1 #ifndef __LINUX_NET_SCM_H
2 #define __LINUX_NET_SCM_H
4 #include <linux/limits.h>
6 #include <linux/security.h>
8 #include <linux/nsproxy.h>
10 /* Well, we should have at least one descriptor open
11 * to accept passed FDs 8)
13 #define SCM_MAX_FD 255
18 struct file
*fp
[SCM_MAX_FD
];
23 struct ucred creds
; /* Skb credentials */
24 struct scm_fp_list
*fp
; /* Passed files */
25 #ifdef CONFIG_SECURITY_NETWORK
26 u32 secid
; /* Passed security ID */
28 unsigned long seq
; /* Connection seqno */
31 extern void scm_detach_fds(struct msghdr
*msg
, struct scm_cookie
*scm
);
32 extern void scm_detach_fds_compat(struct msghdr
*msg
, struct scm_cookie
*scm
);
33 extern int __scm_send(struct socket
*sock
, struct msghdr
*msg
, struct scm_cookie
*scm
);
34 extern void __scm_destroy(struct scm_cookie
*scm
);
35 extern struct scm_fp_list
* scm_fp_dup(struct scm_fp_list
*fpl
);
37 #ifdef CONFIG_SECURITY_NETWORK
38 static __inline__
void unix_get_peersec_dgram(struct socket
*sock
, struct scm_cookie
*scm
)
40 security_socket_getpeersec_dgram(sock
, NULL
, &scm
->secid
);
43 static __inline__
void unix_get_peersec_dgram(struct socket
*sock
, struct scm_cookie
*scm
)
45 #endif /* CONFIG_SECURITY_NETWORK */
47 static __inline__
void scm_destroy(struct scm_cookie
*scm
)
53 static __inline__
int scm_send(struct socket
*sock
, struct msghdr
*msg
,
54 struct scm_cookie
*scm
)
56 struct task_struct
*p
= current
;
57 scm
->creds
.uid
= p
->uid
;
58 scm
->creds
.gid
= p
->gid
;
59 scm
->creds
.pid
= task_tgid_vnr(p
);
62 unix_get_peersec_dgram(sock
, scm
);
63 if (msg
->msg_controllen
<= 0)
65 return __scm_send(sock
, msg
, scm
);
68 #ifdef CONFIG_SECURITY_NETWORK
69 static inline void scm_passec(struct socket
*sock
, struct msghdr
*msg
, struct scm_cookie
*scm
)
75 if (test_bit(SOCK_PASSSEC
, &sock
->flags
)) {
76 err
= security_secid_to_secctx(scm
->secid
, &secdata
, &seclen
);
79 put_cmsg(msg
, SOL_SOCKET
, SCM_SECURITY
, seclen
, secdata
);
80 security_release_secctx(secdata
, seclen
);
85 static inline void scm_passec(struct socket
*sock
, struct msghdr
*msg
, struct scm_cookie
*scm
)
87 #endif /* CONFIG_SECURITY_NETWORK */
89 static __inline__
void scm_recv(struct socket
*sock
, struct msghdr
*msg
,
90 struct scm_cookie
*scm
, int flags
)
92 if (!msg
->msg_control
)
94 if (test_bit(SOCK_PASSCRED
, &sock
->flags
) || scm
->fp
)
95 msg
->msg_flags
|= MSG_CTRUNC
;
100 if (test_bit(SOCK_PASSCRED
, &sock
->flags
))
101 put_cmsg(msg
, SOL_SOCKET
, SCM_CREDENTIALS
, sizeof(scm
->creds
), &scm
->creds
);
103 scm_passec(sock
, msg
, scm
);
108 scm_detach_fds(msg
, scm
);
112 #endif /* __LINUX_NET_SCM_H */
This page took 0.039003 seconds and 5 git commands to generate.