include/linux/bpf_lsm.h

   1 /* SPDX-License-Identifier: GPL-2.0 */
   2
   3 /*
   4  * Copyright (C) 2020 Google LLC.
   5  */
   6
   7 #ifndef _LINUX_BPF_LSM_H
   8 #define _LINUX_BPF_LSM_H
   9
  10 #include <linux/sched.h>
  11 #include <linux/bpf.h>
  12 #include <linux/bpf_verifier.h>
  13 #include <linux/lsm_hooks.h>
  14
  15 #ifdef CONFIG_BPF_LSM
  16
  17 #define LSM_HOOK(RET, DEFAULT, NAME, ...) \
  18         RET bpf_lsm_##NAME(__VA_ARGS__);
  19 #include <linux/lsm_hook_defs.h>
  20 #undef LSM_HOOK
  21
  22 struct bpf_storage_blob {
  23         struct bpf_local_storage __rcu *storage;
  24 };
  25
  26 extern struct lsm_blob_sizes bpf_lsm_blob_sizes;
  27
  28 int bpf_lsm_verify_prog(struct bpf_verifier_log *vlog,
  29                         const struct bpf_prog *prog);
  30
  31 bool bpf_lsm_is_sleepable_hook(u32 btf_id);
  32 bool bpf_lsm_is_trusted(const struct bpf_prog *prog);
  33
  34 static inline struct bpf_storage_blob *bpf_inode(
  35         const struct inode *inode)
  36 {
  37         if (unlikely(!inode->i_security))
  38                 return NULL;
  39
  40         return inode->i_security + bpf_lsm_blob_sizes.lbs_inode;
  41 }
  42
  43 extern const struct bpf_func_proto bpf_inode_storage_get_proto;
  44 extern const struct bpf_func_proto bpf_inode_storage_delete_proto;
  45 void bpf_inode_storage_free(struct inode *inode);
  46
  47 void bpf_lsm_find_cgroup_shim(const struct bpf_prog *prog, bpf_func_t *bpf_func);
  48
  49 int bpf_lsm_get_retval_range(const struct bpf_prog *prog,
  50                              struct bpf_retval_range *range);
  51 #else /* !CONFIG_BPF_LSM */
  52
  53 static inline bool bpf_lsm_is_sleepable_hook(u32 btf_id)
  54 {
  55         return false;
  56 }
  57
  58 static inline bool bpf_lsm_is_trusted(const struct bpf_prog *prog)
  59 {
  60         return false;
  61 }
  62
  63 static inline int bpf_lsm_verify_prog(struct bpf_verifier_log *vlog,
  64                                       const struct bpf_prog *prog)
  65 {
  66         return -EOPNOTSUPP;
  67 }
  68
  69 static inline struct bpf_storage_blob *bpf_inode(
  70         const struct inode *inode)
  71 {
  72         return NULL;
  73 }
  74
  75 static inline void bpf_inode_storage_free(struct inode *inode)
  76 {
  77 }
  78
  79 static inline void bpf_lsm_find_cgroup_shim(const struct bpf_prog *prog,
  80                                            bpf_func_t *bpf_func)
  81 {
  82 }
  83
  84 static inline int bpf_lsm_get_retval_range(const struct bpf_prog *prog,
  85                                            struct bpf_retval_range *range)
  86 {
  87         return -EOPNOTSUPP;
  88 }
  89 #endif /* CONFIG_BPF_LSM */
  90
  91 #endif /* _LINUX_BPF_LSM_H */