blob: eb209d4523f5a8e33d23b66ee658d3bddeb2d8b4 [file] [log] [blame]
Cedric Le Goateracce2922007-07-15 23:40:59 -07001#ifndef _LINUX_USER_NAMESPACE_H
2#define _LINUX_USER_NAMESPACE_H
3
4#include <linux/kref.h>
5#include <linux/nsproxy.h>
Al Viro435d5f42014-10-31 22:56:04 -04006#include <linux/ns_common.h>
Cedric Le Goateracce2922007-07-15 23:40:59 -07007#include <linux/sched.h>
Serge E. Hallyn77ec7392007-07-15 23:41:01 -07008#include <linux/err.h>
Cedric Le Goateracce2922007-07-15 23:40:59 -07009
Eric W. Biederman22d917d2011-11-17 00:11:58 -080010#define UID_GID_MAP_MAX_EXTENTS 5
11
12struct uid_gid_map { /* 64 bytes -- 1 cache line */
13 u32 nr_extents;
14 struct uid_gid_extent {
15 u32 first;
16 u32 lower_first;
17 u32 count;
18 } extent[UID_GID_MAP_MAX_EXTENTS];
19};
20
Eric W. Biederman9cc46512014-12-02 12:27:26 -060021#define USERNS_SETGROUPS_ALLOWED 1UL
22
23#define USERNS_INIT_FLAGS USERNS_SETGROUPS_ALLOWED
24
Eric W. Biedermanf6b2db12016-08-08 13:54:50 -050025struct ucounts;
Eric W. Biederman25f9c082016-08-08 14:41:52 -050026
27enum ucount_type {
28 UCOUNT_USER_NAMESPACES,
Eric W. Biedermanf333c702016-08-08 14:08:36 -050029 UCOUNT_PID_NAMESPACES,
Eric W. Biedermanf7af3d12016-08-08 14:11:25 -050030 UCOUNT_UTS_NAMESPACES,
Eric W. Biedermanaba35662016-08-08 14:20:23 -050031 UCOUNT_IPC_NAMESPACES,
Eric W. Biederman70328662016-08-08 14:33:23 -050032 UCOUNT_NET_NAMESPACES,
Eric W. Biederman537f7cc2016-08-08 14:37:37 -050033 UCOUNT_MNT_NAMESPACES,
Eric W. Biedermand08311d2016-08-08 14:25:30 -050034 UCOUNT_CGROUP_NAMESPACES,
Eric W. Biederman25f9c082016-08-08 14:41:52 -050035 UCOUNT_COUNTS,
36};
37
Cedric Le Goateracce2922007-07-15 23:40:59 -070038struct user_namespace {
Eric W. Biederman22d917d2011-11-17 00:11:58 -080039 struct uid_gid_map uid_map;
40 struct uid_gid_map gid_map;
Eric W. Biedermanf76d2072012-08-30 01:24:05 -070041 struct uid_gid_map projid_map;
Eric W. Biedermanc61a2812012-12-28 18:58:39 -080042 atomic_t count;
Eric W. Biedermanaeb3ae92011-11-16 21:59:43 -080043 struct user_namespace *parent;
Oleg Nesterov8742f222013-08-08 18:55:32 +020044 int level;
Eric W. Biederman783291e2011-11-17 01:32:59 -080045 kuid_t owner;
46 kgid_t group;
Al Viro435d5f42014-10-31 22:56:04 -040047 struct ns_common ns;
Eric W. Biederman9cc46512014-12-02 12:27:26 -060048 unsigned long flags;
David Howellsf36f8c72013-09-24 10:35:19 +010049
50 /* Register of per-UID persistent keyrings for this namespace */
51#ifdef CONFIG_PERSISTENT_KEYRINGS
52 struct key *persistent_keyring_register;
53 struct rw_semaphore persistent_keyring_register_sem;
54#endif
Eric W. Biedermanb0321322016-07-30 13:53:37 -050055 struct work_struct work;
Eric W. Biedermandbec2842016-07-30 13:58:49 -050056#ifdef CONFIG_SYSCTL
57 struct ctl_table_set set;
58 struct ctl_table_header *sysctls;
59#endif
Eric W. Biedermanf6b2db12016-08-08 13:54:50 -050060 struct ucounts *ucounts;
Eric W. Biederman25f9c082016-08-08 14:41:52 -050061 int ucount_max[UCOUNT_COUNTS];
Eric W. Biedermanf6b2db12016-08-08 13:54:50 -050062};
63
64struct ucounts {
65 struct hlist_node node;
66 struct user_namespace *ns;
67 kuid_t uid;
68 atomic_t count;
Eric W. Biederman25f9c082016-08-08 14:41:52 -050069 atomic_t ucount[UCOUNT_COUNTS];
Cedric Le Goateracce2922007-07-15 23:40:59 -070070};
71
72extern struct user_namespace init_user_ns;
Eric W. Biedermanf6b2db12016-08-08 13:54:50 -050073
74bool setup_userns_sysctls(struct user_namespace *ns);
75void retire_userns_sysctls(struct user_namespace *ns);
Eric W. Biederman25f9c082016-08-08 14:41:52 -050076struct ucounts *inc_ucount(struct user_namespace *ns, kuid_t uid, enum ucount_type type);
77void dec_ucount(struct ucounts *ucounts, enum ucount_type type);
Cedric Le Goateracce2922007-07-15 23:40:59 -070078
79#ifdef CONFIG_USER_NS
80
81static inline struct user_namespace *get_user_ns(struct user_namespace *ns)
82{
83 if (ns)
Eric W. Biedermanc61a2812012-12-28 18:58:39 -080084 atomic_inc(&ns->count);
Cedric Le Goateracce2922007-07-15 23:40:59 -070085 return ns;
86}
87
Serge Hallyn18b6e042008-10-15 16:38:45 -050088extern int create_user_ns(struct cred *new);
Eric W. Biedermanb2e0d9872012-07-26 05:15:35 -070089extern int unshare_userns(unsigned long unshare_flags, struct cred **new_cred);
Eric W. Biedermanb0321322016-07-30 13:53:37 -050090extern void __put_user_ns(struct user_namespace *ns);
Cedric Le Goateracce2922007-07-15 23:40:59 -070091
92static inline void put_user_ns(struct user_namespace *ns)
93{
Eric W. Biedermanc61a2812012-12-28 18:58:39 -080094 if (ns && atomic_dec_and_test(&ns->count))
Eric W. Biedermanb0321322016-07-30 13:53:37 -050095 __put_user_ns(ns);
Cedric Le Goateracce2922007-07-15 23:40:59 -070096}
97
Eric W. Biederman22d917d2011-11-17 00:11:58 -080098struct seq_operations;
Fabian Frederickccf94f12014-08-08 14:21:22 -070099extern const struct seq_operations proc_uid_seq_operations;
100extern const struct seq_operations proc_gid_seq_operations;
101extern const struct seq_operations proc_projid_seq_operations;
Eric W. Biederman22d917d2011-11-17 00:11:58 -0800102extern ssize_t proc_uid_map_write(struct file *, const char __user *, size_t, loff_t *);
103extern ssize_t proc_gid_map_write(struct file *, const char __user *, size_t, loff_t *);
Eric W. Biedermanf76d2072012-08-30 01:24:05 -0700104extern ssize_t proc_projid_map_write(struct file *, const char __user *, size_t, loff_t *);
Eric W. Biederman9cc46512014-12-02 12:27:26 -0600105extern ssize_t proc_setgroups_write(struct file *, const char __user *, size_t, loff_t *);
106extern int proc_setgroups_show(struct seq_file *m, void *v);
Eric W. Biederman273d2c62014-12-05 18:01:11 -0600107extern bool userns_may_setgroups(const struct user_namespace *ns);
Seth Forsheed07b8462015-09-23 15:16:04 -0500108extern bool current_in_userns(const struct user_namespace *target_ns);
Andrey Vaginbcac25a2016-09-06 00:47:13 -0700109
110struct ns_common *ns_get_owner(struct ns_common *ns);
Cedric Le Goateracce2922007-07-15 23:40:59 -0700111#else
112
113static inline struct user_namespace *get_user_ns(struct user_namespace *ns)
114{
115 return &init_user_ns;
116}
117
Serge Hallyn18b6e042008-10-15 16:38:45 -0500118static inline int create_user_ns(struct cred *new)
Cedric Le Goateracce2922007-07-15 23:40:59 -0700119{
Serge Hallyn18b6e042008-10-15 16:38:45 -0500120 return -EINVAL;
Cedric Le Goateracce2922007-07-15 23:40:59 -0700121}
122
Eric W. Biedermanb2e0d9872012-07-26 05:15:35 -0700123static inline int unshare_userns(unsigned long unshare_flags,
124 struct cred **new_cred)
125{
126 if (unshare_flags & CLONE_NEWUSER)
127 return -EINVAL;
128 return 0;
129}
130
Cedric Le Goateracce2922007-07-15 23:40:59 -0700131static inline void put_user_ns(struct user_namespace *ns)
132{
133}
134
Eric W. Biederman273d2c62014-12-05 18:01:11 -0600135static inline bool userns_may_setgroups(const struct user_namespace *ns)
136{
137 return true;
138}
Seth Forsheed07b8462015-09-23 15:16:04 -0500139
140static inline bool current_in_userns(const struct user_namespace *target_ns)
141{
142 return true;
143}
Andrey Vaginbcac25a2016-09-06 00:47:13 -0700144
145static inline struct ns_common *ns_get_owner(struct ns_common *ns)
146{
147 return ERR_PTR(-EPERM);
148}
Eric W. Biederman22d917d2011-11-17 00:11:58 -0800149#endif
150
Cedric Le Goateracce2922007-07-15 23:40:59 -0700151#endif /* _LINUX_USER_H */