2 * Stub functions for the default security function pointers in case no
3 * security model is loaded.
5 * Copyright (C) 2001 WireX Communications, Inc <chris@wirex.com>
6 * Copyright (C) 2001-2002 Greg Kroah-Hartman <greg@kroah.com>
7 * Copyright (C) 2001 Networks Associates Technology, Inc <ssmalley@nai.com>
9 * This program is free software; you can redistribute it and/or modify
10 * it under the terms of the GNU General Public License as published by
11 * the Free Software Foundation; either version 2 of the License, or
12 * (at your option) any later version.
17 #include <linux/capability.h>
18 #include <linux/kernel.h>
19 #include <linux/mman.h>
20 #include <linux/pagemap.h>
21 #include <linux/swap.h>
22 #include <linux/security.h>
23 #include <linux/skbuff.h>
24 #include <linux/netlink.h>
26 #include <linux/xattr.h>
27 #include <linux/hugetlb.h>
28 #include <linux/ptrace.h>
29 #include <linux/file.h>
31 static int dummy_ptrace (struct task_struct
*parent
, struct task_struct
*child
)
36 static int dummy_capget (struct task_struct
*target
, kernel_cap_t
* effective
,
37 kernel_cap_t
* inheritable
, kernel_cap_t
* permitted
)
39 if (target
->euid
== 0) {
40 cap_set_full(*permitted
);
41 cap_set_init_eff(*effective
);
43 cap_clear(*permitted
);
44 cap_clear(*effective
);
47 cap_clear(*inheritable
);
49 if (target
->fsuid
!= 0) {
50 *permitted
= cap_drop_fs_set(*permitted
);
51 *effective
= cap_drop_fs_set(*effective
);
56 static int dummy_capset_check (struct task_struct
*target
,
57 kernel_cap_t
* effective
,
58 kernel_cap_t
* inheritable
,
59 kernel_cap_t
* permitted
)
64 static void dummy_capset_set (struct task_struct
*target
,
65 kernel_cap_t
* effective
,
66 kernel_cap_t
* inheritable
,
67 kernel_cap_t
* permitted
)
72 static int dummy_acct (struct file
*file
)
77 static int dummy_capable (struct task_struct
*tsk
, int cap
)
79 if (cap_raised (tsk
->cap_effective
, cap
))
84 static int dummy_sysctl (ctl_table
* table
, int op
)
89 static int dummy_quotactl (int cmds
, int type
, int id
, struct super_block
*sb
)
94 static int dummy_quota_on (struct dentry
*dentry
)
99 static int dummy_syslog (int type
)
101 if ((type
!= 3 && type
!= 10) && current
->euid
)
106 static int dummy_settime(struct timespec
*ts
, struct timezone
*tz
)
108 if (!capable(CAP_SYS_TIME
))
113 static int dummy_vm_enough_memory(struct mm_struct
*mm
, long pages
)
115 int cap_sys_admin
= 0;
117 if (dummy_capable(current
, CAP_SYS_ADMIN
) == 0)
119 return __vm_enough_memory(mm
, pages
, cap_sys_admin
);
122 static int dummy_bprm_alloc_security (struct linux_binprm
*bprm
)
127 static void dummy_bprm_free_security (struct linux_binprm
*bprm
)
132 static void dummy_bprm_apply_creds (struct linux_binprm
*bprm
, int unsafe
)
134 if (bprm
->e_uid
!= current
->uid
|| bprm
->e_gid
!= current
->gid
) {
135 set_dumpable(current
->mm
, suid_dumpable
);
137 if ((unsafe
& ~LSM_UNSAFE_PTRACE_CAP
) && !capable(CAP_SETUID
)) {
138 bprm
->e_uid
= current
->uid
;
139 bprm
->e_gid
= current
->gid
;
143 current
->suid
= current
->euid
= current
->fsuid
= bprm
->e_uid
;
144 current
->sgid
= current
->egid
= current
->fsgid
= bprm
->e_gid
;
146 dummy_capget(current
, ¤t
->cap_effective
, ¤t
->cap_inheritable
, ¤t
->cap_permitted
);
149 static void dummy_bprm_post_apply_creds (struct linux_binprm
*bprm
)
154 static int dummy_bprm_set_security (struct linux_binprm
*bprm
)
159 static int dummy_bprm_check_security (struct linux_binprm
*bprm
)
164 static int dummy_bprm_secureexec (struct linux_binprm
*bprm
)
166 /* The new userland will simply use the value provided
167 in the AT_SECURE field to decide whether secure mode
168 is required. Hence, this logic is required to preserve
169 the legacy decision algorithm used by the old userland. */
170 return (current
->euid
!= current
->uid
||
171 current
->egid
!= current
->gid
);
174 static int dummy_sb_alloc_security (struct super_block
*sb
)
179 static void dummy_sb_free_security (struct super_block
*sb
)
184 static int dummy_sb_copy_data (char *orig
, char *copy
)
189 static int dummy_sb_kern_mount (struct super_block
*sb
, void *data
)
194 static int dummy_sb_statfs (struct dentry
*dentry
)
199 static int dummy_sb_mount (char *dev_name
, struct path
*path
, char *type
,
200 unsigned long flags
, void *data
)
205 static int dummy_sb_check_sb (struct vfsmount
*mnt
, struct path
*path
)
210 static int dummy_sb_umount (struct vfsmount
*mnt
, int flags
)
215 static void dummy_sb_umount_close (struct vfsmount
*mnt
)
220 static void dummy_sb_umount_busy (struct vfsmount
*mnt
)
225 static void dummy_sb_post_remount (struct vfsmount
*mnt
, unsigned long flags
,
232 static void dummy_sb_post_addmount (struct vfsmount
*mnt
, struct path
*path
)
237 static int dummy_sb_pivotroot (struct path
*old_path
, struct path
*new_path
)
242 static void dummy_sb_post_pivotroot (struct path
*old_path
, struct path
*new_path
)
247 static int dummy_sb_get_mnt_opts(const struct super_block
*sb
,
248 struct security_mnt_opts
*opts
)
250 security_init_mnt_opts(opts
);
254 static int dummy_sb_set_mnt_opts(struct super_block
*sb
,
255 struct security_mnt_opts
*opts
)
257 if (unlikely(opts
->num_mnt_opts
))
262 static void dummy_sb_clone_mnt_opts(const struct super_block
*oldsb
,
263 struct super_block
*newsb
)
268 static int dummy_sb_parse_opts_str(char *options
, struct security_mnt_opts
*opts
)
273 static int dummy_inode_alloc_security (struct inode
*inode
)
278 static void dummy_inode_free_security (struct inode
*inode
)
283 static int dummy_inode_init_security (struct inode
*inode
, struct inode
*dir
,
284 char **name
, void **value
, size_t *len
)
289 static int dummy_inode_create (struct inode
*inode
, struct dentry
*dentry
,
295 static int dummy_inode_link (struct dentry
*old_dentry
, struct inode
*inode
,
296 struct dentry
*new_dentry
)
301 static int dummy_inode_unlink (struct inode
*inode
, struct dentry
*dentry
)
306 static int dummy_inode_symlink (struct inode
*inode
, struct dentry
*dentry
,
312 static int dummy_inode_mkdir (struct inode
*inode
, struct dentry
*dentry
,
318 static int dummy_inode_rmdir (struct inode
*inode
, struct dentry
*dentry
)
323 static int dummy_inode_mknod (struct inode
*inode
, struct dentry
*dentry
,
329 static int dummy_inode_rename (struct inode
*old_inode
,
330 struct dentry
*old_dentry
,
331 struct inode
*new_inode
,
332 struct dentry
*new_dentry
)
337 static int dummy_inode_readlink (struct dentry
*dentry
)
342 static int dummy_inode_follow_link (struct dentry
*dentry
,
343 struct nameidata
*nameidata
)
348 static int dummy_inode_permission (struct inode
*inode
, int mask
, struct nameidata
*nd
)
353 static int dummy_inode_setattr (struct dentry
*dentry
, struct iattr
*iattr
)
358 static int dummy_inode_getattr (struct vfsmount
*mnt
, struct dentry
*dentry
)
363 static void dummy_inode_delete (struct inode
*ino
)
368 static int dummy_inode_setxattr (struct dentry
*dentry
, char *name
, void *value
,
369 size_t size
, int flags
)
371 if (!strncmp(name
, XATTR_SECURITY_PREFIX
,
372 sizeof(XATTR_SECURITY_PREFIX
) - 1) &&
373 !capable(CAP_SYS_ADMIN
))
378 static void dummy_inode_post_setxattr (struct dentry
*dentry
, char *name
, void *value
,
379 size_t size
, int flags
)
383 static int dummy_inode_getxattr (struct dentry
*dentry
, char *name
)
388 static int dummy_inode_listxattr (struct dentry
*dentry
)
393 static int dummy_inode_removexattr (struct dentry
*dentry
, char *name
)
395 if (!strncmp(name
, XATTR_SECURITY_PREFIX
,
396 sizeof(XATTR_SECURITY_PREFIX
) - 1) &&
397 !capable(CAP_SYS_ADMIN
))
402 static int dummy_inode_need_killpriv(struct dentry
*dentry
)
407 static int dummy_inode_killpriv(struct dentry
*dentry
)
412 static int dummy_inode_getsecurity(const struct inode
*inode
, const char *name
, void **buffer
, bool alloc
)
417 static int dummy_inode_setsecurity(struct inode
*inode
, const char *name
, const void *value
, size_t size
, int flags
)
422 static int dummy_inode_listsecurity(struct inode
*inode
, char *buffer
, size_t buffer_size
)
427 static void dummy_inode_getsecid(const struct inode
*inode
, u32
*secid
)
432 static int dummy_file_permission (struct file
*file
, int mask
)
437 static int dummy_file_alloc_security (struct file
*file
)
442 static void dummy_file_free_security (struct file
*file
)
447 static int dummy_file_ioctl (struct file
*file
, unsigned int command
,
453 static int dummy_file_mmap (struct file
*file
, unsigned long reqprot
,
457 unsigned long addr_only
)
459 if ((addr
< mmap_min_addr
) && !capable(CAP_SYS_RAWIO
))
464 static int dummy_file_mprotect (struct vm_area_struct
*vma
,
465 unsigned long reqprot
,
471 static int dummy_file_lock (struct file
*file
, unsigned int cmd
)
476 static int dummy_file_fcntl (struct file
*file
, unsigned int cmd
,
482 static int dummy_file_set_fowner (struct file
*file
)
487 static int dummy_file_send_sigiotask (struct task_struct
*tsk
,
488 struct fown_struct
*fown
, int sig
)
493 static int dummy_file_receive (struct file
*file
)
498 static int dummy_dentry_open (struct file
*file
)
503 static int dummy_task_create (unsigned long clone_flags
)
508 static int dummy_task_alloc_security (struct task_struct
*p
)
513 static void dummy_task_free_security (struct task_struct
*p
)
518 static int dummy_task_setuid (uid_t id0
, uid_t id1
, uid_t id2
, int flags
)
523 static int dummy_task_post_setuid (uid_t id0
, uid_t id1
, uid_t id2
, int flags
)
525 dummy_capget(current
, ¤t
->cap_effective
, ¤t
->cap_inheritable
, ¤t
->cap_permitted
);
529 static int dummy_task_setgid (gid_t id0
, gid_t id1
, gid_t id2
, int flags
)
534 static int dummy_task_setpgid (struct task_struct
*p
, pid_t pgid
)
539 static int dummy_task_getpgid (struct task_struct
*p
)
544 static int dummy_task_getsid (struct task_struct
*p
)
549 static void dummy_task_getsecid (struct task_struct
*p
, u32
*secid
)
554 static int dummy_task_setgroups (struct group_info
*group_info
)
559 static int dummy_task_setnice (struct task_struct
*p
, int nice
)
564 static int dummy_task_setioprio (struct task_struct
*p
, int ioprio
)
569 static int dummy_task_getioprio (struct task_struct
*p
)
574 static int dummy_task_setrlimit (unsigned int resource
, struct rlimit
*new_rlim
)
579 static int dummy_task_setscheduler (struct task_struct
*p
, int policy
,
580 struct sched_param
*lp
)
585 static int dummy_task_getscheduler (struct task_struct
*p
)
590 static int dummy_task_movememory (struct task_struct
*p
)
595 static int dummy_task_wait (struct task_struct
*p
)
600 static int dummy_task_kill (struct task_struct
*p
, struct siginfo
*info
,
606 static int dummy_task_prctl (int option
, unsigned long arg2
, unsigned long arg3
,
607 unsigned long arg4
, unsigned long arg5
, long *rc_p
)
612 static void dummy_task_reparent_to_init (struct task_struct
*p
)
614 p
->euid
= p
->fsuid
= 0;
618 static void dummy_task_to_inode(struct task_struct
*p
, struct inode
*inode
)
621 static int dummy_ipc_permission (struct kern_ipc_perm
*ipcp
, short flag
)
626 static void dummy_ipc_getsecid(struct kern_ipc_perm
*ipcp
, u32
*secid
)
631 static int dummy_msg_msg_alloc_security (struct msg_msg
*msg
)
636 static void dummy_msg_msg_free_security (struct msg_msg
*msg
)
641 static int dummy_msg_queue_alloc_security (struct msg_queue
*msq
)
646 static void dummy_msg_queue_free_security (struct msg_queue
*msq
)
651 static int dummy_msg_queue_associate (struct msg_queue
*msq
,
657 static int dummy_msg_queue_msgctl (struct msg_queue
*msq
, int cmd
)
662 static int dummy_msg_queue_msgsnd (struct msg_queue
*msq
, struct msg_msg
*msg
,
668 static int dummy_msg_queue_msgrcv (struct msg_queue
*msq
, struct msg_msg
*msg
,
669 struct task_struct
*target
, long type
,
675 static int dummy_shm_alloc_security (struct shmid_kernel
*shp
)
680 static void dummy_shm_free_security (struct shmid_kernel
*shp
)
685 static int dummy_shm_associate (struct shmid_kernel
*shp
, int shmflg
)
690 static int dummy_shm_shmctl (struct shmid_kernel
*shp
, int cmd
)
695 static int dummy_shm_shmat (struct shmid_kernel
*shp
, char __user
*shmaddr
,
701 static int dummy_sem_alloc_security (struct sem_array
*sma
)
706 static void dummy_sem_free_security (struct sem_array
*sma
)
711 static int dummy_sem_associate (struct sem_array
*sma
, int semflg
)
716 static int dummy_sem_semctl (struct sem_array
*sma
, int cmd
)
721 static int dummy_sem_semop (struct sem_array
*sma
,
722 struct sembuf
*sops
, unsigned nsops
, int alter
)
727 static int dummy_netlink_send (struct sock
*sk
, struct sk_buff
*skb
)
729 NETLINK_CB(skb
).eff_cap
= current
->cap_effective
;
733 static int dummy_netlink_recv (struct sk_buff
*skb
, int cap
)
735 if (!cap_raised (NETLINK_CB (skb
).eff_cap
, cap
))
740 #ifdef CONFIG_SECURITY_NETWORK
741 static int dummy_unix_stream_connect (struct socket
*sock
,
742 struct socket
*other
,
748 static int dummy_unix_may_send (struct socket
*sock
,
749 struct socket
*other
)
754 static int dummy_socket_create (int family
, int type
,
755 int protocol
, int kern
)
760 static int dummy_socket_post_create (struct socket
*sock
, int family
, int type
,
761 int protocol
, int kern
)
766 static int dummy_socket_bind (struct socket
*sock
, struct sockaddr
*address
,
772 static int dummy_socket_connect (struct socket
*sock
, struct sockaddr
*address
,
778 static int dummy_socket_listen (struct socket
*sock
, int backlog
)
783 static int dummy_socket_accept (struct socket
*sock
, struct socket
*newsock
)
788 static void dummy_socket_post_accept (struct socket
*sock
,
789 struct socket
*newsock
)
794 static int dummy_socket_sendmsg (struct socket
*sock
, struct msghdr
*msg
,
800 static int dummy_socket_recvmsg (struct socket
*sock
, struct msghdr
*msg
,
806 static int dummy_socket_getsockname (struct socket
*sock
)
811 static int dummy_socket_getpeername (struct socket
*sock
)
816 static int dummy_socket_setsockopt (struct socket
*sock
, int level
, int optname
)
821 static int dummy_socket_getsockopt (struct socket
*sock
, int level
, int optname
)
826 static int dummy_socket_shutdown (struct socket
*sock
, int how
)
831 static int dummy_socket_sock_rcv_skb (struct sock
*sk
, struct sk_buff
*skb
)
836 static int dummy_socket_getpeersec_stream(struct socket
*sock
, char __user
*optval
,
837 int __user
*optlen
, unsigned len
)
842 static int dummy_socket_getpeersec_dgram(struct socket
*sock
, struct sk_buff
*skb
, u32
*secid
)
847 static inline int dummy_sk_alloc_security (struct sock
*sk
, int family
, gfp_t priority
)
852 static inline void dummy_sk_free_security (struct sock
*sk
)
856 static inline void dummy_sk_clone_security (const struct sock
*sk
, struct sock
*newsk
)
860 static inline void dummy_sk_getsecid(struct sock
*sk
, u32
*secid
)
864 static inline void dummy_sock_graft(struct sock
* sk
, struct socket
*parent
)
868 static inline int dummy_inet_conn_request(struct sock
*sk
,
869 struct sk_buff
*skb
, struct request_sock
*req
)
874 static inline void dummy_inet_csk_clone(struct sock
*newsk
,
875 const struct request_sock
*req
)
879 static inline void dummy_inet_conn_established(struct sock
*sk
,
884 static inline void dummy_req_classify_flow(const struct request_sock
*req
,
888 #endif /* CONFIG_SECURITY_NETWORK */
890 #ifdef CONFIG_SECURITY_NETWORK_XFRM
891 static int dummy_xfrm_policy_alloc_security(struct xfrm_sec_ctx
**ctxp
,
892 struct xfrm_user_sec_ctx
*sec_ctx
)
897 static inline int dummy_xfrm_policy_clone_security(struct xfrm_sec_ctx
*old_ctx
,
898 struct xfrm_sec_ctx
**new_ctxp
)
903 static void dummy_xfrm_policy_free_security(struct xfrm_sec_ctx
*ctx
)
907 static int dummy_xfrm_policy_delete_security(struct xfrm_sec_ctx
*ctx
)
912 static int dummy_xfrm_state_alloc_security(struct xfrm_state
*x
,
913 struct xfrm_user_sec_ctx
*sec_ctx
, u32 secid
)
918 static void dummy_xfrm_state_free_security(struct xfrm_state
*x
)
922 static int dummy_xfrm_state_delete_security(struct xfrm_state
*x
)
927 static int dummy_xfrm_policy_lookup(struct xfrm_sec_ctx
*ctx
,
933 static int dummy_xfrm_state_pol_flow_match(struct xfrm_state
*x
,
934 struct xfrm_policy
*xp
, struct flowi
*fl
)
939 static int dummy_xfrm_decode_session(struct sk_buff
*skb
, u32
*fl
, int ckall
)
944 #endif /* CONFIG_SECURITY_NETWORK_XFRM */
945 static int dummy_register_security (const char *name
, struct security_operations
*ops
)
950 static void dummy_d_instantiate (struct dentry
*dentry
, struct inode
*inode
)
955 static int dummy_getprocattr(struct task_struct
*p
, char *name
, char **value
)
960 static int dummy_setprocattr(struct task_struct
*p
, char *name
, void *value
, size_t size
)
965 static int dummy_secid_to_secctx(u32 secid
, char **secdata
, u32
*seclen
)
970 static int dummy_secctx_to_secid(char *secdata
, u32 seclen
, u32
*secid
)
975 static void dummy_release_secctx(char *secdata
, u32 seclen
)
980 static inline int dummy_key_alloc(struct key
*key
, struct task_struct
*ctx
,
986 static inline void dummy_key_free(struct key
*key
)
990 static inline int dummy_key_permission(key_ref_t key_ref
,
991 struct task_struct
*context
,
996 #endif /* CONFIG_KEYS */
999 static inline int dummy_audit_rule_init(u32 field
, u32 op
, char *rulestr
,
1005 static inline int dummy_audit_rule_known(struct audit_krule
*krule
)
1010 static inline int dummy_audit_rule_match(u32 secid
, u32 field
, u32 op
,
1012 struct audit_context
*actx
)
1017 static inline void dummy_audit_rule_free(void *lsmrule
)
1020 #endif /* CONFIG_AUDIT */
1022 struct security_operations dummy_security_ops
= {
1026 #define set_to_dummy_if_null(ops, function) \
1028 if (!ops->function) { \
1029 ops->function = dummy_##function; \
1030 pr_debug("Had to override the " #function \
1031 " security operation with the dummy one.\n");\
1035 void security_fixup_ops (struct security_operations
*ops
)
1037 set_to_dummy_if_null(ops
, ptrace
);
1038 set_to_dummy_if_null(ops
, capget
);
1039 set_to_dummy_if_null(ops
, capset_check
);
1040 set_to_dummy_if_null(ops
, capset_set
);
1041 set_to_dummy_if_null(ops
, acct
);
1042 set_to_dummy_if_null(ops
, capable
);
1043 set_to_dummy_if_null(ops
, quotactl
);
1044 set_to_dummy_if_null(ops
, quota_on
);
1045 set_to_dummy_if_null(ops
, sysctl
);
1046 set_to_dummy_if_null(ops
, syslog
);
1047 set_to_dummy_if_null(ops
, settime
);
1048 set_to_dummy_if_null(ops
, vm_enough_memory
);
1049 set_to_dummy_if_null(ops
, bprm_alloc_security
);
1050 set_to_dummy_if_null(ops
, bprm_free_security
);
1051 set_to_dummy_if_null(ops
, bprm_apply_creds
);
1052 set_to_dummy_if_null(ops
, bprm_post_apply_creds
);
1053 set_to_dummy_if_null(ops
, bprm_set_security
);
1054 set_to_dummy_if_null(ops
, bprm_check_security
);
1055 set_to_dummy_if_null(ops
, bprm_secureexec
);
1056 set_to_dummy_if_null(ops
, sb_alloc_security
);
1057 set_to_dummy_if_null(ops
, sb_free_security
);
1058 set_to_dummy_if_null(ops
, sb_copy_data
);
1059 set_to_dummy_if_null(ops
, sb_kern_mount
);
1060 set_to_dummy_if_null(ops
, sb_statfs
);
1061 set_to_dummy_if_null(ops
, sb_mount
);
1062 set_to_dummy_if_null(ops
, sb_check_sb
);
1063 set_to_dummy_if_null(ops
, sb_umount
);
1064 set_to_dummy_if_null(ops
, sb_umount_close
);
1065 set_to_dummy_if_null(ops
, sb_umount_busy
);
1066 set_to_dummy_if_null(ops
, sb_post_remount
);
1067 set_to_dummy_if_null(ops
, sb_post_addmount
);
1068 set_to_dummy_if_null(ops
, sb_pivotroot
);
1069 set_to_dummy_if_null(ops
, sb_post_pivotroot
);
1070 set_to_dummy_if_null(ops
, sb_get_mnt_opts
);
1071 set_to_dummy_if_null(ops
, sb_set_mnt_opts
);
1072 set_to_dummy_if_null(ops
, sb_clone_mnt_opts
);
1073 set_to_dummy_if_null(ops
, sb_parse_opts_str
);
1074 set_to_dummy_if_null(ops
, inode_alloc_security
);
1075 set_to_dummy_if_null(ops
, inode_free_security
);
1076 set_to_dummy_if_null(ops
, inode_init_security
);
1077 set_to_dummy_if_null(ops
, inode_create
);
1078 set_to_dummy_if_null(ops
, inode_link
);
1079 set_to_dummy_if_null(ops
, inode_unlink
);
1080 set_to_dummy_if_null(ops
, inode_symlink
);
1081 set_to_dummy_if_null(ops
, inode_mkdir
);
1082 set_to_dummy_if_null(ops
, inode_rmdir
);
1083 set_to_dummy_if_null(ops
, inode_mknod
);
1084 set_to_dummy_if_null(ops
, inode_rename
);
1085 set_to_dummy_if_null(ops
, inode_readlink
);
1086 set_to_dummy_if_null(ops
, inode_follow_link
);
1087 set_to_dummy_if_null(ops
, inode_permission
);
1088 set_to_dummy_if_null(ops
, inode_setattr
);
1089 set_to_dummy_if_null(ops
, inode_getattr
);
1090 set_to_dummy_if_null(ops
, inode_delete
);
1091 set_to_dummy_if_null(ops
, inode_setxattr
);
1092 set_to_dummy_if_null(ops
, inode_post_setxattr
);
1093 set_to_dummy_if_null(ops
, inode_getxattr
);
1094 set_to_dummy_if_null(ops
, inode_listxattr
);
1095 set_to_dummy_if_null(ops
, inode_removexattr
);
1096 set_to_dummy_if_null(ops
, inode_need_killpriv
);
1097 set_to_dummy_if_null(ops
, inode_killpriv
);
1098 set_to_dummy_if_null(ops
, inode_getsecurity
);
1099 set_to_dummy_if_null(ops
, inode_setsecurity
);
1100 set_to_dummy_if_null(ops
, inode_listsecurity
);
1101 set_to_dummy_if_null(ops
, inode_getsecid
);
1102 set_to_dummy_if_null(ops
, file_permission
);
1103 set_to_dummy_if_null(ops
, file_alloc_security
);
1104 set_to_dummy_if_null(ops
, file_free_security
);
1105 set_to_dummy_if_null(ops
, file_ioctl
);
1106 set_to_dummy_if_null(ops
, file_mmap
);
1107 set_to_dummy_if_null(ops
, file_mprotect
);
1108 set_to_dummy_if_null(ops
, file_lock
);
1109 set_to_dummy_if_null(ops
, file_fcntl
);
1110 set_to_dummy_if_null(ops
, file_set_fowner
);
1111 set_to_dummy_if_null(ops
, file_send_sigiotask
);
1112 set_to_dummy_if_null(ops
, file_receive
);
1113 set_to_dummy_if_null(ops
, dentry_open
);
1114 set_to_dummy_if_null(ops
, task_create
);
1115 set_to_dummy_if_null(ops
, task_alloc_security
);
1116 set_to_dummy_if_null(ops
, task_free_security
);
1117 set_to_dummy_if_null(ops
, task_setuid
);
1118 set_to_dummy_if_null(ops
, task_post_setuid
);
1119 set_to_dummy_if_null(ops
, task_setgid
);
1120 set_to_dummy_if_null(ops
, task_setpgid
);
1121 set_to_dummy_if_null(ops
, task_getpgid
);
1122 set_to_dummy_if_null(ops
, task_getsid
);
1123 set_to_dummy_if_null(ops
, task_getsecid
);
1124 set_to_dummy_if_null(ops
, task_setgroups
);
1125 set_to_dummy_if_null(ops
, task_setnice
);
1126 set_to_dummy_if_null(ops
, task_setioprio
);
1127 set_to_dummy_if_null(ops
, task_getioprio
);
1128 set_to_dummy_if_null(ops
, task_setrlimit
);
1129 set_to_dummy_if_null(ops
, task_setscheduler
);
1130 set_to_dummy_if_null(ops
, task_getscheduler
);
1131 set_to_dummy_if_null(ops
, task_movememory
);
1132 set_to_dummy_if_null(ops
, task_wait
);
1133 set_to_dummy_if_null(ops
, task_kill
);
1134 set_to_dummy_if_null(ops
, task_prctl
);
1135 set_to_dummy_if_null(ops
, task_reparent_to_init
);
1136 set_to_dummy_if_null(ops
, task_to_inode
);
1137 set_to_dummy_if_null(ops
, ipc_permission
);
1138 set_to_dummy_if_null(ops
, ipc_getsecid
);
1139 set_to_dummy_if_null(ops
, msg_msg_alloc_security
);
1140 set_to_dummy_if_null(ops
, msg_msg_free_security
);
1141 set_to_dummy_if_null(ops
, msg_queue_alloc_security
);
1142 set_to_dummy_if_null(ops
, msg_queue_free_security
);
1143 set_to_dummy_if_null(ops
, msg_queue_associate
);
1144 set_to_dummy_if_null(ops
, msg_queue_msgctl
);
1145 set_to_dummy_if_null(ops
, msg_queue_msgsnd
);
1146 set_to_dummy_if_null(ops
, msg_queue_msgrcv
);
1147 set_to_dummy_if_null(ops
, shm_alloc_security
);
1148 set_to_dummy_if_null(ops
, shm_free_security
);
1149 set_to_dummy_if_null(ops
, shm_associate
);
1150 set_to_dummy_if_null(ops
, shm_shmctl
);
1151 set_to_dummy_if_null(ops
, shm_shmat
);
1152 set_to_dummy_if_null(ops
, sem_alloc_security
);
1153 set_to_dummy_if_null(ops
, sem_free_security
);
1154 set_to_dummy_if_null(ops
, sem_associate
);
1155 set_to_dummy_if_null(ops
, sem_semctl
);
1156 set_to_dummy_if_null(ops
, sem_semop
);
1157 set_to_dummy_if_null(ops
, netlink_send
);
1158 set_to_dummy_if_null(ops
, netlink_recv
);
1159 set_to_dummy_if_null(ops
, register_security
);
1160 set_to_dummy_if_null(ops
, d_instantiate
);
1161 set_to_dummy_if_null(ops
, getprocattr
);
1162 set_to_dummy_if_null(ops
, setprocattr
);
1163 set_to_dummy_if_null(ops
, secid_to_secctx
);
1164 set_to_dummy_if_null(ops
, secctx_to_secid
);
1165 set_to_dummy_if_null(ops
, release_secctx
);
1166 #ifdef CONFIG_SECURITY_NETWORK
1167 set_to_dummy_if_null(ops
, unix_stream_connect
);
1168 set_to_dummy_if_null(ops
, unix_may_send
);
1169 set_to_dummy_if_null(ops
, socket_create
);
1170 set_to_dummy_if_null(ops
, socket_post_create
);
1171 set_to_dummy_if_null(ops
, socket_bind
);
1172 set_to_dummy_if_null(ops
, socket_connect
);
1173 set_to_dummy_if_null(ops
, socket_listen
);
1174 set_to_dummy_if_null(ops
, socket_accept
);
1175 set_to_dummy_if_null(ops
, socket_post_accept
);
1176 set_to_dummy_if_null(ops
, socket_sendmsg
);
1177 set_to_dummy_if_null(ops
, socket_recvmsg
);
1178 set_to_dummy_if_null(ops
, socket_getsockname
);
1179 set_to_dummy_if_null(ops
, socket_getpeername
);
1180 set_to_dummy_if_null(ops
, socket_setsockopt
);
1181 set_to_dummy_if_null(ops
, socket_getsockopt
);
1182 set_to_dummy_if_null(ops
, socket_shutdown
);
1183 set_to_dummy_if_null(ops
, socket_sock_rcv_skb
);
1184 set_to_dummy_if_null(ops
, socket_getpeersec_stream
);
1185 set_to_dummy_if_null(ops
, socket_getpeersec_dgram
);
1186 set_to_dummy_if_null(ops
, sk_alloc_security
);
1187 set_to_dummy_if_null(ops
, sk_free_security
);
1188 set_to_dummy_if_null(ops
, sk_clone_security
);
1189 set_to_dummy_if_null(ops
, sk_getsecid
);
1190 set_to_dummy_if_null(ops
, sock_graft
);
1191 set_to_dummy_if_null(ops
, inet_conn_request
);
1192 set_to_dummy_if_null(ops
, inet_csk_clone
);
1193 set_to_dummy_if_null(ops
, inet_conn_established
);
1194 set_to_dummy_if_null(ops
, req_classify_flow
);
1195 #endif /* CONFIG_SECURITY_NETWORK */
1196 #ifdef CONFIG_SECURITY_NETWORK_XFRM
1197 set_to_dummy_if_null(ops
, xfrm_policy_alloc_security
);
1198 set_to_dummy_if_null(ops
, xfrm_policy_clone_security
);
1199 set_to_dummy_if_null(ops
, xfrm_policy_free_security
);
1200 set_to_dummy_if_null(ops
, xfrm_policy_delete_security
);
1201 set_to_dummy_if_null(ops
, xfrm_state_alloc_security
);
1202 set_to_dummy_if_null(ops
, xfrm_state_free_security
);
1203 set_to_dummy_if_null(ops
, xfrm_state_delete_security
);
1204 set_to_dummy_if_null(ops
, xfrm_policy_lookup
);
1205 set_to_dummy_if_null(ops
, xfrm_state_pol_flow_match
);
1206 set_to_dummy_if_null(ops
, xfrm_decode_session
);
1207 #endif /* CONFIG_SECURITY_NETWORK_XFRM */
1209 set_to_dummy_if_null(ops
, key_alloc
);
1210 set_to_dummy_if_null(ops
, key_free
);
1211 set_to_dummy_if_null(ops
, key_permission
);
1212 #endif /* CONFIG_KEYS */
1214 set_to_dummy_if_null(ops
, audit_rule_init
);
1215 set_to_dummy_if_null(ops
, audit_rule_known
);
1216 set_to_dummy_if_null(ops
, audit_rule_match
);
1217 set_to_dummy_if_null(ops
, audit_rule_free
);