Linux Kernel  3.7.1
 All Data Structures Namespaces Files Functions Variables Typedefs Enumerations Enumerator Macros Groups Pages
seccomp.h
Go to the documentation of this file.
1 #ifndef _LINUX_SECCOMP_H
2 #define _LINUX_SECCOMP_H
3 
4 #include <uapi/linux/seccomp.h>
5 
6 #ifdef CONFIG_SECCOMP
7 
8 #include <linux/thread_info.h>
9 #include <asm/seccomp.h>
10 
11 struct seccomp_filter;
23 struct seccomp {
24  int mode;
25  struct seccomp_filter *filter;
26 };
27 
28 extern int __secure_computing(int);
29 static inline int secure_computing(int this_syscall)
30 {
31  if (unlikely(test_thread_flag(TIF_SECCOMP)))
32  return __secure_computing(this_syscall);
33  return 0;
34 }
35 
36 /* A wrapper for architectures supporting only SECCOMP_MODE_STRICT. */
37 static inline void secure_computing_strict(int this_syscall)
38 {
39  BUG_ON(secure_computing(this_syscall) != 0);
40 }
41 
42 extern long prctl_get_seccomp(void);
43 extern long prctl_set_seccomp(unsigned long, char __user *);
44 
45 static inline int seccomp_mode(struct seccomp *s)
46 {
47  return s->mode;
48 }
49 
50 #else /* CONFIG_SECCOMP */
51 
52 #include <linux/errno.h>
53 
54 struct seccomp { };
55 struct seccomp_filter { };
56 
57 static inline int secure_computing(int this_syscall) { return 0; }
58 static inline void secure_computing_strict(int this_syscall) { return; }
59 
60 static inline long prctl_get_seccomp(void)
61 {
62  return -EINVAL;
63 }
64 
65 static inline long prctl_set_seccomp(unsigned long arg2, char __user *arg3)
66 {
67  return -EINVAL;
68 }
69 
70 static inline int seccomp_mode(struct seccomp *s)
71 {
72  return 0;
73 }
74 #endif /* CONFIG_SECCOMP */
75 
76 #ifdef CONFIG_SECCOMP_FILTER
77 extern void put_seccomp_filter(struct task_struct *tsk);
78 extern void get_seccomp_filter(struct task_struct *tsk);
79 extern u32 seccomp_bpf_load(int off);
80 #else /* CONFIG_SECCOMP_FILTER */
81 static inline void put_seccomp_filter(struct task_struct *tsk)
82 {
83  return;
84 }
85 static inline void get_seccomp_filter(struct task_struct *tsk)
86 {
87  return;
88 }
89 #endif /* CONFIG_SECCOMP_FILTER */
90 #endif /* _LINUX_SECCOMP_H */