提交 40401530 编写于 作者: A Al Viro 提交者: James Morris

security: trim security.h

Trim security.h
Signed-off-by: NAl Viro <viro@zeniv.linux.org.uk>
Signed-off-by: NJames Morris <jmorris@namei.org>
上级 191c5424
...@@ -13,6 +13,7 @@ ...@@ -13,6 +13,7 @@
#include <linux/init.h> #include <linux/init.h>
#include <linux/wait.h> #include <linux/wait.h>
#include <linux/cdev.h> #include <linux/cdev.h>
#include <linux/idr.h>
#include <linux/fs.h> #include <linux/fs.h>
#include <net/net_namespace.h> #include <net/net_namespace.h>
......
...@@ -23,6 +23,7 @@ ...@@ -23,6 +23,7 @@
#include <linux/crypto.h> #include <linux/crypto.h>
#include <linux/completion.h> #include <linux/completion.h>
#include <linux/module.h> #include <linux/module.h>
#include <linux/idr.h>
#include <asm/unaligned.h> #include <asm/unaligned.h>
#include <scsi/scsi_device.h> #include <scsi/scsi_device.h>
#include <scsi/iscsi_proto.h> #include <scsi/iscsi_proto.h>
......
...@@ -21,6 +21,7 @@ ...@@ -21,6 +21,7 @@
#include <linux/string.h> #include <linux/string.h>
#include <linux/kthread.h> #include <linux/kthread.h>
#include <linux/crypto.h> #include <linux/crypto.h>
#include <linux/idr.h>
#include <scsi/iscsi_proto.h> #include <scsi/iscsi_proto.h>
#include <target/target_core_base.h> #include <target/target_core_base.h>
#include <target/target_core_fabric.h> #include <target/target_core_fabric.h>
......
...@@ -36,6 +36,7 @@ ...@@ -36,6 +36,7 @@
#include <linux/inet.h> #include <linux/inet.h>
#include <linux/in6.h> #include <linux/in6.h>
#include <linux/slab.h> #include <linux/slab.h>
#include <linux/idr.h>
#include <net/ipv6.h> #include <net/ipv6.h>
#include <linux/nfs_xdr.h> #include <linux/nfs_xdr.h>
#include <linux/sunrpc/bc_xprt.h> #include <linux/sunrpc/bc_xprt.h>
......
...@@ -6,7 +6,9 @@ ...@@ -6,7 +6,9 @@
#include <linux/poll.h> #include <linux/poll.h>
#include <linux/proc_fs.h> #include <linux/proc_fs.h>
#include <linux/security.h> #include <linux/security.h>
#include <linux/sched.h>
#include <linux/namei.h> #include <linux/namei.h>
#include <linux/mm.h>
#include "internal.h" #include "internal.h"
static const struct dentry_operations proc_sys_dentry_operations; static const struct dentry_operations proc_sys_dentry_operations;
......
...@@ -71,6 +71,7 @@ ...@@ -71,6 +71,7 @@
#include <linux/module.h> #include <linux/module.h>
#include <linux/proc_fs.h> #include <linux/proc_fs.h>
#include <linux/security.h> #include <linux/security.h>
#include <linux/sched.h>
#include <linux/kmod.h> #include <linux/kmod.h>
#include <linux/namei.h> #include <linux/namei.h>
#include <linux/capability.h> #include <linux/capability.h>
......
...@@ -32,6 +32,7 @@ ...@@ -32,6 +32,7 @@
#include <linux/backing-dev.h> #include <linux/backing-dev.h>
#include <linux/rculist_bl.h> #include <linux/rculist_bl.h>
#include <linux/cleancache.h> #include <linux/cleancache.h>
#include <linux/fsnotify.h>
#include "internal.h" #include "internal.h"
......
...@@ -22,22 +22,36 @@ ...@@ -22,22 +22,36 @@
#ifndef __LINUX_SECURITY_H #ifndef __LINUX_SECURITY_H
#define __LINUX_SECURITY_H #define __LINUX_SECURITY_H
#include <linux/fs.h>
#include <linux/fsnotify.h>
#include <linux/binfmts.h>
#include <linux/dcache.h>
#include <linux/signal.h>
#include <linux/resource.h>
#include <linux/sem.h>
#include <linux/shm.h>
#include <linux/mm.h> /* PAGE_ALIGN */
#include <linux/msg.h>
#include <linux/sched.h>
#include <linux/key.h> #include <linux/key.h>
#include <linux/xfrm.h> #include <linux/capability.h>
#include <linux/slab.h> #include <linux/slab.h>
#include <linux/xattr.h> #include <linux/err.h>
#include <net/flow.h>
struct linux_binprm;
struct cred;
struct rlimit;
struct siginfo;
struct sem_array;
struct sembuf;
struct kern_ipc_perm;
struct audit_context;
struct super_block;
struct inode;
struct dentry;
struct file;
struct vfsmount;
struct path;
struct qstr;
struct nameidata;
struct iattr;
struct fown_struct;
struct file_operations;
struct shmid_kernel;
struct msg_msg;
struct msg_queue;
struct xattr;
struct xfrm_sec_ctx;
struct mm_struct;
/* Maximum number of letters for an LSM name string */ /* Maximum number of letters for an LSM name string */
#define SECURITY_NAME_MAX 10 #define SECURITY_NAME_MAX 10
...@@ -49,6 +63,7 @@ ...@@ -49,6 +63,7 @@
struct ctl_table; struct ctl_table;
struct audit_krule; struct audit_krule;
struct user_namespace; struct user_namespace;
struct timezone;
/* /*
* These functions are in security/capability.c and are used * These functions are in security/capability.c and are used
...@@ -131,18 +146,6 @@ struct request_sock; ...@@ -131,18 +146,6 @@ struct request_sock;
#define LSM_UNSAFE_PTRACE_CAP 4 #define LSM_UNSAFE_PTRACE_CAP 4
#ifdef CONFIG_MMU #ifdef CONFIG_MMU
/*
* If a hint addr is less than mmap_min_addr change hint to be as
* low as possible but still greater than mmap_min_addr
*/
static inline unsigned long round_hint_to_min(unsigned long hint)
{
hint &= PAGE_MASK;
if (((void *)hint != NULL) &&
(hint < mmap_min_addr))
return PAGE_ALIGN(mmap_min_addr);
return hint;
}
extern int mmap_min_addr_handler(struct ctl_table *table, int write, extern int mmap_min_addr_handler(struct ctl_table *table, int write,
void __user *buffer, size_t *lenp, loff_t *ppos); void __user *buffer, size_t *lenp, loff_t *ppos);
#endif #endif
......
...@@ -56,6 +56,8 @@ ...@@ -56,6 +56,8 @@
#include <linux/memcontrol.h> #include <linux/memcontrol.h>
#include <linux/res_counter.h> #include <linux/res_counter.h>
#include <linux/jump_label.h> #include <linux/jump_label.h>
#include <linux/aio.h>
#include <linux/sched.h>
#include <linux/filter.h> #include <linux/filter.h>
#include <linux/rculist_nulls.h> #include <linux/rculist_nulls.h>
......
...@@ -13,7 +13,9 @@ ...@@ -13,7 +13,9 @@
#include <linux/security.h> #include <linux/security.h>
#include <linux/slab.h> #include <linux/slab.h>
#include <linux/ipc.h> #include <linux/ipc.h>
#include <linux/msg.h>
#include <linux/ipc_namespace.h> #include <linux/ipc_namespace.h>
#include <linux/utsname.h>
#include <asm/uaccess.h> #include <asm/uaccess.h>
#include "util.h" #include "util.h"
......
...@@ -16,6 +16,7 @@ ...@@ -16,6 +16,7 @@
#include <linux/keyctl.h> #include <linux/keyctl.h>
#include <linux/init_task.h> #include <linux/init_task.h>
#include <linux/security.h> #include <linux/security.h>
#include <linux/binfmts.h>
#include <linux/cn_proc.h> #include <linux/cn_proc.h>
#if 0 #if 0
......
...@@ -52,6 +52,7 @@ ...@@ -52,6 +52,7 @@
#include <linux/hw_breakpoint.h> #include <linux/hw_breakpoint.h>
#include <linux/oom.h> #include <linux/oom.h>
#include <linux/writeback.h> #include <linux/writeback.h>
#include <linux/shm.h>
#include <asm/uaccess.h> #include <asm/uaccess.h>
#include <asm/unistd.h> #include <asm/unistd.h>
......
...@@ -71,6 +71,7 @@ ...@@ -71,6 +71,7 @@
#include <linux/ftrace.h> #include <linux/ftrace.h>
#include <linux/slab.h> #include <linux/slab.h>
#include <linux/init_task.h> #include <linux/init_task.h>
#include <linux/binfmts.h>
#include <asm/tlb.h> #include <asm/tlb.h>
#include <asm/irq_regs.h> #include <asm/irq_regs.h>
......
...@@ -58,6 +58,7 @@ ...@@ -58,6 +58,7 @@
#include <linux/oom.h> #include <linux/oom.h>
#include <linux/kmod.h> #include <linux/kmod.h>
#include <linux/capability.h> #include <linux/capability.h>
#include <linux/binfmts.h>
#include <asm/uaccess.h> #include <asm/uaccess.h>
#include <asm/processor.h> #include <asm/processor.h>
......
...@@ -935,6 +935,19 @@ void vm_stat_account(struct mm_struct *mm, unsigned long flags, ...@@ -935,6 +935,19 @@ void vm_stat_account(struct mm_struct *mm, unsigned long flags,
} }
#endif /* CONFIG_PROC_FS */ #endif /* CONFIG_PROC_FS */
/*
* If a hint addr is less than mmap_min_addr change hint to be as
* low as possible but still greater than mmap_min_addr
*/
static inline unsigned long round_hint_to_min(unsigned long hint)
{
hint &= PAGE_MASK;
if (((void *)hint != NULL) &&
(hint < mmap_min_addr))
return PAGE_ALIGN(mmap_min_addr);
return hint;
}
/* /*
* The caller must hold down_write(&current->mm->mmap_sem). * The caller must hold down_write(&current->mm->mmap_sem).
*/ */
......
...@@ -28,6 +28,7 @@ ...@@ -28,6 +28,7 @@
#include <linux/prctl.h> #include <linux/prctl.h>
#include <linux/securebits.h> #include <linux/securebits.h>
#include <linux/user_namespace.h> #include <linux/user_namespace.h>
#include <linux/binfmts.h>
/* /*
* If a non-root user executes a setuid-root binary in * If a non-root user executes a setuid-root binary in
......
...@@ -19,6 +19,8 @@ ...@@ -19,6 +19,8 @@
#include <linux/integrity.h> #include <linux/integrity.h>
#include <linux/ima.h> #include <linux/ima.h>
#include <linux/evm.h> #include <linux/evm.h>
#include <linux/fsnotify.h>
#include <net/flow.h>
#define MAX_LSM_EVM_XATTR 2 #define MAX_LSM_EVM_XATTR 2
......
...@@ -81,6 +81,8 @@ ...@@ -81,6 +81,8 @@
#include <linux/syslog.h> #include <linux/syslog.h>
#include <linux/user_namespace.h> #include <linux/user_namespace.h>
#include <linux/export.h> #include <linux/export.h>
#include <linux/msg.h>
#include <linux/shm.h>
#include "avc.h" #include "avc.h"
#include "objsec.h" #include "objsec.h"
......
...@@ -36,6 +36,9 @@ ...@@ -36,6 +36,9 @@
#include <linux/magic.h> #include <linux/magic.h>
#include <linux/dcache.h> #include <linux/dcache.h>
#include <linux/personality.h> #include <linux/personality.h>
#include <linux/msg.h>
#include <linux/shm.h>
#include <linux/binfmts.h>
#include "smack.h" #include "smack.h"
#define task_security(task) (task_cred_xxx((task), security)) #define task_security(task) (task_cred_xxx((task), security))
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册