| /linux/tools/testing/selftests/landlock/ |
| A D | net_test.c | 557 int ruleset_fd; in TEST_F() local
607 int ruleset_fd; in TEST_F() local
1222 int ruleset_fd; in TEST_F() local
1225 ruleset_fd = in TEST_F()
1267 int ruleset_fd; in TEST_F() local
1270 ruleset_fd = in TEST_F()
1292 int ruleset_fd; in TEST_F() local
1295 ruleset_fd = in TEST_F()
1336 ruleset_fd = in TEST_F()
1399 ruleset_fd = in TEST_F()
[all …]
|
| A D | fs_test.c | 490 ruleset_fd = in TEST_F_FORK()
675 ruleset_fd = in TEST_F_FORK()
758 ruleset_fd = in create_ruleset()
1101 ruleset_fd = in TEST_F_FORK()
1498 ruleset_fd = in TEST_F_FORK()
1505 ruleset_fd = in TEST_F_FORK()
1514 ruleset_fd = in TEST_F_FORK()
1732 ruleset_fd = in TEST_F_FORK()
2428 ruleset_fd = in TEST_F_FORK()
5317 ruleset_fd = in layer3_fs_tag_inode()
[all …]
|
| A D | base_test.c | 106 int ruleset_fd; in TEST() local
138 ruleset_fd = in TEST()
140 ASSERT_LE(0, ruleset_fd); in TEST()
154 const int ruleset_fd = in TEST() local
157 ASSERT_LE(0, ruleset_fd); in TEST()
201 const int ruleset_fd = in TEST() local
204 ASSERT_LE(0, ruleset_fd); in TEST()
241 int ruleset_fd; in TEST() local
245 ruleset_fd = in TEST()
335 int ruleset_fd, dir_fd; in TEST() local
[all …]
|
| A D | scoped_common.h | 15 int ruleset_fd; in create_scoped_domain() local
20 ruleset_fd = in create_scoped_domain()
22 ASSERT_LE(0, ruleset_fd) in create_scoped_domain()
26 enforce_ruleset(_metadata, ruleset_fd); in create_scoped_domain()
27 EXPECT_EQ(0, close(ruleset_fd)); in create_scoped_domain()
|
| A D | common.h | 43 static inline int landlock_add_rule(const int ruleset_fd, in landlock_add_rule() argument
48 return syscall(__NR_landlock_add_rule, ruleset_fd, rule_type, rule_attr, in landlock_add_rule()
54 static inline int landlock_restrict_self(const int ruleset_fd, in landlock_restrict_self() argument
57 return syscall(__NR_landlock_restrict_self, ruleset_fd, flags); in landlock_restrict_self()
225 enforce_ruleset(struct __test_metadata *const _metadata, const int ruleset_fd) in enforce_ruleset() argument
228 ASSERT_EQ(0, landlock_restrict_self(ruleset_fd, 0)) in enforce_ruleset()
|
| A D | ptrace_test.c | 30 int ruleset_fd; in create_domain() local
35 ruleset_fd = in create_domain()
37 EXPECT_LE(0, ruleset_fd) in create_domain()
42 EXPECT_EQ(0, landlock_restrict_self(ruleset_fd, 0)); in create_domain()
43 EXPECT_EQ(0, close(ruleset_fd)); in create_domain()
|
| A D | scoped_abstract_unix_test.c | 31 int ruleset_fd; in create_fs_domain() local
36 ruleset_fd = in create_fs_domain()
38 EXPECT_LE(0, ruleset_fd) in create_fs_domain()
43 EXPECT_EQ(0, landlock_restrict_self(ruleset_fd, 0)); in create_fs_domain()
44 EXPECT_EQ(0, close(ruleset_fd)); in create_fs_domain()
|
| /linux/samples/landlock/ |
| A D | sandboxer.c | 38 static inline int landlock_add_rule(const int ruleset_fd, in landlock_add_rule() argument
49 static inline int landlock_restrict_self(const int ruleset_fd, in landlock_restrict_self() argument
52 return syscall(__NR_landlock_restrict_self, ruleset_fd, flags); in landlock_restrict_self()
203 if (landlock_add_rule(ruleset_fd, LANDLOCK_RULE_NET_PORT, in populate_ruleset_net()
335 int ruleset_fd, abi; in main() local
452 ruleset_fd = in main()
454 if (ruleset_fd < 0) { in main()
466 if (populate_ruleset_net(ENV_TCP_BIND_NAME, ruleset_fd, in main()
479 if (landlock_restrict_self(ruleset_fd, 0)) { in main()
483 close(ruleset_fd); in main()
[all …]
|
| /linux/security/landlock/ |
| A D | syscalls.c | 185 int err, ruleset_fd; in SYSCALL_DEFINE3() local
230 ruleset_fd = anon_inode_getfd("[landlock-ruleset]", &ruleset_fops, in SYSCALL_DEFINE3()
232 if (ruleset_fd < 0) in SYSCALL_DEFINE3()
234 return ruleset_fd; in SYSCALL_DEFINE3()
414 SYSCALL_DEFINE4(landlock_add_rule, const int, ruleset_fd, in SYSCALL_DEFINE4() argument
429 ruleset = get_ruleset_from_fd(ruleset_fd, FMODE_CAN_WRITE); in SYSCALL_DEFINE4()
473 SYSCALL_DEFINE2(landlock_restrict_self, const int, ruleset_fd, const __u32, in SYSCALL_DEFINE2() argument
497 ruleset = get_ruleset_from_fd(ruleset_fd, FMODE_CAN_READ); in SYSCALL_DEFINE2()
|
| /linux/Documentation/userspace-api/ |
| A D | landlock.rst | 136 int ruleset_fd;
138 ruleset_fd = landlock_create_ruleset(&ruleset_attr, sizeof(ruleset_attr), 0);
139 if (ruleset_fd < 0) {
164 close(ruleset_fd);
167 err = landlock_add_rule(ruleset_fd, LANDLOCK_RULE_PATH_BENEATH,
172 close(ruleset_fd);
191 err = landlock_add_rule(ruleset_fd, LANDLOCK_RULE_NET_PORT,
203 close(ruleset_fd);
211 if (landlock_restrict_self(ruleset_fd, 0)) {
213 close(ruleset_fd);
[all …]
|
| /linux/include/linux/ |
| A D | syscalls.h | 958 asmlinkage long sys_landlock_add_rule(int ruleset_fd, enum landlock_rule_type rule_type,
960 asmlinkage long sys_landlock_restrict_self(int ruleset_fd, __u32 flags);
|