1 /* SPDX-License-Identifier: GPL-2.0-only */ 2 /* 3 * AppArmor security module 4 * 5 * This file contains AppArmor file mediation function definitions. 6 * 7 * Copyright 2017 Canonical Ltd. 8 */ 9 10 #ifndef __AA_MOUNT_H 11 #define __AA_MOUNT_H 12 13 #include <linux/fs.h> 14 #include <linux/path.h> 15 16 #include "domain.h" 17 #include "policy.h" 18 19 /* mount perms */ 20 #define AA_MAY_PIVOTROOT 0x01 21 #define AA_MAY_MOUNT 0x02 22 #define AA_MAY_UMOUNT 0x04 23 #define AA_AUDIT_DATA 0x40 24 #define AA_MNT_CONT_MATCH 0x40 25 26 #define AA_MS_IGNORE_MASK (MS_KERNMOUNT | MS_NOSEC | MS_ACTIVE | MS_BORN) 27 28 int aa_remount(struct aa_label *label, const struct path *path, 29 unsigned long flags, void *data); 30 31 int aa_bind_mount(struct aa_label *label, const struct path *path, 32 const char *old_name, unsigned long flags); 33 34 35 int aa_mount_change_type(struct aa_label *label, const struct path *path, 36 unsigned long flags); 37 38 int aa_move_mount(struct aa_label *label, const struct path *path, 39 const char *old_name); 40 41 int aa_new_mount(struct aa_label *label, const char *dev_name, 42 const struct path *path, const char *type, unsigned long flags, 43 void *data); 44 45 int aa_umount(struct aa_label *label, struct vfsmount *mnt, int flags); 46 47 int aa_pivotroot(struct aa_label *label, const struct path *old_path, 48 const struct path *new_path); 49 50 #endif /* __AA_MOUNT_H */ 51