Cedric Le Goater | acce292 | 2007-07-15 23:40:59 -0700 | [diff] [blame] | 1 | #ifndef _LINUX_USER_NAMESPACE_H |
| 2 | #define _LINUX_USER_NAMESPACE_H |
| 3 | |
| 4 | #include <linux/kref.h> |
| 5 | #include <linux/nsproxy.h> |
| 6 | #include <linux/sched.h> |
Serge E. Hallyn | 77ec739 | 2007-07-15 23:41:01 -0700 | [diff] [blame] | 7 | #include <linux/err.h> |
Cedric Le Goater | acce292 | 2007-07-15 23:40:59 -0700 | [diff] [blame] | 8 | |
Eric W. Biederman | 22d917d | 2011-11-17 00:11:58 -0800 | [diff] [blame] | 9 | #define UID_GID_MAP_MAX_EXTENTS 5 |
| 10 | |
| 11 | struct uid_gid_map { /* 64 bytes -- 1 cache line */ |
| 12 | u32 nr_extents; |
| 13 | struct uid_gid_extent { |
| 14 | u32 first; |
| 15 | u32 lower_first; |
| 16 | u32 count; |
| 17 | } extent[UID_GID_MAP_MAX_EXTENTS]; |
| 18 | }; |
| 19 | |
Cedric Le Goater | acce292 | 2007-07-15 23:40:59 -0700 | [diff] [blame] | 20 | struct user_namespace { |
Eric W. Biederman | 22d917d | 2011-11-17 00:11:58 -0800 | [diff] [blame] | 21 | struct uid_gid_map uid_map; |
| 22 | struct uid_gid_map gid_map; |
Eric W. Biederman | f76d207 | 2012-08-30 01:24:05 -0700 | [diff] [blame] | 23 | struct uid_gid_map projid_map; |
Eric W. Biederman | c61a281 | 2012-12-28 18:58:39 -0800 | [diff] [blame] | 24 | atomic_t count; |
Eric W. Biederman | aeb3ae9 | 2011-11-16 21:59:43 -0800 | [diff] [blame] | 25 | struct user_namespace *parent; |
Eric W. Biederman | 783291e | 2011-11-17 01:32:59 -0800 | [diff] [blame] | 26 | kuid_t owner; |
| 27 | kgid_t group; |
Eric W. Biederman | 98f842e | 2011-06-15 10:21:48 -0700 | [diff] [blame] | 28 | unsigned int proc_inum; |
Eric W. Biederman | 87a8ebd | 2013-03-24 14:28:27 -0700 | [diff] [blame] | 29 | bool may_mount_sysfs; |
| 30 | bool may_mount_proc; |
Cedric Le Goater | acce292 | 2007-07-15 23:40:59 -0700 | [diff] [blame] | 31 | }; |
| 32 | |
| 33 | extern struct user_namespace init_user_ns; |
| 34 | |
| 35 | #ifdef CONFIG_USER_NS |
| 36 | |
| 37 | static inline struct user_namespace *get_user_ns(struct user_namespace *ns) |
| 38 | { |
| 39 | if (ns) |
Eric W. Biederman | c61a281 | 2012-12-28 18:58:39 -0800 | [diff] [blame] | 40 | atomic_inc(&ns->count); |
Cedric Le Goater | acce292 | 2007-07-15 23:40:59 -0700 | [diff] [blame] | 41 | return ns; |
| 42 | } |
| 43 | |
Serge Hallyn | 18b6e04 | 2008-10-15 16:38:45 -0500 | [diff] [blame] | 44 | extern int create_user_ns(struct cred *new); |
Eric W. Biederman | b2e0d987 | 2012-07-26 05:15:35 -0700 | [diff] [blame] | 45 | extern int unshare_userns(unsigned long unshare_flags, struct cred **new_cred); |
Eric W. Biederman | c61a281 | 2012-12-28 18:58:39 -0800 | [diff] [blame] | 46 | extern void free_user_ns(struct user_namespace *ns); |
Cedric Le Goater | acce292 | 2007-07-15 23:40:59 -0700 | [diff] [blame] | 47 | |
| 48 | static inline void put_user_ns(struct user_namespace *ns) |
| 49 | { |
Eric W. Biederman | c61a281 | 2012-12-28 18:58:39 -0800 | [diff] [blame] | 50 | if (ns && atomic_dec_and_test(&ns->count)) |
| 51 | free_user_ns(ns); |
Cedric Le Goater | acce292 | 2007-07-15 23:40:59 -0700 | [diff] [blame] | 52 | } |
| 53 | |
Eric W. Biederman | 22d917d | 2011-11-17 00:11:58 -0800 | [diff] [blame] | 54 | struct seq_operations; |
| 55 | extern struct seq_operations proc_uid_seq_operations; |
| 56 | extern struct seq_operations proc_gid_seq_operations; |
Eric W. Biederman | f76d207 | 2012-08-30 01:24:05 -0700 | [diff] [blame] | 57 | extern struct seq_operations proc_projid_seq_operations; |
Eric W. Biederman | 22d917d | 2011-11-17 00:11:58 -0800 | [diff] [blame] | 58 | extern ssize_t proc_uid_map_write(struct file *, const char __user *, size_t, loff_t *); |
| 59 | extern ssize_t proc_gid_map_write(struct file *, const char __user *, size_t, loff_t *); |
Eric W. Biederman | f76d207 | 2012-08-30 01:24:05 -0700 | [diff] [blame] | 60 | extern ssize_t proc_projid_map_write(struct file *, const char __user *, size_t, loff_t *); |
Cedric Le Goater | acce292 | 2007-07-15 23:40:59 -0700 | [diff] [blame] | 61 | #else |
| 62 | |
| 63 | static inline struct user_namespace *get_user_ns(struct user_namespace *ns) |
| 64 | { |
| 65 | return &init_user_ns; |
| 66 | } |
| 67 | |
Serge Hallyn | 18b6e04 | 2008-10-15 16:38:45 -0500 | [diff] [blame] | 68 | static inline int create_user_ns(struct cred *new) |
Cedric Le Goater | acce292 | 2007-07-15 23:40:59 -0700 | [diff] [blame] | 69 | { |
Serge Hallyn | 18b6e04 | 2008-10-15 16:38:45 -0500 | [diff] [blame] | 70 | return -EINVAL; |
Cedric Le Goater | acce292 | 2007-07-15 23:40:59 -0700 | [diff] [blame] | 71 | } |
| 72 | |
Eric W. Biederman | b2e0d987 | 2012-07-26 05:15:35 -0700 | [diff] [blame] | 73 | static inline int unshare_userns(unsigned long unshare_flags, |
| 74 | struct cred **new_cred) |
| 75 | { |
| 76 | if (unshare_flags & CLONE_NEWUSER) |
| 77 | return -EINVAL; |
| 78 | return 0; |
| 79 | } |
| 80 | |
Cedric Le Goater | acce292 | 2007-07-15 23:40:59 -0700 | [diff] [blame] | 81 | static inline void put_user_ns(struct user_namespace *ns) |
| 82 | { |
| 83 | } |
| 84 | |
Eric W. Biederman | 22d917d | 2011-11-17 00:11:58 -0800 | [diff] [blame] | 85 | #endif |
| 86 | |
Eric W. Biederman | 87a8ebd | 2013-03-24 14:28:27 -0700 | [diff] [blame] | 87 | void update_mnt_policy(struct user_namespace *userns); |
| 88 | |
Cedric Le Goater | acce292 | 2007-07-15 23:40:59 -0700 | [diff] [blame] | 89 | #endif /* _LINUX_USER_H */ |