diff options
| author | Mickaël Salaün <mic@linux.microsoft.com> | 2024-02-13 13:57:41 +0100 |
|---|---|---|
| committer | Aleksandr Nogikh <nogikh@google.com> | 2024-02-26 11:00:17 +0000 |
| commit | 23536c231026652872d17e3b6cdcbf64a07eecc7 (patch) | |
| tree | 793a0ea0049a02ca76ad600128841be6fe936c38 /sys/linux/lsm.txt | |
| parent | 61f5c1060b36b6ebfe7fb19151102a4112c6f964 (diff) | |
sys/linux: add LSM syscalls
Add 3 new system calls available with Linux 6.8:
* lsm_set_self_attr()
* lsm_get_self_attr()
* lsm_list_modules()
This helped find these bugs:
https://lore.kernel.org/all/20240223190546.3329966-1-mic@digikod.net/
Signed-off-by: Mickaël Salaün <mic@linux.microsoft.com>
Diffstat (limited to 'sys/linux/lsm.txt')
| -rw-r--r-- | sys/linux/lsm.txt | 22 |
1 files changed, 22 insertions, 0 deletions
diff --git a/sys/linux/lsm.txt b/sys/linux/lsm.txt new file mode 100644 index 000000000..062176b6d --- /dev/null +++ b/sys/linux/lsm.txt @@ -0,0 +1,22 @@ +# Copyright 2024 syzkaller project authors. All rights reserved. +# Use of this source code is governed by Apache 2 LICENSE that can be found in the LICENSE file. + +include <uapi/linux/lsm.h> + +lsm_set_self_attr(attr flags[lsm_attr_flags], ctx ptr[in, lsm_ctx], size bytesize[ctx], flags const[0]) +lsm_get_self_attr(attr flags[lsm_attr_flags], ctx ptr[out, lsm_ctx], size ptr[inout, bytesize[ctx, intptr]], flags flags[lsm_get_self_attr_flags]) +lsm_list_modules(ids ptr[out, array[int64]], size ptr[inout, bytesize[ids, intptr]], flags const[0]) + +lsm_ctx { + id flags[lsm_id_flags, int64] + flags int64 + len bytesize[parent, int64] + ctx_len bytesize[ctx, int64] + ctx array[int8] +} + +lsm_attr_flags = LSM_ATTR_UNDEF, LSM_ATTR_CURRENT, LSM_ATTR_EXEC, LSM_ATTR_FSCREATE, LSM_ATTR_KEYCREATE, LSM_ATTR_PREV, LSM_ATTR_SOCKCREATE + +lsm_id_flags = LSM_ID_UNDEF, LSM_ID_CAPABILITY, LSM_ID_SELINUX, LSM_ID_SMACK, LSM_ID_TOMOYO, LSM_ID_APPARMOR, LSM_ID_YAMA, LSM_ID_LOADPIN, LSM_ID_SAFESETID, LSM_ID_LOCKDOWN, LSM_ID_BPF, LSM_ID_LANDLOCK + +lsm_get_self_attr_flags = LSM_FLAG_SINGLE |