linux-imx

/* Task credentials management - see Documentation/security/credentials.rst

 *

 * Copyright (C) 2008 Red Hat, Inc. All Rights Reserved.

 * Written by David Howells (dhowells@redhat.com)

 *

 * This program is free software; you can redistribute it and/or

 * modify it under the terms of the GNU General Public Licence

 * as published by the Free Software Foundation; either version

 * 2 of the Licence, or (at your option) any later version.

 */

#include <linux/export.h>

#include <linux/cred.h>

#include <linux/slab.h>

#include <linux/sched.h>

#include <linux/sched/coredump.h>

#include <linux/key.h>

#include <linux/keyctl.h>

#include <linux/init_task.h>

#include <linux/security.h>

#include <linux/binfmts.h>

#include <linux/cn_proc.h>

#include <linux/uidgid.h>

​

#if 0

#define kdebug(FMT, ...)                        \

    printk("[%-5.5s%5u] " FMT "\n",                 \

           current->comm, current->pid, ##__VA_ARGS__)

#else

#define kdebug(FMT, ...)                        \

do {                                    \

    if (0)                              \

        no_printk("[%-5.5s%5u] " FMT "\n",          \

              current->comm, current->pid, ##__VA_ARGS__);  \

} while (0)

#endif

​

static struct kmem_cache *cred_jar;

​

/* init to 2 - one for init_task, one to ensure it is never freed */

struct group_info init_groups = { .usage = ATOMIC_INIT(2) };

​

/*

 * The initial credentials for the initial task

 */

struct cred init_cred = {

    .usage          = ATOMIC_INIT(4),

#ifdef CONFIG_DEBUG_CREDENTIALS

    .subscribers        = ATOMIC_INIT(2),

    .magic          = CRED_MAGIC,

#endif

    .uid            = GLOBAL_ROOT_UID,

    .gid            = GLOBAL_ROOT_GID,

    .suid           = GLOBAL_ROOT_UID,

    .sgid           = GLOBAL_ROOT_GID,

    .euid           = GLOBAL_ROOT_UID,

    .egid           = GLOBAL_ROOT_GID,

    .fsuid          = GLOBAL_ROOT_UID,

    .fsgid          = GLOBAL_ROOT_GID,

    .securebits     = SECUREBITS_DEFAULT,

    .cap_inheritable    = CAP_EMPTY_SET,

    .cap_permitted      = CAP_FULL_SET,

    .cap_effective      = CAP_FULL_SET,

    .cap_bset       = CAP_FULL_SET,