blob: d3f4cf027957bcf6edc5f2cb8aa039ec1970883f [file] [log] [blame]
John Johansen0ed3b282010-07-29 14:48:05 -07001/*
2 * AppArmor security module
3 *
4 * This file contains AppArmor resource limits function definitions.
5 *
6 * Copyright (C) 1998-2008 Novell/SUSE
7 * Copyright 2009-2010 Canonical Ltd.
8 *
9 * This program is free software; you can redistribute it and/or
10 * modify it under the terms of the GNU General Public License as
11 * published by the Free Software Foundation, version 2 of the
12 * License.
13 */
14
15#ifndef __AA_RESOURCE_H
16#define __AA_RESOURCE_H
17
18#include <linux/resource.h>
19#include <linux/sched.h>
20
Kees Cookd384b0a2012-01-26 16:29:23 -080021#include "apparmorfs.h"
22
John Johansen0ed3b282010-07-29 14:48:05 -070023struct aa_profile;
24
25/* struct aa_rlimit - rlimit settings for the profile
26 * @mask: which hard limits to set
27 * @limits: rlimit values that override task limits
28 *
29 * AppArmor rlimits are used to set confined task rlimits. Only the
30 * limits specified in @mask will be controlled by apparmor.
31 */
32struct aa_rlimit {
33 unsigned int mask;
34 struct rlimit limits[RLIM_NLIMITS];
35};
36
Kees Cookd384b0a2012-01-26 16:29:23 -080037extern struct aa_fs_entry aa_fs_entry_rlimit[];
38
John Johansen0ed3b282010-07-29 14:48:05 -070039int aa_map_resource(int resource);
John Johansen3a2dc832010-09-06 10:10:20 -070040int aa_task_setrlimit(struct aa_profile *profile, struct task_struct *,
41 unsigned int resource, struct rlimit *new_rlim);
John Johansen0ed3b282010-07-29 14:48:05 -070042
43void __aa_transition_rlimits(struct aa_profile *old, struct aa_profile *new);
44
45static inline void aa_free_rlimit_rules(struct aa_rlimit *rlims)
46{
47 /* NOP */
48}
49
50#endif /* __AA_RESOURCE_H */