| /* |
| * Linux Security Module for Chromium OS |
| * |
| * Copyright 2018 Google LLC. All Rights Reserved |
| * |
| * Authors: |
| * Micah Morton <mortonm@chromium.org> |
| * |
| * This software is licensed under the terms of the GNU General Public |
| * License version 2, as published by the Free Software Foundation, and |
| * may be copied, distributed, and modified under those terms. |
| * |
| * This program is distributed in the hope that it will be useful, |
| * but WITHOUT ANY WARRANTY; without even the implied warranty of |
| * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
| * GNU General Public License for more details. |
| */ |
| |
| #ifndef COMPLETE_WHITELISTS_H |
| #define COMPLETE_WHITELISTS_H |
| |
| /* |
| * NOTE: the purpose of this header is only to pull out the definition of this |
| * array from alt-syscall.c for the purposes of readability. It should not be |
| * included in other .c files. |
| */ |
| |
| #include "alt-syscall.h" |
| |
| static struct syscall_whitelist_entry complete_whitelist[] = { |
| /* Syscalls wired up on ARM32/ARM64 and x86_64. */ |
| SYSCALL_ENTRY(accept), |
| SYSCALL_ENTRY(accept4), |
| SYSCALL_ENTRY(acct), |
| SYSCALL_ENTRY(add_key), |
| SYSCALL_ENTRY(adjtimex), |
| SYSCALL_ENTRY(bind), |
| SYSCALL_ENTRY(brk), |
| SYSCALL_ENTRY(capget), |
| SYSCALL_ENTRY(capset), |
| SYSCALL_ENTRY(chdir), |
| SYSCALL_ENTRY(chroot), |
| SYSCALL_ENTRY(clock_adjtime), |
| SYSCALL_ENTRY(clock_getres), |
| SYSCALL_ENTRY(clock_gettime), |
| SYSCALL_ENTRY(clock_nanosleep), |
| SYSCALL_ENTRY(clock_settime), |
| SYSCALL_ENTRY(clone), |
| SYSCALL_ENTRY(close), |
| SYSCALL_ENTRY(connect), |
| SYSCALL_ENTRY(copy_file_range), |
| SYSCALL_ENTRY(delete_module), |
| SYSCALL_ENTRY(dup), |
| SYSCALL_ENTRY(dup3), |
| SYSCALL_ENTRY(epoll_create1), |
| SYSCALL_ENTRY(epoll_ctl), |
| SYSCALL_ENTRY(epoll_pwait), |
| SYSCALL_ENTRY(eventfd2), |
| SYSCALL_ENTRY(execve), |
| SYSCALL_ENTRY(exit), |
| SYSCALL_ENTRY(exit_group), |
| SYSCALL_ENTRY(faccessat), |
| SYSCALL_ENTRY(fallocate), |
| SYSCALL_ENTRY(fanotify_init), |
| SYSCALL_ENTRY(fanotify_mark), |
| SYSCALL_ENTRY(fchdir), |
| SYSCALL_ENTRY(fchmod), |
| SYSCALL_ENTRY(fchmodat), |
| SYSCALL_ENTRY(fchown), |
| SYSCALL_ENTRY(fchownat), |
| SYSCALL_ENTRY(fcntl), |
| SYSCALL_ENTRY(fdatasync), |
| SYSCALL_ENTRY(fgetxattr), |
| SYSCALL_ENTRY(finit_module), |
| SYSCALL_ENTRY(flistxattr), |
| SYSCALL_ENTRY(flock), |
| SYSCALL_ENTRY(fremovexattr), |
| SYSCALL_ENTRY(fsetxattr), |
| SYSCALL_ENTRY(fstatfs), |
| SYSCALL_ENTRY(fsync), |
| SYSCALL_ENTRY(ftruncate), |
| SYSCALL_ENTRY(futex), |
| SYSCALL_ENTRY(getcpu), |
| SYSCALL_ENTRY(getcwd), |
| SYSCALL_ENTRY(getdents64), |
| SYSCALL_ENTRY(getegid), |
| SYSCALL_ENTRY(geteuid), |
| SYSCALL_ENTRY(getgid), |
| SYSCALL_ENTRY(getgroups), |
| SYSCALL_ENTRY(getitimer), |
| SYSCALL_ENTRY(get_mempolicy), |
| SYSCALL_ENTRY(getpeername), |
| SYSCALL_ENTRY(getpgid), |
| SYSCALL_ENTRY(getpid), |
| SYSCALL_ENTRY(getppid), |
| SYSCALL_ENTRY(getpriority), |
| SYSCALL_ENTRY(getrandom), |
| SYSCALL_ENTRY(getresgid), |
| SYSCALL_ENTRY(getresuid), |
| SYSCALL_ENTRY(get_robust_list), |
| SYSCALL_ENTRY(getrusage), |
| SYSCALL_ENTRY(getsid), |
| SYSCALL_ENTRY(getsockname), |
| SYSCALL_ENTRY(getsockopt), |
| SYSCALL_ENTRY(gettid), |
| SYSCALL_ENTRY(gettimeofday), |
| SYSCALL_ENTRY(getuid), |
| SYSCALL_ENTRY(getxattr), |
| SYSCALL_ENTRY(init_module), |
| SYSCALL_ENTRY(inotify_add_watch), |
| SYSCALL_ENTRY(inotify_init1), |
| SYSCALL_ENTRY(inotify_rm_watch), |
| SYSCALL_ENTRY(io_cancel), |
| SYSCALL_ENTRY(ioctl), |
| SYSCALL_ENTRY(io_destroy), |
| SYSCALL_ENTRY(io_getevents), |
| SYSCALL_ENTRY(ioprio_get), |
| SYSCALL_ENTRY(ioprio_set), |
| SYSCALL_ENTRY(io_setup), |
| SYSCALL_ENTRY(io_submit), |
| SYSCALL_ENTRY(kcmp), |
| SYSCALL_ENTRY(kexec_load), |
| SYSCALL_ENTRY(keyctl), |
| SYSCALL_ENTRY(kill), |
| SYSCALL_ENTRY(lgetxattr), |
| SYSCALL_ENTRY(linkat), |
| SYSCALL_ENTRY(listen), |
| SYSCALL_ENTRY(listxattr), |
| SYSCALL_ENTRY(llistxattr), |
| SYSCALL_ENTRY(lookup_dcookie), |
| SYSCALL_ENTRY(lremovexattr), |
| SYSCALL_ENTRY(lseek), |
| SYSCALL_ENTRY(lsetxattr), |
| SYSCALL_ENTRY(madvise), |
| SYSCALL_ENTRY(mbind), |
| SYSCALL_ENTRY(memfd_create), |
| SYSCALL_ENTRY(mincore), |
| SYSCALL_ENTRY(mkdirat), |
| SYSCALL_ENTRY(mknodat), |
| SYSCALL_ENTRY(mlock), |
| SYSCALL_ENTRY(mlockall), |
| SYSCALL_ENTRY(mount), |
| SYSCALL_ENTRY(move_pages), |
| SYSCALL_ENTRY(mprotect), |
| SYSCALL_ENTRY(mq_getsetattr), |
| SYSCALL_ENTRY(mq_notify), |
| SYSCALL_ENTRY(mq_open), |
| SYSCALL_ENTRY(mq_timedreceive), |
| SYSCALL_ENTRY(mq_timedsend), |
| SYSCALL_ENTRY(mq_unlink), |
| SYSCALL_ENTRY(mremap), |
| SYSCALL_ENTRY(msgctl), |
| SYSCALL_ENTRY(msgget), |
| SYSCALL_ENTRY(msgrcv), |
| SYSCALL_ENTRY(msgsnd), |
| SYSCALL_ENTRY(msync), |
| SYSCALL_ENTRY(munlock), |
| SYSCALL_ENTRY(munlockall), |
| SYSCALL_ENTRY(munmap), |
| SYSCALL_ENTRY(name_to_handle_at), |
| SYSCALL_ENTRY(nanosleep), |
| SYSCALL_ENTRY(openat), |
| SYSCALL_ENTRY(open_by_handle_at), |
| SYSCALL_ENTRY(perf_event_open), |
| SYSCALL_ENTRY(personality), |
| SYSCALL_ENTRY(pipe2), |
| SYSCALL_ENTRY(pivot_root), |
| SYSCALL_ENTRY(pkey_alloc), |
| SYSCALL_ENTRY(pkey_free), |
| SYSCALL_ENTRY(pkey_mprotect), |
| SYSCALL_ENTRY(ppoll), |
| SYSCALL_ENTRY_ALT(prctl, alt_sys_prctl), |
| SYSCALL_ENTRY(pread64), |
| SYSCALL_ENTRY(preadv), |
| SYSCALL_ENTRY(preadv2), |
| SYSCALL_ENTRY(pwritev2), |
| SYSCALL_ENTRY(prlimit64), |
| SYSCALL_ENTRY(process_vm_readv), |
| SYSCALL_ENTRY(process_vm_writev), |
| SYSCALL_ENTRY(pselect6), |
| SYSCALL_ENTRY(ptrace), |
| SYSCALL_ENTRY(pwrite64), |
| SYSCALL_ENTRY(pwritev), |
| SYSCALL_ENTRY(quotactl), |
| SYSCALL_ENTRY(read), |
| SYSCALL_ENTRY(readahead), |
| SYSCALL_ENTRY(readlinkat), |
| SYSCALL_ENTRY(readv), |
| SYSCALL_ENTRY(reboot), |
| SYSCALL_ENTRY(recvfrom), |
| SYSCALL_ENTRY(recvmmsg), |
| SYSCALL_ENTRY(recvmsg), |
| SYSCALL_ENTRY(remap_file_pages), |
| SYSCALL_ENTRY(removexattr), |
| SYSCALL_ENTRY(renameat), |
| SYSCALL_ENTRY(request_key), |
| SYSCALL_ENTRY(restart_syscall), |
| SYSCALL_ENTRY(rt_sigaction), |
| SYSCALL_ENTRY(rt_sigpending), |
| SYSCALL_ENTRY(rt_sigprocmask), |
| SYSCALL_ENTRY(rt_sigqueueinfo), |
| SYSCALL_ENTRY(rt_sigsuspend), |
| SYSCALL_ENTRY(rt_sigtimedwait), |
| SYSCALL_ENTRY(rt_tgsigqueueinfo), |
| SYSCALL_ENTRY(sched_getaffinity), |
| SYSCALL_ENTRY(sched_getattr), |
| SYSCALL_ENTRY(sched_getparam), |
| SYSCALL_ENTRY(sched_get_priority_max), |
| SYSCALL_ENTRY(sched_get_priority_min), |
| SYSCALL_ENTRY(sched_getscheduler), |
| SYSCALL_ENTRY(sched_rr_get_interval), |
| SYSCALL_ENTRY(sched_setaffinity), |
| SYSCALL_ENTRY(sched_setattr), |
| SYSCALL_ENTRY(sched_setparam), |
| SYSCALL_ENTRY(sched_setscheduler), |
| SYSCALL_ENTRY(sched_yield), |
| SYSCALL_ENTRY(seccomp), |
| SYSCALL_ENTRY(semctl), |
| SYSCALL_ENTRY(semget), |
| SYSCALL_ENTRY(semop), |
| SYSCALL_ENTRY(semtimedop), |
| SYSCALL_ENTRY(sendfile), |
| SYSCALL_ENTRY(sendmmsg), |
| SYSCALL_ENTRY(sendmsg), |
| SYSCALL_ENTRY(sendto), |
| SYSCALL_ENTRY(setdomainname), |
| SYSCALL_ENTRY(setfsgid), |
| SYSCALL_ENTRY(setfsuid), |
| SYSCALL_ENTRY(setgid), |
| SYSCALL_ENTRY(setgroups), |
| SYSCALL_ENTRY(sethostname), |
| SYSCALL_ENTRY(setitimer), |
| SYSCALL_ENTRY(set_mempolicy), |
| SYSCALL_ENTRY(setns), |
| SYSCALL_ENTRY(setpgid), |
| SYSCALL_ENTRY(setpriority), |
| SYSCALL_ENTRY(setregid), |
| SYSCALL_ENTRY(setresgid), |
| SYSCALL_ENTRY(setresuid), |
| SYSCALL_ENTRY(setreuid), |
| SYSCALL_ENTRY(setrlimit), |
| SYSCALL_ENTRY(set_robust_list), |
| SYSCALL_ENTRY(setsid), |
| SYSCALL_ENTRY(setsockopt), |
| SYSCALL_ENTRY(set_tid_address), |
| SYSCALL_ENTRY(settimeofday), |
| SYSCALL_ENTRY(setuid), |
| SYSCALL_ENTRY(setxattr), |
| SYSCALL_ENTRY(shmat), |
| SYSCALL_ENTRY(shmctl), |
| SYSCALL_ENTRY(shmdt), |
| SYSCALL_ENTRY(shmget), |
| SYSCALL_ENTRY(shutdown), |
| SYSCALL_ENTRY(sigaltstack), |
| SYSCALL_ENTRY(signalfd4), |
| SYSCALL_ENTRY(socket), |
| SYSCALL_ENTRY(socketpair), |
| SYSCALL_ENTRY(splice), |
| SYSCALL_ENTRY(statfs), |
| SYSCALL_ENTRY(statx), |
| SYSCALL_ENTRY(swapoff), |
| SYSCALL_ENTRY(swapon), |
| SYSCALL_ENTRY(symlinkat), |
| SYSCALL_ENTRY(sync), |
| SYSCALL_ENTRY(syncfs), |
| SYSCALL_ENTRY(sysinfo), |
| SYSCALL_ENTRY(syslog), |
| SYSCALL_ENTRY(tee), |
| SYSCALL_ENTRY(tgkill), |
| SYSCALL_ENTRY(timer_create), |
| SYSCALL_ENTRY(timer_delete), |
| SYSCALL_ENTRY(timerfd_create), |
| SYSCALL_ENTRY(timerfd_gettime), |
| SYSCALL_ENTRY(timerfd_settime), |
| SYSCALL_ENTRY(timer_getoverrun), |
| SYSCALL_ENTRY(timer_gettime), |
| SYSCALL_ENTRY(timer_settime), |
| SYSCALL_ENTRY(times), |
| SYSCALL_ENTRY(tkill), |
| SYSCALL_ENTRY(truncate), |
| SYSCALL_ENTRY(umask), |
| SYSCALL_ENTRY(unlinkat), |
| SYSCALL_ENTRY(unshare), |
| SYSCALL_ENTRY(utimensat), |
| SYSCALL_ENTRY(vhangup), |
| SYSCALL_ENTRY(vmsplice), |
| SYSCALL_ENTRY(wait4), |
| SYSCALL_ENTRY(waitid), |
| SYSCALL_ENTRY(write), |
| SYSCALL_ENTRY(writev), |
| |
| /* Exist for x86_64 and ARM32 but not ARM64. */ |
| #ifndef CONFIG_ARM64 |
| SYSCALL_ENTRY(access), |
| SYSCALL_ENTRY(chmod), |
| SYSCALL_ENTRY(chown), |
| SYSCALL_ENTRY(creat), |
| SYSCALL_ENTRY(dup2), |
| SYSCALL_ENTRY(epoll_create), |
| SYSCALL_ENTRY(epoll_wait), |
| SYSCALL_ENTRY(eventfd), |
| SYSCALL_ENTRY(fork), |
| SYSCALL_ENTRY(futimesat), |
| SYSCALL_ENTRY(getdents), |
| SYSCALL_ENTRY(getpgrp), |
| SYSCALL_ENTRY(inotify_init), |
| SYSCALL_ENTRY(lchown), |
| SYSCALL_ENTRY(link), |
| SYSCALL_ENTRY(mkdir), |
| SYSCALL_ENTRY(mknod), |
| SYSCALL_ENTRY(open), |
| SYSCALL_ENTRY(pause), |
| SYSCALL_ENTRY(pipe), |
| SYSCALL_ENTRY(poll), |
| SYSCALL_ENTRY(readlink), |
| SYSCALL_ENTRY(rename), |
| SYSCALL_ENTRY(rmdir), |
| SYSCALL_ENTRY(signalfd), |
| SYSCALL_ENTRY(symlink), |
| SYSCALL_ENTRY(sysfs), |
| SYSCALL_ENTRY(unlink), |
| SYSCALL_ENTRY(ustat), |
| SYSCALL_ENTRY(utimes), |
| SYSCALL_ENTRY(vfork), |
| #endif |
| |
| /* Exist for x86_64 and ARM64 but not ARM32 */ |
| #if defined(CONFIG_ARM64) || defined(CONFIG_X86_64) |
| SYSCALL_ENTRY(fadvise64), |
| SYSCALL_ENTRY(fstat), |
| SYSCALL_ENTRY(getrlimit), |
| SYSCALL_ENTRY(migrate_pages), |
| SYSCALL_ENTRY(mmap), |
| SYSCALL_ENTRY(rt_sigreturn), |
| SYSCALL_ENTRY(sync_file_range), |
| SYSCALL_ENTRY(umount2), |
| SYSCALL_ENTRY(uname), |
| #endif |
| |
| /* Unique to ARM32. */ |
| #ifdef CONFIG_ARM |
| SYSCALL_ENTRY(arm_fadvise64_64), |
| SYSCALL_ENTRY(bdflush), |
| SYSCALL_ENTRY(fcntl64), |
| SYSCALL_ENTRY(fstat64), |
| SYSCALL_ENTRY(fstatat64), |
| SYSCALL_ENTRY(ftruncate64), |
| SYSCALL_ENTRY(lstat64), |
| SYSCALL_ENTRY(mmap2), |
| SYSCALL_ENTRY(nice), |
| SYSCALL_ENTRY(pciconfig_iobase), |
| SYSCALL_ENTRY(pciconfig_read), |
| SYSCALL_ENTRY(pciconfig_write), |
| SYSCALL_ENTRY(recv), |
| SYSCALL_ENTRY(send), |
| SYSCALL_ENTRY(sendfile64), |
| SYSCALL_ENTRY(sigaction), |
| SYSCALL_ENTRY(sigpending), |
| SYSCALL_ENTRY(sigprocmask), |
| SYSCALL_ENTRY(sigsuspend), |
| SYSCALL_ENTRY(stat64), |
| SYSCALL_ENTRY(truncate64), |
| SYSCALL_ENTRY(uselib), |
| #endif |
| |
| /* Unique to x86_64. */ |
| #ifdef CONFIG_X86_64 |
| SYSCALL_ENTRY(alarm), |
| SYSCALL_ENTRY(arch_prctl), |
| SYSCALL_ENTRY(ioperm), |
| SYSCALL_ENTRY(iopl), |
| SYSCALL_ENTRY(kexec_file_load), |
| SYSCALL_ENTRY(lstat), |
| SYSCALL_ENTRY(modify_ldt), |
| SYSCALL_ENTRY(newfstatat), |
| SYSCALL_ENTRY(select), |
| SYSCALL_ENTRY(stat), |
| SYSCALL_ENTRY(time), |
| SYSCALL_ENTRY(_sysctl), |
| SYSCALL_ENTRY(utime), |
| #endif |
| |
| /* Unique to ARM64. */ |
| #ifdef CONFIG_ARM64 |
| SYSCALL_ENTRY(nfsservctl), |
| SYSCALL_ENTRY(renameat2), |
| #endif |
| }; /* end complete_whitelist */ |
| |
| #ifdef CONFIG_COMPAT |
| /* |
| * For now not adding a 32-bit-compatible version of the complete whitelist. |
| * Since we are not whitelisting any compat syscalls here, a call into the |
| * compat section of this "complete" alt syscall table will be redirected to |
| * block_syscall() (unless the permissive mode is used in which case the call |
| * will be redirected to warn_compat_syscall()). |
| */ |
| static struct syscall_whitelist_entry complete_compat_whitelist[] = {}; |
| #endif /* CONFIG_COMPAT */ |
| |
| #endif /* COMPLETE_WHITELISTS_H */ |
