diff options
| author | Rahat Mahmood <rahat@google.com> | 2019-03-26 16:15:55 -0700 |
|---|---|---|
| committer | Shentubot <shentubot@google.com> | 2019-03-26 16:16:57 -0700 |
| commit | 06ec97a3f823f1f5d928fc9c2beb3a11c2c88487 (patch) | |
| tree | a2b501718c82aede761d7235527492782ef65cc2 /pkg/abi/linux/file.go | |
| parent | 79aca14a0cd70720e8a8f8bd6c1499ab1ffbd8d3 (diff) | |
Implement memfd_create.
Memfds are simply anonymous tmpfs files with no associated
mounts. Also implementing file seals, which Linux only implements for
memfds at the moment.
PiperOrigin-RevId: 240450031
Change-Id: I31de78b950101ae8d7a13d0e93fe52d98ea06f2f
Diffstat (limited to 'pkg/abi/linux/file.go')
| -rw-r--r-- | pkg/abi/linux/file.go | 18 |
1 files changed, 18 insertions, 0 deletions
diff --git a/pkg/abi/linux/file.go b/pkg/abi/linux/file.go index e5a51a9fd..46b10ca97 100644 --- a/pkg/abi/linux/file.go +++ b/pkg/abi/linux/file.go @@ -236,3 +236,21 @@ var fileType = abi.ValueSet{ ModeCharacterDevice: "S_IFCHR", ModeNamedPipe: "S_IFIFO", } + +// Constants for memfd_create(2). Source: include/uapi/linux/memfd.h +const ( + MFD_CLOEXEC = 0x0001 + MFD_ALLOW_SEALING = 0x0002 +) + +// Constants related to file seals. Source: include/uapi/{asm-generic,linux}/fcntl.h +const ( + F_LINUX_SPECIFIC_BASE = 1024 + F_ADD_SEALS = F_LINUX_SPECIFIC_BASE + 9 + F_GET_SEALS = F_LINUX_SPECIFIC_BASE + 10 + + F_SEAL_SEAL = 0x0001 // Prevent further seals from being set. + F_SEAL_SHRINK = 0x0002 // Prevent file from shrinking. + F_SEAL_GROW = 0x0004 // Prevent file from growing. + F_SEAL_WRITE = 0x0008 // Prevent writes. +) |