Export symbols needed by Android drivers

Bug-Debian: https://bugs.debian.org/901492

We want to enable use of the Android ashmem and binder drivers to
support Anbox, but they should not be built-in as that would waste
resources and increase security attack surface on systems that don't
need them.

Export the currently un-exported symbols they depend on.

Gbp-Pq: Topic debian
Gbp-Pq: Name export-symbols-needed-by-android-drivers.patch

diff --git a/fs/file.c b/fs/file.c
index 9d02352fa18c3e7dca4e4e338733e94b623eba0d..add386da324aff24be0c859062eb36a6389fe1f4 100644 (file)
--- a/fs/file.c
+++ b/fs/file.c
@@ -780,6 +780,7 @@ out_unlock:
        *res = NULL;
        return -ENOENT;
 }
+EXPORT_SYMBOL(__close_fd_get_file);
 
 void do_close_on_exec(struct files_struct *files)
 {

diff --git a/kernel/fork.c b/kernel/fork.c
index e465903abed9e2d3cc8f06945f5737bf1b960219..6a3e9290c0929e334c04a7e2f367fcc8968cb824 100644 (file)
--- a/kernel/fork.c
+++ b/kernel/fork.c
@@ -1127,6 +1127,7 @@ void mmput_async(struct mm_struct *mm)
                schedule_work(&mm->async_put_work);
        }
 }
+EXPORT_SYMBOL_GPL(mmput_async);
 #endif
 
 /**

diff --git a/kernel/sched/core.c b/kernel/sched/core.c
index 0a5f9fad45e4b5d815da077f75c389c66b70d8b0..430ac59cd0d20cab5b24a5f5756a76b4b33ebf5d 100644 (file)
--- a/kernel/sched/core.c
+++ b/kernel/sched/core.c
@@ -5043,6 +5043,7 @@ int can_nice(const struct task_struct *p, const int nice)
        return (nice_rlim <= task_rlimit(p, RLIMIT_NICE) ||
                capable(CAP_SYS_NICE));
 }
+EXPORT_SYMBOL_GPL(can_nice);
 
 #ifdef __ARCH_WANT_SYS_NICE
 

diff --git a/kernel/task_work.c b/kernel/task_work.c
index 8d6e1217c451c003cb4659d16a0a09aba886f1f4..7cf8f9a6b64823b6b96d371a802eec228bf1b4d4 100644 (file)
--- a/kernel/task_work.c
+++ b/kernel/task_work.c
@@ -68,6 +68,7 @@ int task_work_add(struct task_struct *task, struct callback_head *work,
 
        return 0;
 }
+EXPORT_SYMBOL(task_work_add);
 
 /**
  * task_work_cancel - cancel a pending work added by task_work_add()

diff --git a/mm/memory.c b/mm/memory.c
index 4fe24cd865a79917b3f3eaf6814d133c39fa83e4..143bc50d349a2923486f75ff49a67898ba677d45 100644 (file)
--- a/mm/memory.c
+++ b/mm/memory.c
@@ -1554,6 +1554,7 @@ void zap_page_range(struct vm_area_struct *vma, unsigned long start,
        mmu_notifier_invalidate_range_end(&range);
        tlb_finish_mmu(&tlb, start, range.end);
 }
+EXPORT_SYMBOL_GPL(zap_page_range);
 
 /**
  * zap_page_range_single - remove user pages in a given range

diff --git a/mm/shmem.c b/mm/shmem.c
index ae8adca3b56d1d5073b92983c87ffaa8d3899baa..45bc9dcba8369de0d2bf54958f6eecdfdb1da0b1 100644 (file)
--- a/mm/shmem.c
+++ b/mm/shmem.c
@@ -4283,6 +4283,7 @@ int shmem_zero_setup(struct vm_area_struct *vma)
 
        return 0;
 }
+EXPORT_SYMBOL_GPL(shmem_zero_setup);
 
 /**
  * shmem_read_mapping_page_gfp - read into page cache, using specified page allocation flags.

diff --git a/security/security.c b/security/security.c
index a864ff824dd3bb6a334385b698b2f4bf3f477d62..5ae0ca978fe295f127925cec1bb7bf8845e9c104 100644 (file)
--- a/security/security.c
+++ b/security/security.c
@@ -727,24 +727,28 @@ int security_binder_set_context_mgr(const struct cred *mgr)
 {
        return call_int_hook(binder_set_context_mgr, 0, mgr);
 }
+EXPORT_SYMBOL_GPL(security_binder_set_context_mgr);
 
 int security_binder_transaction(const struct cred *from,
                                const struct cred *to)
 {
        return call_int_hook(binder_transaction, 0, from, to);
 }
+EXPORT_SYMBOL_GPL(security_binder_transaction);
 
 int security_binder_transfer_binder(const struct cred *from,
                                    const struct cred *to)
 {
        return call_int_hook(binder_transfer_binder, 0, from, to);
 }
+EXPORT_SYMBOL_GPL(security_binder_transfer_binder);
 
 int security_binder_transfer_file(const struct cred *from,
                                  const struct cred *to, struct file *file)
 {
        return call_int_hook(binder_transfer_file, 0, from, to, file);
 }
+EXPORT_SYMBOL_GPL(security_binder_transfer_file);
 
 int security_ptrace_access_check(struct task_struct *child, unsigned int mode)
 {