feat: Add certs, init, io_uring, security, usr, virt subsystems, Nano editor & full LazyBox suite

include/security/security.h

@@ -0,0 +1,28 @@
+#ifndef _SECURITY_SECURITY_H
+#define _SECURITY_SECURITY_H
+
+#include <security/capability.h>
+#include <kernel/types.h>
+#include <stdint.h>
+#include <stddef.h>
+#include <stdbool.h>
+
+struct vfs_node;
+
+typedef struct security_operations {
+    const char* name;
+    int (*task_create)(uint32_t clone_flags);
+    int (*file_permission)(struct vfs_node* node, int mask);
+    int (*file_open)(struct vfs_node* node, int flags);
+    int (*capable)(kernel_cap_t caps, int cap);
+    int (*socket_create)(int family, int type, int protocol);
+} security_ops_t;
+
+void security_init(void);
+int security_register_lsm(security_ops_t* ops);
+int security_file_permission(struct vfs_node* node, int mask);
+int security_file_open(struct vfs_node* node, int flags);
+int security_capable(int cap);
+const char* security_get_active_lsm_name(void);
+
+#endif // _SECURITY_SECURITY_H