projects / linux-block.git / blame
| Commit | Line | Data |
|---|---|---|
| ae271c1b MS |
1 | /* SPDX-License-Identifier: GPL-2.0-only */ |
| 2 | /* | |
| 3 | * Landlock LSM - Limits for different components | |
| 4 | * | |
| 5 | * Copyright © 2016-2020 Mickaël Salaün <mic@digikod.net> | |
| 6 | * Copyright © 2018-2020 ANSSI | |
| 7 | */ | |
| 8 | ||
| 9 | #ifndef _SECURITY_LANDLOCK_LIMITS_H | |
| 10 | #define _SECURITY_LANDLOCK_LIMITS_H | |
| 11 | ||
| 5f2ff33e | 12 | #include <linux/bitops.h> |
| ae271c1b | 13 | #include <linux/limits.h> |
| cb2c7d1a | 14 | #include <uapi/linux/landlock.h> |
| ae271c1b | 15 | |
| 6cc2df8e MS |
16 | /* clang-format off */ |
| 17 | ||
| 75c542d6 | 18 | #define LANDLOCK_MAX_NUM_LAYERS 16 |
| ae271c1b MS |
19 | #define LANDLOCK_MAX_NUM_RULES U32_MAX |
| 20 | ||
| b9f5ce27 | 21 | #define LANDLOCK_LAST_ACCESS_FS LANDLOCK_ACCESS_FS_TRUNCATE |
| cb2c7d1a | 22 | #define LANDLOCK_MASK_ACCESS_FS ((LANDLOCK_LAST_ACCESS_FS << 1) - 1) |
| 5f2ff33e | 23 | #define LANDLOCK_NUM_ACCESS_FS __const_hweight64(LANDLOCK_MASK_ACCESS_FS) |
| cb2c7d1a | 24 | |
| 6cc2df8e MS |
25 | /* clang-format on */ |
| 26 | ||
| ae271c1b | 27 | #endif /* _SECURITY_LANDLOCK_LIMITS_H */ |