prctl.h

  1/* SPDX-License-Identifier: GPL-2.0 WITH Linux-syscall-note */
  2#ifndef _LINUX_PRCTL_H
  3#define _LINUX_PRCTL_H
  4
  5#include <linux/types.h>
  6
  7/* Values to pass as first argument to prctl() */
  8
  9#define PR_SET_PDEATHSIG  1  /* Second arg is a signal */
 10#define PR_GET_PDEATHSIG  2  /* Second arg is a ptr to return the signal */
 11
 12/* Get/set current->mm->dumpable */
 13#define PR_GET_DUMPABLE   3
 14#define PR_SET_DUMPABLE   4
 15
 16/* Get/set unaligned access control bits (if meaningful) */
 17#define PR_GET_UNALIGN	  5
 18#define PR_SET_UNALIGN	  6
 19# define PR_UNALIGN_NOPRINT	1	/* silently fix up unaligned user accesses */
 20# define PR_UNALIGN_SIGBUS	2	/* generate SIGBUS on unaligned user access */
 21
 22/* Get/set whether or not to drop capabilities on setuid() away from
 23 * uid 0 (as per security/commoncap.c) */
 24#define PR_GET_KEEPCAPS   7
 25#define PR_SET_KEEPCAPS   8
 26
 27/* Get/set floating-point emulation control bits (if meaningful) */
 28#define PR_GET_FPEMU  9
 29#define PR_SET_FPEMU 10
 30# define PR_FPEMU_NOPRINT	1	/* silently emulate fp operations accesses */
 31# define PR_FPEMU_SIGFPE	2	/* don't emulate fp operations, send SIGFPE instead */
 32
 33/* Get/set floating-point exception mode (if meaningful) */
 34#define PR_GET_FPEXC	11
 35#define PR_SET_FPEXC	12
 36# define PR_FP_EXC_SW_ENABLE	0x80	/* Use FPEXC for FP exception enables */
 37# define PR_FP_EXC_DIV		0x010000	/* floating point divide by zero */
 38# define PR_FP_EXC_OVF		0x020000	/* floating point overflow */
 39# define PR_FP_EXC_UND		0x040000	/* floating point underflow */
 40# define PR_FP_EXC_RES		0x080000	/* floating point inexact result */
 41# define PR_FP_EXC_INV		0x100000	/* floating point invalid operation */
 42# define PR_FP_EXC_DISABLED	0	/* FP exceptions disabled */
 43# define PR_FP_EXC_NONRECOV	1	/* async non-recoverable exc. mode */
 44# define PR_FP_EXC_ASYNC	2	/* async recoverable exception mode */
 45# define PR_FP_EXC_PRECISE	3	/* precise exception mode */
 46
 47/* Get/set whether we use statistical process timing or accurate timestamp
 48 * based process timing */
 49#define PR_GET_TIMING   13
 50#define PR_SET_TIMING   14
 51# define PR_TIMING_STATISTICAL  0       /* Normal, traditional,
 52                                                   statistical process timing */
 53# define PR_TIMING_TIMESTAMP    1       /* Accurate timestamp based
 54                                                   process timing */
 55
 56#define PR_SET_NAME    15		/* Set process name */
 57#define PR_GET_NAME    16		/* Get process name */
 58
 59/* Get/set process endian */
 60#define PR_GET_ENDIAN	19
 61#define PR_SET_ENDIAN	20
 62# define PR_ENDIAN_BIG		0
 63# define PR_ENDIAN_LITTLE	1	/* True little endian mode */
 64# define PR_ENDIAN_PPC_LITTLE	2	/* "PowerPC" pseudo little endian */
 65
 66/* Get/set process seccomp mode */
 67#define PR_GET_SECCOMP	21
 68#define PR_SET_SECCOMP	22
 69
 70/* Get/set the capability bounding set (as per security/commoncap.c) */
 71#define PR_CAPBSET_READ 23
 72#define PR_CAPBSET_DROP 24
 73
 74/* Get/set the process' ability to use the timestamp counter instruction */
 75#define PR_GET_TSC 25
 76#define PR_SET_TSC 26
 77# define PR_TSC_ENABLE		1	/* allow the use of the timestamp counter */
 78# define PR_TSC_SIGSEGV		2	/* throw a SIGSEGV instead of reading the TSC */
 79
 80/* Get/set securebits (as per security/commoncap.c) */
 81#define PR_GET_SECUREBITS 27
 82#define PR_SET_SECUREBITS 28
 83
 84/*
 85 * Get/set the timerslack as used by poll/select/nanosleep
 86 * A value of 0 means "use default"
 87 */
 88#define PR_SET_TIMERSLACK 29
 89#define PR_GET_TIMERSLACK 30
 90
 91#define PR_TASK_PERF_EVENTS_DISABLE		31
 92#define PR_TASK_PERF_EVENTS_ENABLE		32
 93
 94/*
 95 * Set early/late kill mode for hwpoison memory corruption.
 96 * This influences when the process gets killed on a memory corruption.
 97 */
 98#define PR_MCE_KILL	33
 99# define PR_MCE_KILL_CLEAR   0
100# define PR_MCE_KILL_SET     1
101
102# define PR_MCE_KILL_LATE    0
103# define PR_MCE_KILL_EARLY   1
104# define PR_MCE_KILL_DEFAULT 2
105
106#define PR_MCE_KILL_GET 34
107
108/*
109 * Tune up process memory map specifics.
110 */
111#define PR_SET_MM		35
112# define PR_SET_MM_START_CODE		1
113# define PR_SET_MM_END_CODE		2
114# define PR_SET_MM_START_DATA		3
115# define PR_SET_MM_END_DATA		4
116# define PR_SET_MM_START_STACK		5
117# define PR_SET_MM_START_BRK		6
118# define PR_SET_MM_BRK			7
119# define PR_SET_MM_ARG_START		8
120# define PR_SET_MM_ARG_END		9
121# define PR_SET_MM_ENV_START		10
122# define PR_SET_MM_ENV_END		11
123# define PR_SET_MM_AUXV			12
124# define PR_SET_MM_EXE_FILE		13
125# define PR_SET_MM_MAP			14
126# define PR_SET_MM_MAP_SIZE		15
127
128/*
129 * This structure provides new memory descriptor
130 * map which mostly modifies /proc/pid/stat[m]
131 * output for a task. This mostly done in a
132 * sake of checkpoint/restore functionality.
133 */
134struct prctl_mm_map {
135	__u64	start_code;		/* code section bounds */
136	__u64	end_code;
137	__u64	start_data;		/* data section bounds */
138	__u64	end_data;
139	__u64	start_brk;		/* heap for brk() syscall */
140	__u64	brk;
141	__u64	start_stack;		/* stack starts at */
142	__u64	arg_start;		/* command line arguments bounds */
143	__u64	arg_end;
144	__u64	env_start;		/* environment variables bounds */
145	__u64	env_end;
146	__u64	*auxv;			/* auxiliary vector */
147	__u32	auxv_size;		/* vector size */
148	__u32	exe_fd;			/* /proc/$pid/exe link file */
149};
150
151/*
152 * Set specific pid that is allowed to ptrace the current task.
153 * A value of 0 mean "no process".
154 */
155#define PR_SET_PTRACER 0x59616d61
156# define PR_SET_PTRACER_ANY ((unsigned long)-1)
157
158#define PR_SET_CHILD_SUBREAPER	36
159#define PR_GET_CHILD_SUBREAPER	37
160
161/*
162 * If no_new_privs is set, then operations that grant new privileges (i.e.
163 * execve) will either fail or not grant them.  This affects suid/sgid,
164 * file capabilities, and LSMs.
165 *
166 * Operations that merely manipulate or drop existing privileges (setresuid,
167 * capset, etc.) will still work.  Drop those privileges if you want them gone.
168 *
169 * Changing LSM security domain is considered a new privilege.  So, for example,
170 * asking selinux for a specific new context (e.g. with runcon) will result
171 * in execve returning -EPERM.
172 *
173 * See Documentation/userspace-api/no_new_privs.rst for more details.
174 */
175#define PR_SET_NO_NEW_PRIVS	38
176#define PR_GET_NO_NEW_PRIVS	39
177
178#define PR_GET_TID_ADDRESS	40
179
180/*
181 * Flags for PR_SET_THP_DISABLE are only applicable when disabling. Bit 0
182 * is reserved, so PR_GET_THP_DISABLE can return "1 | flags", to effectively
183 * return "1" when no flags were specified for PR_SET_THP_DISABLE.
184 */
185#define PR_SET_THP_DISABLE	41
186/*
187 * Don't disable THPs when explicitly advised (e.g., MADV_HUGEPAGE /
188 * VM_HUGEPAGE, MADV_COLLAPSE).
189 */
190# define PR_THP_DISABLE_EXCEPT_ADVISED	(1 << 1)
191#define PR_GET_THP_DISABLE	42
192
193/*
194 * No longer implemented, but left here to ensure the numbers stay reserved:
195 */
196#define PR_MPX_ENABLE_MANAGEMENT  43
197#define PR_MPX_DISABLE_MANAGEMENT 44
198
199#define PR_SET_FP_MODE		45
200#define PR_GET_FP_MODE		46
201# define PR_FP_MODE_FR		(1 << 0)	/* 64b FP registers */
202# define PR_FP_MODE_FRE		(1 << 1)	/* 32b compatibility */
203
204/* Control the ambient capability set */
205#define PR_CAP_AMBIENT			47
206# define PR_CAP_AMBIENT_IS_SET		1
207# define PR_CAP_AMBIENT_RAISE		2
208# define PR_CAP_AMBIENT_LOWER		3
209# define PR_CAP_AMBIENT_CLEAR_ALL	4
210
211/* arm64 Scalable Vector Extension controls */
212/* Flag values must be kept in sync with ptrace NT_ARM_SVE interface */
213#define PR_SVE_SET_VL			50	/* set task vector length */
214# define PR_SVE_SET_VL_ONEXEC		(1 << 18) /* defer effect until exec */
215#define PR_SVE_GET_VL			51	/* get task vector length */
216/* Bits common to PR_SVE_SET_VL and PR_SVE_GET_VL */
217# define PR_SVE_VL_LEN_MASK		0xffff
218# define PR_SVE_VL_INHERIT		(1 << 17) /* inherit across exec */
219
220/* Per task speculation control */
221#define PR_GET_SPECULATION_CTRL		52
222#define PR_SET_SPECULATION_CTRL		53
223/* Speculation control variants */
224# define PR_SPEC_STORE_BYPASS		0
225# define PR_SPEC_INDIRECT_BRANCH	1
226# define PR_SPEC_L1D_FLUSH		2
227/* Return and control values for PR_SET/GET_SPECULATION_CTRL */
228# define PR_SPEC_NOT_AFFECTED		0
229# define PR_SPEC_PRCTL			(1UL << 0)
230# define PR_SPEC_ENABLE			(1UL << 1)
231# define PR_SPEC_DISABLE		(1UL << 2)
232# define PR_SPEC_FORCE_DISABLE		(1UL << 3)
233# define PR_SPEC_DISABLE_NOEXEC		(1UL << 4)
234
235/* Reset arm64 pointer authentication keys */
236#define PR_PAC_RESET_KEYS		54
237# define PR_PAC_APIAKEY			(1UL << 0)
238# define PR_PAC_APIBKEY			(1UL << 1)
239# define PR_PAC_APDAKEY			(1UL << 2)
240# define PR_PAC_APDBKEY			(1UL << 3)
241# define PR_PAC_APGAKEY			(1UL << 4)
242
243/* Tagged user address controls for arm64 and RISC-V */
244#define PR_SET_TAGGED_ADDR_CTRL		55
245#define PR_GET_TAGGED_ADDR_CTRL		56
246# define PR_TAGGED_ADDR_ENABLE		(1UL << 0)
247/* MTE tag check fault modes */
248# define PR_MTE_TCF_NONE		0UL
249# define PR_MTE_TCF_SYNC		(1UL << 1)
250# define PR_MTE_TCF_ASYNC		(1UL << 2)
251# define PR_MTE_TCF_MASK		(PR_MTE_TCF_SYNC | PR_MTE_TCF_ASYNC)
252/* MTE tag inclusion mask */
253# define PR_MTE_TAG_SHIFT		3
254# define PR_MTE_TAG_MASK		(0xffffUL << PR_MTE_TAG_SHIFT)
255/* Unused; kept only for source compatibility */
256# define PR_MTE_TCF_SHIFT		1
257/* MTE tag check store only */
258# define PR_MTE_STORE_ONLY		(1UL << 19)
259/* RISC-V pointer masking tag length */
260# define PR_PMLEN_SHIFT			24
261# define PR_PMLEN_MASK			(0x7fUL << PR_PMLEN_SHIFT)
262
263/* Control reclaim behavior when allocating memory */
264#define PR_SET_IO_FLUSHER		57
265#define PR_GET_IO_FLUSHER		58
266
267/* Dispatch syscalls to a userspace handler */
268#define PR_SET_SYSCALL_USER_DISPATCH	59
269# define PR_SYS_DISPATCH_OFF		0
270/* Enable dispatch except for the specified range */
271# define PR_SYS_DISPATCH_EXCLUSIVE_ON	1
272/* Enable dispatch for the specified range */
273# define PR_SYS_DISPATCH_INCLUSIVE_ON	2
274/* Legacy name for backwards compatibility */
275# define PR_SYS_DISPATCH_ON		PR_SYS_DISPATCH_EXCLUSIVE_ON
276/* The control values for the user space selector when dispatch is enabled */
277# define SYSCALL_DISPATCH_FILTER_ALLOW	0
278# define SYSCALL_DISPATCH_FILTER_BLOCK	1
279
280/* Set/get enabled arm64 pointer authentication keys */
281#define PR_PAC_SET_ENABLED_KEYS		60
282#define PR_PAC_GET_ENABLED_KEYS		61
283
284/* Request the scheduler to share a core */
285#define PR_SCHED_CORE			62
286# define PR_SCHED_CORE_GET		0
287# define PR_SCHED_CORE_CREATE		1 /* create unique core_sched cookie */
288# define PR_SCHED_CORE_SHARE_TO		2 /* push core_sched cookie to pid */
289# define PR_SCHED_CORE_SHARE_FROM	3 /* pull core_sched cookie to pid */
290# define PR_SCHED_CORE_MAX		4
291# define PR_SCHED_CORE_SCOPE_THREAD		0
292# define PR_SCHED_CORE_SCOPE_THREAD_GROUP	1
293# define PR_SCHED_CORE_SCOPE_PROCESS_GROUP	2
294
295/* arm64 Scalable Matrix Extension controls */
296/* Flag values must be in sync with SVE versions */
297#define PR_SME_SET_VL			63	/* set task vector length */
298# define PR_SME_SET_VL_ONEXEC		(1 << 18) /* defer effect until exec */
299#define PR_SME_GET_VL			64	/* get task vector length */
300/* Bits common to PR_SME_SET_VL and PR_SME_GET_VL */
301# define PR_SME_VL_LEN_MASK		0xffff
302# define PR_SME_VL_INHERIT		(1 << 17) /* inherit across exec */
303
304/* Memory deny write / execute */
305#define PR_SET_MDWE			65
306# define PR_MDWE_REFUSE_EXEC_GAIN	(1UL << 0)
307# define PR_MDWE_NO_INHERIT		(1UL << 1)
308
309#define PR_GET_MDWE			66
310
311#define PR_SET_VMA		0x53564d41
312# define PR_SET_VMA_ANON_NAME		0
313
314#define PR_GET_AUXV			0x41555856
315
316#define PR_SET_MEMORY_MERGE		67
317#define PR_GET_MEMORY_MERGE		68
318
319#define PR_RISCV_V_SET_CONTROL		69
320#define PR_RISCV_V_GET_CONTROL		70
321# define PR_RISCV_V_VSTATE_CTRL_DEFAULT		0
322# define PR_RISCV_V_VSTATE_CTRL_OFF		1
323# define PR_RISCV_V_VSTATE_CTRL_ON		2
324# define PR_RISCV_V_VSTATE_CTRL_INHERIT		(1 << 4)
325# define PR_RISCV_V_VSTATE_CTRL_CUR_MASK	0x3
326# define PR_RISCV_V_VSTATE_CTRL_NEXT_MASK	0xc
327# define PR_RISCV_V_VSTATE_CTRL_MASK		0x1f
328
329#define PR_RISCV_SET_ICACHE_FLUSH_CTX	71
330# define PR_RISCV_CTX_SW_FENCEI_ON	0
331# define PR_RISCV_CTX_SW_FENCEI_OFF	1
332# define PR_RISCV_SCOPE_PER_PROCESS	0
333# define PR_RISCV_SCOPE_PER_THREAD	1
334
335/* PowerPC Dynamic Execution Control Register (DEXCR) controls */
336#define PR_PPC_GET_DEXCR		72
337#define PR_PPC_SET_DEXCR		73
338/* DEXCR aspect to act on */
339# define PR_PPC_DEXCR_SBHE		0 /* Speculative branch hint enable */
340# define PR_PPC_DEXCR_IBRTPD		1 /* Indirect branch recurrent target prediction disable */
341# define PR_PPC_DEXCR_SRAPD		2 /* Subroutine return address prediction disable */
342# define PR_PPC_DEXCR_NPHIE		3 /* Non-privileged hash instruction enable */
343/* Action to apply / return */
344# define PR_PPC_DEXCR_CTRL_EDITABLE	 0x1 /* Aspect can be modified with PR_PPC_SET_DEXCR */
345# define PR_PPC_DEXCR_CTRL_SET		 0x2 /* Set the aspect for this process */
346# define PR_PPC_DEXCR_CTRL_CLEAR	 0x4 /* Clear the aspect for this process */
347# define PR_PPC_DEXCR_CTRL_SET_ONEXEC	 0x8 /* Set the aspect on exec */
348# define PR_PPC_DEXCR_CTRL_CLEAR_ONEXEC	0x10 /* Clear the aspect on exec */
349# define PR_PPC_DEXCR_CTRL_MASK		0x1f
350
351/*
352 * Get the current shadow stack configuration for the current thread,
353 * this will be the value configured via PR_SET_SHADOW_STACK_STATUS.
354 */
355#define PR_GET_SHADOW_STACK_STATUS      74
356
357/*
358 * Set the current shadow stack configuration.  Enabling the shadow
359 * stack will cause a shadow stack to be allocated for the thread.
360 */
361#define PR_SET_SHADOW_STACK_STATUS      75
362# define PR_SHADOW_STACK_ENABLE         (1UL << 0)
363# define PR_SHADOW_STACK_WRITE		(1UL << 1)
364# define PR_SHADOW_STACK_PUSH		(1UL << 2)
365
366/*
367 * Prevent further changes to the specified shadow stack
368 * configuration.  All bits may be locked via this call, including
369 * undefined bits.
370 */
371#define PR_LOCK_SHADOW_STACK_STATUS      76
372
373/*
374 * Controls the mode of timer_create() for CRIU restore operations.
375 * Enabling this allows CRIU to restore timers with explicit IDs.
376 *
377 * Don't use for normal operations as the result might be undefined.
378 */
379#define PR_TIMER_CREATE_RESTORE_IDS		77
380# define PR_TIMER_CREATE_RESTORE_IDS_OFF	0
381# define PR_TIMER_CREATE_RESTORE_IDS_ON		1
382# define PR_TIMER_CREATE_RESTORE_IDS_GET	2
383
384/* FUTEX hash management */
385#define PR_FUTEX_HASH			78
386# define PR_FUTEX_HASH_SET_SLOTS	1
387# define PR_FUTEX_HASH_GET_SLOTS	2
388
389#endif /* _LINUX_PRCTL_H */