Export symbols needed by Android drivers

Bug-Debian: https://bugs.debian.org/901492

We want to enable use of the Android ashmem and binder drivers to
support Anbox, but they should not be built-in as that would waste
resources and increase security attack surface on systems that don't
need them.

Export the currently un-exported symbols they depend on.

Gbp-Pq: Topic debian
Gbp-Pq: Name export-symbols-needed-by-android-drivers.patch

diff --git a/fs/file.c b/fs/file.c
index 4559b5fec3bd53e8d22f79ddfa2a065cd3d527bb..af2c7e3169f4db742081ea8cef965d832b331957 100644 (file)
--- a/fs/file.c
+++ b/fs/file.c
@@ -782,6 +782,7 @@ out_unlock:
        *res = NULL;
        return -ENOENT;
 }
+EXPORT_SYMBOL(__close_fd_get_file);
 
 void do_close_on_exec(struct files_struct *files)
 {

diff --git a/kernel/fork.c b/kernel/fork.c
index 5fe09d4e6d6a00565c178b4a686b6ab26331ac20..7adc68e5a0140895915cb550e2b2aaac4169d4e2 100644 (file)
--- a/kernel/fork.c
+++ b/kernel/fork.c
@@ -1117,6 +1117,7 @@ void mmput_async(struct mm_struct *mm)
                schedule_work(&mm->async_put_work);
        }
 }
+EXPORT_SYMBOL_GPL(mmput_async);
 #endif
 
 /**

diff --git a/kernel/sched/core.c b/kernel/sched/core.c
index c4da7e17b9061112e1af2aa53342f405260077be..d29413188e3eced8102cb8a4d4a37bc2b4424673 100644 (file)
--- a/kernel/sched/core.c
+++ b/kernel/sched/core.c
@@ -5022,6 +5022,7 @@ int can_nice(const struct task_struct *p, const int nice)
        return (nice_rlim <= task_rlimit(p, RLIMIT_NICE) ||
                capable(CAP_SYS_NICE));
 }
+EXPORT_SYMBOL_GPL(can_nice);
 
 #ifdef __ARCH_WANT_SYS_NICE
 

diff --git a/kernel/task_work.c b/kernel/task_work.c
index 613b2d634af82fb6c3d4505df7159c9396e10e89..d621006f007c62489cf3ab662e6550c2d7237247 100644 (file)
--- a/kernel/task_work.c
+++ b/kernel/task_work.c
@@ -58,6 +58,7 @@ task_work_add(struct task_struct *task, struct callback_head *work, int notify)
 
        return 0;
 }
+EXPORT_SYMBOL(task_work_add);
 
 /**
  * task_work_cancel - cancel a pending work added by task_work_add()

diff --git a/mm/memory.c b/mm/memory.c
index eeae590e526aa845c83a793cfc658f2f90e60ec6..0117ec3d962ebb77f52515459edf1a558753bc5b 100644 (file)
--- a/mm/memory.c
+++ b/mm/memory.c
@@ -1527,6 +1527,7 @@ void zap_page_range(struct vm_area_struct *vma, unsigned long start,
        mmu_notifier_invalidate_range_end(&range);
        tlb_finish_mmu(&tlb, start, range.end);
 }
+EXPORT_SYMBOL_GPL(zap_page_range);
 
 /**
  * zap_page_range_single - remove user pages in a given range

diff --git a/mm/shmem.c b/mm/shmem.c
index 8e2b35ba93ad173e74b21c38fe3002cf8aceee6c..da817e7e030749277a7f34e52c123ba6c80ec2a2 100644 (file)
--- a/mm/shmem.c
+++ b/mm/shmem.c
@@ -4278,6 +4278,7 @@ int shmem_zero_setup(struct vm_area_struct *vma)
 
        return 0;
 }
+EXPORT_SYMBOL_GPL(shmem_zero_setup);
 
 /**
  * shmem_read_mapping_page_gfp - read into page cache, using specified page allocation flags.

diff --git a/security/security.c b/security/security.c
index 70a7ad357bc6ab35aa4c7b6f7616222a8b88c805..6e2ad1fa598a099e67037064c4b5f70ec176db99 100644 (file)
--- a/security/security.c
+++ b/security/security.c
@@ -725,24 +725,28 @@ int security_binder_set_context_mgr(struct task_struct *mgr)
 {
        return call_int_hook(binder_set_context_mgr, 0, mgr);
 }
+EXPORT_SYMBOL_GPL(security_binder_set_context_mgr);
 
 int security_binder_transaction(struct task_struct *from,
                                struct task_struct *to)
 {
        return call_int_hook(binder_transaction, 0, from, to);
 }
+EXPORT_SYMBOL_GPL(security_binder_transaction);
 
 int security_binder_transfer_binder(struct task_struct *from,
                                    struct task_struct *to)
 {
        return call_int_hook(binder_transfer_binder, 0, from, to);
 }
+EXPORT_SYMBOL_GPL(security_binder_transfer_binder);
 
 int security_binder_transfer_file(struct task_struct *from,
                                  struct task_struct *to, struct file *file)
 {
        return call_int_hook(binder_transfer_file, 0, from, to, file);
 }
+EXPORT_SYMBOL_GPL(security_binder_transfer_file);
 
 int security_ptrace_access_check(struct task_struct *child, unsigned int mode)
 {