Cedric Le Goater | acce292 | 2007-07-15 23:40:59 -0700 | [diff] [blame] | 1 | #ifndef _LINUX_USER_NAMESPACE_H |
| 2 | #define _LINUX_USER_NAMESPACE_H |
| 3 | |
| 4 | #include <linux/kref.h> |
| 5 | #include <linux/nsproxy.h> |
Al Viro | 435d5f4 | 2014-10-31 22:56:04 -0400 | [diff] [blame] | 6 | #include <linux/ns_common.h> |
Cedric Le Goater | acce292 | 2007-07-15 23:40:59 -0700 | [diff] [blame] | 7 | #include <linux/sched.h> |
Serge E. Hallyn | 77ec739 | 2007-07-15 23:41:01 -0700 | [diff] [blame] | 8 | #include <linux/err.h> |
Cedric Le Goater | acce292 | 2007-07-15 23:40:59 -0700 | [diff] [blame] | 9 | |
Eric W. Biederman | 22d917d | 2011-11-17 00:11:58 -0800 | [diff] [blame] | 10 | #define UID_GID_MAP_MAX_EXTENTS 5 |
| 11 | |
| 12 | struct uid_gid_map { /* 64 bytes -- 1 cache line */ |
| 13 | u32 nr_extents; |
| 14 | struct uid_gid_extent { |
| 15 | u32 first; |
| 16 | u32 lower_first; |
| 17 | u32 count; |
| 18 | } extent[UID_GID_MAP_MAX_EXTENTS]; |
| 19 | }; |
| 20 | |
Eric W. Biederman | 9cc4651 | 2014-12-02 12:27:26 -0600 | [diff] [blame] | 21 | #define USERNS_SETGROUPS_ALLOWED 1UL |
| 22 | |
| 23 | #define USERNS_INIT_FLAGS USERNS_SETGROUPS_ALLOWED |
| 24 | |
Eric W. Biederman | f6b2db1 | 2016-08-08 13:54:50 -0500 | [diff] [blame^] | 25 | struct ucounts; |
Cedric Le Goater | acce292 | 2007-07-15 23:40:59 -0700 | [diff] [blame] | 26 | struct user_namespace { |
Eric W. Biederman | 22d917d | 2011-11-17 00:11:58 -0800 | [diff] [blame] | 27 | struct uid_gid_map uid_map; |
| 28 | struct uid_gid_map gid_map; |
Eric W. Biederman | f76d207 | 2012-08-30 01:24:05 -0700 | [diff] [blame] | 29 | struct uid_gid_map projid_map; |
Eric W. Biederman | c61a281 | 2012-12-28 18:58:39 -0800 | [diff] [blame] | 30 | atomic_t count; |
Eric W. Biederman | aeb3ae9 | 2011-11-16 21:59:43 -0800 | [diff] [blame] | 31 | struct user_namespace *parent; |
Oleg Nesterov | 8742f22 | 2013-08-08 18:55:32 +0200 | [diff] [blame] | 32 | int level; |
Eric W. Biederman | 783291e | 2011-11-17 01:32:59 -0800 | [diff] [blame] | 33 | kuid_t owner; |
| 34 | kgid_t group; |
Al Viro | 435d5f4 | 2014-10-31 22:56:04 -0400 | [diff] [blame] | 35 | struct ns_common ns; |
Eric W. Biederman | 9cc4651 | 2014-12-02 12:27:26 -0600 | [diff] [blame] | 36 | unsigned long flags; |
David Howells | f36f8c7 | 2013-09-24 10:35:19 +0100 | [diff] [blame] | 37 | |
| 38 | /* Register of per-UID persistent keyrings for this namespace */ |
| 39 | #ifdef CONFIG_PERSISTENT_KEYRINGS |
| 40 | struct key *persistent_keyring_register; |
| 41 | struct rw_semaphore persistent_keyring_register_sem; |
| 42 | #endif |
Eric W. Biederman | b032132 | 2016-07-30 13:53:37 -0500 | [diff] [blame] | 43 | struct work_struct work; |
Eric W. Biederman | dbec284 | 2016-07-30 13:58:49 -0500 | [diff] [blame] | 44 | #ifdef CONFIG_SYSCTL |
| 45 | struct ctl_table_set set; |
| 46 | struct ctl_table_header *sysctls; |
| 47 | #endif |
Eric W. Biederman | f6b2db1 | 2016-08-08 13:54:50 -0500 | [diff] [blame^] | 48 | struct ucounts *ucounts; |
Eric W. Biederman | b376c3e | 2016-08-08 13:41:24 -0500 | [diff] [blame] | 49 | int max_user_namespaces; |
Eric W. Biederman | f6b2db1 | 2016-08-08 13:54:50 -0500 | [diff] [blame^] | 50 | }; |
| 51 | |
| 52 | struct ucounts { |
| 53 | struct hlist_node node; |
| 54 | struct user_namespace *ns; |
| 55 | kuid_t uid; |
| 56 | atomic_t count; |
Eric W. Biederman | b376c3e | 2016-08-08 13:41:24 -0500 | [diff] [blame] | 57 | atomic_t user_namespaces; |
Cedric Le Goater | acce292 | 2007-07-15 23:40:59 -0700 | [diff] [blame] | 58 | }; |
| 59 | |
| 60 | extern struct user_namespace init_user_ns; |
Eric W. Biederman | f6b2db1 | 2016-08-08 13:54:50 -0500 | [diff] [blame^] | 61 | |
| 62 | bool setup_userns_sysctls(struct user_namespace *ns); |
| 63 | void retire_userns_sysctls(struct user_namespace *ns); |
| 64 | struct ucounts *inc_user_namespaces(struct user_namespace *ns, kuid_t uid); |
| 65 | void dec_user_namespaces(struct ucounts *ucounts); |
Cedric Le Goater | acce292 | 2007-07-15 23:40:59 -0700 | [diff] [blame] | 66 | |
| 67 | #ifdef CONFIG_USER_NS |
| 68 | |
| 69 | static inline struct user_namespace *get_user_ns(struct user_namespace *ns) |
| 70 | { |
| 71 | if (ns) |
Eric W. Biederman | c61a281 | 2012-12-28 18:58:39 -0800 | [diff] [blame] | 72 | atomic_inc(&ns->count); |
Cedric Le Goater | acce292 | 2007-07-15 23:40:59 -0700 | [diff] [blame] | 73 | return ns; |
| 74 | } |
| 75 | |
Serge Hallyn | 18b6e04 | 2008-10-15 16:38:45 -0500 | [diff] [blame] | 76 | extern int create_user_ns(struct cred *new); |
Eric W. Biederman | b2e0d987 | 2012-07-26 05:15:35 -0700 | [diff] [blame] | 77 | extern int unshare_userns(unsigned long unshare_flags, struct cred **new_cred); |
Eric W. Biederman | b032132 | 2016-07-30 13:53:37 -0500 | [diff] [blame] | 78 | extern void __put_user_ns(struct user_namespace *ns); |
Cedric Le Goater | acce292 | 2007-07-15 23:40:59 -0700 | [diff] [blame] | 79 | |
| 80 | static inline void put_user_ns(struct user_namespace *ns) |
| 81 | { |
Eric W. Biederman | c61a281 | 2012-12-28 18:58:39 -0800 | [diff] [blame] | 82 | if (ns && atomic_dec_and_test(&ns->count)) |
Eric W. Biederman | b032132 | 2016-07-30 13:53:37 -0500 | [diff] [blame] | 83 | __put_user_ns(ns); |
Cedric Le Goater | acce292 | 2007-07-15 23:40:59 -0700 | [diff] [blame] | 84 | } |
| 85 | |
Eric W. Biederman | 22d917d | 2011-11-17 00:11:58 -0800 | [diff] [blame] | 86 | struct seq_operations; |
Fabian Frederick | ccf94f1 | 2014-08-08 14:21:22 -0700 | [diff] [blame] | 87 | extern const struct seq_operations proc_uid_seq_operations; |
| 88 | extern const struct seq_operations proc_gid_seq_operations; |
| 89 | extern const struct seq_operations proc_projid_seq_operations; |
Eric W. Biederman | 22d917d | 2011-11-17 00:11:58 -0800 | [diff] [blame] | 90 | extern ssize_t proc_uid_map_write(struct file *, const char __user *, size_t, loff_t *); |
| 91 | extern ssize_t proc_gid_map_write(struct file *, const char __user *, size_t, loff_t *); |
Eric W. Biederman | f76d207 | 2012-08-30 01:24:05 -0700 | [diff] [blame] | 92 | extern ssize_t proc_projid_map_write(struct file *, const char __user *, size_t, loff_t *); |
Eric W. Biederman | 9cc4651 | 2014-12-02 12:27:26 -0600 | [diff] [blame] | 93 | extern ssize_t proc_setgroups_write(struct file *, const char __user *, size_t, loff_t *); |
| 94 | extern int proc_setgroups_show(struct seq_file *m, void *v); |
Eric W. Biederman | 273d2c6 | 2014-12-05 18:01:11 -0600 | [diff] [blame] | 95 | extern bool userns_may_setgroups(const struct user_namespace *ns); |
Seth Forshee | d07b846 | 2015-09-23 15:16:04 -0500 | [diff] [blame] | 96 | extern bool current_in_userns(const struct user_namespace *target_ns); |
Cedric Le Goater | acce292 | 2007-07-15 23:40:59 -0700 | [diff] [blame] | 97 | #else |
| 98 | |
| 99 | static inline struct user_namespace *get_user_ns(struct user_namespace *ns) |
| 100 | { |
| 101 | return &init_user_ns; |
| 102 | } |
| 103 | |
Serge Hallyn | 18b6e04 | 2008-10-15 16:38:45 -0500 | [diff] [blame] | 104 | static inline int create_user_ns(struct cred *new) |
Cedric Le Goater | acce292 | 2007-07-15 23:40:59 -0700 | [diff] [blame] | 105 | { |
Serge Hallyn | 18b6e04 | 2008-10-15 16:38:45 -0500 | [diff] [blame] | 106 | return -EINVAL; |
Cedric Le Goater | acce292 | 2007-07-15 23:40:59 -0700 | [diff] [blame] | 107 | } |
| 108 | |
Eric W. Biederman | b2e0d987 | 2012-07-26 05:15:35 -0700 | [diff] [blame] | 109 | static inline int unshare_userns(unsigned long unshare_flags, |
| 110 | struct cred **new_cred) |
| 111 | { |
| 112 | if (unshare_flags & CLONE_NEWUSER) |
| 113 | return -EINVAL; |
| 114 | return 0; |
| 115 | } |
| 116 | |
Cedric Le Goater | acce292 | 2007-07-15 23:40:59 -0700 | [diff] [blame] | 117 | static inline void put_user_ns(struct user_namespace *ns) |
| 118 | { |
| 119 | } |
| 120 | |
Eric W. Biederman | 273d2c6 | 2014-12-05 18:01:11 -0600 | [diff] [blame] | 121 | static inline bool userns_may_setgroups(const struct user_namespace *ns) |
| 122 | { |
| 123 | return true; |
| 124 | } |
Seth Forshee | d07b846 | 2015-09-23 15:16:04 -0500 | [diff] [blame] | 125 | |
| 126 | static inline bool current_in_userns(const struct user_namespace *target_ns) |
| 127 | { |
| 128 | return true; |
| 129 | } |
Eric W. Biederman | 22d917d | 2011-11-17 00:11:58 -0800 | [diff] [blame] | 130 | #endif |
| 131 | |
Cedric Le Goater | acce292 | 2007-07-15 23:40:59 -0700 | [diff] [blame] | 132 | #endif /* _LINUX_USER_H */ |