1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
|
/*
* This work is based on the LSM implementation in Linux 2.6.13.4.
*
* Author: George Coker, <gscoker@alpha.ncsc.mil>
*
* Contributors: Michael LeMay, <mdlemay@epoch.ncsc.mil>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2,
* as published by the Free Software Foundation.
*/
#include <xen/init.h>
#include <xen/errno.h>
#include <xen/lib.h>
#include <xen/hypercall.h>
#include <xsm/xsm.h>
#ifdef XSM_ENABLE
#define XSM_FRAMEWORK_VERSION "1.0.0"
struct xsm_operations *xsm_ops;
static inline int verify(struct xsm_operations *ops)
{
/* verify the security_operations structure exists */
if ( !ops )
return -EINVAL;
xsm_fixup_ops(ops);
return 0;
}
static void __init do_xsm_initcalls(void)
{
xsm_initcall_t *call;
call = __xsm_initcall_start;
while ( call < __xsm_initcall_end )
{
(*call) ();
call++;
}
}
int __init xsm_init(unsigned long *module_map, const multiboot_info_t *mbi,
void *(*bootstrap_map)(const module_t *))
{
int ret = 0;
printk("XSM Framework v" XSM_FRAMEWORK_VERSION " initialized\n");
if ( XSM_MAGIC )
{
ret = xsm_policy_init(module_map, mbi, bootstrap_map);
if ( ret )
{
bootstrap_map(NULL);
printk("%s: Error initializing policy.\n", __FUNCTION__);
return -EINVAL;
}
}
if ( verify(&dummy_xsm_ops) )
{
bootstrap_map(NULL);
printk("%s could not verify "
"dummy_xsm_ops structure.\n", __FUNCTION__);
return -EIO;
}
xsm_ops = &dummy_xsm_ops;
do_xsm_initcalls();
bootstrap_map(NULL);
return 0;
}
int register_xsm(struct xsm_operations *ops)
{
if ( verify(ops) )
{
printk("%s could not verify "
"security_operations structure.\n", __FUNCTION__);
return -EINVAL;
}
if ( xsm_ops != &dummy_xsm_ops )
return -EAGAIN;
xsm_ops = ops;
return 0;
}
int unregister_xsm(struct xsm_operations *ops)
{
if ( ops != xsm_ops )
{
printk("%s: trying to unregister "
"a security_opts structure that is not "
"registered, failing.\n", __FUNCTION__);
return -EINVAL;
}
xsm_ops = &dummy_xsm_ops;
return 0;
}
#endif
long do_xsm_op (XEN_GUEST_HANDLE_PARAM(xsm_op_t) op)
{
return xsm_do_xsm_op(op);
}
|
