2 * Stub functions for the default security function pointers in case no
3 * security model is loaded.
5 * Copyright (C) 2001 WireX Communications, Inc <chris@wirex.com>
6 * Copyright (C) 2001-2002 Greg Kroah-Hartman <greg@kroah.com>
7 * Copyright (C) 2001 Networks Associates Technology, Inc <ssmalley@nai.com>
9 * This program is free software; you can redistribute it and/or modify
10 * it under the terms of the GNU General Public License as published by
11 * the Free Software Foundation; either version 2 of the License, or
12 * (at your option) any later version.
17 #include <linux/capability.h>
18 #include <linux/module.h>
19 #include <linux/kernel.h>
20 #include <linux/mman.h>
21 #include <linux/pagemap.h>
22 #include <linux/swap.h>
23 #include <linux/security.h>
24 #include <linux/skbuff.h>
25 #include <linux/netlink.h>
27 #include <linux/xattr.h>
28 #include <linux/hugetlb.h>
29 #include <linux/ptrace.h>
30 #include <linux/file.h>
32 static int dummy_ptrace (struct task_struct
*parent
, struct task_struct
*child
)
37 static int dummy_capget (struct task_struct
*target
, kernel_cap_t
* effective
,
38 kernel_cap_t
* inheritable
, kernel_cap_t
* permitted
)
40 *effective
= *inheritable
= *permitted
= 0;
41 if (!issecure(SECURE_NOROOT
)) {
42 if (target
->euid
== 0) {
43 *permitted
|= (~0 & ~CAP_FS_MASK
);
44 *effective
|= (~0 & ~CAP_TO_MASK(CAP_SETPCAP
) & ~CAP_FS_MASK
);
46 if (target
->fsuid
== 0) {
47 *permitted
|= CAP_FS_MASK
;
48 *effective
|= CAP_FS_MASK
;
54 static int dummy_capset_check (struct task_struct
*target
,
55 kernel_cap_t
* effective
,
56 kernel_cap_t
* inheritable
,
57 kernel_cap_t
* permitted
)
62 static void dummy_capset_set (struct task_struct
*target
,
63 kernel_cap_t
* effective
,
64 kernel_cap_t
* inheritable
,
65 kernel_cap_t
* permitted
)
70 static int dummy_acct (struct file
*file
)
75 static int dummy_capable (struct task_struct
*tsk
, int cap
)
77 if (cap_raised (tsk
->cap_effective
, cap
))
82 static int dummy_sysctl (ctl_table
* table
, int op
)
87 static int dummy_quotactl (int cmds
, int type
, int id
, struct super_block
*sb
)
92 static int dummy_quota_on (struct dentry
*dentry
)
97 static int dummy_syslog (int type
)
99 if ((type
!= 3 && type
!= 10) && current
->euid
)
104 static int dummy_settime(struct timespec
*ts
, struct timezone
*tz
)
106 if (!capable(CAP_SYS_TIME
))
111 static int dummy_vm_enough_memory(long pages
)
113 int cap_sys_admin
= 0;
115 if (dummy_capable(current
, CAP_SYS_ADMIN
) == 0)
117 return __vm_enough_memory(pages
, cap_sys_admin
);
120 static int dummy_bprm_alloc_security (struct linux_binprm
*bprm
)
125 static void dummy_bprm_free_security (struct linux_binprm
*bprm
)
130 static void dummy_bprm_apply_creds (struct linux_binprm
*bprm
, int unsafe
)
132 if (bprm
->e_uid
!= current
->uid
|| bprm
->e_gid
!= current
->gid
) {
133 current
->mm
->dumpable
= suid_dumpable
;
135 if ((unsafe
& ~LSM_UNSAFE_PTRACE_CAP
) && !capable(CAP_SETUID
)) {
136 bprm
->e_uid
= current
->uid
;
137 bprm
->e_gid
= current
->gid
;
141 current
->suid
= current
->euid
= current
->fsuid
= bprm
->e_uid
;
142 current
->sgid
= current
->egid
= current
->fsgid
= bprm
->e_gid
;
144 dummy_capget(current
, ¤t
->cap_effective
, ¤t
->cap_inheritable
, ¤t
->cap_permitted
);
147 static void dummy_bprm_post_apply_creds (struct linux_binprm
*bprm
)
152 static int dummy_bprm_set_security (struct linux_binprm
*bprm
)
157 static int dummy_bprm_check_security (struct linux_binprm
*bprm
)
162 static int dummy_bprm_secureexec (struct linux_binprm
*bprm
)
164 /* The new userland will simply use the value provided
165 in the AT_SECURE field to decide whether secure mode
166 is required. Hence, this logic is required to preserve
167 the legacy decision algorithm used by the old userland. */
168 return (current
->euid
!= current
->uid
||
169 current
->egid
!= current
->gid
);
172 static int dummy_sb_alloc_security (struct super_block
*sb
)
177 static void dummy_sb_free_security (struct super_block
*sb
)
182 static int dummy_sb_copy_data (struct file_system_type
*type
,
183 void *orig
, void *copy
)
188 static int dummy_sb_kern_mount (struct super_block
*sb
, void *data
)
193 static int dummy_sb_statfs (struct dentry
*dentry
)
198 static int dummy_sb_mount (char *dev_name
, struct nameidata
*nd
, char *type
,
199 unsigned long flags
, void *data
)
204 static int dummy_sb_check_sb (struct vfsmount
*mnt
, struct nameidata
*nd
)
209 static int dummy_sb_umount (struct vfsmount
*mnt
, int flags
)
214 static void dummy_sb_umount_close (struct vfsmount
*mnt
)
219 static void dummy_sb_umount_busy (struct vfsmount
*mnt
)
224 static void dummy_sb_post_remount (struct vfsmount
*mnt
, unsigned long flags
,
231 static void dummy_sb_post_mountroot (void)
236 static void dummy_sb_post_addmount (struct vfsmount
*mnt
, struct nameidata
*nd
)
241 static int dummy_sb_pivotroot (struct nameidata
*old_nd
, struct nameidata
*new_nd
)
246 static void dummy_sb_post_pivotroot (struct nameidata
*old_nd
, struct nameidata
*new_nd
)
251 static int dummy_inode_alloc_security (struct inode
*inode
)
256 static void dummy_inode_free_security (struct inode
*inode
)
261 static int dummy_inode_init_security (struct inode
*inode
, struct inode
*dir
,
262 char **name
, void **value
, size_t *len
)
267 static int dummy_inode_create (struct inode
*inode
, struct dentry
*dentry
,
273 static int dummy_inode_link (struct dentry
*old_dentry
, struct inode
*inode
,
274 struct dentry
*new_dentry
)
279 static int dummy_inode_unlink (struct inode
*inode
, struct dentry
*dentry
)
284 static int dummy_inode_symlink (struct inode
*inode
, struct dentry
*dentry
,
290 static int dummy_inode_mkdir (struct inode
*inode
, struct dentry
*dentry
,
296 static int dummy_inode_rmdir (struct inode
*inode
, struct dentry
*dentry
)
301 static int dummy_inode_mknod (struct inode
*inode
, struct dentry
*dentry
,
307 static int dummy_inode_rename (struct inode
*old_inode
,
308 struct dentry
*old_dentry
,
309 struct inode
*new_inode
,
310 struct dentry
*new_dentry
)
315 static int dummy_inode_readlink (struct dentry
*dentry
)
320 static int dummy_inode_follow_link (struct dentry
*dentry
,
321 struct nameidata
*nameidata
)
326 static int dummy_inode_permission (struct inode
*inode
, int mask
, struct nameidata
*nd
)
331 static int dummy_inode_setattr (struct dentry
*dentry
, struct iattr
*iattr
)
336 static int dummy_inode_getattr (struct vfsmount
*mnt
, struct dentry
*dentry
)
341 static void dummy_inode_delete (struct inode
*ino
)
346 static int dummy_inode_setxattr (struct dentry
*dentry
, char *name
, void *value
,
347 size_t size
, int flags
)
349 if (!strncmp(name
, XATTR_SECURITY_PREFIX
,
350 sizeof(XATTR_SECURITY_PREFIX
) - 1) &&
351 !capable(CAP_SYS_ADMIN
))
356 static void dummy_inode_post_setxattr (struct dentry
*dentry
, char *name
, void *value
,
357 size_t size
, int flags
)
361 static int dummy_inode_getxattr (struct dentry
*dentry
, char *name
)
366 static int dummy_inode_listxattr (struct dentry
*dentry
)
371 static int dummy_inode_removexattr (struct dentry
*dentry
, char *name
)
373 if (!strncmp(name
, XATTR_SECURITY_PREFIX
,
374 sizeof(XATTR_SECURITY_PREFIX
) - 1) &&
375 !capable(CAP_SYS_ADMIN
))
380 static int dummy_inode_getsecurity(const struct inode
*inode
, const char *name
, void *buffer
, size_t size
, int err
)
385 static int dummy_inode_setsecurity(struct inode
*inode
, const char *name
, const void *value
, size_t size
, int flags
)
390 static int dummy_inode_listsecurity(struct inode
*inode
, char *buffer
, size_t buffer_size
)
395 static const char *dummy_inode_xattr_getsuffix(void)
400 static int dummy_file_permission (struct file
*file
, int mask
)
405 static int dummy_file_alloc_security (struct file
*file
)
410 static void dummy_file_free_security (struct file
*file
)
415 static int dummy_file_ioctl (struct file
*file
, unsigned int command
,
421 static int dummy_file_mmap (struct file
*file
, unsigned long reqprot
,
428 static int dummy_file_mprotect (struct vm_area_struct
*vma
,
429 unsigned long reqprot
,
435 static int dummy_file_lock (struct file
*file
, unsigned int cmd
)
440 static int dummy_file_fcntl (struct file
*file
, unsigned int cmd
,
446 static int dummy_file_set_fowner (struct file
*file
)
451 static int dummy_file_send_sigiotask (struct task_struct
*tsk
,
452 struct fown_struct
*fown
, int sig
)
457 static int dummy_file_receive (struct file
*file
)
462 static int dummy_task_create (unsigned long clone_flags
)
467 static int dummy_task_alloc_security (struct task_struct
*p
)
472 static void dummy_task_free_security (struct task_struct
*p
)
477 static int dummy_task_setuid (uid_t id0
, uid_t id1
, uid_t id2
, int flags
)
482 static int dummy_task_post_setuid (uid_t id0
, uid_t id1
, uid_t id2
, int flags
)
484 dummy_capget(current
, ¤t
->cap_effective
, ¤t
->cap_inheritable
, ¤t
->cap_permitted
);
488 static int dummy_task_setgid (gid_t id0
, gid_t id1
, gid_t id2
, int flags
)
493 static int dummy_task_setpgid (struct task_struct
*p
, pid_t pgid
)
498 static int dummy_task_getpgid (struct task_struct
*p
)
503 static int dummy_task_getsid (struct task_struct
*p
)
508 static void dummy_task_getsecid (struct task_struct
*p
, u32
*secid
)
511 static int dummy_task_setgroups (struct group_info
*group_info
)
516 static int dummy_task_setnice (struct task_struct
*p
, int nice
)
521 static int dummy_task_setioprio (struct task_struct
*p
, int ioprio
)
526 static int dummy_task_getioprio (struct task_struct
*p
)
531 static int dummy_task_setrlimit (unsigned int resource
, struct rlimit
*new_rlim
)
536 static int dummy_task_setscheduler (struct task_struct
*p
, int policy
,
537 struct sched_param
*lp
)
542 static int dummy_task_getscheduler (struct task_struct
*p
)
547 static int dummy_task_movememory (struct task_struct
*p
)
552 static int dummy_task_wait (struct task_struct
*p
)
557 static int dummy_task_kill (struct task_struct
*p
, struct siginfo
*info
,
563 static int dummy_task_prctl (int option
, unsigned long arg2
, unsigned long arg3
,
564 unsigned long arg4
, unsigned long arg5
)
569 static void dummy_task_reparent_to_init (struct task_struct
*p
)
571 p
->euid
= p
->fsuid
= 0;
575 static void dummy_task_to_inode(struct task_struct
*p
, struct inode
*inode
)
578 static int dummy_ipc_permission (struct kern_ipc_perm
*ipcp
, short flag
)
583 static int dummy_msg_msg_alloc_security (struct msg_msg
*msg
)
588 static void dummy_msg_msg_free_security (struct msg_msg
*msg
)
593 static int dummy_msg_queue_alloc_security (struct msg_queue
*msq
)
598 static void dummy_msg_queue_free_security (struct msg_queue
*msq
)
603 static int dummy_msg_queue_associate (struct msg_queue
*msq
,
609 static int dummy_msg_queue_msgctl (struct msg_queue
*msq
, int cmd
)
614 static int dummy_msg_queue_msgsnd (struct msg_queue
*msq
, struct msg_msg
*msg
,
620 static int dummy_msg_queue_msgrcv (struct msg_queue
*msq
, struct msg_msg
*msg
,
621 struct task_struct
*target
, long type
,
627 static int dummy_shm_alloc_security (struct shmid_kernel
*shp
)
632 static void dummy_shm_free_security (struct shmid_kernel
*shp
)
637 static int dummy_shm_associate (struct shmid_kernel
*shp
, int shmflg
)
642 static int dummy_shm_shmctl (struct shmid_kernel
*shp
, int cmd
)
647 static int dummy_shm_shmat (struct shmid_kernel
*shp
, char __user
*shmaddr
,
653 static int dummy_sem_alloc_security (struct sem_array
*sma
)
658 static void dummy_sem_free_security (struct sem_array
*sma
)
663 static int dummy_sem_associate (struct sem_array
*sma
, int semflg
)
668 static int dummy_sem_semctl (struct sem_array
*sma
, int cmd
)
673 static int dummy_sem_semop (struct sem_array
*sma
,
674 struct sembuf
*sops
, unsigned nsops
, int alter
)
679 static int dummy_netlink_send (struct sock
*sk
, struct sk_buff
*skb
)
681 NETLINK_CB(skb
).eff_cap
= current
->cap_effective
;
685 static int dummy_netlink_recv (struct sk_buff
*skb
, int cap
)
687 if (!cap_raised (NETLINK_CB (skb
).eff_cap
, cap
))
692 #ifdef CONFIG_SECURITY_NETWORK
693 static int dummy_unix_stream_connect (struct socket
*sock
,
694 struct socket
*other
,
700 static int dummy_unix_may_send (struct socket
*sock
,
701 struct socket
*other
)
706 static int dummy_socket_create (int family
, int type
,
707 int protocol
, int kern
)
712 static void dummy_socket_post_create (struct socket
*sock
, int family
, int type
,
713 int protocol
, int kern
)
718 static int dummy_socket_bind (struct socket
*sock
, struct sockaddr
*address
,
724 static int dummy_socket_connect (struct socket
*sock
, struct sockaddr
*address
,
730 static int dummy_socket_listen (struct socket
*sock
, int backlog
)
735 static int dummy_socket_accept (struct socket
*sock
, struct socket
*newsock
)
740 static void dummy_socket_post_accept (struct socket
*sock
,
741 struct socket
*newsock
)
746 static int dummy_socket_sendmsg (struct socket
*sock
, struct msghdr
*msg
,
752 static int dummy_socket_recvmsg (struct socket
*sock
, struct msghdr
*msg
,
758 static int dummy_socket_getsockname (struct socket
*sock
)
763 static int dummy_socket_getpeername (struct socket
*sock
)
768 static int dummy_socket_setsockopt (struct socket
*sock
, int level
, int optname
)
773 static int dummy_socket_getsockopt (struct socket
*sock
, int level
, int optname
)
778 static int dummy_socket_shutdown (struct socket
*sock
, int how
)
783 static int dummy_socket_sock_rcv_skb (struct sock
*sk
, struct sk_buff
*skb
)
788 static int dummy_socket_getpeersec_stream(struct socket
*sock
, char __user
*optval
,
789 int __user
*optlen
, unsigned len
)
794 static int dummy_socket_getpeersec_dgram(struct sk_buff
*skb
, char **secdata
,
800 static inline int dummy_sk_alloc_security (struct sock
*sk
, int family
, gfp_t priority
)
805 static inline void dummy_sk_free_security (struct sock
*sk
)
809 static unsigned int dummy_sk_getsid(struct sock
*sk
, struct flowi
*fl
, u8 dir
)
813 #endif /* CONFIG_SECURITY_NETWORK */
815 #ifdef CONFIG_SECURITY_NETWORK_XFRM
816 static int dummy_xfrm_policy_alloc_security(struct xfrm_policy
*xp
, struct xfrm_user_sec_ctx
*sec_ctx
)
821 static inline int dummy_xfrm_policy_clone_security(struct xfrm_policy
*old
, struct xfrm_policy
*new)
826 static void dummy_xfrm_policy_free_security(struct xfrm_policy
*xp
)
830 static int dummy_xfrm_policy_delete_security(struct xfrm_policy
*xp
)
835 static int dummy_xfrm_state_alloc_security(struct xfrm_state
*x
, struct xfrm_user_sec_ctx
*sec_ctx
)
840 static void dummy_xfrm_state_free_security(struct xfrm_state
*x
)
844 static int dummy_xfrm_state_delete_security(struct xfrm_state
*x
)
849 static int dummy_xfrm_policy_lookup(struct xfrm_policy
*xp
, u32 sk_sid
, u8 dir
)
853 #endif /* CONFIG_SECURITY_NETWORK_XFRM */
854 static int dummy_register_security (const char *name
, struct security_operations
*ops
)
859 static int dummy_unregister_security (const char *name
, struct security_operations
*ops
)
864 static void dummy_d_instantiate (struct dentry
*dentry
, struct inode
*inode
)
869 static int dummy_getprocattr(struct task_struct
*p
, char *name
, void *value
, size_t size
)
874 static int dummy_setprocattr(struct task_struct
*p
, char *name
, void *value
, size_t size
)
880 static inline int dummy_key_alloc(struct key
*key
, struct task_struct
*ctx
,
886 static inline void dummy_key_free(struct key
*key
)
890 static inline int dummy_key_permission(key_ref_t key_ref
,
891 struct task_struct
*context
,
896 #endif /* CONFIG_KEYS */
898 struct security_operations dummy_security_ops
;
900 #define set_to_dummy_if_null(ops, function) \
902 if (!ops->function) { \
903 ops->function = dummy_##function; \
904 pr_debug("Had to override the " #function \
905 " security operation with the dummy one.\n");\
909 void security_fixup_ops (struct security_operations
*ops
)
911 set_to_dummy_if_null(ops
, ptrace
);
912 set_to_dummy_if_null(ops
, capget
);
913 set_to_dummy_if_null(ops
, capset_check
);
914 set_to_dummy_if_null(ops
, capset_set
);
915 set_to_dummy_if_null(ops
, acct
);
916 set_to_dummy_if_null(ops
, capable
);
917 set_to_dummy_if_null(ops
, quotactl
);
918 set_to_dummy_if_null(ops
, quota_on
);
919 set_to_dummy_if_null(ops
, sysctl
);
920 set_to_dummy_if_null(ops
, syslog
);
921 set_to_dummy_if_null(ops
, settime
);
922 set_to_dummy_if_null(ops
, vm_enough_memory
);
923 set_to_dummy_if_null(ops
, bprm_alloc_security
);
924 set_to_dummy_if_null(ops
, bprm_free_security
);
925 set_to_dummy_if_null(ops
, bprm_apply_creds
);
926 set_to_dummy_if_null(ops
, bprm_post_apply_creds
);
927 set_to_dummy_if_null(ops
, bprm_set_security
);
928 set_to_dummy_if_null(ops
, bprm_check_security
);
929 set_to_dummy_if_null(ops
, bprm_secureexec
);
930 set_to_dummy_if_null(ops
, sb_alloc_security
);
931 set_to_dummy_if_null(ops
, sb_free_security
);
932 set_to_dummy_if_null(ops
, sb_copy_data
);
933 set_to_dummy_if_null(ops
, sb_kern_mount
);
934 set_to_dummy_if_null(ops
, sb_statfs
);
935 set_to_dummy_if_null(ops
, sb_mount
);
936 set_to_dummy_if_null(ops
, sb_check_sb
);
937 set_to_dummy_if_null(ops
, sb_umount
);
938 set_to_dummy_if_null(ops
, sb_umount_close
);
939 set_to_dummy_if_null(ops
, sb_umount_busy
);
940 set_to_dummy_if_null(ops
, sb_post_remount
);
941 set_to_dummy_if_null(ops
, sb_post_mountroot
);
942 set_to_dummy_if_null(ops
, sb_post_addmount
);
943 set_to_dummy_if_null(ops
, sb_pivotroot
);
944 set_to_dummy_if_null(ops
, sb_post_pivotroot
);
945 set_to_dummy_if_null(ops
, inode_alloc_security
);
946 set_to_dummy_if_null(ops
, inode_free_security
);
947 set_to_dummy_if_null(ops
, inode_init_security
);
948 set_to_dummy_if_null(ops
, inode_create
);
949 set_to_dummy_if_null(ops
, inode_link
);
950 set_to_dummy_if_null(ops
, inode_unlink
);
951 set_to_dummy_if_null(ops
, inode_symlink
);
952 set_to_dummy_if_null(ops
, inode_mkdir
);
953 set_to_dummy_if_null(ops
, inode_rmdir
);
954 set_to_dummy_if_null(ops
, inode_mknod
);
955 set_to_dummy_if_null(ops
, inode_rename
);
956 set_to_dummy_if_null(ops
, inode_readlink
);
957 set_to_dummy_if_null(ops
, inode_follow_link
);
958 set_to_dummy_if_null(ops
, inode_permission
);
959 set_to_dummy_if_null(ops
, inode_setattr
);
960 set_to_dummy_if_null(ops
, inode_getattr
);
961 set_to_dummy_if_null(ops
, inode_delete
);
962 set_to_dummy_if_null(ops
, inode_setxattr
);
963 set_to_dummy_if_null(ops
, inode_post_setxattr
);
964 set_to_dummy_if_null(ops
, inode_getxattr
);
965 set_to_dummy_if_null(ops
, inode_listxattr
);
966 set_to_dummy_if_null(ops
, inode_removexattr
);
967 set_to_dummy_if_null(ops
, inode_xattr_getsuffix
);
968 set_to_dummy_if_null(ops
, inode_getsecurity
);
969 set_to_dummy_if_null(ops
, inode_setsecurity
);
970 set_to_dummy_if_null(ops
, inode_listsecurity
);
971 set_to_dummy_if_null(ops
, file_permission
);
972 set_to_dummy_if_null(ops
, file_alloc_security
);
973 set_to_dummy_if_null(ops
, file_free_security
);
974 set_to_dummy_if_null(ops
, file_ioctl
);
975 set_to_dummy_if_null(ops
, file_mmap
);
976 set_to_dummy_if_null(ops
, file_mprotect
);
977 set_to_dummy_if_null(ops
, file_lock
);
978 set_to_dummy_if_null(ops
, file_fcntl
);
979 set_to_dummy_if_null(ops
, file_set_fowner
);
980 set_to_dummy_if_null(ops
, file_send_sigiotask
);
981 set_to_dummy_if_null(ops
, file_receive
);
982 set_to_dummy_if_null(ops
, task_create
);
983 set_to_dummy_if_null(ops
, task_alloc_security
);
984 set_to_dummy_if_null(ops
, task_free_security
);
985 set_to_dummy_if_null(ops
, task_setuid
);
986 set_to_dummy_if_null(ops
, task_post_setuid
);
987 set_to_dummy_if_null(ops
, task_setgid
);
988 set_to_dummy_if_null(ops
, task_setpgid
);
989 set_to_dummy_if_null(ops
, task_getpgid
);
990 set_to_dummy_if_null(ops
, task_getsid
);
991 set_to_dummy_if_null(ops
, task_getsecid
);
992 set_to_dummy_if_null(ops
, task_setgroups
);
993 set_to_dummy_if_null(ops
, task_setnice
);
994 set_to_dummy_if_null(ops
, task_setioprio
);
995 set_to_dummy_if_null(ops
, task_getioprio
);
996 set_to_dummy_if_null(ops
, task_setrlimit
);
997 set_to_dummy_if_null(ops
, task_setscheduler
);
998 set_to_dummy_if_null(ops
, task_getscheduler
);
999 set_to_dummy_if_null(ops
, task_movememory
);
1000 set_to_dummy_if_null(ops
, task_wait
);
1001 set_to_dummy_if_null(ops
, task_kill
);
1002 set_to_dummy_if_null(ops
, task_prctl
);
1003 set_to_dummy_if_null(ops
, task_reparent_to_init
);
1004 set_to_dummy_if_null(ops
, task_to_inode
);
1005 set_to_dummy_if_null(ops
, ipc_permission
);
1006 set_to_dummy_if_null(ops
, msg_msg_alloc_security
);
1007 set_to_dummy_if_null(ops
, msg_msg_free_security
);
1008 set_to_dummy_if_null(ops
, msg_queue_alloc_security
);
1009 set_to_dummy_if_null(ops
, msg_queue_free_security
);
1010 set_to_dummy_if_null(ops
, msg_queue_associate
);
1011 set_to_dummy_if_null(ops
, msg_queue_msgctl
);
1012 set_to_dummy_if_null(ops
, msg_queue_msgsnd
);
1013 set_to_dummy_if_null(ops
, msg_queue_msgrcv
);
1014 set_to_dummy_if_null(ops
, shm_alloc_security
);
1015 set_to_dummy_if_null(ops
, shm_free_security
);
1016 set_to_dummy_if_null(ops
, shm_associate
);
1017 set_to_dummy_if_null(ops
, shm_shmctl
);
1018 set_to_dummy_if_null(ops
, shm_shmat
);
1019 set_to_dummy_if_null(ops
, sem_alloc_security
);
1020 set_to_dummy_if_null(ops
, sem_free_security
);
1021 set_to_dummy_if_null(ops
, sem_associate
);
1022 set_to_dummy_if_null(ops
, sem_semctl
);
1023 set_to_dummy_if_null(ops
, sem_semop
);
1024 set_to_dummy_if_null(ops
, netlink_send
);
1025 set_to_dummy_if_null(ops
, netlink_recv
);
1026 set_to_dummy_if_null(ops
, register_security
);
1027 set_to_dummy_if_null(ops
, unregister_security
);
1028 set_to_dummy_if_null(ops
, d_instantiate
);
1029 set_to_dummy_if_null(ops
, getprocattr
);
1030 set_to_dummy_if_null(ops
, setprocattr
);
1031 #ifdef CONFIG_SECURITY_NETWORK
1032 set_to_dummy_if_null(ops
, unix_stream_connect
);
1033 set_to_dummy_if_null(ops
, unix_may_send
);
1034 set_to_dummy_if_null(ops
, socket_create
);
1035 set_to_dummy_if_null(ops
, socket_post_create
);
1036 set_to_dummy_if_null(ops
, socket_bind
);
1037 set_to_dummy_if_null(ops
, socket_connect
);
1038 set_to_dummy_if_null(ops
, socket_listen
);
1039 set_to_dummy_if_null(ops
, socket_accept
);
1040 set_to_dummy_if_null(ops
, socket_post_accept
);
1041 set_to_dummy_if_null(ops
, socket_sendmsg
);
1042 set_to_dummy_if_null(ops
, socket_recvmsg
);
1043 set_to_dummy_if_null(ops
, socket_getsockname
);
1044 set_to_dummy_if_null(ops
, socket_getpeername
);
1045 set_to_dummy_if_null(ops
, socket_setsockopt
);
1046 set_to_dummy_if_null(ops
, socket_getsockopt
);
1047 set_to_dummy_if_null(ops
, socket_shutdown
);
1048 set_to_dummy_if_null(ops
, socket_sock_rcv_skb
);
1049 set_to_dummy_if_null(ops
, socket_getpeersec_stream
);
1050 set_to_dummy_if_null(ops
, socket_getpeersec_dgram
);
1051 set_to_dummy_if_null(ops
, sk_alloc_security
);
1052 set_to_dummy_if_null(ops
, sk_free_security
);
1053 set_to_dummy_if_null(ops
, sk_getsid
);
1054 #endif /* CONFIG_SECURITY_NETWORK */
1055 #ifdef CONFIG_SECURITY_NETWORK_XFRM
1056 set_to_dummy_if_null(ops
, xfrm_policy_alloc_security
);
1057 set_to_dummy_if_null(ops
, xfrm_policy_clone_security
);
1058 set_to_dummy_if_null(ops
, xfrm_policy_free_security
);
1059 set_to_dummy_if_null(ops
, xfrm_policy_delete_security
);
1060 set_to_dummy_if_null(ops
, xfrm_state_alloc_security
);
1061 set_to_dummy_if_null(ops
, xfrm_state_free_security
);
1062 set_to_dummy_if_null(ops
, xfrm_state_delete_security
);
1063 set_to_dummy_if_null(ops
, xfrm_policy_lookup
);
1064 #endif /* CONFIG_SECURITY_NETWORK_XFRM */
1066 set_to_dummy_if_null(ops
, key_alloc
);
1067 set_to_dummy_if_null(ops
, key_free
);
1068 set_to_dummy_if_null(ops
, key_permission
);
1069 #endif /* CONFIG_KEYS */