linux-imx

/*

 * Module and Firmware Pinning Security Module

 *

 * Copyright 2011-2016 Google Inc.

 *

 * Author: Kees Cook <keescook@chromium.org>

 *

 * This software is licensed under the terms of the GNU General Public

 * License version 2, as published by the Free Software Foundation, and

 * may be copied, distributed, and modified under those terms.

 *

 * This program is distributed in the hope that it will be useful,

 * but WITHOUT ANY WARRANTY; without even the implied warranty of

 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

 * GNU General Public License for more details.

 */

​

#define pr_fmt(fmt) "LoadPin: " fmt

​

#include <linux/module.h>

#include <linux/fs.h>

#include <linux/lsm_hooks.h>

#include <linux/mount.h>

#include <linux/path.h>

#include <linux/sched.h>    /* current */

#include <linux/string_helpers.h>

​

static void report_load(const char *origin, struct file *file, char *operation)

{

    char *cmdline, *pathname;

​

    pathname = kstrdup_quotable_file(file, GFP_KERNEL);

    cmdline = kstrdup_quotable_cmdline(current, GFP_KERNEL);

​

    pr_notice("%s %s obj=%s%s%s pid=%d cmdline=%s%s%s\n",

          origin, operation,

          (pathname && pathname[0] != '<') ? "\"" : "",

          pathname,

          (pathname && pathname[0] != '<') ? "\"" : "",

          task_pid_nr(current),

          cmdline ? "\"" : "", cmdline, cmdline ? "\"" : "");

​

    kfree(cmdline);

    kfree(pathname);

}

​

static int enforce = IS_ENABLED(CONFIG_SECURITY_LOADPIN_ENFORCE);

static struct super_block *pinned_root;

static DEFINE_SPINLOCK(pinned_root_spinlock);

​

#ifdef CONFIG_SYSCTL

static int zero;

static int one = 1;

​

static struct ctl_path loadpin_sysctl_path[] = {

    { .procname = "kernel", },

    { .procname = "loadpin", },

    { }

};

​

static struct ctl_table loadpin_sysctl_table[] = {

    {

        .procname       = "enforce",