1 /* SPDX-License-Identifier: GPL-2.0 */
2 
3 /*
4  * Copyright (C) 2020 Google LLC.
5  */
6 
7 #ifndef _LINUX_BPF_LSM_H
8 #define _LINUX_BPF_LSM_H
9 
10 #include <linux/sched.h>
11 #include <linux/bpf.h>
12 #include <linux/lsm_hooks.h>
13 
14 #ifdef CONFIG_BPF_LSM
15 
16 #define LSM_HOOK(RET, DEFAULT, NAME, ...) \
17 	RET bpf_lsm_##NAME(__VA_ARGS__);
18 #include <linux/lsm_hook_defs.h>
19 #undef LSM_HOOK
20 
21 struct bpf_storage_blob {
22 	struct bpf_local_storage __rcu *storage;
23 };
24 
25 extern struct lsm_blob_sizes bpf_lsm_blob_sizes;
26 
27 int bpf_lsm_verify_prog(struct bpf_verifier_log *vlog,
28 			const struct bpf_prog *prog);
29 
30 bool bpf_lsm_is_sleepable_hook(u32 btf_id);
31 
bpf_inode(const struct inode * inode)32 static inline struct bpf_storage_blob *bpf_inode(
33 	const struct inode *inode)
34 {
35 	if (unlikely(!inode->i_security))
36 		return NULL;
37 
38 	return inode->i_security + bpf_lsm_blob_sizes.lbs_inode;
39 }
40 
41 extern const struct bpf_func_proto bpf_inode_storage_get_proto;
42 extern const struct bpf_func_proto bpf_inode_storage_delete_proto;
43 void bpf_inode_storage_free(struct inode *inode);
44 
45 void bpf_lsm_find_cgroup_shim(const struct bpf_prog *prog, bpf_func_t *bpf_func);
46 
47 #else /* !CONFIG_BPF_LSM */
48 
bpf_lsm_is_sleepable_hook(u32 btf_id)49 static inline bool bpf_lsm_is_sleepable_hook(u32 btf_id)
50 {
51 	return false;
52 }
53 
bpf_lsm_verify_prog(struct bpf_verifier_log * vlog,const struct bpf_prog * prog)54 static inline int bpf_lsm_verify_prog(struct bpf_verifier_log *vlog,
55 				      const struct bpf_prog *prog)
56 {
57 	return -EOPNOTSUPP;
58 }
59 
bpf_inode(const struct inode * inode)60 static inline struct bpf_storage_blob *bpf_inode(
61 	const struct inode *inode)
62 {
63 	return NULL;
64 }
65 
bpf_inode_storage_free(struct inode * inode)66 static inline void bpf_inode_storage_free(struct inode *inode)
67 {
68 }
69 
bpf_lsm_find_cgroup_shim(const struct bpf_prog * prog,bpf_func_t * bpf_func)70 static inline void bpf_lsm_find_cgroup_shim(const struct bpf_prog *prog,
71 					   bpf_func_t *bpf_func)
72 {
73 }
74 
75 #endif /* CONFIG_BPF_LSM */
76 
77 #endif /* _LINUX_BPF_LSM_H */
78