| 1 |
|
| 2 | |
| 3 | * AppArmor security module
|
| 4 | *
|
| 5 | * This file contains AppArmor file mediation function definitions.
|
| 6 | *
|
| 7 | * Copyright 2017 Canonical Ltd.
|
| 8 |
|
| 9 |
|
| 10 | #ifndef __AA_MOUNT_H
|
| 11 | #define __AA_MOUNT_H
|
| 12 |
|
| 13 | #include <linux/fs.h>
|
| 14 | #include <linux/path.h>
|
| 15 |
|
| 16 | #include "domain.h"
|
| 17 | #include "policy.h"
|
| 18 |
|
| 19 |
|
| 20 | #define AA_MAY_PIVOTROOT 0x01
|
| 21 | #define AA_MAY_MOUNT 0x02
|
| 22 | #define AA_MAY_UMOUNT 0x04
|
| 23 | #define AA_AUDIT_DATA 0x40
|
| 24 | #define AA_MNT_CONT_MATCH 0x40
|
| 25 |
|
| 26 | #define AA_MS_IGNORE_MASK (MS_KERNMOUNT | MS_NOSEC | MS_ACTIVE | MS_BORN)
|
| 27 |
|
| 28 | int aa_remount(const struct cred *subj_cred,
|
| 29 | struct aa_label *label, const struct path *path,
|
| 30 | unsigned long flags, void *data);
|
| 31 |
|
| 32 | int aa_bind_mount(const struct cred *subj_cred,
|
| 33 | struct aa_label *label, const struct path *path,
|
| 34 | const char *old_name, unsigned long flags);
|
| 35 |
|
| 36 |
|
| 37 | int aa_mount_change_type(const struct cred *subj_cred,
|
| 38 | struct aa_label *label, const struct path *path,
|
| 39 | unsigned long flags);
|
| 40 |
|
| 41 | int aa_move_mount_old(const struct cred *subj_cred,
|
| 42 | struct aa_label *label, const struct path *path,
|
| 43 | const char *old_name);
|
| 44 | int aa_move_mount(const struct cred *subj_cred,
|
| 45 | struct aa_label *label, const struct path *from_path,
|
| 46 | const struct path *to_path);
|
| 47 |
|
| 48 | int aa_new_mount(const struct cred *subj_cred,
|
| 49 | struct aa_label *label, const char *dev_name,
|
| 50 | const struct path *path, const char *type, unsigned long flags,
|
| 51 | void *data);
|
| 52 |
|
| 53 | int aa_umount(const struct cred *subj_cred,
|
| 54 | struct aa_label *label, struct vfsmount *mnt, int flags);
|
| 55 |
|
| 56 | int aa_pivotroot(const struct cred *subj_cred,
|
| 57 | struct aa_label *label, const struct path *old_path,
|
| 58 | const struct path *new_path);
|
| 59 |
|
| 60 | #endif
|