f4d9SJohn Johansen * @link: if symlink, symlink target string 208a481f4d9SJohn Johansen * @fops: struct file_operations that should be used 209a481f4d9SJohn Johansen * @iops: struct of inode_operations that should be used 210a481f4d9SJohn Johansen */ 211a481f4d9SJohn Johansen static int __aafs_setup_d_inode(struct inode *dir, struct dentry *dentry, 212a481f4d9SJohn Johansen umode_t mode, void *data, char *link, 213a481f4d9SJohn Johansen const struct file_operations *fops, 214a481f4d9SJohn Johansen const struct inode_operations *iops) 215a481f4d9SJohn Johansen { 216a481f4d9SJohn Johansen struct inode *inode = new_inode(dir->i_sb); 217a481f4d9SJohn Johansen 218a481f4d9SJohn Johansen AA_BUG(!dir); 219a481f4d9SJohn Johansen AA_BUG(!dentry); 220a481f4d9SJohn Johansen 221a481f4d9SJohn Johansen if (!inode) 222a481f4d9SJohn Johansen return -ENOMEM; 223a481f4d9SJohn Johansen 224a481f4d9SJohn Johansen inode->i_ino = get_next_ino(); 225a481f4d9SJohn Johansen inode->i_mode = mode; 226a481f4d9SJohn Johansen inode->i_atime = inode->i_mtime = inode->i_ctime = current_time(inode); 227a481f4d9SJohn Johansen inode->i_private = data; 228a481f4d9SJohn Johansen if (S_ISDIR(mode)) { 229a481f4d9SJohn Johansen inode->i_op = iops ? iops : &simple_dir_inode_operations; 230a481f4d9SJohn Johansen inode->i_fop = &simple_dir_operations; 231a481f4d9SJohn Johansen inc_nlink(inode); 232a481f4d9SJohn Johansen inc_nlink(dir); 233a481f4d9SJohn Johansen } else if (S_ISLNK(mode)) { 234a481f4d9SJohn Johansen inode->i_op = iops ? iops : &simple_symlink_inode_operations; 235a481f4d9SJohn Johansen inode->i_link = link; 236a481f4d9SJohn Johansen } else { 237a481f4d9SJohn Johansen inode->i_fop = fops; 238a481f4d9SJohn Johansen } 239a481f4d9SJohn Johansen d_instantiate(dentry, inode); 240a481f4d9SJohn Johansen dget(dentry); 241a481f4d9SJohn Johansen 242a481f4d9SJohn Johansen return 0; 243a481f4d9SJohn Johansen } 244a481f4d9SJohn Johansen 245a481f4d9SJohn Johansen /** 246a481f4d9SJohn Johansen * aafs_create - create a dentry in the apparmorfs filesystem 247a481f4d9SJohn Johansen * 248a481f4d9SJohn Johansen * @name: name of dentry to create 249a481f4d9SJohn Johansen * @mode: permissions the file should have 250a481f4d9SJohn Johansen * @parent: parent directory for this dentry 251a481f4d9SJohn Johansen * @data: data to store on inode.i_private, available in open() 252a481f4d9SJohn Johansen * @link: if symlink, symlink target string 253a481f4d9SJohn Johansen * @fops: struct file_operations that should be used for 254a481f4d9SJohn Johansen * @iops: struct of inode_operations that should be used 255a481f4d9SJohn Johansen * 256a481f4d9SJohn Johansen * This is the basic "create a xxx" function for apparmorfs. 257a481f4d9SJohn Johansen * 258a481f4d9SJohn Johansen * Returns a pointer to a dentry if it succeeds, that must be free with 259a481f4d9SJohn Johansen * aafs_remove(). Will return ERR_PTR on failure. 260a481f4d9SJohn Johansen */ 261a481f4d9SJohn Johansen static struct dentry *aafs_create(const char *name, umode_t mode, 262a481f4d9SJohn Johansen struct dentry *parent, void *data, void *link, 263a481f4d9SJohn Johansen const struct file_operations *fops, 264a481f4d9SJohn Johansen const struct inode_operations *iops) 265a481f4d9SJohn Johansen { 266a481f4d9SJohn Johansen struct dentry *dentry; 267a481f4d9SJohn Johansen struct inode *dir; 268a481f4d9SJohn Johansen int error; 269a481f4d9SJohn Johansen 270a481f4d9SJohn Johansen AA_BUG(!name); 271a481f4d9SJohn Johansen AA_BUG(!parent); 272a481f4d9SJohn Johansen 273a481f4d9SJohn Johansen if (!(mode & S_IFMT)) 274a481f4d9SJohn Johansen mode = (mode & S_IALLUGO) | S_IFREG; 275a481f4d9SJohn Johansen 276a481f4d9SJohn Johansen error = simple_pin_fs(&aafs_ops, &aafs_mnt, &aafs_count); 277a481f4d9SJohn Johansen if (error) 278a481f4d9SJohn Johansen return ERR_PTR(error); 279a481f4d9SJohn Johansen 280a481f4d9SJohn Johansen dir = d_inode(parent); 281a481f4d9SJohn Johansen 282a481f4d9SJohn Johansen inode_lock(dir); 283a481f4d9SJohn Johansen dentry = lookup_one_len(name, parent, strlen(name)); 2845d314a81SDan Carpenter if (IS_ERR(dentry)) { 2855d314a81SDan Carpenter error = PTR_ERR(dentry); 286a481f4d9SJohn Johansen goto fail_lock; 2875d314a81SDan Carpenter } 288a481f4d9SJohn Johansen 289a481f4d9SJohn Johansen if (d_really_is_positive(dentry)) { 290a481f4d9SJohn Johansen error = -EEXIST; 291a481f4d9SJohn Johansen goto fail_dentry; 292a481f4d9SJohn Johansen } 293a481f4d9SJohn Johansen 294a481f4d9SJohn Johansen error = __aafs_setup_d_inode(dir, dentry, mode, data, link, fops, iops); 295a481f4d9SJohn Johansen if (error) 296a481f4d9SJohn Johansen goto fail_dentry; 297a481f4d9SJohn Johansen inode_unlock(dir); 298a481f4d9SJohn Johansen 299a481f4d9SJohn Johansen return dentry; 300a481f4d9SJohn Johansen 301a481f4d9SJohn Johansen fail_dentry: 302a481f4d9SJohn Johansen dput(dentry); 303a481f4d9SJohn Johansen 304a481f4d9SJohn Johansen fail_lock: 305a481f4d9SJohn Johansen inode_unlock(dir); 306a481f4d9SJohn Johansen simple_release_fs(&aafs_mnt, &aafs_count); 307a481f4d9SJohn Johansen 308a481f4d9SJohn Johansen return ERR_PTR(error); 309a481f4d9SJohn Johansen } 310a481f4d9SJohn Johansen 311a481f4d9SJohn Johansen /** 312a481f4d9SJohn Johansen * aafs_create_file - create a file in the apparmorfs filesystem 313a481f4d9SJohn Johansen * 314a481f4d9SJohn Johansen * @name: name of dentry to create 315a481f4d9SJohn Johansen * @mode: permissions the file should have 316a481f4d9SJohn Johansen * @parent: parent directory for this dentry 317a481f4d9SJohn Johansen * @data: data to store on inode.i_private, available in open() 318a481f4d9SJohn Johansen * @fops: struct file_operations that should be used for 319a481f4d9SJohn Johansen * 320a481f4d9SJohn Johansen * see aafs_create 321a481f4d9SJohn Johansen */ 322a481f4d9SJohn Johansen static struct dentry *aafs_create_file(const char *name, umode_t mode, 323a481f4d9SJohn Johansen struct dentry *parent, void *data, 324a481f4d9SJohn Johansen const struct file_operations *fops) 325a481f4d9SJohn Johansen { 326a481f4d9SJohn Johansen return aafs_create(name, mode, parent, data, NULL, fops, NULL); 327a481f4d9SJohn Johansen } 328a481f4d9SJohn Johansen 329a481f4d9SJohn Johansen /** 330a481f4d9SJohn Johansen * aafs_create_dir - create a directory in the apparmorfs filesystem 331a481f4d9SJohn Johansen * 332a481f4d9SJohn Johansen * @name: name of dentry to create 333a481f4d9SJohn Johansen * @parent: parent directory for this dentry 334a481f4d9SJohn Johansen * 335a481f4d9SJohn Johansen * see aafs_create 336a481f4d9SJohn Johansen */ 337a481f4d9SJohn Johansen static struct dentry *aafs_create_dir(const char *name, struct dentry *parent) 338a481f4d9SJohn Johansen { 339a481f4d9SJohn Johansen return aafs_create(name, S_IFDIR | 0755, parent, NULL, NULL, NULL, 340a481f4d9SJohn Johansen NULL); 341a481f4d9SJohn Johansen } 342a481f4d9SJohn Johansen 343a481f4d9SJohn Johansen /** 344a481f4d9SJohn Johansen * aafs_remove - removes a file or directory from the apparmorfs filesystem 345a481f4d9SJohn Johansen * 346a481f4d9SJohn Johansen * @dentry: dentry of the file/directory/symlink to removed. 347a481f4d9SJohn Johansen */ 348a481f4d9SJohn Johansen static void aafs_remove(struct dentry *dentry) 349a481f4d9SJohn Johansen { 350a481f4d9SJohn Johansen struct inode *dir; 351a481f4d9SJohn Johansen 352a481f4d9SJohn Johansen if (!dentry || IS_ERR(dentry)) 353a481f4d9SJohn Johansen return; 354a481f4d9SJohn Johansen 355a481f4d9SJohn Johansen dir = d_inode(dentry->d_parent); 356a481f4d9SJohn Johansen inode_lock(dir); 357a481f4d9SJohn Johansen if (simple_positive(dentry)) { 358a481f4d9SJohn Johansen if (d_is_dir(dentry)) 359a481f4d9SJohn Johansen simple_rmdir(dir, dentry); 360a481f4d9SJohn Johansen else 361a481f4d9SJohn Johansen simple_unlink(dir, dentry); 362201218e4SChris Coulson d_delete(dentry); 363a481f4d9SJohn Johansen dput(dentry); 364a481f4d9SJohn Johansen } 365a481f4d9SJohn Johansen inode_unlock(dir); 366a481f4d9SJohn Johansen simple_release_fs(&aafs_mnt, &aafs_count); 367a481f4d9SJohn Johansen } 368a481f4d9SJohn Johansen 369a481f4d9SJohn Johansen 370a481f4d9SJohn Johansen /* 371a481f4d9SJohn Johansen * aa_fs - policy load/replace/remove 372a481f4d9SJohn Johansen */ 373a481f4d9SJohn Johansen 3740d259f04SJohn Johansen /** 37563e2b423SJohn Johansen * aa_simple_write_to_buffer - common routine for getting policy from user 37663e2b423SJohn Johansen * @userbuf: user buffer to copy data from (NOT NULL) 3773ed02adaSJohn Johansen * @alloc_size: size of user buffer (REQUIRES: @alloc_size >= @copy_size) 37863e2b423SJohn Johansen * @copy_size: size of data to copy from user buffer 37963e2b423SJohn Johansen * @pos: position write is at in the file (NOT NULL) 38063e2b423SJohn Johansen * 38163e2b423SJohn Johansen * Returns: kernel buffer containing copy of user buffer data or an 38263e2b423SJohn Johansen * ERR_PTR on failure. 38363e2b423SJohn Johansen */ 3845ef50d01SJohn Johansen static struct aa_loaddata *aa_simple_write_to_buffer(const char __user *userbuf, 3855ac8c355SJohn Johansen size_t alloc_size, 3865ac8c355SJohn Johansen size_t copy_size, 38763e2b423SJohn Johansen loff_t *pos) 38863e2b423SJohn Johansen { 3895ac8c355SJohn Johansen struct aa_loaddata *data; 39063e2b423SJohn Johansen 391e6bfa25dSJohn Johansen AA_BUG(copy_size > alloc_size); 3923ed02adaSJohn Johansen 39363e2b423SJohn Johansen if (*pos != 0) 39463e2b423SJohn Johansen /* only writes from pos 0, that is complete writes */ 39563e2b423SJohn Johansen return ERR_PTR(-ESPIPE); 39663e2b423SJohn Johansen 39763e2b423SJohn Johansen /* freed by caller to simple_write_to_buffer */ 3985d5182caSJohn Johansen data = aa_loaddata_alloc(alloc_size); 3995d5182caSJohn Johansen if (IS_ERR(data)) 4005d5182caSJohn Johansen return data; 40163e2b423SJohn Johansen 4025d5182caSJohn Johansen data->size = copy_size; 4035ac8c355SJohn Johansen if (copy_from_user(data->data, userbuf, copy_size)) { 40463e2b423SJohn Johansen kvfree(data); 40563e2b423SJohn Johansen return ERR_PTR(-EFAULT); 40663e2b423SJohn Johansen } 40763e2b423SJohn Johansen 40863e2b423SJohn Johansen return data; 40963e2b423SJohn Johansen } 41063e2b423SJohn Johansen 41118e99f19SJohn Johansen static ssize_t policy_update(u32 mask, const char __user *buf, size_t size, 412b7fd2c03SJohn Johansen loff_t *pos, struct aa_ns *ns) 4135ac8c355SJohn Johansen { 4145ac8c355SJohn Johansen struct aa_loaddata *data; 415637f688dSJohn Johansen struct aa_label *label; 416637f688dSJohn Johansen ssize_t error; 417cf797c0eSJohn Johansen 418637f688dSJohn Johansen label = begin_current_label_crit_section(); 419cf797c0eSJohn Johansen 4205ac8c355SJohn Johansen /* high level check about policy management - fine grained in 4215ac8c355SJohn Johansen * below after unpack 4225ac8c355SJohn Johansen */ 423637f688dSJohn Johansen error = aa_may_manage_policy(label, ns, mask); 4245ac8c355SJohn Johansen if (error) 425c6b39f07SXiyu Yang goto end_section; 42663e2b423SJohn Johansen 4275ef50d01SJohn Johansen data = aa_simple_write_to_buffer(buf, size, size, pos); 4285ac8c355SJohn Johansen error = PTR_ERR(data); 4295ac8c355SJohn Johansen if (!IS_ERR(data)) { 430637f688dSJohn Johansen error = aa_replace_profiles(ns, label, mask, data); 4315ac8c355SJohn Johansen aa_put_loaddata(data); 4325ac8c355SJohn Johansen } 433c6b39f07SXiyu Yang end_section: 434637f688dSJohn Johansen end_current_label_crit_section(label); 4355ac8c355SJohn Johansen 4365ac8c355SJohn Johansen return error; 4375ac8c355SJohn Johansen } 4385ac8c355SJohn Johansen 439b7fd2c03SJohn Johansen /* .load file hook fn to load policy */ 44063e2b423SJohn Johansen static ssize_t profile_load(struct file *f, const char __user *buf, size_t size, 44163e2b423SJohn Johansen loff_t *pos) 44263e2b423SJohn Johansen { 443b7fd2c03SJohn Johansen struct aa_ns *ns = aa_get_ns(f->f_inode->i_private); 44418e99f19SJohn Johansen int error = policy_update(AA_MAY_LOAD_POLICY, buf, size, pos, ns); 445b7fd2c03SJohn Johansen 446b7fd2c03SJohn Johansen aa_put_ns(ns); 44763e2b423SJohn Johansen 44863e2b423SJohn Johansen return error; 44963e2b423SJohn Johansen } 45063e2b423SJohn Johansen 45163e2b423SJohn Johansen static const struct file_operations aa_fs_profile_load = { 4526038f373SArnd Bergmann .write = profile_load, 4536038f373SArnd Bergmann .llseek = default_llseek, 45463e2b423SJohn Johansen }; 45563e2b423SJohn Johansen 45663e2b423SJohn Johansen /* .replace file hook fn to load and/or replace policy */ 45763e2b423SJohn Johansen static ssize_t profile_replace(struct file *f, const char __user *buf, 45863e2b423SJohn Johansen size_t size, loff_t *pos) 45963e2b423SJohn Johansen { 460b7fd2c03SJohn Johansen struct aa_ns *ns = aa_get_ns(f->f_inode->i_private); 46118e99f19SJohn Johansen int error = policy_update(AA_MAY_LOAD_POLICY | AA_MAY_REPLACE_POLICY, 46218e99f19SJohn Johansen buf, size, pos, ns); 463b7fd2c03SJohn Johansen aa_put_ns(ns); 46463e2b423SJohn Johansen 46563e2b423SJohn Johansen return error; 46663e2b423SJohn Johansen } 46763e2b423SJohn Johansen 46863e2b423SJohn Johansen static const struct file_operations aa_fs_profile_replace = { 4696038f373SArnd Bergmann .write = profile_replace, 4706038f373SArnd Bergmann .llseek = default_llseek, 47163e2b423SJohn Johansen }; 47263e2b423SJohn Johansen 473b7fd2c03SJohn Johansen /* .remove file hook fn to remove loaded policy */ 47463e2b423SJohn Johansen static ssize_t profile_remove(struct file *f, const char __user *buf, 47563e2b423SJohn Johansen size_t size, loff_t *pos) 47663e2b423SJohn Johansen { 4775ac8c355SJohn Johansen struct aa_loaddata *data; 478637f688dSJohn Johansen struct aa_label *label; 47963e2b423SJohn Johansen ssize_t error; 480b7fd2c03SJohn Johansen struct aa_ns *ns = aa_get_ns(f->f_inode->i_private); 48163e2b423SJohn Johansen 482637f688dSJohn Johansen label = begin_current_label_crit_section(); 4835ac8c355SJohn Johansen /* high level check about policy management - fine grained in 4845ac8c355SJohn Johansen * below after unpack 4855ac8c355SJohn Johansen */ 486637f688dSJohn Johansen error = aa_may_manage_policy(label, ns, AA_MAY_REMOVE_POLICY); 4875ac8c355SJohn Johansen if (error) 4885ac8c355SJohn Johansen goto out; 4895ac8c355SJohn Johansen 49063e2b423SJohn Johansen /* 49163e2b423SJohn Johansen * aa_remove_profile needs a null terminated string so 1 extra 49263e2b423SJohn Johansen * byte is allocated and the copied data is null terminated. 49363e2b423SJohn Johansen */ 4945ef50d01SJohn Johansen data = aa_simple_write_to_buffer(buf, size + 1, size, pos); 49563e2b423SJohn Johansen 49663e2b423SJohn Johansen error = PTR_ERR(data); 49763e2b423SJohn Johansen if (!IS_ERR(data)) { 4985ac8c355SJohn Johansen data->data[size] = 0; 499637f688dSJohn Johansen error = aa_remove_profiles(ns, label, data->data, size); 5005ac8c355SJohn Johansen aa_put_loaddata(data); 50163e2b423SJohn Johansen } 5025ac8c355SJohn Johansen out: 503637f688dSJohn Johansen end_current_label_crit_section(label); 504b7fd2c03SJohn Johansen aa_put_ns(ns); 50563e2b423SJohn Johansen return error; 50663e2b423SJohn Johansen } 50763e2b423SJohn Johansen 50863e2b423SJohn Johansen static const struct file_operations aa_fs_profile_remove = { 5096038f373SArnd Bergmann .write = profile_remove, 5106038f373SArnd Bergmann .llseek = default_llseek, 51163e2b423SJohn Johansen }; 51263e2b423SJohn Johansen 513d9bf2c26SJohn Johansen struct aa_revision { 514d9bf2c26SJohn Johansen struct aa_ns *ns; 515d9bf2c26SJohn Johansen long last_read; 516d9bf2c26SJohn Johansen }; 517d9bf2c26SJohn Johansen 518d9bf2c26SJohn Johansen /* revision file hook fn for policy loads */ 519d9bf2c26SJohn Johansen static int ns_revision_release(struct inode *inode, struct file *file) 520d9bf2c26SJohn Johansen { 521d9bf2c26SJohn Johansen struct aa_revision *rev = file->private_data; 522d9bf2c26SJohn Johansen 523d9bf2c26SJohn Johansen if (rev) { 524d9bf2c26SJohn Johansen aa_put_ns(rev->ns); 525d9bf2c26SJohn Johansen kfree(rev); 526d9bf2c26SJohn Johansen } 527d9bf2c26SJohn Johansen 528d9bf2c26SJohn Johansen return 0; 529d9bf2c26SJohn Johansen } 530d9bf2c26SJohn Johansen 531d9bf2c26SJohn Johansen static ssize_t ns_revision_read(struct file *file, char __user *buf, 532d9bf2c26SJohn Johansen size_t size, loff_t *ppos) 533d9bf2c26SJohn Johansen { 534d9bf2c26SJohn Johansen struct aa_revision *rev = file->private_data; 535d9bf2c26SJohn Johansen char buffer[32]; 536d9bf2c26SJohn Johansen long last_read; 537d9bf2c26SJohn Johansen int avail; 538d9bf2c26SJohn Johansen 539feb3c766SJohn Johansen mutex_lock_nested(&rev->ns->lock, rev->ns->level); 540d9bf2c26SJohn Johansen last_read = rev->last_read; 541d9bf2c26SJohn Johansen if (last_read == rev->ns->revision) { 542d9bf2c26SJohn Johansen mutex_unlock(&rev->ns->lock); 543d9bf2c26SJohn Johansen if (file->f_flags & O_NONBLOCK) 544d9bf2c26SJohn Johansen return -EAGAIN; 545d9bf2c26SJohn Johansen if (wait_event_interruptible(rev->ns->wait, 546d9bf2c26SJohn Johansen last_read != 547d9bf2c26SJohn Johansen READ_ONCE(rev->ns->revision))) 548d9bf2c26SJohn Johansen return -ERESTARTSYS; 549feb3c766SJohn Johansen mutex_lock_nested(&rev->ns->lock, rev->ns->level); 550d9bf2c26SJohn Johansen } 551d9bf2c26SJohn Johansen 552d9bf2c26SJohn Johansen avail = sprintf(buffer, "%ld\n", rev->ns->revision); 553d9bf2c26SJohn Johansen if (*ppos + size > avail) { 554d9bf2c26SJohn Johansen rev->last_read = rev->ns->revision; 555d9bf2c26SJohn Johansen *ppos = 0; 556d9bf2c26SJohn Johansen } 557d9bf2c26SJohn Johansen mutex_unlock(&rev->ns->lock); 558d9bf2c26SJohn Johansen 559d9bf2c26SJohn Johansen return simple_read_from_buffer(buf, size, ppos, buffer, avail); 560d9bf2c26SJohn Johansen } 561d9bf2c26SJohn Johansen 562d9bf2c26SJohn Johansen static int ns_revision_open(struct inode *inode, struct file *file) 563d9bf2c26SJohn Johansen { 564d9bf2c26SJohn Johansen struct aa_revision *rev = kzalloc(sizeof(*rev), GFP_KERNEL); 565d9bf2c26SJohn Johansen 566d9bf2c26SJohn Johansen if (!rev) 567d9bf2c26SJohn Johansen return -ENOMEM; 568d9bf2c26SJohn Johansen 569d9bf2c26SJohn Johansen rev->ns = aa_get_ns(inode->i_private); 570d9bf2c26SJohn Johansen if (!rev->ns) 571d9bf2c26SJohn Johansen rev->ns = aa_get_current_ns(); 572d9bf2c26SJohn Johansen file->private_data = rev; 573d9bf2c26SJohn Johansen 574d9bf2c26SJohn Johansen return 0; 575d9bf2c26SJohn Johansen } 576d9bf2c26SJohn Johansen 577e6c5a7d9SAl Viro static __poll_t ns_revision_poll(struct file *file, poll_table *pt) 578d9bf2c26SJohn Johansen { 579d9bf2c26SJohn Johansen struct aa_revision *rev = file->private_data; 580e6c5a7d9SAl Viro __poll_t mask = 0; 581d9bf2c26SJohn Johansen 582d9bf2c26SJohn Johansen if (rev) { 583feb3c766SJohn Johansen mutex_lock_nested(&rev->ns->lock, rev->ns->level); 584d9bf2c26SJohn Johansen poll_wait(file, &rev->ns->wait, pt); 585d9bf2c26SJohn Johansen if (rev->last_read < rev->ns->revision) 586a9a08845SLinus Torvalds mask |= EPOLLIN | EPOLLRDNORM; 587d9bf2c26SJohn Johansen mutex_unlock(&rev->ns->lock); 588d9bf2c26SJohn Johansen } 589d9bf2c26SJohn Johansen 590d9bf2c26SJohn Johansen return mask; 591d9bf2c26SJohn Johansen } 592d9bf2c26SJohn Johansen 5935d5182caSJohn Johansen void __aa_bump_ns_revision(struct aa_ns *ns) 5945d5182caSJohn Johansen { 5950df34a64SJohn Johansen WRITE_ONCE(ns->revision, READ_ONCE(ns->revision) + 1); 596d9bf2c26SJohn Johansen wake_up_interruptible(&ns->wait); 5975d5182caSJohn Johansen } 5985d5182caSJohn Johansen 599d9bf2c26SJohn Johansen static const struct file_operations aa_fs_ns_revision_fops = { 600d9bf2c26SJohn Johansen .owner = THIS_MODULE, 601d9bf2c26SJohn Johansen .open = ns_revision_open, 602d9bf2c26SJohn Johansen .poll = ns_revision_poll, 603d9bf2c26SJohn Johansen .read = ns_revision_read, 604d9bf2c26SJohn Johansen .llseek = generic_file_llseek, 605d9bf2c26SJohn Johansen .release = ns_revision_release, 606d9bf2c26SJohn Johansen }; 607d9bf2c26SJohn Johansen 6084f3b3f2dSJohn Johansen static void profile_query_cb(struct aa_profile *profile, struct aa_perms *perms, 6094f3b3f2dSJohn Johansen const char *match_str, size_t match_len) 6104f3b3f2dSJohn Johansen { 611f4585bc2STyler Hicks struct aa_perms tmp = { }; 6124f3b3f2dSJohn Johansen struct aa_dfa *dfa; 6134f3b3f2dSJohn Johansen unsigned int state = 0; 6144f3b3f2dSJohn Johansen 615637f688dSJohn Johansen if (profile_unconfined(profile)) 6164f3b3f2dSJohn Johansen return; 6174f3b3f2dSJohn Johansen if (profile->file.dfa && *match_str == AA_CLASS_FILE) { 6184f3b3f2dSJohn Johansen dfa = profile->file.dfa; 6194f3b3f2dSJohn Johansen state = aa_dfa_match_len(dfa, profile->file.start, 6204f3b3f2dSJohn Johansen match_str + 1, match_len - 1); 6214f3b3f2dSJohn Johansen if (state) { 6224f3b3f2dSJohn Johansen struct path_cond cond = { }; 6234f3b3f2dSJohn Johansen 6244f3b3f2dSJohn Johansen tmp = aa_compute_fperms(dfa, state, &cond); 6254f3b3f2dSJohn Johansen } 6264f3b3f2dSJohn Johansen } else if (profile->policy.dfa) { 627b9590ad4SJohn Johansen if (!PROFILE_MEDIATES(profile, *match_str)) 6284f3b3f2dSJohn Johansen return; /* no change to current perms */ 6294f3b3f2dSJohn Johansen dfa = profile->policy.dfa; 6304f3b3f2dSJohn Johansen state = aa_dfa_match_len(dfa, profile->policy.start[0], 6314f3b3f2dSJohn Johansen match_str, match_len); 6324f3b3f2dSJohn Johansen if (state) 6334f3b3f2dSJohn Johansen aa_compute_perms(dfa, state, &tmp); 6344f3b3f2dSJohn Johansen } 6354f3b3f2dSJohn Johansen aa_apply_modes_to_perms(profile, &tmp); 636317d9a05SJohn Johansen aa_perms_accum_raw(perms, &tmp); 6374f3b3f2dSJohn Johansen } 6384f3b3f2dSJohn Johansen 6394f3b3f2dSJohn Johansen 640e025be0fSWilliam Hua /** 641e025be0fSWilliam Hua * query_data - queries a policy and writes its data to buf 642e025be0fSWilliam Hua * @buf: the resulting data is stored here (NOT NULL) 643e025be0fSWilliam Hua * @buf_len: size of buf 644e025be0fSWilliam Hua * @query: query string used to retrieve data 645e025be0fSWilliam Hua * @query_len: size of query including second NUL byte 646e025be0fSWilliam Hua * 647e025be0fSWilliam Hua * The buffers pointed to by buf and query may overlap. The query buffer is 648e025be0fSWilliam Hua * parsed before buf is written to. 649e025be0fSWilliam Hua * 650e025be0fSWilliam Hua * The query should look like "<LABEL>\0<KEY>\0", where <LABEL> is the name of 651e025be0fSWilliam Hua * the security confinement context and <KEY> is the name of the data to 652e025be0fSWilliam Hua * retrieve. <LABEL> and <KEY> must not be NUL-terminated. 653e025be0fSWilliam Hua * 654e025be0fSWilliam Hua * Don't expect the contents of buf to be preserved on failure. 655e025be0fSWilliam Hua * 656e025be0fSWilliam Hua * Returns: number of characters written to buf or -errno on failure 657e025be0fSWilliam Hua */ 658e025be0fSWilliam Hua static ssize_t query_data(char *buf, size_t buf_len, 659e025be0fSWilliam Hua char *query, size_t query_len) 660e025be0fSWilliam Hua { 661e025be0fSWilliam Hua char *out; 662e025be0fSWilliam Hua const char *key; 663317d9a05SJohn Johansen struct label_it i; 664637f688dSJohn Johansen struct aa_label *label, *curr; 665317d9a05SJohn Johansen struct aa_profile *profile; 666e025be0fSWilliam Hua struct aa_data *data; 667e025be0fSWilliam Hua u32 bytes, blocks; 668e025be0fSWilliam Hua __le32 outle32; 669e025be0fSWilliam Hua 670e025be0fSWilliam Hua if (!query_len) 671e025be0fSWilliam Hua return -EINVAL; /* need a query */ 672e025be0fSWilliam Hua 673e025be0fSWilliam Hua key = query + strnlen(query, query_len) + 1; 674e025be0fSWilliam Hua if (key + 1 >= query + query_len) 675e025be0fSWilliam Hua return -EINVAL; /* not enough space for a non-empty key */ 676e025be0fSWilliam Hua if (key + strnlen(key, query + query_len - key) >= query + query_len) 677e025be0fSWilliam Hua return -EINVAL; /* must end with NUL */ 678e025be0fSWilliam Hua 679e025be0fSWilliam Hua if (buf_len < sizeof(bytes) + sizeof(blocks)) 680e025be0fSWilliam Hua return -EINVAL; /* not enough space */ 681e025be0fSWilliam Hua 682637f688dSJohn Johansen curr = begin_current_label_crit_section(); 683637f688dSJohn Johansen label = aa_label_parse(curr, query, GFP_KERNEL, false, false); 684637f688dSJohn Johansen end_current_label_crit_section(curr); 685637f688dSJohn Johansen if (IS_ERR(label)) 686637f688dSJohn Johansen return PTR_ERR(label); 687e025be0fSWilliam Hua 688e025be0fSWilliam Hua /* We are going to leave space for two numbers. The first is the total 689e025be0fSWilliam Hua * number of bytes we are writing after the first number. This is so 690e025be0fSWilliam Hua * users can read the full output without reallocation. 691e025be0fSWilliam Hua * 692e025be0fSWilliam Hua * The second number is the number of data blocks we're writing. An 693e025be0fSWilliam Hua * application might be confined by multiple policies having data in 694e025be0fSWilliam Hua * the same key. 695e025be0fSWilliam Hua */ 696e025be0fSWilliam Hua memset(buf, 0, sizeof(bytes) + sizeof(blocks)); 697e025be0fSWilliam Hua out = buf + sizeof(bytes) + sizeof(blocks); 698e025be0fSWilliam Hua 699e025be0fSWilliam Hua blocks = 0; 700317d9a05SJohn Johansen label_for_each_confined(i, label, profile) { 701317d9a05SJohn Johansen if (!profile->data) 702317d9a05SJohn Johansen continue; 703317d9a05SJohn Johansen 704317d9a05SJohn Johansen data = rhashtable_lookup_fast(profile->data, &key, 705317d9a05SJohn Johansen profile->data->p); 706e025be0fSWilliam Hua 707e025be0fSWilliam Hua if (data) { 708317d9a05SJohn Johansen if (out + sizeof(outle32) + data->size > buf + 709317d9a05SJohn Johansen buf_len) { 710637f688dSJohn Johansen aa_put_label(label); 711e025be0fSWilliam Hua return -EINVAL; /* not enough space */ 712637f688dSJohn Johansen } 713e025be0fSWilliam Hua outle32 = __cpu_to_le32(data->size); 714e025be0fSWilliam Hua memcpy(out, &outle32, sizeof(outle32)); 715e025be0fSWilliam Hua out += sizeof(outle32); 716e025be0fSWilliam Hua memcpy(out, data->data, data->size); 717e025be0fSWilliam Hua out += data->size; 718e025be0fSWilliam Hua blocks++; 719e025be0fSWilliam Hua } 720e025be0fSWilliam Hua } 721637f688dSJohn Johansen aa_put_label(label); 722e025be0fSWilliam Hua 723e025be0fSWilliam Hua outle32 = __cpu_to_le32(out - buf - sizeof(bytes)); 724e025be0fSWilliam Hua memcpy(buf, &outle32, sizeof(outle32)); 725e025be0fSWilliam Hua outle32 = __cpu_to_le32(blocks); 726e025be0fSWilliam Hua memcpy(buf + sizeof(bytes), &outle32, sizeof(outle32)); 727e025be0fSWilliam Hua 728e025be0fSWilliam Hua return out - buf; 729e025be0fSWilliam Hua } 730e025be0fSWilliam Hua 7314f3b3f2dSJohn Johansen /** 7324f3b3f2dSJohn Johansen * query_label - queries a label and writes permissions to buf 7334f3b3f2dSJohn Johansen * @buf: the resulting permissions string is stored here (NOT NULL) 7344f3b3f2dSJohn Johansen * @buf_len: size of buf 7354f3b3f2dSJohn Johansen * @query: binary query string to match against the dfa 7364f3b3f2dSJohn Johansen * @query_len: size of query 7374f3b3f2dSJohn Johansen * @view_only: only compute for querier's view 7384f3b3f2dSJohn Johansen * 7394f3b3f2dSJohn Johansen * The buffers pointed to by buf and query may overlap. The query buffer is 7404f3b3f2dSJohn Johansen * parsed before buf is written to. 7414f3b3f2dSJohn Johansen * 7424f3b3f2dSJohn Johansen * The query should look like "LABEL_NAME\0DFA_STRING" where LABEL_NAME is 7434f3b3f2dSJohn Johansen * the name of the label, in the current namespace, that is to be queried and 7444f3b3f2dSJohn Johansen * DFA_STRING is a binary string to match against the label(s)'s DFA. 7454f3b3f2dSJohn Johansen * 7464f3b3f2dSJohn Johansen * LABEL_NAME must be NUL terminated. DFA_STRING may contain NUL characters 7474f3b3f2dSJohn Johansen * but must *not* be NUL terminated. 7484f3b3f2dSJohn Johansen * 7494f3b3f2dSJohn Johansen * Returns: number of characters written to buf or -errno on failure 7504f3b3f2dSJohn Johansen */ 7514f3b3f2dSJohn Johansen static ssize_t query_label(char *buf, size_t buf_len, 7524f3b3f2dSJohn Johansen char *query, size_t query_len, bool view_only) 7534f3b3f2dSJohn Johansen { 754317d9a05SJohn Johansen struct aa_profile *profile; 755637f688dSJohn Johansen struct aa_label *label, *curr; 7564f3b3f2dSJohn Johansen char *label_name, *match_str; 7574f3b3f2dSJohn Johansen size_t label_name_len, match_len; 7584f3b3f2dSJohn Johansen struct aa_perms perms; 759317d9a05SJohn Johansen struct label_it i; 7604f3b3f2dSJohn Johansen 7614f3b3f2dSJohn Johansen if (!query_len) 7624f3b3f2dSJohn Johansen return -EINVAL; 7634f3b3f2dSJohn Johansen 7644f3b3f2dSJohn Johansen label_name = query; 7654f3b3f2dSJohn Johansen label_name_len = strnlen(query, query_len); 7664f3b3f2dSJohn Johansen if (!label_name_len || label_name_len == query_len) 7674f3b3f2dSJohn Johansen return -EINVAL; 7684f3b3f2dSJohn Johansen 7694f3b3f2dSJohn Johansen /** 7704f3b3f2dSJohn Johansen * The extra byte is to account for the null byte between the 7714f3b3f2dSJohn Johansen * profile name and dfa string. profile_name_len is greater 7724f3b3f2dSJohn Johansen * than zero and less than query_len, so a byte can be safely 7734f3b3f2dSJohn Johansen * added or subtracted. 7744f3b3f2dSJohn Johansen */ 7754f3b3f2dSJohn Johansen match_str = label_name + label_name_len + 1; 7764f3b3f2dSJohn Johansen match_len = query_len - label_name_len - 1; 7774f3b3f2dSJohn Johansen 778637f688dSJohn Johansen curr = begin_current_label_crit_section(); 779637f688dSJohn Johansen label = aa_label_parse(curr, label_name, GFP_KERNEL, false, false); 780637f688dSJohn Johansen end_current_label_crit_section(curr); 781637f688dSJohn Johansen if (IS_ERR(label)) 782637f688dSJohn Johansen return PTR_ERR(label); 7834f3b3f2dSJohn Johansen 7844f3b3f2dSJohn Johansen perms = allperms; 785317d9a05SJohn Johansen if (view_only) { 786317d9a05SJohn Johansen label_for_each_in_ns(i, labels_ns(label), label, profile) { 787317d9a05SJohn Johansen profile_query_cb(profile, &perms, match_str, match_len); 788317d9a05SJohn Johansen } 789317d9a05SJohn Johansen } else { 790317d9a05SJohn Johansen label_for_each(i, label, profile) { 791317d9a05SJohn Johansen profile_query_cb(profile, &perms, match_str, match_len); 792317d9a05SJohn Johansen } 793317d9a05SJohn Johansen } 794317d9a05SJohn Johansen aa_put_label(label); 7954f3b3f2dSJohn Johansen 7964f3b3f2dSJohn Johansen return scnprintf(buf, buf_len, 7974f3b3f2dSJohn Johansen "allow 0x%08x\ndeny 0x%08x\naudit 0x%08x\nquiet 0x%08x\n", 7984f3b3f2dSJohn Johansen perms.allow, perms.deny, perms.audit, perms.quiet); 7994f3b3f2dSJohn Johansen } 8004f3b3f2dSJohn Johansen 8011dea3b41SJohn Johansen /* 8021dea3b41SJohn Johansen * Transaction based IO. 8031dea3b41SJohn Johansen * The file expects a write which triggers the transaction, and then 8041dea3b41SJohn Johansen * possibly a read(s) which collects the result - which is stored in a 8051dea3b41SJohn Johansen * file-local buffer. Once a new write is performed, a new set of results 8061dea3b41SJohn Johansen * are stored in the file-local buffer. 8071dea3b41SJohn Johansen */ 8081dea3b41SJohn Johansen struct multi_transaction { 8091dea3b41SJohn Johansen struct kref count; 8101dea3b41SJohn Johansen ssize_t size; 811fe9fd23eSGustavo A. R. Silva char data[]; 8121dea3b41SJohn Johansen }; 8131dea3b41SJohn Johansen 8141dea3b41SJohn Johansen #define MULTI_TRANSACTION_LIMIT (PAGE_SIZE - sizeof(struct multi_transaction)) 8151dea3b41SJohn Johansen /* TODO: replace with per file lock */ 8161dea3b41SJohn Johansen static DEFINE_SPINLOCK(multi_transaction_lock); 8171dea3b41SJohn Johansen 8181dea3b41SJohn Johansen static void multi_transaction_kref(struct kref *kref) 8191dea3b41SJohn Johansen { 8201dea3b41SJohn Johansen struct multi_transaction *t; 8211dea3b41SJohn Johansen 8221dea3b41SJohn Johansen t = container_of(kref, struct multi_transaction, count); 8231dea3b41SJohn Johansen free_page((unsigned long) t); 8241dea3b41SJohn Johansen } 8251dea3b41SJohn Johansen 8261dea3b41SJohn Johansen static struct multi_transaction * 8271dea3b41SJohn Johansen get_multi_transaction(struct multi_transaction *t) 8281dea3b41SJohn Johansen { 8291dea3b41SJohn Johansen if (t) 8301dea3b41SJohn Johansen kref_get(&(t->count)); 8311dea3b41SJohn Johansen 8321dea3b41SJohn Johansen return t; 8331dea3b41SJohn Johansen } 8341dea3b41SJohn Johansen 8351dea3b41SJohn Johansen static void put_multi_transaction(struct multi_transaction *t) 8361dea3b41SJohn Johansen { 8371dea3b41SJohn Johansen if (t) 8381dea3b41SJohn Johansen kref_put(&(t->count), multi_transaction_kref); 8391dea3b41SJohn Johansen } 8401dea3b41SJohn Johansen 8411dea3b41SJohn Johansen /* does not increment @new's count */ 8421dea3b41SJohn Johansen static void multi_transaction_set(struct file *file, 8431dea3b41SJohn Johansen struct multi_transaction *new, size_t n) 8441dea3b41SJohn Johansen { 8451dea3b41SJohn Johansen struct multi_transaction *old; 8461dea3b41SJohn Johansen 8471dea3b41SJohn Johansen AA_BUG(n > MULTI_TRANSACTION_LIMIT); 8481dea3b41SJohn Johansen 8491dea3b41SJohn Johansen new->size = n; 8501dea3b41SJohn Johansen spin_lock(&multi_transaction_lock); 8511dea3b41SJohn Johansen old = (struct multi_transaction *) file->private_data; 8521dea3b41SJohn Johansen file->private_data = new; 8531dea3b41SJohn Johansen spin_unlock(&multi_transaction_lock); 8541dea3b41SJohn Johansen put_multi_transaction(old); 8551dea3b41SJohn Johansen } 8561dea3b41SJohn Johansen 8571dea3b41SJohn Johansen static struct multi_transaction *multi_transaction_new(struct file *file, 8581dea3b41SJohn Johansen const char __user *buf, 8591dea3b41SJohn Johansen size_t size) 8601dea3b41SJohn Johansen { 8611dea3b41SJohn Johansen struct multi_transaction *t; 8621dea3b41SJohn Johansen 8631dea3b41SJohn Johansen if (size > MULTI_TRANSACTION_LIMIT - 1) 8641dea3b41SJohn Johansen return ERR_PTR(-EFBIG); 8651dea3b41SJohn Johansen 8661dea3b41SJohn Johansen t = (struct multi_transaction *)get_zeroed_page(GFP_KERNEL); 8671dea3b41SJohn Johansen if (!t) 8681dea3b41SJohn Johansen return ERR_PTR(-ENOMEM); 8691dea3b41SJohn Johansen kref_init(&t->count); 8701dea3b41SJohn Johansen if (copy_from_user(t->data, buf, size)) 8711dea3b41SJohn Johansen return ERR_PTR(-EFAULT); 8721dea3b41SJohn Johansen 8731dea3b41SJohn Johansen return t; 8741dea3b41SJohn Johansen } 8751dea3b41SJohn Johansen 8761dea3b41SJohn Johansen static ssize_t multi_transaction_read(struct file *file, char __user *buf, 8771dea3b41SJohn Johansen size_t size, loff_t *pos) 8781dea3b41SJohn Johansen { 8791dea3b41SJohn Johansen struct multi_transaction *t; 8801dea3b41SJohn Johansen ssize_t ret; 8811dea3b41SJohn Johansen 8821dea3b41SJohn Johansen spin_lock(&multi_transaction_lock); 8831dea3b41SJohn Johansen t = get_multi_transaction(file->private_data); 8841dea3b41SJohn Johansen spin_unlock(&multi_transaction_lock); 8851dea3b41SJohn Johansen if (!t) 8861dea3b41SJohn Johansen return 0; 8871dea3b41SJohn Johansen 8881dea3b41SJohn Johansen ret = simple_read_from_buffer(buf, size, pos, t->data, t->size); 8891dea3b41SJohn Johansen put_multi_transaction(t); 8901dea3b41SJohn Johansen 8911dea3b41SJohn Johansen return ret; 8921dea3b41SJohn Johansen } 8931dea3b41SJohn Johansen 8941dea3b41SJohn Johansen static int multi_transaction_release(struct inode *inode, struct file *file) 8951dea3b41SJohn Johansen { 8961dea3b41SJohn Johansen put_multi_transaction(file->private_data); 8971dea3b41SJohn Johansen 8981dea3b41SJohn Johansen return 0; 8991dea3b41SJohn Johansen } 9001dea3b41SJohn Johansen 901317d9a05SJohn Johansen #define QUERY_CMD_LABEL "label\0" 902317d9a05SJohn Johansen #define QUERY_CMD_LABEL_LEN 6 9034f3b3f2dSJohn Johansen #define QUERY_CMD_PROFILE "profile\0" 9044f3b3f2dSJohn Johansen #define QUERY_CMD_PROFILE_LEN 8 905317d9a05SJohn Johansen #define QUERY_CMD_LABELALL "labelall\0" 906317d9a05SJohn Johansen #define QUERY_CMD_LABELALL_LEN 9 907e025be0fSWilliam Hua #define QUERY_CMD_DATA "data\0" 908e025be0fSWilliam Hua #define QUERY_CMD_DATA_LEN 5 909e025be0fSWilliam Hua 910e025be0fSWilliam Hua /** 911e025be0fSWilliam Hua * aa_write_access - generic permissions and data query 912e025be0fSWilliam Hua * @file: pointer to open apparmorfs/access file 913e025be0fSWilliam Hua * @ubuf: user buffer containing the complete query string (NOT NULL) 914e025be0fSWilliam Hua * @count: size of ubuf 915e025be0fSWilliam Hua * @ppos: position in the file (MUST BE ZERO) 916e025be0fSWilliam Hua * 917e025be0fSWilliam Hua * Allows for one permissions or data query per open(), write(), and read() 918e025be0fSWilliam Hua * sequence. The only queries currently supported are label-based queries for 919e025be0fSWilliam Hua * permissions or data. 920e025be0fSWilliam Hua * 921e025be0fSWilliam Hua * For permissions queries, ubuf must begin with "label\0", followed by the 922e025be0fSWilliam Hua * profile query specific format described in the query_label() function 923e025be0fSWilliam Hua * documentation. 924e025be0fSWilliam Hua * 925e025be0fSWilliam Hua * For data queries, ubuf must have the form "data\0<LABEL>\0<KEY>\0", where 926e025be0fSWilliam Hua * <LABEL> is the name of the security confinement context and <KEY> is the 927e025be0fSWilliam Hua * name of the data to retrieve. 928e025be0fSWilliam Hua * 929e025be0fSWilliam Hua * Returns: number of bytes written or -errno on failure 930e025be0fSWilliam Hua */ 931e025be0fSWilliam Hua static ssize_t aa_write_access(struct file *file, const char __user *ubuf, 932e025be0fSWilliam Hua size_t count, loff_t *ppos) 933e025be0fSWilliam Hua { 9341dea3b41SJohn Johansen struct multi_transaction *t; 935e025be0fSWilliam Hua ssize_t len; 936e025be0fSWilliam Hua 937e025be0fSWilliam Hua if (*ppos) 938e025be0fSWilliam Hua return -ESPIPE; 939e025be0fSWilliam Hua 9401dea3b41SJohn Johansen t = multi_transaction_new(file, ubuf, count); 9411dea3b41SJohn Johansen if (IS_ERR(t)) 9421dea3b41SJohn Johansen return PTR_ERR(t); 943e025be0fSWilliam Hua 9444f3b3f2dSJohn Johansen if (count > QUERY_CMD_PROFILE_LEN && 9454f3b3f2dSJohn Johansen !memcmp(t->data, QUERY_CMD_PROFILE, QUERY_CMD_PROFILE_LEN)) { 9464f3b3f2dSJohn Johansen len = query_label(t->data, MULTI_TRANSACTION_LIMIT, 9474f3b3f2dSJohn Johansen t->data + QUERY_CMD_PROFILE_LEN, 9484f3b3f2dSJohn Johansen count - QUERY_CMD_PROFILE_LEN, true); 949317d9a05SJohn Johansen } else if (count > QUERY_CMD_LABEL_LEN && 950317d9a05SJohn Johansen !memcmp(t->data, QUERY_CMD_LABEL, QUERY_CMD_LABEL_LEN)) { 951317d9a05SJohn Johansen len = query_label(t->data, MULTI_TRANSACTION_LIMIT, 952317d9a05SJohn Johansen t->data + QUERY_CMD_LABEL_LEN, 953317d9a05SJohn Johansen count - QUERY_CMD_LABEL_LEN, true); 954317d9a05SJohn Johansen } else if (count > QUERY_CMD_LABELALL_LEN && 955317d9a05SJohn Johansen !memcmp(t->data, QUERY_CMD_LABELALL, 956317d9a05SJohn Johansen QUERY_CMD_LABELALL_LEN)) { 957317d9a05SJohn Johansen len = query_label(t->data, MULTI_TRANSACTION_LIMIT, 958317d9a05SJohn Johansen t->data + QUERY_CMD_LABELALL_LEN, 959317d9a05SJohn Johansen count - QUERY_CMD_LABELALL_LEN, false); 9604f3b3f2dSJohn Johansen } else if (count > QUERY_CMD_DATA_LEN && 9611dea3b41SJohn Johansen !memcmp(t->data, QUERY_CMD_DATA, QUERY_CMD_DATA_LEN)) { 9621dea3b41SJohn Johansen len = query_data(t->data, MULTI_TRANSACTION_LIMIT, 9631dea3b41SJohn Johansen t->data + QUERY_CMD_DATA_LEN, 964e025be0fSWilliam Hua count - QUERY_CMD_DATA_LEN); 965e025be0fSWilliam Hua } else 966e025be0fSWilliam Hua len = -EINVAL; 967e025be0fSWilliam Hua 9681dea3b41SJohn Johansen if (len < 0) { 9691dea3b41SJohn Johansen put_multi_transaction(t); 970e025be0fSWilliam Hua return len; 9711dea3b41SJohn Johansen } 972e025be0fSWilliam Hua 9731dea3b41SJohn Johansen multi_transaction_set(file, t, len); 974e025be0fSWilliam Hua 975e025be0fSWilliam Hua return count; 976e025be0fSWilliam Hua } 977e025be0fSWilliam Hua 978c97204baSJohn Johansen static const struct file_operations aa_sfs_access = { 979e025be0fSWilliam Hua .write = aa_write_access, 9801dea3b41SJohn Johansen .read = multi_transaction_read, 9811dea3b41SJohn Johansen .release = multi_transaction_release, 982e025be0fSWilliam Hua .llseek = generic_file_llseek, 983e025be0fSWilliam Hua }; 984e025be0fSWilliam Hua 985c97204baSJohn Johansen static int aa_sfs_seq_show(struct seq_file *seq, void *v) 986e74abcf3SKees Cook { 987c97204baSJohn Johansen struct aa_sfs_entry *fs_file = seq->private; 988e74abcf3SKees Cook 989e74abcf3SKees Cook if (!fs_file) 990e74abcf3SKees Cook return 0; 991e74abcf3SKees Cook 992e74abcf3SKees Cook switch (fs_file->v_type) { 993c97204baSJohn Johansen case AA_SFS_TYPE_BOOLEAN: 994e74abcf3SKees Cook seq_printf(seq, "%s\n", fs_file->v.boolean ? "yes" : "no"); 995e74abcf3SKees Cook break; 996c97204baSJohn Johansen case AA_SFS_TYPE_STRING: 997a9bf8e9fSKees Cook seq_printf(seq, "%s\n", fs_file->v.string); 998a9bf8e9fSKees Cook break; 999c97204baSJohn Johansen case AA_SFS_TYPE_U64: 1000e74abcf3SKees Cook seq_printf(seq, "%#08lx\n", fs_file->v.u64); 1001e74abcf3SKees Cook break; 1002e74abcf3SKees Cook default: 1003e74abcf3SKees Cook /* Ignore unpritable entry types. */ 1004e74abcf3SKees Cook break; 1005e74abcf3SKees Cook } 1006e74abcf3SKees Cook 1007e74abcf3SKees Cook return 0; 1008e74abcf3SKees Cook } 1009e74abcf3SKees Cook 1010c97204baSJohn Johansen static int aa_sfs_seq_open(struct inode *inode, struct file *file) 1011e74abcf3SKees Cook { 1012c97204baSJohn Johansen return single_open(file, aa_sfs_seq_show, inode->i_private); 1013e74abcf3SKees Cook } 1014e74abcf3SKees Cook 1015c97204baSJohn Johansen const struct file_operations aa_sfs_seq_file_ops = { 1016e74abcf3SKees Cook .owner = THIS_MODULE, 1017c97204baSJohn Johansen .open = aa_sfs_seq_open, 1018e74abcf3SKees Cook .read = seq_read, 1019e74abcf3SKees Cook .llseek = seq_lseek, 1020e74abcf3SKees Cook .release = single_release, 1021e74abcf3SKees Cook }; 1022e74abcf3SKees Cook 102352b97de3SJohn Johansen /* 102452b97de3SJohn Johansen * profile based file operations 102552b97de3SJohn Johansen * policy/profiles/XXXX/profiles/ * 102652b97de3SJohn Johansen */ 102752b97de3SJohn Johansen 102852b97de3SJohn Johansen #define SEQ_PROFILE_FOPS(NAME) \ 102952b97de3SJohn Johansen static int seq_profile_ ##NAME ##_open(struct inode *inode, struct file *file)\ 103052b97de3SJohn Johansen { \ 103152b97de3SJohn Johansen return seq_profile_open(inode, file, seq_profile_ ##NAME ##_show); \ 103252b97de3SJohn Johansen } \ 103352b97de3SJohn Johansen \ 103452b97de3SJohn Johansen static const struct file_operations seq_profile_ ##NAME ##_fops = { \ 103552b97de3SJohn Johansen .owner = THIS_MODULE, \ 103652b97de3SJohn Johansen .open = seq_profile_ ##NAME ##_open, \ 103752b97de3SJohn Johansen .read = seq_read, \ 103852b97de3SJohn Johansen .llseek = seq_lseek, \ 103952b97de3SJohn Johansen .release = seq_profile_release, \ 104052b97de3SJohn Johansen } \ 104152b97de3SJohn Johansen 104252b97de3SJohn Johansen static int seq_profile_open(struct inode *inode, struct file *file, 10430d259f04SJohn Johansen int (*show)(struct seq_file *, void *)) 10440d259f04SJohn Johansen { 10458399588aSJohn Johansen struct aa_proxy *proxy = aa_get_proxy(inode->i_private); 10468399588aSJohn Johansen int error = single_open(file, show, proxy); 104763e2b423SJohn Johansen 10480d259f04SJohn Johansen if (error) { 10490d259f04SJohn Johansen file->private_data = NULL; 10508399588aSJohn Johansen aa_put_proxy(proxy); 10510d259f04SJohn Johansen } 10520d259f04SJohn Johansen 10530d259f04SJohn Johansen return error; 10540d259f04SJohn Johansen } 10550d259f04SJohn Johansen 105652b97de3SJohn Johansen static int seq_profile_release(struct inode *inode, struct file *file) 10570d259f04SJohn Johansen { 10580d259f04SJohn Johansen struct seq_file *seq = (struct seq_file *) file->private_data; 10590d259f04SJohn Johansen if (seq) 10608399588aSJohn Johansen aa_put_proxy(seq->private); 10610d259f04SJohn Johansen return single_release(inode, file); 10620d259f04SJohn Johansen } 10630d259f04SJohn Johansen 106452b97de3SJohn Johansen static int seq_profile_name_show(struct seq_file *seq, void *v) 10650d259f04SJohn Johansen { 10668399588aSJohn Johansen struct aa_proxy *proxy = seq->private; 1067637f688dSJohn Johansen struct aa_label *label = aa_get_label_rcu(&proxy->label); 1068637f688dSJohn Johansen struct aa_profile *profile = labels_profile(label); 10690d259f04SJohn Johansen seq_printf(seq, "%s\n", profile->base.name); 1070637f688dSJohn Johansen aa_put_label(label); 10710d259f04SJohn Johansen 10720d259f04SJohn Johansen return 0; 10730d259f04SJohn Johansen } 10740d259f04SJohn Johansen 107552b97de3SJohn Johansen static int seq_profile_mode_show(struct seq_file *seq, void *v) 10760d259f04SJohn Johansen { 10778399588aSJohn Johansen struct aa_proxy *proxy = seq->private; 1078637f688dSJohn Johansen struct aa_label *label = aa_get_label_rcu(&proxy->label); 1079637f688dSJohn Johansen struct aa_profile *profile = labels_profile(label); 10800d259f04SJohn Johansen seq_printf(seq, "%s\n", aa_profile_mode_names[profile->mode]); 1081637f688dSJohn Johansen aa_put_label(label); 10820d259f04SJohn Johansen 10830d259f04SJohn Johansen return 0; 10840d259f04SJohn Johansen } 10850d259f04SJohn Johansen 108652b97de3SJohn Johansen static int seq_profile_attach_show(struct seq_file *seq, void *v) 1087556d0be7SJohn Johansen { 10888399588aSJohn Johansen struct aa_proxy *proxy = seq->private; 1089637f688dSJohn Johansen struct aa_label *label = aa_get_label_rcu(&proxy->label); 1090637f688dSJohn Johansen struct aa_profile *profile = labels_profile(label); 1091556d0be7SJohn Johansen if (profile->attach) 1092556d0be7SJohn Johansen seq_printf(seq, "%s\n", profile->attach); 1093556d0be7SJohn Johansen else if (profile->xmatch) 1094556d0be7SJohn Johansen seq_puts(seq, "<unknown>\n"); 1095556d0be7SJohn Johansen else 1096556d0be7SJohn Johansen seq_printf(seq, "%s\n", profile->base.name); 1097637f688dSJohn Johansen aa_put_label(label); 1098556d0be7SJohn Johansen 1099556d0be7SJohn Johansen return 0; 1100556d0be7SJohn Johansen } 1101556d0be7SJohn Johansen 110252b97de3SJohn Johansen static int seq_profile_hash_show(struct seq_file *seq, void *v) 1103f8eb8a13SJohn Johansen { 11048399588aSJohn Johansen struct aa_proxy *proxy = seq->private; 1105637f688dSJohn Johansen struct aa_label *label = aa_get_label_rcu(&proxy->label); 1106637f688dSJohn Johansen struct aa_profile *profile = labels_profile(label); 1107f8eb8a13SJohn Johansen unsigned int i, size = aa_hash_size(); 1108f8eb8a13SJohn Johansen 1109f8eb8a13SJohn Johansen if (profile->hash) { 1110f8eb8a13SJohn Johansen for (i = 0; i < size; i++) 1111f8eb8a13SJohn Johansen seq_printf(seq, "%.2x", profile->hash[i]); 111247dbd1cdSMarkus Elfring seq_putc(seq, '\n'); 1113f8eb8a13SJohn Johansen } 1114637f688dSJohn Johansen aa_put_label(label); 1115f8eb8a13SJohn Johansen 1116f8eb8a13SJohn Johansen return 0; 1117f8eb8a13SJohn Johansen } 1118f8eb8a13SJohn Johansen 111952b97de3SJohn Johansen SEQ_PROFILE_FOPS(name); 112052b97de3SJohn Johansen SEQ_PROFILE_FOPS(mode); 112152b97de3SJohn Johansen SEQ_PROFILE_FOPS(attach); 112252b97de3SJohn Johansen SEQ_PROFILE_FOPS(hash); 1123f8eb8a13SJohn Johansen 112464c86970SJohn Johansen /* 112564c86970SJohn Johansen * namespace based files 112664c86970SJohn Johansen * several root files and 112764c86970SJohn Johansen * policy/ * 112864c86970SJohn Johansen */ 1129f8eb8a13SJohn Johansen 113064c86970SJohn Johansen #define SEQ_NS_FOPS(NAME) \ 113164c86970SJohn Johansen static int seq_ns_ ##NAME ##_open(struct inode *inode, struct file *file) \ 113264c86970SJohn Johansen { \ 113364c86970SJohn Johansen return single_open(file, seq_ns_ ##NAME ##_show, inode->i_private); \ 113464c86970SJohn Johansen } \ 113564c86970SJohn Johansen \ 113664c86970SJohn Johansen static const struct file_operations seq_ns_ ##NAME ##_fops = { \ 113764c86970SJohn Johansen .owner = THIS_MODULE, \ 113864c86970SJohn Johansen .open = seq_ns_ ##NAME ##_open, \ 113964c86970SJohn Johansen .read = seq_read, \ 114064c86970SJohn Johansen .llseek = seq_lseek, \ 114164c86970SJohn Johansen .release = single_release, \ 114264c86970SJohn Johansen } \ 11433e3e5695SJohn Johansen 114440cde7fcSJohn Johansen static int seq_ns_stacked_show(struct seq_file *seq, void *v) 114540cde7fcSJohn Johansen { 114640cde7fcSJohn Johansen struct aa_label *label; 114740cde7fcSJohn Johansen 114840cde7fcSJohn Johansen label = begin_current_label_crit_section(); 114940cde7fcSJohn Johansen seq_printf(seq, "%s\n", label->size > 1 ? "yes" : "no"); 115040cde7fcSJohn Johansen end_current_label_crit_section(label); 115140cde7fcSJohn Johansen 115240cde7fcSJohn Johansen return 0; 115340cde7fcSJohn Johansen } 115440cde7fcSJohn Johansen 115540cde7fcSJohn Johansen static int seq_ns_nsstacked_show(struct seq_file *seq, void *v) 115640cde7fcSJohn Johansen { 115740cde7fcSJohn Johansen struct aa_label *label; 115840cde7fcSJohn Johansen struct aa_profile *profile; 115940cde7fcSJohn Johansen struct label_it it; 116040cde7fcSJohn Johansen int count = 1; 116140cde7fcSJohn Johansen 116240cde7fcSJohn Johansen label = begin_current_label_crit_section(); 116340cde7fcSJohn Johansen 116440cde7fcSJohn Johansen if (label->size > 1) { 116540cde7fcSJohn Johansen label_for_each(it, label, profile) 116640cde7fcSJohn Johansen if (profile->ns != labels_ns(label)) { 116740cde7fcSJohn Johansen count++; 116840cde7fcSJohn Johansen break; 116940cde7fcSJohn Johansen } 117040cde7fcSJohn Johansen } 117140cde7fcSJohn Johansen 117240cde7fcSJohn Johansen seq_printf(seq, "%s\n", count > 1 ? "yes" : "no"); 117340cde7fcSJohn Johansen end_current_label_crit_section(label); 117440cde7fcSJohn Johansen 117540cde7fcSJohn Johansen return 0; 117640cde7fcSJohn Johansen } 117740cde7fcSJohn Johansen 117864c86970SJohn Johansen static int seq_ns_level_show(struct seq_file *seq, void *v) 1179a71ada30SJohn Johansen { 1180637f688dSJohn Johansen struct aa_label *label; 1181a71ada30SJohn Johansen 1182637f688dSJohn Johansen label = begin_current_label_crit_section(); 1183637f688dSJohn Johansen seq_printf(seq, "%d\n", labels_ns(label)->level); 1184637f688dSJohn Johansen end_current_label_crit_section(label); 1185a71ada30SJohn Johansen 1186a71ada30SJohn Johansen return 0; 1187a71ada30SJohn Johansen } 1188a71ada30SJohn Johansen 118964c86970SJohn Johansen static int seq_ns_name_show(struct seq_file *seq, void *v) 11903e3e5695SJohn Johansen { 1191637f688dSJohn Johansen struct aa_label *label = begin_current_label_crit_section(); 1192040d9e2bSJohn Johansen seq_printf(seq, "%s\n", labels_ns(label)->base.name); 1193637f688dSJohn Johansen end_current_label_crit_section(label); 11943e3e5695SJohn Johansen 11953e3e5695SJohn Johansen return 0; 11963e3e5695SJohn Johansen } 11973e3e5695SJohn Johansen 119840cde7fcSJohn Johansen SEQ_NS_FOPS(stacked); 119940cde7fcSJohn Johansen SEQ_NS_FOPS(nsstacked); 120064c86970SJohn Johansen SEQ_NS_FOPS(level); 120164c86970SJohn Johansen SEQ_NS_FOPS(name); 12023e3e5695SJohn Johansen 12035d5182caSJohn Johansen 12045d5182caSJohn Johansen /* policy/raw_data/ * file ops */ 12055d5182caSJohn Johansen 12065d5182caSJohn Johansen #define SEQ_RAWDATA_FOPS(NAME) \ 12075d5182caSJohn Johansen static int seq_rawdata_ ##NAME ##_open(struct inode *inode, struct file *file)\ 12085d5182caSJohn Johansen { \ 12095d5182caSJohn Johansen return seq_rawdata_open(inode, file, seq_rawdata_ ##NAME ##_show); \ 12105d5182caSJohn Johansen } \ 12115d5182caSJohn Johansen \ 12125d5182caSJohn Johansen static const struct file_operations seq_rawdata_ ##NAME ##_fops = { \ 12135d5182caSJohn Johansen .owner = THIS_MODULE, \ 12145d5182caSJohn Johansen .open = seq_rawdata_ ##NAME ##_open, \ 12155d5182caSJohn Johansen .read = seq_read, \ 12165d5182caSJohn Johansen .llseek = seq_lseek, \ 12175d5182caSJohn Johansen .release = seq_rawdata_release, \ 12185d5182caSJohn Johansen } \ 12195d5182caSJohn Johansen 12205d5182caSJohn Johansen static int seq_rawdata_open(struct inode *inode, struct file *file, 12215d5182caSJohn Johansen int (*show)(struct seq_file *, void *)) 12225ac8c355SJohn Johansen { 12235d5182caSJohn Johansen struct aa_loaddata *data = __aa_get_loaddata(inode->i_private); 12245d5182caSJohn Johansen int error; 12255d5182caSJohn Johansen 12265d5182caSJohn Johansen if (!data) 12275d5182caSJohn Johansen /* lost race this ent is being reaped */ 12285d5182caSJohn Johansen return -ENOENT; 12295d5182caSJohn Johansen 12305d5182caSJohn Johansen error = single_open(file, show, data); 12315d5182caSJohn Johansen if (error) { 12325d5182caSJohn Johansen AA_BUG(file->private_data && 12335d5182caSJohn Johansen ((struct seq_file *)file->private_data)->private); 12345d5182caSJohn Johansen aa_put_loaddata(data); 12355d5182caSJohn Johansen } 12365d5182caSJohn Johansen 12375d5182caSJohn Johansen return error; 12385d5182caSJohn Johansen } 12395d5182caSJohn Johansen 12405d5182caSJohn Johansen static int seq_rawdata_release(struct inode *inode, struct file *file) 12415d5182caSJohn Johansen { 12425d5182caSJohn Johansen struct seq_file *seq = (struct seq_file *) file->private_data; 12435d5182caSJohn Johansen 12445d5182caSJohn Johansen if (seq) 12455d5182caSJohn Johansen aa_put_loaddata(seq->private); 12465d5182caSJohn Johansen 12475d5182caSJohn Johansen return single_release(inode, file); 12485d5182caSJohn Johansen } 12495d5182caSJohn Johansen 12505d5182caSJohn Johansen static int seq_rawdata_abi_show(struct seq_file *seq, void *v) 12515d5182caSJohn Johansen { 12525d5182caSJohn Johansen struct aa_loaddata *data = seq->private; 12535d5182caSJohn Johansen 12545d5182caSJohn Johansen seq_printf(seq, "v%d\n", data->abi); 12555ac8c355SJohn Johansen 12565ac8c355SJohn Johansen return 0; 12575ac8c355SJohn Johansen } 12585ac8c355SJohn Johansen 12595d5182caSJohn Johansen static int seq_rawdata_revision_show(struct seq_file *seq, void *v) 12605ac8c355SJohn Johansen { 12615d5182caSJohn Johansen struct aa_loaddata *data = seq->private; 12625ac8c355SJohn Johansen 12635d5182caSJohn Johansen seq_printf(seq, "%ld\n", data->revision); 12645ac8c355SJohn Johansen 12655ac8c355SJohn Johansen return 0; 12665ac8c355SJohn Johansen } 12675ac8c355SJohn Johansen 12685d5182caSJohn Johansen static int seq_rawdata_hash_show(struct seq_file *seq, void *v) 12695ac8c355SJohn Johansen { 12705d5182caSJohn Johansen struct aa_loaddata *data = seq->private; 12715ac8c355SJohn Johansen unsigned int i, size = aa_hash_size(); 12725ac8c355SJohn Johansen 12735d5182caSJohn Johansen if (data->hash) { 12745ac8c355SJohn Johansen for (i = 0; i < size; i++) 12755d5182caSJohn Johansen seq_printf(seq, "%.2x", data->hash[i]); 127647dbd1cdSMarkus Elfring seq_putc(seq, '\n'); 12775ac8c355SJohn Johansen } 12785ac8c355SJohn Johansen 12795ac8c355SJohn Johansen return 0; 12805ac8c355SJohn Johansen } 12815ac8c355SJohn Johansen 128263c16c3aSChris Coulson static int seq_rawdata_compressed_size_show(struct seq_file *seq, void *v) 128363c16c3aSChris Coulson { 128463c16c3aSChris Coulson struct aa_loaddata *data = seq->private; 128563c16c3aSChris Coulson 128663c16c3aSChris Coulson seq_printf(seq, "%zu\n", data->compressed_size); 128763c16c3aSChris Coulson 128863c16c3aSChris Coulson return 0; 128963c16c3aSChris Coulson } 129063c16c3aSChris Coulson 12915d5182caSJohn Johansen SEQ_RAWDATA_FOPS(abi); 12925d5182caSJohn Johansen SEQ_RAWDATA_FOPS(revision); 12935d5182caSJohn Johansen SEQ_RAWDATA_FOPS(hash); 129463c16c3aSChris Coulson SEQ_RAWDATA_FOPS(compressed_size); 129563c16c3aSChris Coulson 129663c16c3aSChris Coulson static int deflate_decompress(char *src, size_t slen, char *dst, size_t dlen) 129763c16c3aSChris Coulson { 129863c16c3aSChris Coulson int error; 129963c16c3aSChris Coulson struct z_stream_s strm; 130063c16c3aSChris Coulson 130163c16c3aSChris Coulson if (aa_g_rawdata_compression_level == 0) { 130263c16c3aSChris Coulson if (dlen < slen) 130363c16c3aSChris Coulson return -EINVAL; 130463c16c3aSChris Coulson memcpy(dst, src, slen); 130563c16c3aSChris Coulson return 0; 130663c16c3aSChris Coulson } 130763c16c3aSChris Coulson 130863c16c3aSChris Coulson memset(&strm, 0, sizeof(strm)); 130963c16c3aSChris Coulson 131063c16c3aSChris Coulson strm.workspace = kvzalloc(zlib_inflate_workspacesize(), GFP_KERNEL); 131163c16c3aSChris Coulson if (!strm.workspace) 131263c16c3aSChris Coulson return -ENOMEM; 131363c16c3aSChris Coulson 131463c16c3aSChris Coulson strm.next_in = src; 131563c16c3aSChris Coulson strm.avail_in = slen; 131663c16c3aSChris Coulson 131763c16c3aSChris Coulson error = zlib_inflateInit(&strm); 131863c16c3aSChris Coulson if (error != Z_OK) { 131963c16c3aSChris Coulson error = -ENOMEM; 132063c16c3aSChris Coulson goto fail_inflate_init; 132163c16c3aSChris Coulson } 132263c16c3aSChris Coulson 132363c16c3aSChris Coulson strm.next_out = dst; 132463c16c3aSChris Coulson strm.avail_out = dlen; 132563c16c3aSChris Coulson 132663c16c3aSChris Coulson error = zlib_inflate(&strm, Z_FINISH); 132763c16c3aSChris Coulson if (error != Z_STREAM_END) 132863c16c3aSChris Coulson error = -EINVAL; 132963c16c3aSChris Coulson else 133063c16c3aSChris Coulson error = 0; 133163c16c3aSChris Coulson 133263c16c3aSChris Coulson zlib_inflateEnd(&strm); 133363c16c3aSChris Coulson fail_inflate_init: 133463c16c3aSChris Coulson kvfree(strm.workspace); 133563c16c3aSChris Coulson return error; 133663c16c3aSChris Coulson } 13375ac8c355SJohn Johansen 13385ac8c355SJohn Johansen static ssize_t rawdata_read(struct file *file, char __user *buf, size_t size, 13395ac8c355SJohn Johansen loff_t *ppos) 13405ac8c355SJohn Johansen { 134163c16c3aSChris Coulson struct rawdata_f_data *private = file->private_data; 13425ac8c355SJohn Johansen 134363c16c3aSChris Coulson return simple_read_from_buffer(buf, size, ppos, 134463c16c3aSChris Coulson RAWDATA_F_DATA_BUF(private), 134563c16c3aSChris Coulson private->loaddata->size); 13465ac8c355SJohn Johansen } 13475ac8c355SJohn Johansen 13485d5182caSJohn Johansen static int rawdata_release(struct inode *inode, struct file *file) 13495ac8c355SJohn Johansen { 135063c16c3aSChris Coulson rawdata_f_data_free(file->private_data); 13515ac8c355SJohn Johansen 13525ac8c355SJohn Johansen return 0; 13535ac8c355SJohn Johansen } 13545ac8c355SJohn Johansen 13555d5182caSJohn Johansen static int rawdata_open(struct inode *inode, struct file *file) 13565d5182caSJohn Johansen { 135763c16c3aSChris Coulson int error; 135863c16c3aSChris Coulson struct aa_loaddata *loaddata; 135963c16c3aSChris Coulson struct rawdata_f_data *private; 136063c16c3aSChris Coulson 13615d5182caSJohn Johansen if (!policy_view_capable(NULL)) 13625d5182caSJohn Johansen return -EACCES; 136363c16c3aSChris Coulson 136463c16c3aSChris Coulson loaddata = __aa_get_loaddata(inode->i_private); 136563c16c3aSChris Coulson if (!loaddata) 13665d5182caSJohn Johansen /* lost race: this entry is being reaped */ 13675d5182caSJohn Johansen return -ENOENT; 13685d5182caSJohn Johansen 136963c16c3aSChris Coulson private = rawdata_f_data_alloc(loaddata->size); 137063c16c3aSChris Coulson if (IS_ERR(private)) { 137163c16c3aSChris Coulson error = PTR_ERR(private); 137263c16c3aSChris Coulson goto fail_private_alloc; 137363c16c3aSChris Coulson } 137463c16c3aSChris Coulson 137563c16c3aSChris Coulson private->loaddata = loaddata; 137663c16c3aSChris Coulson 137763c16c3aSChris Coulson error = deflate_decompress(loaddata->data, loaddata->compressed_size, 137863c16c3aSChris Coulson RAWDATA_F_DATA_BUF(private), 137963c16c3aSChris Coulson loaddata->size); 138063c16c3aSChris Coulson if (error) 138163c16c3aSChris Coulson goto fail_decompress; 138263c16c3aSChris Coulson 138363c16c3aSChris Coulson file->private_data = private; 13845d5182caSJohn Johansen return 0; 138563c16c3aSChris Coulson 138663c16c3aSChris Coulson fail_decompress: 138763c16c3aSChris Coulson rawdata_f_data_free(private); 138863c16c3aSChris Coulson return error; 138963c16c3aSChris Coulson 139063c16c3aSChris Coulson fail_private_alloc: 139163c16c3aSChris Coulson aa_put_loaddata(loaddata); 139263c16c3aSChris Coulson return error; 13935d5182caSJohn Johansen } 13945d5182caSJohn Johansen 13955d5182caSJohn Johansen static const struct file_operations rawdata_fops = { 13965ac8c355SJohn Johansen .open = rawdata_open, 13975ac8c355SJohn Johansen .read = rawdata_read, 13985ac8c355SJohn Johansen .llseek = generic_file_llseek, 13995ac8c355SJohn Johansen .release = rawdata_release, 14005ac8c355SJohn Johansen }; 14015ac8c355SJohn Johansen 14025d5182caSJohn Johansen static void remove_rawdata_dents(struct aa_loaddata *rawdata) 14035d5182caSJohn Johansen { 14045d5182caSJohn Johansen int i; 14055d5182caSJohn Johansen 14065d5182caSJohn Johansen for (i = 0; i < AAFS_LOADDATA_NDENTS; i++) { 14075d5182caSJohn Johansen if (!IS_ERR_OR_NULL(rawdata->dents[i])) { 14085d5182caSJohn Johansen /* no refcounts on i_private */ 1409c961ee5fSJohn Johansen aafs_remove(rawdata->dents[i]); 14105d5182caSJohn Johansen rawdata->dents[i] = NULL; 14115d5182caSJohn Johansen } 14125d5182caSJohn Johansen } 14135d5182caSJohn Johansen } 14145d5182caSJohn Johansen 14155d5182caSJohn Johansen void __aa_fs_remove_rawdata(struct aa_loaddata *rawdata) 14165d5182caSJohn Johansen { 14175d5182caSJohn Johansen AA_BUG(rawdata->ns && !mutex_is_locked(&rawdata->ns->lock)); 14185d5182caSJohn Johansen 14195d5182caSJohn Johansen if (rawdata->ns) { 14205d5182caSJohn Johansen remove_rawdata_dents(rawdata); 14215d5182caSJohn Johansen list_del_init(&rawdata->list); 14225d5182caSJohn Johansen aa_put_ns(rawdata->ns); 14235d5182caSJohn Johansen rawdata->ns = NULL; 14245d5182caSJohn Johansen } 14255d5182caSJohn Johansen } 14265d5182caSJohn Johansen 14275d5182caSJohn Johansen int __aa_fs_create_rawdata(struct aa_ns *ns, struct aa_loaddata *rawdata) 14285d5182caSJohn Johansen { 14295d5182caSJohn Johansen struct dentry *dent, *dir; 14305d5182caSJohn Johansen 14315d5182caSJohn Johansen AA_BUG(!ns); 14325d5182caSJohn Johansen AA_BUG(!rawdata); 14335d5182caSJohn Johansen AA_BUG(!mutex_is_locked(&ns->lock)); 14345d5182caSJohn Johansen AA_BUG(!ns_subdata_dir(ns)); 14355d5182caSJohn Johansen 14365d5182caSJohn Johansen /* 14375d5182caSJohn Johansen * just use ns revision dir was originally created at. This is 14385d5182caSJohn Johansen * under ns->lock and if load is successful revision will be 14395d5182caSJohn Johansen * bumped and is guaranteed to be unique 14405d5182caSJohn Johansen */ 14415d5182caSJohn Johansen rawdata->name = kasprintf(GFP_KERNEL, "%ld", ns->revision); 14425d5182caSJohn Johansen if (!rawdata->name) 14435d5182caSJohn Johansen return -ENOMEM; 14445d5182caSJohn Johansen 1445c961ee5fSJohn Johansen dir = aafs_create_dir(rawdata->name, ns_subdata_dir(ns)); 14465d5182caSJohn Johansen if (IS_ERR(dir)) 14475d5182caSJohn Johansen /* ->name freed when rawdata freed */ 14485d5182caSJohn Johansen return PTR_ERR(dir); 14495d5182caSJohn Johansen rawdata->dents[AAFS_LOADDATA_DIR] = dir; 14505d5182caSJohn Johansen 1451c961ee5fSJohn Johansen dent = aafs_create_file("abi", S_IFREG | 0444, dir, rawdata, 14525d5182caSJohn Johansen &seq_rawdata_abi_fops); 14535d5182caSJohn Johansen if (IS_ERR(dent)) 14545d5182caSJohn Johansen goto fail; 14555d5182caSJohn Johansen rawdata->dents[AAFS_LOADDATA_ABI] = dent; 14565d5182caSJohn Johansen 1457c961ee5fSJohn Johansen dent = aafs_create_file("revision", S_IFREG | 0444, dir, rawdata, 14585d5182caSJohn Johansen &seq_rawdata_revision_fops); 14595d5182caSJohn Johansen if (IS_ERR(dent)) 14605d5182caSJohn Johansen goto fail; 14615d5182caSJohn Johansen rawdata->dents[AAFS_LOADDATA_REVISION] = dent; 14625d5182caSJohn Johansen 14635d5182caSJohn Johansen if (aa_g_hash_policy) { 1464c961ee5fSJohn Johansen dent = aafs_create_file("sha1", S_IFREG | 0444, dir, 14655d5182caSJohn Johansen rawdata, &seq_rawdata_hash_fops); 14665d5182caSJohn Johansen if (IS_ERR(dent)) 14675d5182caSJohn Johansen goto fail; 14685d5182caSJohn Johansen rawdata->dents[AAFS_LOADDATA_HASH] = dent; 14695d5182caSJohn Johansen } 14705d5182caSJohn Johansen 147163c16c3aSChris Coulson dent = aafs_create_file("compressed_size", S_IFREG | 0444, dir, 147263c16c3aSChris Coulson rawdata, 147363c16c3aSChris Coulson &seq_rawdata_compressed_size_fops); 147463c16c3aSChris Coulson if (IS_ERR(dent)) 147563c16c3aSChris Coulson goto fail; 147663c16c3aSChris Coulson rawdata->dents[AAFS_LOADDATA_COMPRESSED_SIZE] = dent; 147763c16c3aSChris Coulson 1478c961ee5fSJohn Johansen dent = aafs_create_file("raw_data", S_IFREG | 0444, 14795d5182caSJohn Johansen dir, rawdata, &rawdata_fops); 14805d5182caSJohn Johansen if (IS_ERR(dent)) 14815d5182caSJohn Johansen goto fail; 14825d5182caSJohn Johansen rawdata->dents[AAFS_LOADDATA_DATA] = dent; 14835d5182caSJohn Johansen d_inode(dent)->i_size = rawdata->size; 14845d5182caSJohn Johansen 14855d5182caSJohn Johansen rawdata->ns = aa_get_ns(ns); 14865d5182caSJohn Johansen list_add(&rawdata->list, &ns->rawdata_list); 14875d5182caSJohn Johansen /* no refcount on inode rawdata */ 14885d5182caSJohn Johansen 14895d5182caSJohn Johansen return 0; 14905d5182caSJohn Johansen 14915d5182caSJohn Johansen fail: 14925d5182caSJohn Johansen remove_rawdata_dents(rawdata); 14935d5182caSJohn Johansen 14945d5182caSJohn Johansen return PTR_ERR(dent); 14955d5182caSJohn Johansen } 14965d5182caSJohn Johansen 14970d259f04SJohn Johansen /** fns to setup dynamic per profile/namespace files **/ 1498c97204baSJohn Johansen 1499c97204baSJohn Johansen /** 1500c97204baSJohn Johansen * 1501c97204baSJohn Johansen * Requires: @profile->ns->lock held 1502c97204baSJohn Johansen */ 1503c97204baSJohn Johansen void __aafs_profile_rmdir(struct aa_profile *profile) 15040d259f04SJohn Johansen { 15050d259f04SJohn Johansen struct aa_profile *child; 15060d259f04SJohn Johansen int i; 15070d259f04SJohn Johansen 15080d259f04SJohn Johansen if (!profile) 15090d259f04SJohn Johansen return; 15100d259f04SJohn Johansen 15110d259f04SJohn Johansen list_for_each_entry(child, &profile->base.profiles, base.list) 1512c97204baSJohn Johansen __aafs_profile_rmdir(child); 15130d259f04SJohn Johansen 15140d259f04SJohn Johansen for (i = AAFS_PROF_SIZEOF - 1; i >= 0; --i) { 15158399588aSJohn Johansen struct aa_proxy *proxy; 15160d259f04SJohn Johansen if (!profile->dents[i]) 15170d259f04SJohn Johansen continue; 15180d259f04SJohn Johansen 15198399588aSJohn Johansen proxy = d_inode(profile->dents[i])->i_private; 1520c961ee5fSJohn Johansen aafs_remove(profile->dents[i]); 15218399588aSJohn Johansen aa_put_proxy(proxy); 15220d259f04SJohn Johansen profile->dents[i] = NULL; 15230d259f04SJohn Johansen } 15240d259f04SJohn Johansen } 15250d259f04SJohn Johansen 1526c97204baSJohn Johansen /** 1527c97204baSJohn Johansen * 1528c97204baSJohn Johansen * Requires: @old->ns->lock held 1529c97204baSJohn Johansen */ 1530c97204baSJohn Johansen void __aafs_profile_migrate_dents(struct aa_profile *old, 15310d259f04SJohn Johansen struct aa_profile *new) 15320d259f04SJohn Johansen { 15330d259f04SJohn Johansen int i; 15340d259f04SJohn Johansen 1535cbf2d0e1SJohn Johansen AA_BUG(!old); 1536cbf2d0e1SJohn Johansen AA_BUG(!new); 1537cbf2d0e1SJohn Johansen AA_BUG(!mutex_is_locked(&profiles_ns(old)->lock)); 1538cbf2d0e1SJohn Johansen 15390d259f04SJohn Johansen for (i = 0; i < AAFS_PROF_SIZEOF; i++) { 15400d259f04SJohn Johansen new->dents[i] = old->dents[i]; 1541d671e890SJohn Johansen if (new->dents[i]) 1542078cd827SDeepa Dinamani new->dents[i]->d_inode->i_mtime = current_time(new->dents[i]->d_inode); 15430d259f04SJohn Johansen old->dents[i] = NULL; 15440d259f04SJohn Johansen } 15450d259f04SJohn Johansen } 15460d259f04SJohn Johansen 15470d259f04SJohn Johansen static struct dentry *create_profile_file(struct dentry *dir, const char *name, 15480d259f04SJohn Johansen struct aa_profile *profile, 15490d259f04SJohn Johansen const struct file_operations *fops) 15500d259f04SJohn Johansen { 1551637f688dSJohn Johansen struct aa_proxy *proxy = aa_get_proxy(profile->label.proxy); 15520d259f04SJohn Johansen struct dentry *dent; 15530d259f04SJohn Johansen 1554c961ee5fSJohn Johansen dent = aafs_create_file(name, S_IFREG | 0444, dir, proxy, fops); 15550d259f04SJohn Johansen if (IS_ERR(dent)) 15568399588aSJohn Johansen aa_put_proxy(proxy); 15570d259f04SJohn Johansen 15580d259f04SJohn Johansen return dent; 15590d259f04SJohn Johansen } 15600d259f04SJohn Johansen 15615d5182caSJohn Johansen static int profile_depth(struct aa_profile *profile) 15625d5182caSJohn Johansen { 15635d5182caSJohn Johansen int depth = 0; 15645d5182caSJohn Johansen 15655d5182caSJohn Johansen rcu_read_lock(); 15665d5182caSJohn Johansen for (depth = 0; profile; profile = rcu_access_pointer(profile->parent)) 15675d5182caSJohn Johansen depth++; 15685d5182caSJohn Johansen rcu_read_unlock(); 15695d5182caSJohn Johansen 15705d5182caSJohn Johansen return depth; 15715d5182caSJohn Johansen } 15725d5182caSJohn Johansen 15731180b4c7SJohn Johansen static char *gen_symlink_name(int depth, const char *dirname, const char *fname) 15745d5182caSJohn Johansen { 15751180b4c7SJohn Johansen char *buffer, *s; 15765d5182caSJohn Johansen int error; 15771180b4c7SJohn Johansen int size = depth * 6 + strlen(dirname) + strlen(fname) + 11; 15781180b4c7SJohn Johansen 15791180b4c7SJohn Johansen s = buffer = kmalloc(size, GFP_KERNEL); 15801180b4c7SJohn Johansen if (!buffer) 15811180b4c7SJohn Johansen return ERR_PTR(-ENOMEM); 15825d5182caSJohn Johansen 15835d5182caSJohn Johansen for (; depth > 0; depth--) { 15841180b4c7SJohn Johansen strcpy(s, "../../"); 15851180b4c7SJohn Johansen s += 6; 15861180b4c7SJohn Johansen size -= 6; 15875d5182caSJohn Johansen } 15885d5182caSJohn Johansen 15891180b4c7SJohn Johansen error = snprintf(s, size, "raw_data/%s/%s", dirname, fname); 1590588558ebSColin Ian King if (error >= size || error < 0) { 1591588558ebSColin Ian King kfree(buffer); 15921180b4c7SJohn Johansen return ERR_PTR(-ENAMETOOLONG); 15935d5182caSJohn Johansen } 15945d5182caSJohn Johansen 15951180b4c7SJohn Johansen return buffer; 15965d5182caSJohn Johansen } 15975d5182caSJohn Johansen 15981180b4c7SJohn Johansen static void rawdata_link_cb(void *arg) 15991180b4c7SJohn Johansen { 16001180b4c7SJohn Johansen kfree(arg); 16011180b4c7SJohn Johansen } 16021180b4c7SJohn Johansen 16031180b4c7SJohn Johansen static const char *rawdata_get_link_base(struct dentry *dentry, 16041180b4c7SJohn Johansen struct inode *inode, 16051180b4c7SJohn Johansen struct delayed_call *done, 16061180b4c7SJohn Johansen const char *name) 16071180b4c7SJohn Johansen { 16081180b4c7SJohn Johansen struct aa_proxy *proxy = inode->i_private; 16091180b4c7SJohn Johansen struct aa_label *label; 16101180b4c7SJohn Johansen struct aa_profile *profile; 16111180b4c7SJohn Johansen char *target; 16121180b4c7SJohn Johansen int depth; 16131180b4c7SJohn Johansen 16141180b4c7SJohn Johansen if (!dentry) 16151180b4c7SJohn Johansen return ERR_PTR(-ECHILD); 16161180b4c7SJohn Johansen 16171180b4c7SJohn Johansen label = aa_get_label_rcu(&proxy->label); 16181180b4c7SJohn Johansen profile = labels_profile(label); 16191180b4c7SJohn Johansen depth = profile_depth(profile); 16201180b4c7SJohn Johansen target = gen_symlink_name(depth, profile->rawdata->name, name); 16211180b4c7SJohn Johansen aa_put_label(label); 16221180b4c7SJohn Johansen 16231180b4c7SJohn Johansen if (IS_ERR(target)) 16241180b4c7SJohn Johansen return target; 16251180b4c7SJohn Johansen 16261180b4c7SJohn Johansen set_delayed_call(done, rawdata_link_cb, target); 16271180b4c7SJohn Johansen 16281180b4c7SJohn Johansen return target; 16291180b4c7SJohn Johansen } 16301180b4c7SJohn Johansen 16311180b4c7SJohn Johansen static const char *rawdata_get_link_sha1(struct dentry *dentry, 16321180b4c7SJohn Johansen struct inode *inode, 16331180b4c7SJohn Johansen struct delayed_call *done) 16341180b4c7SJohn Johansen { 16351180b4c7SJohn Johansen return rawdata_get_link_base(dentry, inode, done, "sha1"); 16361180b4c7SJohn Johansen } 16371180b4c7SJohn Johansen 16381180b4c7SJohn Johansen static const char *rawdata_get_link_abi(struct dentry *dentry, 16391180b4c7SJohn Johansen struct inode *inode, 16401180b4c7SJohn Johansen struct delayed_call *done) 16411180b4c7SJohn Johansen { 16421180b4c7SJohn Johansen return rawdata_get_link_base(dentry, inode, done, "abi"); 16431180b4c7SJohn Johansen } 16441180b4c7SJohn Johansen 16451180b4c7SJohn Johansen static const char *rawdata_get_link_data(struct dentry *dentry, 16461180b4c7SJohn Johansen struct inode *inode, 16471180b4c7SJohn Johansen struct delayed_call *done) 16481180b4c7SJohn Johansen { 16491180b4c7SJohn Johansen return rawdata_get_link_base(dentry, inode, done, "raw_data"); 16501180b4c7SJohn Johansen } 16511180b4c7SJohn Johansen 16521180b4c7SJohn Johansen static const struct inode_operations rawdata_link_sha1_iops = { 16531180b4c7SJohn Johansen .get_link = rawdata_get_link_sha1, 16541180b4c7SJohn Johansen }; 16551180b4c7SJohn Johansen 16561180b4c7SJohn Johansen static const struct inode_operations rawdata_link_abi_iops = { 16571180b4c7SJohn Johansen .get_link = rawdata_get_link_abi, 16581180b4c7SJohn Johansen }; 16591180b4c7SJohn Johansen static const struct inode_operations rawdata_link_data_iops = { 16601180b4c7SJohn Johansen .get_link = rawdata_get_link_data, 16611180b4c7SJohn Johansen }; 16621180b4c7SJohn Johansen 16631180b4c7SJohn Johansen 16645d5182caSJohn Johansen /* 16655d5182caSJohn Johansen * Requires: @profile->ns->lock held 16665d5182caSJohn Johansen */ 1667c97204baSJohn Johansen int __aafs_profile_mkdir(struct aa_profile *profile, struct dentry *parent) 16680d259f04SJohn Johansen { 16690d259f04SJohn Johansen struct aa_profile *child; 16700d259f04SJohn Johansen struct dentry *dent = NULL, *dir; 16710d259f04SJohn Johansen int error; 16720d259f04SJohn Johansen 1673cbf2d0e1SJohn Johansen AA_BUG(!profile); 1674cbf2d0e1SJohn Johansen AA_BUG(!mutex_is_locked(&profiles_ns(profile)->lock)); 1675cbf2d0e1SJohn Johansen 16760d259f04SJohn Johansen if (!parent) { 16770d259f04SJohn Johansen struct aa_profile *p; 16780d259f04SJohn Johansen p = aa_deref_parent(profile); 16790d259f04SJohn Johansen dent = prof_dir(p); 16800d259f04SJohn Johansen /* adding to parent that previously didn't have children */ 1681c961ee5fSJohn Johansen dent = aafs_create_dir("profiles", dent); 16820d259f04SJohn Johansen if (IS_ERR(dent)) 16830d259f04SJohn Johansen goto fail; 16840d259f04SJohn Johansen prof_child_dir(p) = parent = dent; 16850d259f04SJohn Johansen } 16860d259f04SJohn Johansen 16870d259f04SJohn Johansen if (!profile->dirname) { 16880d259f04SJohn Johansen int len, id_len; 16890d259f04SJohn Johansen len = mangle_name(profile->base.name, NULL); 16900d259f04SJohn Johansen id_len = snprintf(NULL, 0, ".%ld", profile->ns->uniq_id); 16910d259f04SJohn Johansen 16920d259f04SJohn Johansen profile->dirname = kmalloc(len + id_len + 1, GFP_KERNEL); 1693ffac1de6SDan Carpenter if (!profile->dirname) { 1694ffac1de6SDan Carpenter error = -ENOMEM; 1695ffac1de6SDan Carpenter goto fail2; 1696ffac1de6SDan Carpenter } 16970d259f04SJohn Johansen 16980d259f04SJohn Johansen mangle_name(profile->base.name, profile->dirname); 16990d259f04SJohn Johansen sprintf(profile->dirname + len, ".%ld", profile->ns->uniq_id++); 17000d259f04SJohn Johansen } 17010d259f04SJohn Johansen 1702c961ee5fSJohn Johansen dent = aafs_create_dir(profile->dirname, parent); 17030d259f04SJohn Johansen if (IS_ERR(dent)) 17040d259f04SJohn Johansen goto fail; 17050d259f04SJohn Johansen prof_dir(profile) = dir = dent; 17060d259f04SJohn Johansen 170752b97de3SJohn Johansen dent = create_profile_file(dir, "name", profile, 170852b97de3SJohn Johansen &seq_profile_name_fops); 17090d259f04SJohn Johansen if (IS_ERR(dent)) 17100d259f04SJohn Johansen goto fail; 17110d259f04SJohn Johansen profile->dents[AAFS_PROF_NAME] = dent; 17120d259f04SJohn Johansen 171352b97de3SJohn Johansen dent = create_profile_file(dir, "mode", profile, 171452b97de3SJohn Johansen &seq_profile_mode_fops); 17150d259f04SJohn Johansen if (IS_ERR(dent)) 17160d259f04SJohn Johansen goto fail; 17170d259f04SJohn Johansen profile->dents[AAFS_PROF_MODE] = dent; 17180d259f04SJohn Johansen 1719556d0be7SJohn Johansen dent = create_profile_file(dir, "attach", profile, 172052b97de3SJohn Johansen &seq_profile_attach_fops); 1721556d0be7SJohn Johansen if (IS_ERR(dent)) 1722556d0be7SJohn Johansen goto fail; 1723556d0be7SJohn Johansen profile->dents[AAFS_PROF_ATTACH] = dent; 1724556d0be7SJohn Johansen 1725f8eb8a13SJohn Johansen if (profile->hash) { 1726f8eb8a13SJohn Johansen dent = create_profile_file(dir, "sha1", profile, 172752b97de3SJohn Johansen &seq_profile_hash_fops); 1728f8eb8a13SJohn Johansen if (IS_ERR(dent)) 1729f8eb8a13SJohn Johansen goto fail; 1730f8eb8a13SJohn Johansen profile->dents[AAFS_PROF_HASH] = dent; 1731f8eb8a13SJohn Johansen } 1732f8eb8a13SJohn Johansen 17335ac8c355SJohn Johansen if (profile->rawdata) { 1734a68d59ffSJohn Johansen dent = aafs_create("raw_sha1", S_IFLNK | 0444, dir, 1735a68d59ffSJohn Johansen profile->label.proxy, NULL, NULL, 17361180b4c7SJohn Johansen &rawdata_link_sha1_iops); 17375ac8c355SJohn Johansen if (IS_ERR(dent)) 17385ac8c355SJohn Johansen goto fail; 17391180b4c7SJohn Johansen aa_get_proxy(profile->label.proxy); 17405ac8c355SJohn Johansen profile->dents[AAFS_PROF_RAW_HASH] = dent; 17415ac8c355SJohn Johansen 1742a68d59ffSJohn Johansen dent = aafs_create("raw_abi", S_IFLNK | 0444, dir, 1743a68d59ffSJohn Johansen profile->label.proxy, NULL, NULL, 17441180b4c7SJohn Johansen &rawdata_link_abi_iops); 17455ac8c355SJohn Johansen if (IS_ERR(dent)) 17465ac8c355SJohn Johansen goto fail; 17471180b4c7SJohn Johansen aa_get_proxy(profile->label.proxy); 17485ac8c355SJohn Johansen profile->dents[AAFS_PROF_RAW_ABI] = dent; 17495ac8c355SJohn Johansen 1750a68d59ffSJohn Johansen dent = aafs_create("raw_data", S_IFLNK | 0444, dir, 1751a68d59ffSJohn Johansen profile->label.proxy, NULL, NULL, 17521180b4c7SJohn Johansen &rawdata_link_data_iops); 17535ac8c355SJohn Johansen if (IS_ERR(dent)) 17545ac8c355SJohn Johansen goto fail; 17551180b4c7SJohn Johansen aa_get_proxy(profile->label.proxy); 17565ac8c355SJohn Johansen profile->dents[AAFS_PROF_RAW_DATA] = dent; 17575ac8c355SJohn Johansen } 17585ac8c355SJohn Johansen 17590d259f04SJohn Johansen list_for_each_entry(child, &profile->base.profiles, base.list) { 1760c97204baSJohn Johansen error = __aafs_profile_mkdir(child, prof_child_dir(profile)); 17610d259f04SJohn Johansen if (error) 17620d259f04SJohn Johansen goto fail2; 17630d259f04SJohn Johansen } 17640d259f04SJohn Johansen 17650d259f04SJohn Johansen return 0; 17660d259f04SJohn Johansen 17670d259f04SJohn Johansen fail: 17680d259f04SJohn Johansen error = PTR_ERR(dent); 17690d259f04SJohn Johansen 17700d259f04SJohn Johansen fail2: 1771c97204baSJohn Johansen __aafs_profile_rmdir(profile); 17720d259f04SJohn Johansen 17730d259f04SJohn Johansen return error; 17740d259f04SJohn Johansen } 17750d259f04SJohn Johansen 1776*549c7297SChristian Brauner static int ns_mkdir_op(struct user_namespace *mnt_userns, struct inode *dir, 1777*549c7297SChristian Brauner struct dentry *dentry, umode_t mode) 17784ae47f33SJohn Johansen { 17794ae47f33SJohn Johansen struct aa_ns *ns, *parent; 17804ae47f33SJohn Johansen /* TODO: improve permission check */ 1781637f688dSJohn Johansen struct aa_label *label; 1782637f688dSJohn Johansen int error; 1783637f688dSJohn Johansen 1784637f688dSJohn Johansen label = begin_current_label_crit_section(); 1785637f688dSJohn Johansen error = aa_may_manage_policy(label, NULL, AA_MAY_LOAD_POLICY); 1786637f688dSJohn Johansen end_current_label_crit_section(label); 17874ae47f33SJohn Johansen if (error) 17884ae47f33SJohn Johansen return error; 17894ae47f33SJohn Johansen 17904ae47f33SJohn Johansen parent = aa_get_ns(dir->i_private); 17914ae47f33SJohn Johansen AA_BUG(d_inode(ns_subns_dir(parent)) != dir); 17924ae47f33SJohn Johansen 17934ae47f33SJohn Johansen /* we have to unlock and then relock to get locking order right 17944ae47f33SJohn Johansen * for pin_fs 17954ae47f33SJohn Johansen */ 17964ae47f33SJohn Johansen inode_unlock(dir); 17974ae47f33SJohn Johansen error = simple_pin_fs(&aafs_ops, &aafs_mnt, &aafs_count); 1798feb3c766SJohn Johansen mutex_lock_nested(&parent->lock, parent->level); 17994ae47f33SJohn Johansen inode_lock_nested(dir, I_MUTEX_PARENT); 18004ae47f33SJohn Johansen if (error) 18014ae47f33SJohn Johansen goto out; 18024ae47f33SJohn Johansen 18034ae47f33SJohn Johansen error = __aafs_setup_d_inode(dir, dentry, mode | S_IFDIR, NULL, 18044ae47f33SJohn Johansen NULL, NULL, NULL); 18054ae47f33SJohn Johansen if (error) 18064ae47f33SJohn Johansen goto out_pin; 18074ae47f33SJohn Johansen 18084ae47f33SJohn Johansen ns = __aa_find_or_create_ns(parent, READ_ONCE(dentry->d_name.name), 18094ae47f33SJohn Johansen dentry); 18104ae47f33SJohn Johansen if (IS_ERR(ns)) { 18114ae47f33SJohn Johansen error = PTR_ERR(ns); 18124ae47f33SJohn Johansen ns = NULL; 18134ae47f33SJohn Johansen } 18144ae47f33SJohn Johansen 18154ae47f33SJohn Johansen aa_put_ns(ns); /* list ref remains */ 18164ae47f33SJohn Johansen out_pin: 18174ae47f33SJohn Johansen if (error) 18184ae47f33SJohn Johansen simple_release_fs(&aafs_mnt, &aafs_count); 18194ae47f33SJohn Johansen out: 18204ae47f33SJohn Johansen mutex_unlock(&parent->lock); 18214ae47f33SJohn Johansen aa_put_ns(parent); 18224ae47f33SJohn Johansen 18234ae47f33SJohn Johansen return error; 18244ae47f33SJohn Johansen } 18254ae47f33SJohn Johansen 18264ae47f33SJohn Johansen static int ns_rmdir_op(struct inode *dir, struct dentry *dentry) 18274ae47f33SJohn Johansen { 18284ae47f33SJohn Johansen struct aa_ns *ns, *parent; 18294ae47f33SJohn Johansen /* TODO: improve permission check */ 1830637f688dSJohn Johansen struct aa_label *label; 1831637f688dSJohn Johansen int error; 1832637f688dSJohn Johansen 1833637f688dSJohn Johansen label = begin_current_label_crit_section(); 1834637f688dSJohn Johansen error = aa_may_manage_policy(label, NULL, AA_MAY_LOAD_POLICY); 1835637f688dSJohn Johansen end_current_label_crit_section(label); 18364ae47f33SJohn Johansen if (error) 18374ae47f33SJohn Johansen return error; 18384ae47f33SJohn Johansen 18394ae47f33SJohn Johansen parent = aa_get_ns(dir->i_private); 18404ae47f33SJohn Johansen /* rmdir calls the generic securityfs functions to remove files 18414ae47f33SJohn Johansen * from the apparmor dir. It is up to the apparmor ns locking 18424ae47f33SJohn Johansen * to avoid races. 18434ae47f33SJohn Johansen */ 18444ae47f33SJohn Johansen inode_unlock(dir); 18454ae47f33SJohn Johansen inode_unlock(dentry->d_inode); 18464ae47f33SJohn Johansen 1847feb3c766SJohn Johansen mutex_lock_nested(&parent->lock, parent->level); 18484ae47f33SJohn Johansen ns = aa_get_ns(__aa_findn_ns(&parent->sub_ns, dentry->d_name.name, 18494ae47f33SJohn Johansen dentry->d_name.len)); 18504ae47f33SJohn Johansen if (!ns) { 18514ae47f33SJohn Johansen error = -ENOENT; 18524ae47f33SJohn Johansen goto out; 18534ae47f33SJohn Johansen } 18544ae47f33SJohn Johansen AA_BUG(ns_dir(ns) != dentry); 18554ae47f33SJohn Johansen 18564ae47f33SJohn Johansen __aa_remove_ns(ns); 18574ae47f33SJohn Johansen aa_put_ns(ns); 18584ae47f33SJohn Johansen 18594ae47f33SJohn Johansen out: 18604ae47f33SJohn Johansen mutex_unlock(&parent->lock); 18614ae47f33SJohn Johansen inode_lock_nested(dir, I_MUTEX_PARENT); 18624ae47f33SJohn Johansen inode_lock(dentry->d_inode); 18634ae47f33SJohn Johansen aa_put_ns(parent); 18644ae47f33SJohn Johansen 18654ae47f33SJohn Johansen return error; 18664ae47f33SJohn Johansen } 18674ae47f33SJohn Johansen 18684ae47f33SJohn Johansen static const struct inode_operations ns_dir_inode_operations = { 18694ae47f33SJohn Johansen .lookup = simple_lookup, 18704ae47f33SJohn Johansen .mkdir = ns_mkdir_op, 18714ae47f33SJohn Johansen .rmdir = ns_rmdir_op, 18724ae47f33SJohn Johansen }; 18734ae47f33SJohn Johansen 18745d5182caSJohn Johansen static void __aa_fs_list_remove_rawdata(struct aa_ns *ns) 18755d5182caSJohn Johansen { 18765d5182caSJohn Johansen struct aa_loaddata *ent, *tmp; 18775d5182caSJohn Johansen 18785d5182caSJohn Johansen AA_BUG(!mutex_is_locked(&ns->lock)); 18795d5182caSJohn Johansen 18805d5182caSJohn Johansen list_for_each_entry_safe(ent, tmp, &ns->rawdata_list, list) 18815d5182caSJohn Johansen __aa_fs_remove_rawdata(ent); 18825d5182caSJohn Johansen } 18835d5182caSJohn Johansen 1884c97204baSJohn Johansen /** 1885c97204baSJohn Johansen * 1886c97204baSJohn Johansen * Requires: @ns->lock held 1887c97204baSJohn Johansen */ 1888c97204baSJohn Johansen void __aafs_ns_rmdir(struct aa_ns *ns) 18890d259f04SJohn Johansen { 189098849dffSJohn Johansen struct aa_ns *sub; 18910d259f04SJohn Johansen struct aa_profile *child; 18920d259f04SJohn Johansen int i; 18930d259f04SJohn Johansen 18940d259f04SJohn Johansen if (!ns) 18950d259f04SJohn Johansen return; 1896cbf2d0e1SJohn Johansen AA_BUG(!mutex_is_locked(&ns->lock)); 18970d259f04SJohn Johansen 18980d259f04SJohn Johansen list_for_each_entry(child, &ns->base.profiles, base.list) 1899c97204baSJohn Johansen __aafs_profile_rmdir(child); 19000d259f04SJohn Johansen 19010d259f04SJohn Johansen list_for_each_entry(sub, &ns->sub_ns, base.list) { 1902feb3c766SJohn Johansen mutex_lock_nested(&sub->lock, sub->level); 1903c97204baSJohn Johansen __aafs_ns_rmdir(sub); 19040d259f04SJohn Johansen mutex_unlock(&sub->lock); 19050d259f04SJohn Johansen } 19060d259f04SJohn Johansen 19075d5182caSJohn Johansen __aa_fs_list_remove_rawdata(ns); 19085d5182caSJohn Johansen 1909b7fd2c03SJohn Johansen if (ns_subns_dir(ns)) { 1910b7fd2c03SJohn Johansen sub = d_inode(ns_subns_dir(ns))->i_private; 1911b7fd2c03SJohn Johansen aa_put_ns(sub); 1912b7fd2c03SJohn Johansen } 1913b7fd2c03SJohn Johansen if (ns_subload(ns)) { 1914b7fd2c03SJohn Johansen sub = d_inode(ns_subload(ns))->i_private; 1915b7fd2c03SJohn Johansen aa_put_ns(sub); 1916b7fd2c03SJohn Johansen } 1917b7fd2c03SJohn Johansen if (ns_subreplace(ns)) { 1918b7fd2c03SJohn Johansen sub = d_inode(ns_subreplace(ns))->i_private; 1919b7fd2c03SJohn Johansen aa_put_ns(sub); 1920b7fd2c03SJohn Johansen } 1921b7fd2c03SJohn Johansen if (ns_subremove(ns)) { 1922b7fd2c03SJohn Johansen sub = d_inode(ns_subremove(ns))->i_private; 1923b7fd2c03SJohn Johansen aa_put_ns(sub); 1924b7fd2c03SJohn Johansen } 1925d9bf2c26SJohn Johansen if (ns_subrevision(ns)) { 1926d9bf2c26SJohn Johansen sub = d_inode(ns_subrevision(ns))->i_private; 1927d9bf2c26SJohn Johansen aa_put_ns(sub); 1928d9bf2c26SJohn Johansen } 1929b7fd2c03SJohn Johansen 19300d259f04SJohn Johansen for (i = AAFS_NS_SIZEOF - 1; i >= 0; --i) { 1931c961ee5fSJohn Johansen aafs_remove(ns->dents[i]); 19320d259f04SJohn Johansen ns->dents[i] = NULL; 19330d259f04SJohn Johansen } 19340d259f04SJohn Johansen } 19350d259f04SJohn Johansen 1936b7fd2c03SJohn Johansen /* assumes cleanup in caller */ 1937c97204baSJohn Johansen static int __aafs_ns_mkdir_entries(struct aa_ns *ns, struct dentry *dir) 1938b7fd2c03SJohn Johansen { 1939b7fd2c03SJohn Johansen struct dentry *dent; 1940b7fd2c03SJohn Johansen 1941b7fd2c03SJohn Johansen AA_BUG(!ns); 1942b7fd2c03SJohn Johansen AA_BUG(!dir); 1943b7fd2c03SJohn Johansen 1944c961ee5fSJohn Johansen dent = aafs_create_dir("profiles", dir); 1945b7fd2c03SJohn Johansen if (IS_ERR(dent)) 1946b7fd2c03SJohn Johansen return PTR_ERR(dent); 1947b7fd2c03SJohn Johansen ns_subprofs_dir(ns) = dent; 1948b7fd2c03SJohn Johansen 1949c961ee5fSJohn Johansen dent = aafs_create_dir("raw_data", dir); 1950b7fd2c03SJohn Johansen if (IS_ERR(dent)) 1951b7fd2c03SJohn Johansen return PTR_ERR(dent); 1952b7fd2c03SJohn Johansen ns_subdata_dir(ns) = dent; 1953b7fd2c03SJohn Johansen 1954d9bf2c26SJohn Johansen dent = aafs_create_file("revision", 0444, dir, ns, 1955d9bf2c26SJohn Johansen &aa_fs_ns_revision_fops); 1956d9bf2c26SJohn Johansen if (IS_ERR(dent)) 1957d9bf2c26SJohn Johansen return PTR_ERR(dent); 1958d9bf2c26SJohn Johansen aa_get_ns(ns); 1959d9bf2c26SJohn Johansen ns_subrevision(ns) = dent; 1960d9bf2c26SJohn Johansen 1961c961ee5fSJohn Johansen dent = aafs_create_file(".load", 0640, dir, ns, 1962b7fd2c03SJohn Johansen &aa_fs_profile_load); 1963b7fd2c03SJohn Johansen if (IS_ERR(dent)) 1964b7fd2c03SJohn Johansen return PTR_ERR(dent); 1965b7fd2c03SJohn Johansen aa_get_ns(ns); 1966b7fd2c03SJohn Johansen ns_subload(ns) = dent; 1967b7fd2c03SJohn Johansen 1968c961ee5fSJohn Johansen dent = aafs_create_file(".replace", 0640, dir, ns, 1969b7fd2c03SJohn Johansen &aa_fs_profile_replace); 1970b7fd2c03SJohn Johansen if (IS_ERR(dent)) 1971b7fd2c03SJohn Johansen return PTR_ERR(dent); 1972b7fd2c03SJohn Johansen aa_get_ns(ns); 1973b7fd2c03SJohn Johansen ns_subreplace(ns) = dent; 1974b7fd2c03SJohn Johansen 1975c961ee5fSJohn Johansen dent = aafs_create_file(".remove", 0640, dir, ns, 1976b7fd2c03SJohn Johansen &aa_fs_profile_remove); 1977b7fd2c03SJohn Johansen if (IS_ERR(dent)) 1978b7fd2c03SJohn Johansen return PTR_ERR(dent); 1979b7fd2c03SJohn Johansen aa_get_ns(ns); 1980b7fd2c03SJohn Johansen ns_subremove(ns) = dent; 1981b7fd2c03SJohn Johansen 19824ae47f33SJohn Johansen /* use create_dentry so we can supply private data */ 19834ae47f33SJohn Johansen dent = aafs_create("namespaces", S_IFDIR | 0755, dir, ns, NULL, NULL, 19844ae47f33SJohn Johansen &ns_dir_inode_operations); 1985b7fd2c03SJohn Johansen if (IS_ERR(dent)) 1986b7fd2c03SJohn Johansen return PTR_ERR(dent); 1987b7fd2c03SJohn Johansen aa_get_ns(ns); 1988b7fd2c03SJohn Johansen ns_subns_dir(ns) = dent; 1989b7fd2c03SJohn Johansen 1990b7fd2c03SJohn Johansen return 0; 1991b7fd2c03SJohn Johansen } 1992b7fd2c03SJohn Johansen 1993c97204baSJohn Johansen /* 1994c97204baSJohn Johansen * Requires: @ns->lock held 1995c97204baSJohn Johansen */ 199698407f0aSJohn Johansen int __aafs_ns_mkdir(struct aa_ns *ns, struct dentry *parent, const char *name, 199798407f0aSJohn Johansen struct dentry *dent) 19980d259f04SJohn Johansen { 199998849dffSJohn Johansen struct aa_ns *sub; 20000d259f04SJohn Johansen struct aa_profile *child; 200198407f0aSJohn Johansen struct dentry *dir; 20020d259f04SJohn Johansen int error; 20030d259f04SJohn Johansen 2004b7fd2c03SJohn Johansen AA_BUG(!ns); 2005b7fd2c03SJohn Johansen AA_BUG(!parent); 2006b7fd2c03SJohn Johansen AA_BUG(!mutex_is_locked(&ns->lock)); 2007b7fd2c03SJohn Johansen 20080d259f04SJohn Johansen if (!name) 20090d259f04SJohn Johansen name = ns->base.name; 20100d259f04SJohn Johansen 2011c961ee5fSJohn Johansen if (!dent) { 2012b7fd2c03SJohn Johansen /* create ns dir if it doesn't already exist */ 2013c961ee5fSJohn Johansen dent = aafs_create_dir(name, parent); 20140d259f04SJohn Johansen if (IS_ERR(dent)) 20150d259f04SJohn Johansen goto fail; 2016c961ee5fSJohn Johansen } else 2017c961ee5fSJohn Johansen dget(dent); 20180d259f04SJohn Johansen ns_dir(ns) = dir = dent; 2019c97204baSJohn Johansen error = __aafs_ns_mkdir_entries(ns, dir); 2020b7fd2c03SJohn Johansen if (error) 2021b7fd2c03SJohn Johansen goto fail2; 20220d259f04SJohn Johansen 2023b7fd2c03SJohn Johansen /* profiles */ 20240d259f04SJohn Johansen list_for_each_entry(child, &ns->base.profiles, base.list) { 2025c97204baSJohn Johansen error = __aafs_profile_mkdir(child, ns_subprofs_dir(ns)); 20260d259f04SJohn Johansen if (error) 20270d259f04SJohn Johansen goto fail2; 20280d259f04SJohn Johansen } 20290d259f04SJohn Johansen 2030b7fd2c03SJohn Johansen /* subnamespaces */ 20310d259f04SJohn Johansen list_for_each_entry(sub, &ns->sub_ns, base.list) { 2032feb3c766SJohn Johansen mutex_lock_nested(&sub->lock, sub->level); 203398407f0aSJohn Johansen error = __aafs_ns_mkdir(sub, ns_subns_dir(ns), NULL, NULL); 20340d259f04SJohn Johansen mutex_unlock(&sub->lock); 20350d259f04SJohn Johansen if (error) 20360d259f04SJohn Johansen goto fail2; 20370d259f04SJohn Johansen } 20380d259f04SJohn Johansen 20390d259f04SJohn Johansen return 0; 20400d259f04SJohn Johansen 20410d259f04SJohn Johansen fail: 20420d259f04SJohn Johansen error = PTR_ERR(dent); 20430d259f04SJohn Johansen 20440d259f04SJohn Johansen fail2: 2045c97204baSJohn Johansen __aafs_ns_rmdir(ns); 20460d259f04SJohn Johansen 20470d259f04SJohn Johansen return error; 20480d259f04SJohn Johansen } 20490d259f04SJohn Johansen 205029b3822fSJohn Johansen /** 205198849dffSJohn Johansen * __next_ns - find the next namespace to list 205229b3822fSJohn Johansen * @root: root namespace to stop search at (NOT NULL) 205329b3822fSJohn Johansen * @ns: current ns position (NOT NULL) 205429b3822fSJohn Johansen * 205529b3822fSJohn Johansen * Find the next namespace from @ns under @root and handle all locking needed 205629b3822fSJohn Johansen * while switching current namespace. 205729b3822fSJohn Johansen * 205829b3822fSJohn Johansen * Returns: next namespace or NULL if at last namespace under @root 205929b3822fSJohn Johansen * Requires: ns->parent->lock to be held 206029b3822fSJohn Johansen * NOTE: will not unlock root->lock 206129b3822fSJohn Johansen */ 206298849dffSJohn Johansen static struct aa_ns *__next_ns(struct aa_ns *root, struct aa_ns *ns) 206329b3822fSJohn Johansen { 206498849dffSJohn Johansen struct aa_ns *parent, *next; 206529b3822fSJohn Johansen 2066cbf2d0e1SJohn Johansen AA_BUG(!root); 2067cbf2d0e1SJohn Johansen AA_BUG(!ns); 2068cbf2d0e1SJohn Johansen AA_BUG(ns != root && !mutex_is_locked(&ns->parent->lock)); 2069cbf2d0e1SJohn Johansen 207029b3822fSJohn Johansen /* is next namespace a child */ 207129b3822fSJohn Johansen if (!list_empty(&ns->sub_ns)) { 207229b3822fSJohn Johansen next = list_first_entry(&ns->sub_ns, typeof(*ns), base.list); 2073feb3c766SJohn Johansen mutex_lock_nested(&next->lock, next->level); 207429b3822fSJohn Johansen return next; 207529b3822fSJohn Johansen } 207629b3822fSJohn Johansen 207729b3822fSJohn Johansen /* check if the next ns is a sibling, parent, gp, .. */ 207829b3822fSJohn Johansen parent = ns->parent; 2079ed2c7da3SJohn Johansen while (ns != root) { 208029b3822fSJohn Johansen mutex_unlock(&ns->lock); 208138dbd7d8SGeliang Tang next = list_next_entry(ns, base.list); 208229b3822fSJohn Johansen if (!list_entry_is_head(next, &parent->sub_ns, base.list)) { 2083feb3c766SJohn Johansen mutex_lock_nested(&next->lock, next->level); 208429b3822fSJohn Johansen return next; 208529b3822fSJohn Johansen } 208629b3822fSJohn Johansen ns = parent; 208729b3822fSJohn Johansen parent = parent->parent; 208829b3822fSJohn Johansen } 208929b3822fSJohn Johansen 209029b3822fSJohn Johansen return NULL; 209129b3822fSJohn Johansen } 209229b3822fSJohn Johansen 209329b3822fSJohn Johansen /** 209429b3822fSJohn Johansen * __first_profile - find the first profile in a namespace 209529b3822fSJohn Johansen * @root: namespace that is root of profiles being displayed (NOT NULL) 209629b3822fSJohn Johansen * @ns: namespace to start in (NOT NULL) 209729b3822fSJohn Johansen * 209829b3822fSJohn Johansen * Returns: unrefcounted profile or NULL if no profile 209929b3822fSJohn Johansen * Requires: profile->ns.lock to be held 210029b3822fSJohn Johansen */ 210198849dffSJohn Johansen static struct aa_profile *__first_profile(struct aa_ns *root, 210298849dffSJohn Johansen struct aa_ns *ns) 210329b3822fSJohn Johansen { 2104cbf2d0e1SJohn Johansen AA_BUG(!root); 2105cbf2d0e1SJohn Johansen AA_BUG(ns && !mutex_is_locked(&ns->lock)); 2106cbf2d0e1SJohn Johansen 210798849dffSJohn Johansen for (; ns; ns = __next_ns(root, ns)) { 210829b3822fSJohn Johansen if (!list_empty(&ns->base.profiles)) 210929b3822fSJohn Johansen return list_first_entry(&ns->base.profiles, 211029b3822fSJohn Johansen struct aa_profile, base.list); 211129b3822fSJohn Johansen } 211229b3822fSJohn Johansen return NULL; 211329b3822fSJohn Johansen } 211429b3822fSJohn Johansen 211529b3822fSJohn Johansen /** 211629b3822fSJohn Johansen * __next_profile - step to the next profile in a profile tree 211729b3822fSJohn Johansen * @profile: current profile in tree (NOT NULL) 211829b3822fSJohn Johansen * 211929b3822fSJohn Johansen * Perform a depth first traversal on the profile tree in a namespace 212029b3822fSJohn Johansen * 212129b3822fSJohn Johansen * Returns: next profile or NULL if done 212229b3822fSJohn Johansen * Requires: profile->ns.lock to be held 212329b3822fSJohn Johansen */ 212429b3822fSJohn Johansen static struct aa_profile *__next_profile(struct aa_profile *p) 212529b3822fSJohn Johansen { 212629b3822fSJohn Johansen struct aa_profile *parent; 212798849dffSJohn Johansen struct aa_ns *ns = p->ns; 212829b3822fSJohn Johansen 2129cbf2d0e1SJohn Johansen AA_BUG(!mutex_is_locked(&profiles_ns(p)->lock)); 2130cbf2d0e1SJohn Johansen 213129b3822fSJohn Johansen /* is next profile a child */ 213229b3822fSJohn Johansen if (!list_empty(&p->base.profiles)) 213329b3822fSJohn Johansen return list_first_entry(&p->base.profiles, typeof(*p), 213429b3822fSJohn Johansen base.list); 213529b3822fSJohn Johansen 213629b3822fSJohn Johansen /* is next profile a sibling, parent sibling, gp, sibling, .. */ 213729b3822fSJohn Johansen parent = rcu_dereference_protected(p->parent, 213829b3822fSJohn Johansen mutex_is_locked(&p->ns->lock)); 213929b3822fSJohn Johansen while (parent) { 214038dbd7d8SGeliang Tang p = list_next_entry(p, base.list); 214129b3822fSJohn Johansen if (!list_entry_is_head(p, &parent->base.profiles, base.list)) 214229b3822fSJohn Johansen return p; 214329b3822fSJohn Johansen p = parent; 214429b3822fSJohn Johansen parent = rcu_dereference_protected(parent->parent, 214529b3822fSJohn Johansen mutex_is_locked(&parent->ns->lock)); 214629b3822fSJohn Johansen } 214729b3822fSJohn Johansen 214829b3822fSJohn Johansen /* is next another profile in the namespace */ 214938dbd7d8SGeliang Tang p = list_next_entry(p, base.list); 215029b3822fSJohn Johansen if (!list_entry_is_head(p, &ns->base.profiles, base.list)) 215129b3822fSJohn Johansen return p; 215229b3822fSJohn Johansen 215329b3822fSJohn Johansen return NULL; 215429b3822fSJohn Johansen } 215529b3822fSJohn Johansen 215629b3822fSJohn Johansen /** 215729b3822fSJohn Johansen * next_profile - step to the next profile in where ever it may be 215829b3822fSJohn Johansen * @root: root namespace (NOT NULL) 215929b3822fSJohn Johansen * @profile: current profile (NOT NULL) 216029b3822fSJohn Johansen * 216129b3822fSJohn Johansen * Returns: next profile or NULL if there isn't one 216229b3822fSJohn Johansen */ 216398849dffSJohn Johansen static struct aa_profile *next_profile(struct aa_ns *root, 216429b3822fSJohn Johansen struct aa_profile *profile) 216529b3822fSJohn Johansen { 216629b3822fSJohn Johansen struct aa_profile *next = __next_profile(profile); 216729b3822fSJohn Johansen if (next) 216829b3822fSJohn Johansen return next; 216929b3822fSJohn Johansen 217029b3822fSJohn Johansen /* finished all profiles in namespace move to next namespace */ 217198849dffSJohn Johansen return __first_profile(root, __next_ns(root, profile->ns)); 217229b3822fSJohn Johansen } 217329b3822fSJohn Johansen 217429b3822fSJohn Johansen /** 217529b3822fSJohn Johansen * p_start - start a depth first traversal of profile tree 217629b3822fSJohn Johansen * @f: seq_file to fill 217729b3822fSJohn Johansen * @pos: current position 217829b3822fSJohn Johansen * 217929b3822fSJohn Johansen * Returns: first profile under current namespace or NULL if none found 218029b3822fSJohn Johansen * 218129b3822fSJohn Johansen * acquires first ns->lock 218229b3822fSJohn Johansen */ 218329b3822fSJohn Johansen static void *p_start(struct seq_file *f, loff_t *pos) 218429b3822fSJohn Johansen { 218529b3822fSJohn Johansen struct aa_profile *profile = NULL; 2186cf797c0eSJohn Johansen struct aa_ns *root = aa_get_current_ns(); 218729b3822fSJohn Johansen loff_t l = *pos; 2188cf797c0eSJohn Johansen f->private = root; 218929b3822fSJohn Johansen 219029b3822fSJohn Johansen /* find the first profile */ 2191feb3c766SJohn Johansen mutex_lock_nested(&root->lock, root->level); 219229b3822fSJohn Johansen profile = __first_profile(root, root); 219329b3822fSJohn Johansen 219429b3822fSJohn Johansen /* skip to position */ 219529b3822fSJohn Johansen for (; profile && l > 0; l--) 219629b3822fSJohn Johansen profile = next_profile(root, profile); 219729b3822fSJohn Johansen 219829b3822fSJohn Johansen return profile; 219929b3822fSJohn Johansen } 220029b3822fSJohn Johansen 220129b3822fSJohn Johansen /** 220229b3822fSJohn Johansen * p_next - read the next profile entry 220329b3822fSJohn Johansen * @f: seq_file to fill 220429b3822fSJohn Johansen * @p: profile previously returned 220529b3822fSJohn Johansen * @pos: current position 220629b3822fSJohn Johansen * 220729b3822fSJohn Johansen * Returns: next profile after @p or NULL if none 220829b3822fSJohn Johansen * 220929b3822fSJohn Johansen * may acquire/release locks in namespace tree as necessary 221029b3822fSJohn Johansen */ 221129b3822fSJohn Johansen static void *p_next(struct seq_file *f, void *p, loff_t *pos) 221229b3822fSJohn Johansen { 221329b3822fSJohn Johansen struct aa_profile *profile = p; 221498849dffSJohn Johansen struct aa_ns *ns = f->private; 221529b3822fSJohn Johansen (*pos)++; 221629b3822fSJohn Johansen 221729b3822fSJohn Johansen return next_profile(ns, profile); 221829b3822fSJohn Johansen } 221929b3822fSJohn Johansen 222029b3822fSJohn Johansen /** 222129b3822fSJohn Johansen * p_stop - stop depth first traversal 222229b3822fSJohn Johansen * @f: seq_file we are filling 222329b3822fSJohn Johansen * @p: the last profile writen 222429b3822fSJohn Johansen * 222529b3822fSJohn Johansen * Release all locking done by p_start/p_next on namespace tree 222629b3822fSJohn Johansen */ 222729b3822fSJohn Johansen static void p_stop(struct seq_file *f, void *p) 222829b3822fSJohn Johansen { 222929b3822fSJohn Johansen struct aa_profile *profile = p; 223098849dffSJohn Johansen struct aa_ns *root = f->private, *ns; 223129b3822fSJohn Johansen 223229b3822fSJohn Johansen if (profile) { 223329b3822fSJohn Johansen for (ns = profile->ns; ns && ns != root; ns = ns->parent) 223429b3822fSJohn Johansen mutex_unlock(&ns->lock); 223529b3822fSJohn Johansen } 223629b3822fSJohn Johansen mutex_unlock(&root->lock); 223798849dffSJohn Johansen aa_put_ns(root); 223829b3822fSJohn Johansen } 223929b3822fSJohn Johansen 224029b3822fSJohn Johansen /** 224129b3822fSJohn Johansen * seq_show_profile - show a profile entry 224229b3822fSJohn Johansen * @f: seq_file to file 224329b3822fSJohn Johansen * @p: current position (profile) (NOT NULL) 224429b3822fSJohn Johansen * 224529b3822fSJohn Johansen * Returns: error on failure 224629b3822fSJohn Johansen */ 224729b3822fSJohn Johansen static int seq_show_profile(struct seq_file *f, void *p) 224829b3822fSJohn Johansen { 224929b3822fSJohn Johansen struct aa_profile *profile = (struct aa_profile *)p; 225098849dffSJohn Johansen struct aa_ns *root = f->private; 225129b3822fSJohn Johansen 2252637f688dSJohn Johansen aa_label_seq_xprint(f, root, &profile->label, 2253637f688dSJohn Johansen FLAG_SHOW_MODE | FLAG_VIEW_SUBNS, GFP_KERNEL); 2254637f688dSJohn Johansen seq_putc(f, '\n'); 225529b3822fSJohn Johansen 225629b3822fSJohn Johansen return 0; 225729b3822fSJohn Johansen } 225829b3822fSJohn Johansen 2259c97204baSJohn Johansen static const struct seq_operations aa_sfs_profiles_op = { 226029b3822fSJohn Johansen .start = p_start, 226129b3822fSJohn Johansen .next = p_next, 226229b3822fSJohn Johansen .stop = p_stop, 226329b3822fSJohn Johansen .show = seq_show_profile, 226429b3822fSJohn Johansen }; 226529b3822fSJohn Johansen 226629b3822fSJohn Johansen static int profiles_open(struct inode *inode, struct file *file) 226729b3822fSJohn Johansen { 22685ac8c355SJohn Johansen if (!policy_view_capable(NULL)) 22695ac8c355SJohn Johansen return -EACCES; 22705ac8c355SJohn Johansen 2271c97204baSJohn Johansen return seq_open(file, &aa_sfs_profiles_op); 227229b3822fSJohn Johansen } 227329b3822fSJohn Johansen 227429b3822fSJohn Johansen static int profiles_release(struct inode *inode, struct file *file) 227529b3822fSJohn Johansen { 227629b3822fSJohn Johansen return seq_release(inode, file); 227729b3822fSJohn Johansen } 227829b3822fSJohn Johansen 2279c97204baSJohn Johansen static const struct file_operations aa_sfs_profiles_fops = { 228029b3822fSJohn Johansen .open = profiles_open, 228129b3822fSJohn Johansen .read = seq_read, 228229b3822fSJohn Johansen .llseek = seq_lseek, 228329b3822fSJohn Johansen .release = profiles_release, 228429b3822fSJohn Johansen }; 228529b3822fSJohn Johansen 228629b3822fSJohn Johansen 22870d259f04SJohn Johansen /** Base file system setup **/ 2288c97204baSJohn Johansen static struct aa_sfs_entry aa_sfs_entry_file[] = { 2289c97204baSJohn Johansen AA_SFS_FILE_STRING("mask", 2290c97204baSJohn Johansen "create read write exec append mmap_exec link lock"), 2291a9bf8e9fSKees Cook { } 2292a9bf8e9fSKees Cook }; 2293a9bf8e9fSKees Cook 2294290f458aSJohn Johansen static struct aa_sfs_entry aa_sfs_entry_ptrace[] = { 2295290f458aSJohn Johansen AA_SFS_FILE_STRING("mask", "read trace"), 2296290f458aSJohn Johansen { } 2297290f458aSJohn Johansen }; 2298290f458aSJohn Johansen 2299cd1dbf76SJohn Johansen static struct aa_sfs_entry aa_sfs_entry_signal[] = { 2300cd1dbf76SJohn Johansen AA_SFS_FILE_STRING("mask", AA_SFS_SIG_MASK), 2301cd1dbf76SJohn Johansen { } 2302cd1dbf76SJohn Johansen }; 2303cd1dbf76SJohn Johansen 230473f488cdSJohn Johansen static struct aa_sfs_entry aa_sfs_entry_attach[] = { 230573f488cdSJohn Johansen AA_SFS_FILE_BOOLEAN("xattr", 1), 230673f488cdSJohn Johansen { } 230773f488cdSJohn Johansen }; 2308c97204baSJohn Johansen static struct aa_sfs_entry aa_sfs_entry_domain[] = { 2309c97204baSJohn Johansen AA_SFS_FILE_BOOLEAN("change_hat", 1), 2310c97204baSJohn Johansen AA_SFS_FILE_BOOLEAN("change_hatv", 1), 2311c97204baSJohn Johansen AA_SFS_FILE_BOOLEAN("change_onexec", 1), 2312c97204baSJohn Johansen AA_SFS_FILE_BOOLEAN("change_profile", 1), 23136c5fc8f1SJohn Johansen AA_SFS_FILE_BOOLEAN("stack", 1), 2314c97204baSJohn Johansen AA_SFS_FILE_BOOLEAN("fix_binfmt_elf_mmap", 1), 23159fcf78ccSJohn Johansen AA_SFS_FILE_BOOLEAN("post_nnp_subset", 1), 231621f60661SJohn Johansen AA_SFS_FILE_BOOLEAN("computed_longest_left", 1), 231773f488cdSJohn Johansen AA_SFS_DIR("attach_conditions", aa_sfs_entry_attach), 2318c97204baSJohn Johansen AA_SFS_FILE_STRING("version", "1.2"), 2319e74abcf3SKees Cook { } 2320e74abcf3SKees Cook }; 2321e74abcf3SKees Cook 2322c97204baSJohn Johansen static struct aa_sfs_entry aa_sfs_entry_versions[] = { 2323c97204baSJohn Johansen AA_SFS_FILE_BOOLEAN("v5", 1), 23245379a331SJohn Johansen AA_SFS_FILE_BOOLEAN("v6", 1), 23255379a331SJohn Johansen AA_SFS_FILE_BOOLEAN("v7", 1), 232656974a6fSJohn Johansen AA_SFS_FILE_BOOLEAN("v8", 1), 2327474d6b75SJohn Johansen { } 2328474d6b75SJohn Johansen }; 2329474d6b75SJohn Johansen 2330c97204baSJohn Johansen static struct aa_sfs_entry aa_sfs_entry_policy[] = { 2331c97204baSJohn Johansen AA_SFS_DIR("versions", aa_sfs_entry_versions), 2332c97204baSJohn Johansen AA_SFS_FILE_BOOLEAN("set_load", 1), 23330df34a64SJohn Johansen /* number of out of band transitions supported */ 23340df34a64SJohn Johansen AA_SFS_FILE_U64("outofband", MAX_OOB_SUPPORTED), 23359d910a3bSJohn Johansen { } 23369d910a3bSJohn Johansen }; 23379d910a3bSJohn Johansen 23382ea3ffb7SJohn Johansen static struct aa_sfs_entry aa_sfs_entry_mount[] = { 23392ea3ffb7SJohn Johansen AA_SFS_FILE_STRING("mask", "mount umount pivot_root"), 23402ea3ffb7SJohn Johansen { } 23412ea3ffb7SJohn Johansen }; 23422ea3ffb7SJohn Johansen 234333f2eadaSJohn Johansen static struct aa_sfs_entry aa_sfs_entry_ns[] = { 234433f2eadaSJohn Johansen AA_SFS_FILE_BOOLEAN("profile", 1), 23452ea3ffb7SJohn Johansen AA_SFS_FILE_BOOLEAN("pivot_root", 0), 234633f2eadaSJohn Johansen { } 234733f2eadaSJohn Johansen }; 234833f2eadaSJohn Johansen 2349a83bd86eSJohn Johansen static struct aa_sfs_entry aa_sfs_entry_query_label[] = { 23504f3b3f2dSJohn Johansen AA_SFS_FILE_STRING("perms", "allow deny audit quiet"), 2351a83bd86eSJohn Johansen AA_SFS_FILE_BOOLEAN("data", 1), 23521dea3b41SJohn Johansen AA_SFS_FILE_BOOLEAN("multi_transaction", 1), 2353a83bd86eSJohn Johansen { } 2354a83bd86eSJohn Johansen }; 2355a83bd86eSJohn Johansen 2356a83bd86eSJohn Johansen static struct aa_sfs_entry aa_sfs_entry_query[] = { 2357a83bd86eSJohn Johansen AA_SFS_DIR("label", aa_sfs_entry_query_label), 2358a83bd86eSJohn Johansen { } 2359a83bd86eSJohn Johansen }; 2360c97204baSJohn Johansen static struct aa_sfs_entry aa_sfs_entry_features[] = { 2361c97204baSJohn Johansen AA_SFS_DIR("policy", aa_sfs_entry_policy), 2362c97204baSJohn Johansen AA_SFS_DIR("domain", aa_sfs_entry_domain), 2363c97204baSJohn Johansen AA_SFS_DIR("file", aa_sfs_entry_file), 236456974a6fSJohn Johansen AA_SFS_DIR("network_v8", aa_sfs_entry_network), 23652ea3ffb7SJohn Johansen AA_SFS_DIR("mount", aa_sfs_entry_mount), 236633f2eadaSJohn Johansen AA_SFS_DIR("namespaces", aa_sfs_entry_ns), 2367c97204baSJohn Johansen AA_SFS_FILE_U64("capability", VFS_CAP_FLAGS_MASK), 2368c97204baSJohn Johansen AA_SFS_DIR("rlimit", aa_sfs_entry_rlimit), 2369c97204baSJohn Johansen AA_SFS_DIR("caps", aa_sfs_entry_caps), 2370290f458aSJohn Johansen AA_SFS_DIR("ptrace", aa_sfs_entry_ptrace), 2371cd1dbf76SJohn Johansen AA_SFS_DIR("signal", aa_sfs_entry_signal), 2372a83bd86eSJohn Johansen AA_SFS_DIR("query", aa_sfs_entry_query), 2373e74abcf3SKees Cook { } 2374e74abcf3SKees Cook }; 2375e74abcf3SKees Cook 2376c97204baSJohn Johansen static struct aa_sfs_entry aa_sfs_entry_apparmor[] = { 2377bf81100fSJohn Johansen AA_SFS_FILE_FOPS(".access", 0666, &aa_sfs_access), 23786c5fc8f1SJohn Johansen AA_SFS_FILE_FOPS(".stacked", 0444, &seq_ns_stacked_fops), 23796c5fc8f1SJohn Johansen AA_SFS_FILE_FOPS(".ns_stacked", 0444, &seq_ns_nsstacked_fops), 2380bf81100fSJohn Johansen AA_SFS_FILE_FOPS(".ns_level", 0444, &seq_ns_level_fops), 2381bf81100fSJohn Johansen AA_SFS_FILE_FOPS(".ns_name", 0444, &seq_ns_name_fops), 2382bf81100fSJohn Johansen AA_SFS_FILE_FOPS("profiles", 0444, &aa_sfs_profiles_fops), 2383c97204baSJohn Johansen AA_SFS_DIR("features", aa_sfs_entry_features), 23849acd494bSKees Cook { } 23859acd494bSKees Cook }; 238663e2b423SJohn Johansen 2387c97204baSJohn Johansen static struct aa_sfs_entry aa_sfs_entry = 2388c97204baSJohn Johansen AA_SFS_DIR("apparmor", aa_sfs_entry_apparmor); 23899acd494bSKees Cook 23909acd494bSKees Cook /** 2391a481f4d9SJohn Johansen * entry_create_file - create a file entry in the apparmor securityfs 2392c97204baSJohn Johansen * @fs_file: aa_sfs_entry to build an entry for (NOT NULL) 23939acd494bSKees Cook * @parent: the parent dentry in the securityfs 23949acd494bSKees Cook * 2395a481f4d9SJohn Johansen * Use entry_remove_file to remove entries created with this fn. 23969acd494bSKees Cook */ 2397c97204baSJohn Johansen static int __init entry_create_file(struct aa_sfs_entry *fs_file, 23989acd494bSKees Cook struct dentry *parent) 239963e2b423SJohn Johansen { 24009acd494bSKees Cook int error = 0; 240163e2b423SJohn Johansen 24029acd494bSKees Cook fs_file->dentry = securityfs_create_file(fs_file->name, 24039acd494bSKees Cook S_IFREG | fs_file->mode, 24049acd494bSKees Cook parent, fs_file, 24059acd494bSKees Cook fs_file->file_ops); 24069acd494bSKees Cook if (IS_ERR(fs_file->dentry)) { 24079acd494bSKees Cook error = PTR_ERR(fs_file->dentry); 24089acd494bSKees Cook fs_file->dentry = NULL; 240963e2b423SJohn Johansen } 24109acd494bSKees Cook return error; 241163e2b423SJohn Johansen } 241263e2b423SJohn Johansen 2413c97204baSJohn Johansen static void __init entry_remove_dir(struct aa_sfs_entry *fs_dir); 241463e2b423SJohn Johansen /** 2415a481f4d9SJohn Johansen * entry_create_dir - recursively create a directory entry in the securityfs 2416c97204baSJohn Johansen * @fs_dir: aa_sfs_entry (and all child entries) to build (NOT NULL) 24179acd494bSKees Cook * @parent: the parent dentry in the securityfs 241863e2b423SJohn Johansen * 2419a481f4d9SJohn Johansen * Use entry_remove_dir to remove entries created with this fn. 242063e2b423SJohn Johansen */ 2421c97204baSJohn Johansen static int __init entry_create_dir(struct aa_sfs_entry *fs_dir, 24229acd494bSKees Cook struct dentry *parent) 242363e2b423SJohn Johansen { 2424c97204baSJohn Johansen struct aa_sfs_entry *fs_file; 24250d259f04SJohn Johansen struct dentry *dir; 24260d259f04SJohn Johansen int error; 242763e2b423SJohn Johansen 24280d259f04SJohn Johansen dir = securityfs_create_dir(fs_dir->name, parent); 24290d259f04SJohn Johansen if (IS_ERR(dir)) 24300d259f04SJohn Johansen return PTR_ERR(dir); 24310d259f04SJohn Johansen fs_dir->dentry = dir; 243263e2b423SJohn Johansen 24330d259f04SJohn Johansen for (fs_file = fs_dir->v.files; fs_file && fs_file->name; ++fs_file) { 2434c97204baSJohn Johansen if (fs_file->v_type == AA_SFS_TYPE_DIR) 2435a481f4d9SJohn Johansen error = entry_create_dir(fs_file, fs_dir->dentry); 24369acd494bSKees Cook else 2437a481f4d9SJohn Johansen error = entry_create_file(fs_file, fs_dir->dentry); 24389acd494bSKees Cook if (error) 24399acd494bSKees Cook goto failed; 24409acd494bSKees Cook } 24419acd494bSKees Cook 24429acd494bSKees Cook return 0; 24439acd494bSKees Cook 24449acd494bSKees Cook failed: 2445a481f4d9SJohn Johansen entry_remove_dir(fs_dir); 24460d259f04SJohn Johansen 24479acd494bSKees Cook return error; 24489acd494bSKees Cook } 24499acd494bSKees Cook 24509acd494bSKees Cook /** 2451c97204baSJohn Johansen * entry_remove_file - drop a single file entry in the apparmor securityfs 2452c97204baSJohn Johansen * @fs_file: aa_sfs_entry to detach from the securityfs (NOT NULL) 24539acd494bSKees Cook */ 2454c97204baSJohn Johansen static void __init entry_remove_file(struct aa_sfs_entry *fs_file) 24559acd494bSKees Cook { 24569acd494bSKees Cook if (!fs_file->dentry) 24579acd494bSKees Cook return; 24589acd494bSKees Cook 24599acd494bSKees Cook securityfs_remove(fs_file->dentry); 24609acd494bSKees Cook fs_file->dentry = NULL; 24619acd494bSKees Cook } 24629acd494bSKees Cook 24639acd494bSKees Cook /** 2464a481f4d9SJohn Johansen * entry_remove_dir - recursively drop a directory entry from the securityfs 2465c97204baSJohn Johansen * @fs_dir: aa_sfs_entry (and all child entries) to detach (NOT NULL) 24669acd494bSKees Cook */ 2467c97204baSJohn Johansen static void __init entry_remove_dir(struct aa_sfs_entry *fs_dir) 24689acd494bSKees Cook { 2469c97204baSJohn Johansen struct aa_sfs_entry *fs_file; 24709acd494bSKees Cook 24710d259f04SJohn Johansen for (fs_file = fs_dir->v.files; fs_file && fs_file->name; ++fs_file) { 2472c97204baSJohn Johansen if (fs_file->v_type == AA_SFS_TYPE_DIR) 2473a481f4d9SJohn Johansen entry_remove_dir(fs_file); 24749acd494bSKees Cook else 2475c97204baSJohn Johansen entry_remove_file(fs_file); 24769acd494bSKees Cook } 24779acd494bSKees Cook 2478c97204baSJohn Johansen entry_remove_file(fs_dir); 247963e2b423SJohn Johansen } 248063e2b423SJohn Johansen 248163e2b423SJohn Johansen /** 248263e2b423SJohn Johansen * aa_destroy_aafs - cleanup and free aafs 248363e2b423SJohn Johansen * 248463e2b423SJohn Johansen * releases dentries allocated by aa_create_aafs 248563e2b423SJohn Johansen */ 248663e2b423SJohn Johansen void __init aa_destroy_aafs(void) 248763e2b423SJohn Johansen { 2488c97204baSJohn Johansen entry_remove_dir(&aa_sfs_entry); 248963e2b423SJohn Johansen } 249063e2b423SJohn Johansen 2491a71ada30SJohn Johansen 2492a71ada30SJohn Johansen #define NULL_FILE_NAME ".null" 2493a71ada30SJohn Johansen struct path aa_null; 2494a71ada30SJohn Johansen 2495a71ada30SJohn Johansen static int aa_mk_null_file(struct dentry *parent) 2496a71ada30SJohn Johansen { 2497a71ada30SJohn Johansen struct vfsmount *mount = NULL; 2498a71ada30SJohn Johansen struct dentry *dentry; 2499a71ada30SJohn Johansen struct inode *inode; 2500a71ada30SJohn Johansen int count = 0; 2501a71ada30SJohn Johansen int error = simple_pin_fs(parent->d_sb->s_type, &mount, &count); 2502a71ada30SJohn Johansen 2503a71ada30SJohn Johansen if (error) 2504a71ada30SJohn Johansen return error; 2505a71ada30SJohn Johansen 2506a71ada30SJohn Johansen inode_lock(d_inode(parent)); 2507a71ada30SJohn Johansen dentry = lookup_one_len(NULL_FILE_NAME, parent, strlen(NULL_FILE_NAME)); 2508a71ada30SJohn Johansen if (IS_ERR(dentry)) { 2509a71ada30SJohn Johansen error = PTR_ERR(dentry); 2510a71ada30SJohn Johansen goto out; 2511a71ada30SJohn Johansen } 2512a71ada30SJohn Johansen inode = new_inode(parent->d_inode->i_sb); 2513a71ada30SJohn Johansen if (!inode) { 2514a71ada30SJohn Johansen error = -ENOMEM; 2515a71ada30SJohn Johansen goto out1; 2516a71ada30SJohn Johansen } 2517a71ada30SJohn Johansen 2518a71ada30SJohn Johansen inode->i_ino = get_next_ino(); 2519a71ada30SJohn Johansen inode->i_mode = S_IFCHR | S_IRUGO | S_IWUGO; 252024d0d03cSDeepa Dinamani inode->i_atime = inode->i_mtime = inode->i_ctime = current_time(inode); 2521a71ada30SJohn Johansen init_special_inode(inode, S_IFCHR | S_IRUGO | S_IWUGO, 2522a71ada30SJohn Johansen MKDEV(MEM_MAJOR, 3)); 2523a71ada30SJohn Johansen d_instantiate(dentry, inode); 2524a71ada30SJohn Johansen aa_null.dentry = dget(dentry); 2525a71ada30SJohn Johansen aa_null.mnt = mntget(mount); 2526a71ada30SJohn Johansen 2527a71ada30SJohn Johansen error = 0; 2528a71ada30SJohn Johansen 2529a71ada30SJohn Johansen out1: 2530a71ada30SJohn Johansen dput(dentry); 2531a71ada30SJohn Johansen out: 2532a71ada30SJohn Johansen inode_unlock(d_inode(parent)); 2533a71ada30SJohn Johansen simple_release_fs(&mount, &count); 2534a71ada30SJohn Johansen return error; 2535a71ada30SJohn Johansen } 2536a71ada30SJohn Johansen 2537a481f4d9SJohn Johansen 2538a481f4d9SJohn Johansen 2539a481f4d9SJohn Johansen static const char *policy_get_link(struct dentry *dentry, 2540a481f4d9SJohn Johansen struct inode *inode, 2541a481f4d9SJohn Johansen struct delayed_call *done) 2542a481f4d9SJohn Johansen { 2543a481f4d9SJohn Johansen struct aa_ns *ns; 2544a481f4d9SJohn Johansen struct path path; 25451bc82070SAleksa Sarai int error; 2546a481f4d9SJohn Johansen 2547a481f4d9SJohn Johansen if (!dentry) 2548a481f4d9SJohn Johansen return ERR_PTR(-ECHILD); 25491bc82070SAleksa Sarai 2550a481f4d9SJohn Johansen ns = aa_get_current_ns(); 2551a481f4d9SJohn Johansen path.mnt = mntget(aafs_mnt); 2552a481f4d9SJohn Johansen path.dentry = dget(ns_dir(ns)); 25531bc82070SAleksa Sarai error = nd_jump_link(&path); 2554a481f4d9SJohn Johansen aa_put_ns(ns); 2555a481f4d9SJohn Johansen 25561bc82070SAleksa Sarai return ERR_PTR(error); 2557a481f4d9SJohn Johansen } 2558a481f4d9SJohn Johansen 2559a481f4d9SJohn Johansen static int policy_readlink(struct dentry *dentry, char __user *buffer, 2560a481f4d9SJohn Johansen int buflen) 2561a481f4d9SJohn Johansen { 2562a481f4d9SJohn Johansen char name[32]; 2563a481f4d9SJohn Johansen int res; 2564a481f4d9SJohn Johansen 2565a0781209SJohn Johansen res = snprintf(name, sizeof(name), "%s:[%lu]", AAFS_NAME, 2566a0781209SJohn Johansen d_inode(dentry)->i_ino); 2567a0781209SJohn Johansen if (res > 0 && res < sizeof(name)) 2568a481f4d9SJohn Johansen res = readlink_copy(buffer, buflen, name); 2569a0781209SJohn Johansen else 2570a0781209SJohn Johansen res = -ENOENT; 2571a481f4d9SJohn Johansen 2572a481f4d9SJohn Johansen return res; 2573a481f4d9SJohn Johansen } 2574a481f4d9SJohn Johansen 2575a481f4d9SJohn Johansen static const struct inode_operations policy_link_iops = { 2576a481f4d9SJohn Johansen .readlink = policy_readlink, 2577a481f4d9SJohn Johansen .get_link = policy_get_link, 2578a481f4d9SJohn Johansen }; 2579a481f4d9SJohn Johansen 2580a481f4d9SJohn Johansen 258163e2b423SJohn Johansen /** 258263e2b423SJohn Johansen * aa_create_aafs - create the apparmor security filesystem 258363e2b423SJohn Johansen * 258463e2b423SJohn Johansen * dentries created here are released by aa_destroy_aafs 258563e2b423SJohn Johansen * 258663e2b423SJohn Johansen * Returns: error on failure 258763e2b423SJohn Johansen */ 25883417d8d5SJames Morris static int __init aa_create_aafs(void) 258963e2b423SJohn Johansen { 2590b7fd2c03SJohn Johansen struct dentry *dent; 259163e2b423SJohn Johansen int error; 259263e2b423SJohn Johansen 259363e2b423SJohn Johansen if (!apparmor_initialized) 259463e2b423SJohn Johansen return 0; 259563e2b423SJohn Johansen 2596c97204baSJohn Johansen if (aa_sfs_entry.dentry) { 259763e2b423SJohn Johansen AA_ERROR("%s: AppArmor securityfs already exists\n", __func__); 259863e2b423SJohn Johansen return -EEXIST; 259963e2b423SJohn Johansen } 260063e2b423SJohn Johansen 2601a481f4d9SJohn Johansen /* setup apparmorfs used to virtualize policy/ */ 2602a481f4d9SJohn Johansen aafs_mnt = kern_mount(&aafs_ops); 2603a481f4d9SJohn Johansen if (IS_ERR(aafs_mnt)) 2604a481f4d9SJohn Johansen panic("can't set apparmorfs up\n"); 26051751e8a6SLinus Torvalds aafs_mnt->mnt_sb->s_flags &= ~SB_NOUSER; 2606a481f4d9SJohn Johansen 26079acd494bSKees Cook /* Populate fs tree. */ 2608c97204baSJohn Johansen error = entry_create_dir(&aa_sfs_entry, NULL); 260963e2b423SJohn Johansen if (error) 261063e2b423SJohn Johansen goto error; 261163e2b423SJohn Johansen 2612c97204baSJohn Johansen dent = securityfs_create_file(".load", 0666, aa_sfs_entry.dentry, 2613b7fd2c03SJohn Johansen NULL, &aa_fs_profile_load); 2614cf916000SJohn Johansen if (IS_ERR(dent)) 2615cf916000SJohn Johansen goto dent_error; 2616b7fd2c03SJohn Johansen ns_subload(root_ns) = dent; 2617b7fd2c03SJohn Johansen 2618c97204baSJohn Johansen dent = securityfs_create_file(".replace", 0666, aa_sfs_entry.dentry, 2619b7fd2c03SJohn Johansen NULL, &aa_fs_profile_replace); 2620cf916000SJohn Johansen if (IS_ERR(dent)) 2621cf916000SJohn Johansen goto dent_error; 2622b7fd2c03SJohn Johansen ns_subreplace(root_ns) = dent; 2623b7fd2c03SJohn Johansen 2624c97204baSJohn Johansen dent = securityfs_create_file(".remove", 0666, aa_sfs_entry.dentry, 2625b7fd2c03SJohn Johansen NULL, &aa_fs_profile_remove); 2626cf916000SJohn Johansen if (IS_ERR(dent)) 2627cf916000SJohn Johansen goto dent_error; 2628b7fd2c03SJohn Johansen ns_subremove(root_ns) = dent; 2629b7fd2c03SJohn Johansen 2630d9bf2c26SJohn Johansen dent = securityfs_create_file("revision", 0444, aa_sfs_entry.dentry, 2631d9bf2c26SJohn Johansen NULL, &aa_fs_ns_revision_fops); 2632cf916000SJohn Johansen if (IS_ERR(dent)) 2633cf916000SJohn Johansen goto dent_error; 2634d9bf2c26SJohn Johansen ns_subrevision(root_ns) = dent; 2635d9bf2c26SJohn Johansen 2636d9bf2c26SJohn Johansen /* policy tree referenced by magic policy symlink */ 2637feb3c766SJohn Johansen mutex_lock_nested(&root_ns->lock, root_ns->level); 2638c961ee5fSJohn Johansen error = __aafs_ns_mkdir(root_ns, aafs_mnt->mnt_root, ".policy", 2639c961ee5fSJohn Johansen aafs_mnt->mnt_root); 2640b7fd2c03SJohn Johansen mutex_unlock(&root_ns->lock); 26410d259f04SJohn Johansen if (error) 26420d259f04SJohn Johansen goto error; 26430d259f04SJohn Johansen 2644c961ee5fSJohn Johansen /* magic symlink similar to nsfs redirects based on task policy */ 2645c961ee5fSJohn Johansen dent = securityfs_create_symlink("policy", aa_sfs_entry.dentry, 2646c961ee5fSJohn Johansen NULL, &policy_link_iops); 2647cf916000SJohn Johansen if (IS_ERR(dent)) 2648cf916000SJohn Johansen goto dent_error; 2649c961ee5fSJohn Johansen 2650c97204baSJohn Johansen error = aa_mk_null_file(aa_sfs_entry.dentry); 2651a71ada30SJohn Johansen if (error) 2652a71ada30SJohn Johansen goto error; 2653a71ada30SJohn Johansen 2654a71ada30SJohn Johansen /* TODO: add default profile to apparmorfs */ 265563e2b423SJohn Johansen 265663e2b423SJohn Johansen /* Report that AppArmor fs is enabled */ 265763e2b423SJohn Johansen aa_info_message("AppArmor Filesystem Enabled"); 265863e2b423SJohn Johansen return 0; 265963e2b423SJohn Johansen 2660cf916000SJohn Johansen dent_error: 2661cf916000SJohn Johansen error = PTR_ERR(dent); 266263e2b423SJohn Johansen error: 266363e2b423SJohn Johansen aa_destroy_aafs(); 266463e2b423SJohn Johansen AA_ERROR("Error creating AppArmor securityfs\n"); 266563e2b423SJohn Johansen return error; 266663e2b423SJohn Johansen } 266763e2b423SJohn Johansen 266863e2b423SJohn Johansen fs_initcall(aa_create_aafs); 2669