diff options
author | Al Viro <viro@zeniv.linux.org.uk> | 2012-05-30 13:11:37 -0400 |
---|---|---|
committer | Al Viro <viro@zeniv.linux.org.uk> | 2012-05-31 13:10:54 -0400 |
commit | d007794a182bc072a7b7479909dbd0d67ba341be (patch) | |
tree | 75aa7ccd563a0fe8b60391824c92f64098674dda /security/commoncap.c | |
parent | cf74d14c4fbce9bcc9eb62f52d721d3399a2b87f (diff) |
split cap_mmap_addr() out of cap_file_mmap()
... switch callers.
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Diffstat (limited to 'security/commoncap.c')
-rw-r--r-- | security/commoncap.c | 32 |
1 files changed, 23 insertions, 9 deletions
diff --git a/security/commoncap.c b/security/commoncap.c index e771cb1b2d79..ebac3618896e 100644 --- a/security/commoncap.c +++ b/security/commoncap.c | |||
@@ -958,22 +958,15 @@ int cap_vm_enough_memory(struct mm_struct *mm, long pages) | |||
958 | } | 958 | } |
959 | 959 | ||
960 | /* | 960 | /* |
961 | * cap_file_mmap - check if able to map given addr | 961 | * cap_mmap_addr - check if able to map given addr |
962 | * @file: unused | ||
963 | * @reqprot: unused | ||
964 | * @prot: unused | ||
965 | * @flags: unused | ||
966 | * @addr: address attempting to be mapped | 962 | * @addr: address attempting to be mapped |
967 | * @addr_only: unused | ||
968 | * | 963 | * |
969 | * If the process is attempting to map memory below dac_mmap_min_addr they need | 964 | * If the process is attempting to map memory below dac_mmap_min_addr they need |
970 | * CAP_SYS_RAWIO. The other parameters to this function are unused by the | 965 | * CAP_SYS_RAWIO. The other parameters to this function are unused by the |
971 | * capability security module. Returns 0 if this mapping should be allowed | 966 | * capability security module. Returns 0 if this mapping should be allowed |
972 | * -EPERM if not. | 967 | * -EPERM if not. |
973 | */ | 968 | */ |
974 | int cap_file_mmap(struct file *file, unsigned long reqprot, | 969 | int cap_mmap_addr(unsigned long addr) |
975 | unsigned long prot, unsigned long flags, | ||
976 | unsigned long addr, unsigned long addr_only) | ||
977 | { | 970 | { |
978 | int ret = 0; | 971 | int ret = 0; |
979 | 972 | ||
@@ -986,3 +979,24 @@ int cap_file_mmap(struct file *file, unsigned long reqprot, | |||
986 | } | 979 | } |
987 | return ret; | 980 | return ret; |
988 | } | 981 | } |
982 | |||
983 | /* | ||
984 | * cap_file_mmap - check if able to map given addr | ||
985 | * @file: unused | ||
986 | * @reqprot: unused | ||
987 | * @prot: unused | ||
988 | * @flags: unused | ||
989 | * @addr: address attempting to be mapped | ||
990 | * @addr_only: unused | ||
991 | * | ||
992 | * If the process is attempting to map memory below dac_mmap_min_addr they need | ||
993 | * CAP_SYS_RAWIO. The other parameters to this function are unused by the | ||
994 | * capability security module. Returns 0 if this mapping should be allowed | ||
995 | * -EPERM if not. | ||
996 | */ | ||
997 | int cap_file_mmap(struct file *file, unsigned long reqprot, | ||
998 | unsigned long prot, unsigned long flags, | ||
999 | unsigned long addr, unsigned long addr_only) | ||
1000 | { | ||
1001 | return cap_mmap_addr(addr); | ||
1002 | } | ||