Commit | Line | Data |
---|---|---|
b2441318 | 1 | /* SPDX-License-Identifier: GPL-2.0 */ |
ff0b16a9 EP |
2 | #ifndef _LINUX_FANOTIFY_H |
3 | #define _LINUX_FANOTIFY_H | |
4 | ||
5b8fea65 | 5 | #include <linux/sysctl.h> |
607ca46e | 6 | #include <uapi/linux/fanotify.h> |
ff0b16a9 | 7 | |
96a71f21 AG |
8 | #define FAN_GROUP_FLAG(group, flag) \ |
9 | ((group)->fanotify_data.flags & (flag)) | |
10 | ||
23c9deeb AG |
11 | /* |
12 | * Flags allowed to be passed from/to userspace. | |
13 | * | |
14 | * We intentionally do not add new bits to the old FAN_ALL_* constants, because | |
15 | * they are uapi exposed constants. If there are programs out there using | |
16 | * these constant, the programs may break if re-compiled with new uapi headers | |
17 | * and then run on an old kernel. | |
18 | */ | |
7cea2a3c AG |
19 | |
20 | /* Group classes where permission events are allowed */ | |
21 | #define FANOTIFY_PERM_CLASSES (FAN_CLASS_CONTENT | \ | |
23c9deeb AG |
22 | FAN_CLASS_PRE_CONTENT) |
23 | ||
7cea2a3c AG |
24 | #define FANOTIFY_CLASS_BITS (FAN_CLASS_NOTIF | FANOTIFY_PERM_CLASSES) |
25 | ||
d61fd650 | 26 | #define FANOTIFY_FID_BITS (FAN_REPORT_DFID_NAME_TARGET) |
d809daf1 | 27 | |
af579beb | 28 | #define FANOTIFY_INFO_MODES (FANOTIFY_FID_BITS | FAN_REPORT_PIDFD) |
0aca67bb | 29 | |
7cea2a3c AG |
30 | /* |
31 | * fanotify_init() flags that require CAP_SYS_ADMIN. | |
32 | * We do not allow unprivileged groups to request permission events. | |
33 | * We do not allow unprivileged groups to get other process pid in events. | |
34 | * We do not allow unprivileged groups to use unlimited resources. | |
35 | */ | |
36 | #define FANOTIFY_ADMIN_INIT_FLAGS (FANOTIFY_PERM_CLASSES | \ | |
37 | FAN_REPORT_TID | \ | |
af579beb | 38 | FAN_REPORT_PIDFD | \ |
7cea2a3c AG |
39 | FAN_UNLIMITED_QUEUE | \ |
40 | FAN_UNLIMITED_MARKS) | |
41 | ||
42 | /* | |
43 | * fanotify_init() flags that are allowed for user without CAP_SYS_ADMIN. | |
44 | * FAN_CLASS_NOTIF is the only class we allow for unprivileged group. | |
45 | * We do not allow unprivileged groups to get file descriptors in events, | |
46 | * so one of the flags for reporting file handles is required. | |
47 | */ | |
48 | #define FANOTIFY_USER_INIT_FLAGS (FAN_CLASS_NOTIF | \ | |
49 | FANOTIFY_FID_BITS | \ | |
50 | FAN_CLOEXEC | FAN_NONBLOCK) | |
51 | ||
52 | #define FANOTIFY_INIT_FLAGS (FANOTIFY_ADMIN_INIT_FLAGS | \ | |
53 | FANOTIFY_USER_INIT_FLAGS) | |
23c9deeb | 54 | |
a8b98c80 AG |
55 | /* Internal group flags */ |
56 | #define FANOTIFY_UNPRIV 0x80000000 | |
57 | #define FANOTIFY_INTERNAL_GROUP_FLAGS (FANOTIFY_UNPRIV) | |
58 | ||
23c9deeb AG |
59 | #define FANOTIFY_MARK_TYPE_BITS (FAN_MARK_INODE | FAN_MARK_MOUNT | \ |
60 | FAN_MARK_FILESYSTEM) | |
61 | ||
62 | #define FANOTIFY_MARK_FLAGS (FANOTIFY_MARK_TYPE_BITS | \ | |
63 | FAN_MARK_ADD | \ | |
64 | FAN_MARK_REMOVE | \ | |
65 | FAN_MARK_DONT_FOLLOW | \ | |
66 | FAN_MARK_ONLYDIR | \ | |
67 | FAN_MARK_IGNORED_MASK | \ | |
68 | FAN_MARK_IGNORED_SURV_MODIFY | \ | |
5f9d3bd5 | 69 | FAN_MARK_EVICTABLE | \ |
23c9deeb AG |
70 | FAN_MARK_FLUSH) |
71 | ||
235328d1 AG |
72 | /* |
73 | * Events that can be reported with data type FSNOTIFY_EVENT_PATH. | |
74 | * Note that FAN_MODIFY can also be reported with data type | |
75 | * FSNOTIFY_EVENT_INODE. | |
76 | */ | |
77 | #define FANOTIFY_PATH_EVENTS (FAN_ACCESS | FAN_MODIFY | \ | |
9b076f1c | 78 | FAN_CLOSE | FAN_OPEN | FAN_OPEN_EXEC) |
23c9deeb | 79 | |
235328d1 AG |
80 | /* |
81 | * Directory entry modification events - reported only to directory | |
82 | * where entry is modified and not to a watching parent. | |
83 | */ | |
8cc3b1cc AG |
84 | #define FANOTIFY_DIRENT_EVENTS (FAN_MOVE | FAN_CREATE | FAN_DELETE | \ |
85 | FAN_RENAME) | |
235328d1 | 86 | |
4fe595cf GKB |
87 | /* Events that can be reported with event->fd */ |
88 | #define FANOTIFY_FD_EVENTS (FANOTIFY_PATH_EVENTS | FANOTIFY_PERM_EVENTS) | |
89 | ||
235328d1 AG |
90 | /* Events that can only be reported with data type FSNOTIFY_EVENT_INODE */ |
91 | #define FANOTIFY_INODE_EVENTS (FANOTIFY_DIRENT_EVENTS | \ | |
92 | FAN_ATTRIB | FAN_MOVE_SELF | FAN_DELETE_SELF) | |
93 | ||
9709bd54 GKB |
94 | /* Events that can only be reported with data type FSNOTIFY_EVENT_ERROR */ |
95 | #define FANOTIFY_ERROR_EVENTS (FAN_FS_ERROR) | |
96 | ||
235328d1 AG |
97 | /* Events that user can request to be notified on */ |
98 | #define FANOTIFY_EVENTS (FANOTIFY_PATH_EVENTS | \ | |
9709bd54 GKB |
99 | FANOTIFY_INODE_EVENTS | \ |
100 | FANOTIFY_ERROR_EVENTS) | |
235328d1 | 101 | |
23c9deeb | 102 | /* Events that require a permission response from user */ |
66917a31 MB |
103 | #define FANOTIFY_PERM_EVENTS (FAN_OPEN_PERM | FAN_ACCESS_PERM | \ |
104 | FAN_OPEN_EXEC_PERM) | |
23c9deeb | 105 | |
bdd5a46f AG |
106 | /* Extra flags that may be reported with event or control handling of events */ |
107 | #define FANOTIFY_EVENT_FLAGS (FAN_EVENT_ON_CHILD | FAN_ONDIR) | |
108 | ||
23c9deeb AG |
109 | /* Events that may be reported to user */ |
110 | #define FANOTIFY_OUTGOING_EVENTS (FANOTIFY_EVENTS | \ | |
111 | FANOTIFY_PERM_EVENTS | \ | |
e7fce6d9 | 112 | FAN_Q_OVERFLOW | FAN_ONDIR) |
23c9deeb | 113 | |
bdd5a46f AG |
114 | #define ALL_FANOTIFY_EVENT_BITS (FANOTIFY_OUTGOING_EVENTS | \ |
115 | FANOTIFY_EVENT_FLAGS) | |
116 | ||
23c9deeb AG |
117 | /* Do not use these old uapi constants internally */ |
118 | #undef FAN_ALL_CLASS_BITS | |
119 | #undef FAN_ALL_INIT_FLAGS | |
120 | #undef FAN_ALL_MARK_FLAGS | |
121 | #undef FAN_ALL_EVENTS | |
122 | #undef FAN_ALL_PERM_EVENTS | |
123 | #undef FAN_ALL_OUTGOING_EVENTS | |
124 | ||
ff0b16a9 | 125 | #endif /* _LINUX_FANOTIFY_H */ |