Blame view
security/tomoyo/mount.c
6.74 KB
b24413180 License cleanup: ... |
1 |
// SPDX-License-Identifier: GPL-2.0 |
2106ccd97 TOMOYO: Add mount... |
2 3 4 |
/* * security/tomoyo/mount.c * |
0f2a55d5b TOMOYO: Update ke... |
5 |
* Copyright (C) 2005-2011 NTT DATA CORPORATION |
2106ccd97 TOMOYO: Add mount... |
6 7 8 |
*/ #include <linux/slab.h> |
e262e32d6 vfs: Suppress MS_... |
9 |
#include <uapi/linux/mount.h> |
2106ccd97 TOMOYO: Add mount... |
10 |
#include "common.h" |
b5bc60b4c TOMOYO: Cleanup p... |
11 12 13 14 15 16 17 18 19 20 |
/* String table for special mount operations. */ static const char * const tomoyo_mounts[TOMOYO_MAX_SPECIAL_MOUNT] = { [TOMOYO_MOUNT_BIND] = "--bind", [TOMOYO_MOUNT_MOVE] = "--move", [TOMOYO_MOUNT_REMOUNT] = "--remount", [TOMOYO_MOUNT_MAKE_UNBINDABLE] = "--make-unbindable", [TOMOYO_MOUNT_MAKE_PRIVATE] = "--make-private", [TOMOYO_MOUNT_MAKE_SLAVE] = "--make-slave", [TOMOYO_MOUNT_MAKE_SHARED] = "--make-shared", }; |
2106ccd97 TOMOYO: Add mount... |
21 22 |
/** |
99a852596 TOMOYO: Use callb... |
23 24 25 26 27 28 29 30 |
* tomoyo_audit_mount_log - Audit mount log. * * @r: Pointer to "struct tomoyo_request_info". * * Returns 0 on success, negative value otherwise. */ static int tomoyo_audit_mount_log(struct tomoyo_request_info *r) { |
eadd99cc8 TOMOYO: Add audit... |
31 32 |
return tomoyo_supervisor(r, "file mount %s %s %s 0x%lX ", |
7c75964f4 TOMOYO: Cleanup p... |
33 |
r->param.mount.dev->name, |
eadd99cc8 TOMOYO: Add audit... |
34 35 36 |
r->param.mount.dir->name, r->param.mount.type->name, r->param.mount.flags); |
99a852596 TOMOYO: Use callb... |
37 |
} |
0df7e8b8f TOMOYO: Cleanup p... |
38 39 40 41 42 43 44 45 |
/** * tomoyo_check_mount_acl - Check permission for path path path number operation. * * @r: Pointer to "struct tomoyo_request_info". * @ptr: Pointer to "struct tomoyo_acl_info". * * Returns true if granted, false otherwise. */ |
484ca79c6 TOMOYO: Use pathn... |
46 |
static bool tomoyo_check_mount_acl(struct tomoyo_request_info *r, |
99a852596 TOMOYO: Use callb... |
47 48 49 50 |
const struct tomoyo_acl_info *ptr) { const struct tomoyo_mount_acl *acl = container_of(ptr, typeof(*acl), head); |
cdcf6723a tomoyo: Coding st... |
51 |
|
0df7e8b8f TOMOYO: Cleanup p... |
52 53 54 55 56 57 |
return tomoyo_compare_number_union(r->param.mount.flags, &acl->flags) && tomoyo_compare_name_union(r->param.mount.type, &acl->fs_type) && tomoyo_compare_name_union(r->param.mount.dir, &acl->dir_name) && |
99a852596 TOMOYO: Use callb... |
58 |
(!r->param.mount.need_dev || |
0df7e8b8f TOMOYO: Cleanup p... |
59 60 |
tomoyo_compare_name_union(r->param.mount.dev, &acl->dev_name)); |
99a852596 TOMOYO: Use callb... |
61 62 63 |
} /** |
d795ef9e7 TOMOYO: Loosen pa... |
64 |
* tomoyo_mount_acl - Check permission for mount() operation. |
2106ccd97 TOMOYO: Add mount... |
65 66 |
* * @r: Pointer to "struct tomoyo_request_info". |
0f2a55d5b TOMOYO: Update ke... |
67 |
* @dev_name: Name of device file. Maybe NULL. |
2106ccd97 TOMOYO: Add mount... |
68 69 70 71 72 73 74 75 |
* @dir: Pointer to "struct path". * @type: Name of filesystem type. * @flags: Mount options. * * Returns 0 on success, negative value otherwise. * * Caller holds tomoyo_read_lock(). */ |
808d4e3cf consitify do_moun... |
76 77 |
static int tomoyo_mount_acl(struct tomoyo_request_info *r, const char *dev_name, |
e6641eddf tomoyo: constify ... |
78 |
const struct path *dir, const char *type, |
b5bc60b4c TOMOYO: Cleanup p... |
79 |
unsigned long flags) |
2106ccd97 TOMOYO: Add mount... |
80 |
{ |
97fb35e41 TOMOYO: Enable co... |
81 |
struct tomoyo_obj_info obj = { }; |
2106ccd97 TOMOYO: Add mount... |
82 |
struct path path; |
2106ccd97 TOMOYO: Add mount... |
83 84 85 86 87 88 89 90 91 |
struct file_system_type *fstype = NULL; const char *requested_type = NULL; const char *requested_dir_name = NULL; const char *requested_dev_name = NULL; struct tomoyo_path_info rtype; struct tomoyo_path_info rdev; struct tomoyo_path_info rdir; int need_dev = 0; int error = -ENOMEM; |
cdcf6723a tomoyo: Coding st... |
92 |
|
97fb35e41 TOMOYO: Enable co... |
93 |
r->obj = &obj; |
2106ccd97 TOMOYO: Add mount... |
94 95 |
/* Get fstype. */ |
c8c57e842 TOMOYO: Support l... |
96 |
requested_type = tomoyo_encode(type); |
2106ccd97 TOMOYO: Add mount... |
97 98 99 100 101 102 |
if (!requested_type) goto out; rtype.name = requested_type; tomoyo_fill_path_info(&rtype); /* Get mount point. */ |
97fb35e41 TOMOYO: Enable co... |
103 |
obj.path2 = *dir; |
2106ccd97 TOMOYO: Add mount... |
104 105 106 107 108 109 110 111 112 |
requested_dir_name = tomoyo_realpath_from_path(dir); if (!requested_dir_name) { error = -ENOMEM; goto out; } rdir.name = requested_dir_name; tomoyo_fill_path_info(&rdir); /* Compare fs name. */ |
b5bc60b4c TOMOYO: Cleanup p... |
113 |
if (type == tomoyo_mounts[TOMOYO_MOUNT_REMOUNT]) { |
2106ccd97 TOMOYO: Add mount... |
114 |
/* dev_name is ignored. */ |
b5bc60b4c TOMOYO: Cleanup p... |
115 116 117 118 |
} else if (type == tomoyo_mounts[TOMOYO_MOUNT_MAKE_UNBINDABLE] || type == tomoyo_mounts[TOMOYO_MOUNT_MAKE_PRIVATE] || type == tomoyo_mounts[TOMOYO_MOUNT_MAKE_SLAVE] || type == tomoyo_mounts[TOMOYO_MOUNT_MAKE_SHARED]) { |
2106ccd97 TOMOYO: Add mount... |
119 |
/* dev_name is ignored. */ |
b5bc60b4c TOMOYO: Cleanup p... |
120 121 |
} else if (type == tomoyo_mounts[TOMOYO_MOUNT_BIND] || type == tomoyo_mounts[TOMOYO_MOUNT_MOVE]) { |
2106ccd97 TOMOYO: Add mount... |
122 123 124 125 126 127 128 129 130 131 132 133 134 |
need_dev = -1; /* dev_name is a directory */ } else { fstype = get_fs_type(type); if (!fstype) { error = -ENODEV; goto out; } if (fstype->fs_flags & FS_REQUIRES_DEV) /* dev_name is a block device file. */ need_dev = 1; } if (need_dev) { /* Get mount point or device file. */ |
4e78c724d TOMOYO: Fix oops ... |
135 |
if (!dev_name || kern_path(dev_name, LOOKUP_FOLLOW, &path)) { |
2106ccd97 TOMOYO: Add mount... |
136 137 138 |
error = -ENOENT; goto out; } |
97fb35e41 TOMOYO: Enable co... |
139 |
obj.path1 = path; |
2106ccd97 TOMOYO: Add mount... |
140 141 142 143 144 145 146 147 148 |
requested_dev_name = tomoyo_realpath_from_path(&path); if (!requested_dev_name) { error = -ENOENT; goto out; } } else { /* Map dev_name to "<NULL>" if no dev_name given. */ if (!dev_name) dev_name = "<NULL>"; |
c8c57e842 TOMOYO: Support l... |
149 |
requested_dev_name = tomoyo_encode(dev_name); |
2106ccd97 TOMOYO: Add mount... |
150 151 152 153 154 155 156 |
if (!requested_dev_name) { error = -ENOMEM; goto out; } } rdev.name = requested_dev_name; tomoyo_fill_path_info(&rdev); |
cf6e9a646 TOMOYO: Pass para... |
157 158 159 160 161 162 |
r->param_type = TOMOYO_TYPE_MOUNT_ACL; r->param.mount.need_dev = need_dev; r->param.mount.dev = &rdev; r->param.mount.dir = &rdir; r->param.mount.type = &rtype; r->param.mount.flags = flags; |
99a852596 TOMOYO: Use callb... |
163 164 165 166 |
do { tomoyo_check_acl(r, tomoyo_check_mount_acl); error = tomoyo_audit_mount_log(r); } while (error == TOMOYO_RETRY_REQUEST); |
2106ccd97 TOMOYO: Add mount... |
167 168 169 170 171 172 |
out: kfree(requested_dev_name); kfree(requested_dir_name); if (fstype) put_filesystem(fstype); kfree(requested_type); |
97fb35e41 TOMOYO: Enable co... |
173 174 175 |
/* Drop refcount obtained by kern_path(). */ if (obj.path1.dentry) path_put(&obj.path1); |
2106ccd97 TOMOYO: Add mount... |
176 177 178 179 |
return error; } /** |
2106ccd97 TOMOYO: Add mount... |
180 181 |
* tomoyo_mount_permission - Check permission for mount() operation. * |
0f2a55d5b TOMOYO: Update ke... |
182 |
* @dev_name: Name of device file. Maybe NULL. |
2106ccd97 TOMOYO: Add mount... |
183 |
* @path: Pointer to "struct path". |
0f2a55d5b TOMOYO: Update ke... |
184 |
* @type: Name of filesystem type. Maybe NULL. |
2106ccd97 TOMOYO: Add mount... |
185 |
* @flags: Mount options. |
0f2a55d5b TOMOYO: Update ke... |
186 |
* @data_page: Optional data. Maybe NULL. |
2106ccd97 TOMOYO: Add mount... |
187 188 189 |
* * Returns 0 on success, negative value otherwise. */ |
e6641eddf tomoyo: constify ... |
190 |
int tomoyo_mount_permission(const char *dev_name, const struct path *path, |
b5bc60b4c TOMOYO: Cleanup p... |
191 192 |
const char *type, unsigned long flags, void *data_page) |
2106ccd97 TOMOYO: Add mount... |
193 194 195 196 |
{ struct tomoyo_request_info r; int error; int idx; |
57c2590fb TOMOYO: Update pr... |
197 198 |
if (tomoyo_init_request_info(&r, NULL, TOMOYO_MAC_FILE_MOUNT) == TOMOYO_CONFIG_DISABLED) |
2106ccd97 TOMOYO: Add mount... |
199 |
return 0; |
d795ef9e7 TOMOYO: Loosen pa... |
200 201 202 |
if ((flags & MS_MGC_MSK) == MS_MGC_VAL) flags &= ~MS_MGC_MSK; if (flags & MS_REMOUNT) { |
b5bc60b4c TOMOYO: Cleanup p... |
203 |
type = tomoyo_mounts[TOMOYO_MOUNT_REMOUNT]; |
d795ef9e7 TOMOYO: Loosen pa... |
204 |
flags &= ~MS_REMOUNT; |
df91e4947 TOMOYO: Fix mount... |
205 |
} else if (flags & MS_BIND) { |
b5bc60b4c TOMOYO: Cleanup p... |
206 |
type = tomoyo_mounts[TOMOYO_MOUNT_BIND]; |
d795ef9e7 TOMOYO: Loosen pa... |
207 |
flags &= ~MS_BIND; |
df91e4947 TOMOYO: Fix mount... |
208 209 210 211 212 213 214 215 |
} else if (flags & MS_SHARED) { if (flags & (MS_PRIVATE | MS_SLAVE | MS_UNBINDABLE)) return -EINVAL; type = tomoyo_mounts[TOMOYO_MOUNT_MAKE_SHARED]; flags &= ~MS_SHARED; } else if (flags & MS_PRIVATE) { if (flags & (MS_SHARED | MS_SLAVE | MS_UNBINDABLE)) return -EINVAL; |
b5bc60b4c TOMOYO: Cleanup p... |
216 |
type = tomoyo_mounts[TOMOYO_MOUNT_MAKE_PRIVATE]; |
d795ef9e7 TOMOYO: Loosen pa... |
217 |
flags &= ~MS_PRIVATE; |
df91e4947 TOMOYO: Fix mount... |
218 219 220 |
} else if (flags & MS_SLAVE) { if (flags & (MS_SHARED | MS_PRIVATE | MS_UNBINDABLE)) return -EINVAL; |
b5bc60b4c TOMOYO: Cleanup p... |
221 |
type = tomoyo_mounts[TOMOYO_MOUNT_MAKE_SLAVE]; |
d795ef9e7 TOMOYO: Loosen pa... |
222 |
flags &= ~MS_SLAVE; |
df91e4947 TOMOYO: Fix mount... |
223 224 225 226 227 228 229 230 |
} else if (flags & MS_UNBINDABLE) { if (flags & (MS_SHARED | MS_PRIVATE | MS_SLAVE)) return -EINVAL; type = tomoyo_mounts[TOMOYO_MOUNT_MAKE_UNBINDABLE]; flags &= ~MS_UNBINDABLE; } else if (flags & MS_MOVE) { type = tomoyo_mounts[TOMOYO_MOUNT_MOVE]; flags &= ~MS_MOVE; |
d795ef9e7 TOMOYO: Loosen pa... |
231 |
} |
2106ccd97 TOMOYO: Add mount... |
232 233 234 235 236 237 238 |
if (!type) type = "<NULL>"; idx = tomoyo_read_lock(); error = tomoyo_mount_acl(&r, dev_name, path, type, flags); tomoyo_read_unlock(idx); return error; } |