Serge E. Hallyn db2e718a47 capabilities: require CAP_SETFCAP to map uid 0 ... cap_setfcap is required to create file capabilities. Since commit 8db6c34f1d ("Introduce v3 namespaced file capabilities"), a process running as uid 0 but without cap_setfcap is able to work around this as follows: unshare a new user namespace which maps parent uid 0 into the child namespace. While this task will not have new capabilities against the parent namespace, there is a loophole due to the way namespaced file capabilities are represented as xattrs. File capabilities valid in userns 1 are distinguished from file capabilities valid in userns 2 by the kuid which underlies uid 0. Therefore the restricted root process can unshare a new self-mapping namespace, add a namespaced file capability onto a file, then use that file capability in the parent namespace. To prevent that, do not allow mapping parent uid 0 if the process which opened the uid_map file does not have CAP_SETFCAP, which is the capability for setting file capabilities. As a further wrinkle: a task can unshare its user namespace, then open its uid_map file itself, and map (only) its own uid. In this case we do not have the credential from before unshare, which was potentially more restricted. So, when creating a user namespace, we record whether the creator had CAP_SETFCAP. Then we can use that during map_write(). With this patch: 1. Unprivileged user can still unshare -Ur ubuntu@caps:~$ unshare -Ur root@caps:~# logout 2. Root user can still unshare -Ur ubuntu@caps:~$ sudo bash root@caps:/home/ubuntu# unshare -Ur root@caps:/home/ubuntu# logout 3. Root user without CAP_SETFCAP cannot unshare -Ur: root@caps:/home/ubuntu# /sbin/capsh --drop=cap_setfcap -- root@caps:/home/ubuntu# /sbin/setcap cap_setfcap=p /sbin/setcap unable to set CAP_SETFCAP effective capability: Operation not permitted root@caps:/home/ubuntu# unshare -Ur unshare: write failed /proc/self/uid_map: Operation not permitted Note: an alternative solution would be to allow uid 0 mappings by processes without CAP_SETFCAP, but to prevent such a namespace from writing any file capabilities. This approach can be seen at [1]. Background history: commit 95ebabde38 ("capabilities: Don't allow writing ambiguous v3 file capabilities") tried to fix the issue by preventing v3 fscaps to be written to disk when the root uid would map to the same uid in nested user namespaces. This led to regressions for various workloads. For example, see [2]. Ultimately this is a valid use-case we have to support meaning we had to revert this change in 3b0c2d3eaa ("Revert 95ebabde38 ("capabilities: Don't allow writing ambiguous v3 file capabilities")"). Link: https://git.kernel.org/pub/scm/linux/kernel/git/sergeh/linux.git/log/?h=2021-04-15/setfcap-nsfscaps-v4 [1] Link: https://github.com/containers/buildah/issues/3071 [2] Signed-off-by: Serge Hallyn <serge@hallyn.com> Reviewed-by: Andrew G. Morgan <morgan@kernel.org> Tested-by: Christian Brauner <christian.brauner@ubuntu.com> Reviewed-by: Christian Brauner <christian.brauner@ubuntu.com> Tested-by: Giuseppe Scrivano <gscrivan@redhat.com> Cc: Eric Biederman <ebiederm@xmission.com> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>		2021-04-20 14:28:33 -07:00
..
android	binder: add flag to clear buffer on txn complete	2020-12-09 15:41:21 +01:00
byteorder
caif	net: caif: drop duplicate words in comments	2020-07-15 20:34:11 -07:00
can	can: isotp: add SF_BROADCAST support for functional addressing	2020-12-10 09:31:40 +01:00
cifs	cifs: Set witness notification handler for messages from userspace daemon	2020-12-14 09:16:22 -06:00
dvb
genwqe
hdlc
hsi
iio	iio: add IIO_MOD_O2 modifier	2020-08-22 10:53:12 +01:00
isdn
misc	bcm-vk: add bcm_vk UAPI	2021-01-25 18:44:44 +01:00
mmc	mmc: fix compilation of user API	2020-05-28 11:22:14 +02:00
netfilter	uapi: nfnetlink_cthelper.h: fix userspace compilation error	2021-02-28 00:24:41 +01:00
netfilter_arp
netfilter_bridge	uapi: revert flexible-array conversions	2020-05-04 11:30:15 -05:00
netfilter_ipv4
netfilter_ipv6
nfsd
raid	raid: md_p.h: drop duplicated word in a comment	2020-07-21 22:05:32 -07:00
sched	sched/uclamp: Allow to reset a task uclamp constraint value	2020-11-19 11:25:47 +01:00
spi	spi: Add SPI_NO_TX/RX support	2020-12-28 14:21:31 +00:00
sunrpc
surface_aggregator	platform/surface: Add Surface Aggregator user-space interface	2021-01-07 00:06:39 +01:00
tc_act	net/sched: act_mpls: Add action to push MPLS LSE before Ethernet header	2020-10-03 17:28:45 -07:00
tc_ematch
usb	usb: ch9: Add USB 3.2 SSP attributes	2021-01-18 18:38:47 +01:00
a.out.h
acct.h
acrn.h	virt: acrn: Introduce irqfd	2021-02-09 10:58:19 +01:00
adb.h
adfs_fs.h
affs_hardblocks.h
agpgart.h
aio_abi.h
am437x-vpfe.h
apm_bios.h
arcfb.h
arm_sdei.h
aspeed-lpc-ctrl.h
aspeed-p2a-ctrl.h
atalk.h
atm.h
atm_eni.h
atm_he.h
atm_idt77105.h
atm_nicstar.h
atm_tcp.h
atm_zatm.h
atmapi.h
atmarp.h
atmbr2684.h
atmclip.h
atmdev.h
atmioc.h	atm: Replace HTTP links with HTTPS ones	2020-07-13 17:01:44 -07:00
atmlec.h
atmmpc.h
atmppp.h
atmsap.h
atmsvc.h
audit.h	audit: report audit wait metric in audit status reply	2020-07-21 11:21:44 -04:00
auto_dev-ioctl.h	autofs: fix doubled word	2020-08-12 10:58:00 -07:00
auto_fs.h
auto_fs4.h
auxvec.h
ax25.h
batadv_packet.h	batman-adv: Drop publication years from copyright info	2021-02-06 09:22:10 +01:00
batman_adv.h	batman-adv: Drop publication years from copyright info	2021-02-06 09:22:10 +01:00
baycom.h
bcache.h	bcache: introduce BCH_FEATURE_INCOMPAT_LOG_LARGE_BUCKET_SIZE for large bucket	2021-01-09 09:21:03 -07:00
bcm933xx_hcs.h
bfs_fs.h
binfmts.h	binfmt_misc: pass binfmt_misc flags to the interpreter	2021-02-15 18:28:30 +01:00
blkpg.h	block: update a few comments in uapi/linux/blkpg.h	2021-04-02 11:18:30 -06:00
blktrace_api.h
blkzoned.h	block: fix uapi blkzoned.h comments	2020-10-09 12:47:02 -06:00
bpf.h	bpf: BPF-helper for MTU checking add length input	2021-03-08 22:44:33 +01:00
bpf_common.h
bpf_perf_event.h
bpfilter.h
bpqether.h
bsg.h
bt-bmc.h
btf.h
btrfs.h	btrfs: introduce ZONED feature flag	2020-12-08 15:54:16 +01:00
btrfs_tree.h	btrfs: calculate inline extent buffer page size based on page size	2020-12-09 19:16:10 +01:00
can.h	can: uapi: can.h: mark union inside struct can_frame packed	2021-03-29 09:51:49 +02:00
capability.h	capabilities: require CAP_SETFCAP to map uid 0	2021-04-20 14:28:33 -07:00
capi.h
cciss_defs.h
cciss_ioctl.h
ccs.h	media: v4l: uapi: ccs: Add CCS controls for shading correction	2021-01-12 17:31:14 +01:00
cdrom.h	block: scsi_ioctl: Avoid the use of one-element arrays	2020-10-02 17:58:52 -06:00
cec-funcs.h
cec.h
cfm_bridge.h	bridge: cfm: Kernel space implementation of CFM. CCM frame RX added.	2020-10-29 18:39:43 -07:00
cgroupstats.h
chio.h
close_range.h	fs, close_range: add flag CLOSE_RANGE_CLOEXEC	2020-12-04 12:06:15 +01:00
cm4000_cs.h
cn_proc.h
coda.h
coff.h
connector.h
const.h	uapi: move constants from <linux/kernel.h> to <linux/const.h>	2020-12-15 12:13:36 -08:00
coresight-stm.h	coresight: stm: Support marked packet	2020-09-17 18:46:04 +02:00
cramfs_fs.h
cryptouser.h
cuda.h
cxl_mem.h	cxl/mem: Add set of informational commands	2021-02-16 20:36:39 -08:00
cyclades.h
cycx_cfm.h
dcbnl.h
dccp.h
devlink.h	devlink: Support get and set state of port function	2021-01-22 11:32:08 -08:00
dlm.h
dlm_device.h	uapi: revert flexible-array conversions	2020-05-04 11:30:15 -05:00
dlm_netlink.h
dlm_plock.h
dlmconstants.h
dm-ioctl.h	dm: add support for passing through inline crypto support	2021-02-11 09:45:25 -05:00
dm-log-userspace.h
dma-buf.h	dma-buf: Fix SET_NAME ioctl uapi	2020-04-27 16:29:41 +05:30
dma-heap.h
dn.h
dns_resolver.h
dqblk_xfs.h	quota: Expand comment describing d_itimer	2020-09-10 09:10:06 +02:00
edd.h
efs_fs_sb.h
elf-em.h
elf-fdpic.h
elf.h	arm64: mte: ptrace: Add NT_ARM_TAGGED_ADDR_CTRL regset	2020-09-04 12:46:07 +01:00
errno.h
errqueue.h	icmp: support rfc 4884	2020-07-19 19:20:22 -07:00
erspan.h
ethtool.h	ethtool: fix kdoc in headers	2021-04-07 14:22:49 -07:00
ethtool_netlink.h	ethtool: Extend link modes settings uAPI with lanes	2021-02-03 18:37:28 -08:00
eventpoll.h
f2fs.h	f2fs: add F2FS_IOC_DECOMPRESS_FILE and F2FS_IOC_COMPRESS_FILE	2020-12-03 00:12:08 -08:00
fadvise.h
falloc.h
fanotify.h	fanotify: add support for FAN_REPORT_NAME	2020-07-27 23:24:00 +02:00
fb.h	drm/fb-helper: Fix vt restore	2020-06-24 21:34:11 +02:00
fcntl.h	vfs: add faccessat2 syscall	2020-05-14 16:44:25 +02:00
fd.h	floppy: suppress UBSAN warning in setup_rw_floppy()	2020-05-12 19:34:57 +03:00
fdreg.h	floppy: add references to 82077's extra registers	2020-05-12 19:34:52 +03:00
fib_rules.h
fiemap.h	A lot of bug fixes and cleanups for ext4, including:	2020-06-05 16:19:28 -07:00
filter.h
firewire-cdev.h	include/linux: remove repeated words	2021-02-26 09:41:03 -08:00
firewire-constants.h
fou.h
fpga-dfl.h	fpga: dfl: afu: add AFU interrupt support	2020-07-06 21:37:08 -07:00
fs.h	fs/ext4: Introduce DAX inode flag	2020-05-28 22:09:47 -04:00
fscrypt.h	fscrypt: remove kernel-internal constants from UAPI header	2020-11-16 11:41:12 -08:00
fsi.h
fsl_hypervisor.h
fsl_mc.h	bus: fsl-mc: add fsl-mc userspace support	2021-01-27 15:13:52 +01:00
fsmap.h
fsverity.h	fs-verity: support reading signature with ioctl	2021-02-07 14:51:19 -08:00
fuse.h	fuse: 32-bit user space ioctl compat for fuse device	2021-03-16 15:20:16 +01:00
futex.h
gameport.h
gen_stats.h
genetlink.h	genetlink: allow dumping command-specific policy	2020-10-03 14:18:29 -07:00
gfs2_ondisk.h	gfs2: Add trusted xattr support	2021-02-08 13:01:24 +01:00
gpio.h	gpio: uapi: use the preferred SPDX license identifier	2021-02-15 11:43:33 +01:00
gsmmux.h
gtp.h	Revert "GTP: add support for flow based tunneling API"	2021-02-04 09:29:57 -08:00
hash_info.h
hdlc.h
hdlcdrv.h
hdreg.h
hid.h
hiddev.h
hidraw.h	HID: hidraw: Add additional hidraw input/output report ioctls.	2020-11-27 15:48:31 +01:00
hpet.h
hsr_netlink.h	hsr: enhance netlink socket interface to support PRP	2020-07-27 12:20:40 -07:00
hw_breakpoint.h
hyperv.h	hyperv: hyperv.h: drop a duplicated word	2020-07-23 17:55:20 +00:00
i2c-dev.h	i2c: remove licence boilerplate from i2c-dev UAPI header	2021-01-22 09:58:57 +01:00
i2c.h	i2c: uapi: add macro to describe support for all SMBus transfers	2021-01-22 09:59:00 +01:00
i2o-dev.h
i8k.h
icmp.h	icmp: support rfc 4884	2020-07-19 19:20:22 -07:00
icmpv6.h	ICMPv6: Add ICMPv6 Parameter Problem, code 3 definition	2020-10-31 13:16:02 -07:00
idxd.h	dmaengine: idxd: fix delta_rec and crc size field for completion record	2021-04-12 13:26:03 +05:30
if.h	net: Add IF_OPER_TESTING	2020-04-20 12:43:24 -07:00
if_addr.h
if_addrlabel.h
if_alg.h	crypto: af_alg - avoid undefined behavior accessing salg_name	2020-11-06 14:29:11 +11:00
if_arcnet.h	uapi: revert flexible-array conversions	2020-05-04 11:30:15 -05:00
if_arp.h
if_bonding.h	bonding: add a vlan+srcmac tx hashing option	2021-01-19 19:30:32 -08:00
if_bridge.h	net: bridge: mcast: add support for raw L2 multicast groups	2020-10-30 17:49:19 -07:00
if_cablemodem.h
if_eql.h
if_ether.h	bridge: uapi: cfm: Added EtherType used by the CFM protocol.	2020-10-29 18:39:43 -07:00
if_fc.h
if_fddi.h
if_hippi.h
if_infiniband.h
if_link.h	Revert "GTP: add support for flow based tunneling API"	2021-02-04 09:29:57 -08:00
if_ltalk.h
if_macsec.h	macsec: Netlink support of XPN cipher suites (IEEE 802.1AEbw)	2020-03-16 01:42:31 -07:00
if_packet.h	net/packet: make packet_fanout.arr size configurable up to 64K	2020-11-09 16:41:40 -08:00
if_phonet.h
if_plip.h
if_ppp.h
if_pppol2tp.h	l2tp: remove tunnel and session debug flags field	2020-08-22 12:44:37 -07:00
if_pppox.h
if_slip.h
if_team.h
if_tun.h
if_tunnel.h	Revert "GTP: add support for flow based tunneling API"	2021-02-04 09:29:57 -08:00
if_vlan.h
if_x25.h	docs: networking: convert x25-iface.txt to ReST	2020-05-01 12:24:40 -07:00
if_xdp.h	xsk: Add new statistics	2020-07-13 15:32:56 -07:00
ife.h
igmp.h
ila.h
in.h	net: Fix some comments	2020-08-27 07:55:59 -07:00
in6.h	icmp6: support rfc 4884	2020-07-24 17:12:41 -07:00
in_route.h
inet_diag.h	ip: expose inet sockopts through inet_diag	2020-09-03 15:17:28 -07:00
inotify.h
input-event-codes.h	Input: allocate keycode for Fn + right shift	2020-09-08 16:31:14 -07:00
input.h	include/linux: remove repeated words	2021-02-26 09:41:03 -08:00
io_uring.h	io_uring: flag new native workers with IORING_FEAT_NATIVE_WORKERS	2021-02-23 20:32:11 -07:00
ioctl.h
iommu.h	iommu/vt-d: Check UAPI data processed by IOMMU core	2020-10-01 14:52:46 +02:00
ip.h
ip6_tunnel.h
ip_vs.h
ipc.h
ipmi.h
ipmi_bmc.h
ipmi_msgdefs.h	ipmi:msghandler: retry to get device id on an error	2020-09-15 09:57:45 -05:00
ipsec.h
ipv6.h	net: allow user to set metric on default route learned via Router Advertisement	2021-01-26 18:39:45 -08:00
ipv6_route.h
ipx.h
irqnr.h
iso_fs.h
isst_if.h	platform/x86: ISST: drop a duplicated word in isst_if.h	2020-07-27 16:34:12 +03:00
ivtv.h
ivtvfb.h
jffs2.h
joystick.h
kcm.h
kcmp.h
kcov.h
kd.h	console: Delete unused con_font_copy() callback implementations	2020-11-16 16:27:03 +01:00
kdev_t.h
kernel-page-flags.h
kernel.h	uapi: move constants from <linux/kernel.h> to <linux/const.h>	2020-12-15 12:13:36 -08:00
kernelcapi.h
kexec.h
keyboard.h	vt: keyboard, sort key types by their number	2020-11-04 16:43:38 +01:00
keyctl.h	watch_queue: Add a key/keyring notification facility	2020-05-19 15:19:06 +01:00
kfd_ioctl.h	include/uapi/linux: Fix indentation in kfd_smi_event enum	2020-08-31 14:40:29 -04:00
kvm.h	KVM: x86/xen: Add support for vCPU runstate information	2021-03-02 14:30:54 -05:00
kvm_para.h
l2tp.h	net: l2tp: reduce log level of messages in receive path, add counter instead	2021-03-03 16:55:02 -08:00
libc-compat.h
lightnvm.h	uapi: move constants from <linux/kernel.h> to <linux/const.h>	2020-12-15 12:13:36 -08:00
limits.h
lirc.h	media: rc: improve LIRC documentation	2020-11-26 14:19:10 +01:00
llc.h
loop.h	loop: Add LOOP_CONFIGURE ioctl	2020-05-21 08:20:35 -06:00
lp.h
lwtunnel.h	net: ipv6: add rpl sr tunnel	2020-03-29 22:30:57 -07:00
magic.h	/dev/mem: Revoke mappings when a driver claims the region	2020-05-27 11:10:05 +02:00
major.h
map_to_7segment.h	uapi: map_to_7segment: Update example in documentation	2021-02-09 12:27:32 +01:00
matroxfb.h
max2175.h
mdio.h	net: phy: add USXGMII link partner ability constants	2020-07-19 18:05:49 -07:00
media-bus-format.h	media updates for v5.11-rc1	2020-12-14 11:47:37 -08:00
media.h	media: uapi: Add an entity type for Image Signal Processors	2021-01-12 17:05:37 +01:00
mei.h	mei: add connect with vtag ioctl	2020-08-18 15:44:44 +02:00
membarrier.h	rseq/membarrier: Add MEMBARRIER_CMD_PRIVATE_EXPEDITED_RSEQ	2020-09-25 14:23:27 +02:00
memfd.h
mempolicy.h	numa balancing: migrate on fault among multiple bound nodes	2021-02-24 13:38:34 -08:00
meye.h
mii.h	ethtool: provide UAPI for PHY master/slave configuration.	2020-05-06 17:45:45 -07:00
minix_fs.h
mman.h	powerpc/8xx: Support 16k hugepages with 4k pages	2020-09-15 22:13:31 +10:00
mmtimer.h
module.h
mount.h	fs: introduce MOUNT_ATTR_IDMAP	2021-01-24 14:43:45 +01:00
mpls.h
mpls_iptunnel.h
mptcp.h	mptcp: add local addr info in mptcp_info	2021-02-15 15:09:14 -08:00
mqueue.h
mroute.h	ipmr: Add high byte of VIF ID to igmpmsg	2020-09-10 12:25:51 -07:00
mroute6.h	uapi: move constants from <linux/kernel.h> to <linux/const.h>	2020-12-15 12:13:36 -08:00
mrp_bridge.h	net: mrp: move struct definitions out of uapi	2021-01-23 12:38:42 -08:00
msdos_fs.h
msg.h
mtio.h
n_r3964.h
nbd-netlink.h
nbd.h
ncsi.h
ndctl.h	ACPI: NFIT: Define runtime firmware activation commands	2020-07-25 19:34:47 -06:00
neighbour.h	net: bridge: add a flag to avoid refreshing fdb when changing/adding	2020-06-24 14:36:33 -07:00
net.h
net_dropmon.h	uapi: revert flexible-array conversions	2020-05-04 11:30:15 -05:00
net_namespace.h
net_tstamp.h	ethtool: add timestamping related string sets	2020-03-29 22:32:36 -07:00
netconf.h
netdevice.h
netfilter.h	netfilter: restore NF_INET_NUMHOOKS	2020-10-14 20:28:05 -07:00
netfilter_arp.h
netfilter_bridge.h
netfilter_decnet.h
netfilter_ipv4.h
netfilter_ipv6.h
netlink.h	uapi: move constants from <linux/kernel.h> to <linux/const.h>	2020-12-15 12:13:36 -08:00
netlink_diag.h
netrom.h
nexthop.h	nexthop: support for fdb ecmp nexthops	2020-05-22 14:00:38 -07:00
nfc.h
nfs.h
nfs2.h
nfs3.h	NFSD: Update the SETATTR3args decoder to use struct xdr_stream	2021-01-25 09:36:25 -05:00
nfs4.h	NFSv4.2: support EXCHGID4_FLAG_SUPP_FENCE_OPS 4.2 EXCHANGE_ID flag	2020-10-16 09:28:43 -04:00
nfs4_mount.h
nfs_fs.h	NFSv4.2: add client side xattr caching.	2020-07-13 17:52:46 -04:00
nfs_idmap.h
nfs_mount.h
nfsacl.h	NFSACL: Replace PROC() macro with open code	2020-10-02 09:37:41 -04:00
nilfs2_api.h
nilfs2_ondisk.h
nitro_enclaves.h	nitro_enclaves: Add ioctl interface definition	2020-09-22 13:58:40 +02:00
nl80211.h	nl80211: add documentation for HT/VHT/HE disable attributes	2021-02-12 11:00:07 +01:00
nsfs.h
nubus.h
nvme_ioctl.h
nvram.h
omap3isp.h
omapfb.h
oom.h
openat2.h	fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED	2021-01-04 11:42:26 -05:00
openvswitch.h	net: openvswitch: fix TTL decrement action netlink message format	2020-11-27 11:03:06 -08:00
packet_diag.h
param.h
parport.h
patchkey.h
pci.h
pci_regs.h	pci-v5.11-changes	2020-12-15 16:49:59 -08:00
pcitest.h	misc: pci_endpoint_test: Add ioctl to clear IRQ	2020-04-02 17:57:10 +01:00
perf_event.h	The performance event updates for v5.12 are:	2021-02-21 12:49:32 -08:00
personality.h
pfkeyv2.h
pg.h
phantom.h
phonet.h
pidfd.h	pidfd: support PIDFD_NONBLOCK in pidfd_open()	2020-09-04 12:34:50 +02:00
pkt_cls.h	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2021-02-16 17:51:13 -08:00
pkt_sched.h	sch_htb: Hierarchical QoS hardware offload	2021-01-22 20:41:29 -08:00
pktcdvd.h
pmu.h
poll.h
posix_acl.h
posix_acl_xattr.h
posix_types.h
ppdev.h
ppp-comp.h
ppp-ioctl.h	ppp: Fix PPPIOCUNBRIDGECHAN request number	2020-12-21 17:36:48 -08:00
ppp_defs.h
pps.h
pr.h
prctl.h	entry: Use different define for selector variable in SUD	2021-02-06 00:21:42 +01:00
psample.h	psample: Fix user API breakage	2021-03-24 16:44:31 -07:00
psci.h
psp-sev.h	crypto: ccp - Add support for SEV-ES to the PSP driver	2020-04-30 15:19:33 +10:00
ptp_clock.h	ptp: introduce a phase offset in the periodic output request	2020-07-19 19:22:56 -07:00
ptrace.h	ptrace: Prevent kernel-infoleak in ptrace_get_syscall_info()	2020-08-18 13:39:23 +02:00
qemu_fw_cfg.h
qnx4_fs.h
qnxtypes.h
qrtr.h
quota.h
radeonfb.h
random.h
raw.h	char: raw: do not leak CONFIG_MAX_RAW_DEVS to userspace	2020-07-10 14:50:51 +02:00
rds.h	rds: transport module should be auto loaded when transport is set	2020-06-25 16:26:25 -07:00
reboot.h
reiserfs_fs.h
reiserfs_xattr.h
remoteproc_cdev.h	remoteproc: Add remoteproc character device interface	2020-08-04 20:16:37 -07:00
resource.h
rfkill.h	rfkill: revert back to old userspace API by default	2021-04-08 10:14:45 +02:00
rio_cm_cdev.h
rio_mport_cdev.h
rkisp1-config.h	media: rockchip: rkisp1: extend uapi array sizes	2021-01-28 11:31:43 +01:00
romfs_fs.h
rose.h
route.h
rpl.h	uapi: fix big endian definition of ipv6_rpl_sr_hdr	2021-01-25 15:14:16 -08:00
rpl_iptunnel.h	net: ipv6: add rpl sr tunnel	2020-03-29 22:30:57 -07:00
rpmsg.h
rpmsg_types.h	rpmsg: Introduce __rpmsg{16|32|64} types	2020-11-24 10:10:59 -06:00
rseq.h
rtc.h	rtc: introduce features bitfield	2021-01-16 23:19:26 +01:00
rtnetlink.h	rtnetlink: Add RTM_F_OFFLOAD_FAILED flag	2021-02-08 16:47:02 -08:00
rxrpc.h	rxrpc: Fix accept on a connection that need securing	2020-10-05 16:35:57 +01:00
scc.h
sched.h
scif_ioctl.h
screen_info.h
sctp.h	sctp: add SCTP_REMOTE_UDP_ENCAPS_PORT sockopt	2020-10-30 15:24:11 -07:00
seccomp.h	seccomp: Introduce addfd ioctl to seccomp user notifier	2020-07-14 16:29:42 -07:00
securebits.h
sed-opal.h
seg6.h
seg6_genl.h
seg6_hmac.h
seg6_iptunnel.h	seg6_iptunnel: Refactor seg6_lwt_headroom out of uapi header	2020-08-03 17:57:40 -07:00
seg6_local.h	seg6: add support for the SRv6 End.DT4 behavior	2020-12-04 13:30:50 -08:00
selinux_netlink.h
sem.h
serial.h
serial_core.h	tty: serial: Drop unused efm32 serial driver	2021-01-15 17:14:49 +01:00
serial_reg.h
serio.h	Input: avoid BIT() macro usage in the serio.h UAPI header	2020-03-24 15:59:34 -07:00
shm.h
signal.h
signalfd.h
smc.h	net/smc: Add support for obtaining SMCR device list	2020-12-01 17:56:13 -08:00
smc_diag.h
smiapp.h
snmp.h	net: udp: introduce UDP_MIB_MEMERRORS for udp_mem	2020-11-09 15:34:44 -08:00
sock_diag.h	bpf: INET_DIAG support in bpf_sk_storage	2020-02-27 18:50:19 -08:00
socket.h
sockios.h
sonet.h
sonypi.h
sound.h
soundcard.h
stat.h	uapi: fix statx attribute value overlap for DAX & MOUNT_ROOT	2020-12-03 10:03:14 -08:00
stddef.h
stm.h
string.h
suspend_ioctls.h
swab.h	include/uapi/linux/swab.h: fix userspace breakage, use __BITS_PER_LONG for swap	2020-02-21 11:22:15 -08:00
switchtec_ioctl.h
sync_file.h
synclink.h
sysctl.h	net: allow user to set metric on default route learned via Router Advertisement	2021-01-26 18:39:45 -08:00
sysinfo.h
target_core_user.h	scsi: target: tcmu: Implement tmr_notify callback	2020-07-28 22:25:30 -04:00
taskstats.h
tcp.h	tcp: Sanitize CMSG flags and reserved args in tcp_zerocopy_receive.	2021-02-11 18:25:05 -08:00
tcp_metrics.h
tee.h	tee: fix some comment typos in header files	2021-02-02 14:50:15 +01:00
termios.h	tty: drop termiox user definitions	2021-01-07 16:17:32 +01:00
thermal.h	thermal: core: genetlink support for events/cmd/sampling	2020-07-07 15:55:21 +02:00
time.h	y2038: hide timeval/timespec/itimerval/itimerspec types	2020-02-21 11:22:15 -08:00
time_types.h
timerfd.h
times.h
timex.h
tiocl.h
tipc.h	tipc: add automatic rekeying for encryption key	2020-09-18 13:58:37 -07:00
tipc_config.h
tipc_netlink.h	tipc: add automatic rekeying for encryption key	2020-09-18 13:58:37 -07:00
tipc_sockets_diag.h
tls.h	net/tls: add CHACHA20-POLY1305 specific defines and structures	2020-11-27 14:32:37 -08:00
toshiba.h
tty.h
tty_flags.h
types.h	include/: replace HTTP links with HTTPS ones	2020-08-12 10:57:59 -07:00
udf_fs_i.h
udmabuf.h
udp.h
uhid.h
uinput.h
uio.h
uleds.h
ultrasound.h
um_timetravel.h	um: Implement time-travel=ext	2020-03-29 23:29:08 +02:00
un.h
unistd.h
unix_diag.h
usbdevice_fs.h
usbip.h
userfaultfd.h	userfaultfd: add UFFD_USER_MODE_ONLY	2020-12-15 12:13:46 -08:00
userio.h
utime.h
utsname.h
uuid.h
uvcvideo.h
v4l2-common.h
v4l2-controls.h	media: v4l2-ctrl: Add base layer priority id control.	2021-01-14 13:54:00 +01:00
v4l2-dv-timings.h
v4l2-mediabus.h	media: v4l2: extend the CSC API to subdevice.	2020-09-26 10:22:29 +02:00
v4l2-subdev.h	media: v4l2-subdev.h: BIT() is not available in userspace	2021-01-26 19:14:33 +01:00
vbox_err.h
vbox_vmmdev_types.h	virt: vbox: Add a few new vmmdev request types to the userspace whitelist	2020-07-10 13:45:32 +02:00
vboxguest.h	virt: vbox: Add support for the new VBG_IOCTL_ACQUIRE_GUEST_CAPABILITIES ioctl	2020-07-10 13:45:32 +02:00
vdpa.h	vdpa: Enable user to query vdpa device info	2021-02-23 07:52:56 -05:00
veth.h
vfio.h	vfio: interfaces to update vaddr	2021-02-01 13:20:06 -07:00
vfio_ccw.h	vfio-ccw: Introduce a new CRW region	2020-06-03 11:27:43 +02:00
vfio_zdev.h	vfio: Introduce capability definitions for VFIO_DEVICE_GET_INFO	2020-10-07 14:23:44 -06:00
vhost.h	vhost: vdpa: report iova range	2020-10-23 11:55:28 -04:00
vhost_types.h	vhost: vdpa: report iova range	2020-10-23 11:55:28 -04:00
videodev2.h	media: doc: pixfmt-rgb: Clarify naming scheme for RGB formats	2020-12-07 14:02:37 +01:00
virtio_9p.h	virtio_9p: correct tags for config space fields	2020-08-05 09:30:19 -04:00
virtio_balloon.h	virtio_balloon: correct tags for config space fields	2020-08-05 09:30:20 -04:00
virtio_blk.h	virtio_blk: correct tags for config space fields	2020-08-05 11:08:39 -04:00
virtio_config.h	virtio: VIRTIO_F_IOMMU_PLATFORM -> VIRTIO_F_ACCESS_PLATFORM	2020-08-03 16:11:42 -04:00
virtio_console.h	virtio_console: correct tags for config space fields	2020-08-05 11:08:39 -04:00
virtio_crypto.h	virtio_crypto: correct tags for config space fields	2020-08-05 11:08:39 -04:00
virtio_fs.h	virtiofs: set up virtio_fs dax_device	2020-09-10 11:39:22 +02:00
virtio_gpu.h	virtio-gpu api: Add a comment on VIRTIO_GPU_SHM_ID_HOST_VISIBLE	2020-11-20 10:44:41 +01:00
virtio_ids.h	uapi: virtio_ids: add missing device type IDs from OASIS spec	2020-12-18 16:14:31 -05:00
virtio_input.h	virtio_input: correct tags for config space fields	2020-08-05 11:08:40 -04:00
virtio_iommu.h	virtio_iommu: correct tags for config space fields	2020-08-05 11:08:40 -04:00
virtio_mem.h	virtio_mem: correct tags for config space fields	2020-08-05 11:08:40 -04:00
virtio_mmio.h	virtio: Implement get_shm_region for MMIO transport	2020-09-10 10:05:58 +02:00
virtio_net.h	virtio_net: use LE accessors for speed/duplex	2020-08-05 11:08:41 -04:00
virtio_pci.h	virtio: Implement get_shm_region for PCI transport	2020-09-10 10:05:58 +02:00
virtio_pmem.h	virtio_pmem: correct tags for config space fields	2020-08-05 11:08:40 -04:00
virtio_ring.h	virtio: force spec specified alignment on types	2020-06-02 02:45:13 -04:00
virtio_rng.h
virtio_scsi.h	virtio_scsi: correct tags for config space fields	2020-08-05 11:08:40 -04:00
virtio_types.h
virtio_vsock.h
vm_sockets.h	vm_sockets: Add VMADDR_FLAG_TO_HOST vsock flag	2020-12-14 19:33:39 -08:00
vm_sockets_diag.h
vmcore.h
vsockmon.h
vt.h
vtpm_proxy.h
wait.h
watch_queue.h	watch_queue: Add a key/keyring notification facility	2020-05-19 15:19:06 +01:00
watchdog.h
wireguard.h
wireless.h	net/wireless: wireless.h: drop duplicate word in comments	2020-07-31 09:24:23 +02:00
wmi.h
x25.h
xattr.h	ext4: support xattr gnu.* namespace for the Hurd	2020-06-12 13:23:34 -04:00
xdp_diag.h	xsk: Add xdp statistics to xsk_diag	2020-07-13 15:32:56 -07:00
xfrm.h	xfrm: introduce oseq-may-wrap flag	2020-06-24 07:51:01 +02:00
xilinx-v4l2-controls.h
zorro.h
zorro_ids.h