mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
synced 2024-08-27 19:29:37 +00:00
![Thomas Gleixner](/assets/img/avatar_default.png)
Based on 2 normalized pattern(s): this program is free software you can redistribute it and or modify it under the terms of the gnu general public license as published by the free software foundation either version 2 of the license or at your option any later version this program is distributed in the hope that it will be useful but without any warranty without even the implied warranty of merchantability or fitness for a particular purpose see the gnu general public license for more details you should have received a copy of the gnu general public license along with this program if not see http www gnu org licenses this program is free software you can redistribute it and or modify it under the terms of the gnu general public license as published by the free software foundation either version 2 of the license or at your option any later version this program is distributed in the hope that it will be useful but without any warranty without even the implied warranty of merchantability or fitness for a particular purpose see the gnu general public license for more details [based] [from] [clk] [highbank] [c] you should have received a copy of the gnu general public license along with this program if not see http www gnu org licenses extracted by the scancode license scanner the SPDX license identifier GPL-2.0-or-later has been chosen to replace the boilerplate/reference in 355 file(s). Signed-off-by: Thomas Gleixner <tglx@linutronix.de> Reviewed-by: Kate Stewart <kstewart@linuxfoundation.org> Reviewed-by: Jilayne Lovejoy <opensource@jilayne.com> Reviewed-by: Steve Winslow <swinslow@gmail.com> Reviewed-by: Allison Randal <allison@lohutok.net> Cc: linux-spdx@vger.kernel.org Link: https://lkml.kernel.org/r/20190519154041.837383322@linutronix.de Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
137 lines
3.9 KiB
C
137 lines
3.9 KiB
C
/* SPDX-License-Identifier: GPL-2.0-or-later */
|
|
/*
|
|
* NetLabel CALIPSO Support
|
|
*
|
|
* This file defines the CALIPSO functions for the NetLabel system. The
|
|
* NetLabel system manages static and dynamic label mappings for network
|
|
* protocols such as CIPSO and RIPSO.
|
|
*
|
|
* Authors: Paul Moore <paul@paul-moore.com>
|
|
* Huw Davies <huw@codeweavers.com>
|
|
*/
|
|
|
|
/* (c) Copyright Hewlett-Packard Development Company, L.P., 2006
|
|
* (c) Copyright Huw Davies <huw@codeweavers.com>, 2015
|
|
*/
|
|
|
|
#ifndef _NETLABEL_CALIPSO
|
|
#define _NETLABEL_CALIPSO
|
|
|
|
#include <net/netlabel.h>
|
|
#include <net/calipso.h>
|
|
|
|
/* The following NetLabel payloads are supported by the CALIPSO subsystem.
|
|
*
|
|
* o ADD:
|
|
* Sent by an application to add a new DOI mapping table.
|
|
*
|
|
* Required attributes:
|
|
*
|
|
* NLBL_CALIPSO_A_DOI
|
|
* NLBL_CALIPSO_A_MTYPE
|
|
*
|
|
* If using CALIPSO_MAP_PASS no additional attributes are required.
|
|
*
|
|
* o REMOVE:
|
|
* Sent by an application to remove a specific DOI mapping table from the
|
|
* CALIPSO system.
|
|
*
|
|
* Required attributes:
|
|
*
|
|
* NLBL_CALIPSO_A_DOI
|
|
*
|
|
* o LIST:
|
|
* Sent by an application to list the details of a DOI definition. On
|
|
* success the kernel should send a response using the following format.
|
|
*
|
|
* Required attributes:
|
|
*
|
|
* NLBL_CALIPSO_A_DOI
|
|
*
|
|
* The valid response message format depends on the type of the DOI mapping,
|
|
* the defined formats are shown below.
|
|
*
|
|
* Required attributes:
|
|
*
|
|
* NLBL_CALIPSO_A_MTYPE
|
|
*
|
|
* If using CALIPSO_MAP_PASS no additional attributes are required.
|
|
*
|
|
* o LISTALL:
|
|
* This message is sent by an application to list the valid DOIs on the
|
|
* system. When sent by an application there is no payload and the
|
|
* NLM_F_DUMP flag should be set. The kernel should respond with a series of
|
|
* the following messages.
|
|
*
|
|
* Required attributes:
|
|
*
|
|
* NLBL_CALIPSO_A_DOI
|
|
* NLBL_CALIPSO_A_MTYPE
|
|
*
|
|
*/
|
|
|
|
/* NetLabel CALIPSO commands */
|
|
enum {
|
|
NLBL_CALIPSO_C_UNSPEC,
|
|
NLBL_CALIPSO_C_ADD,
|
|
NLBL_CALIPSO_C_REMOVE,
|
|
NLBL_CALIPSO_C_LIST,
|
|
NLBL_CALIPSO_C_LISTALL,
|
|
__NLBL_CALIPSO_C_MAX,
|
|
};
|
|
|
|
/* NetLabel CALIPSO attributes */
|
|
enum {
|
|
NLBL_CALIPSO_A_UNSPEC,
|
|
NLBL_CALIPSO_A_DOI,
|
|
/* (NLA_U32)
|
|
* the DOI value */
|
|
NLBL_CALIPSO_A_MTYPE,
|
|
/* (NLA_U32)
|
|
* the mapping table type (defined in the calipso.h header as
|
|
* CALIPSO_MAP_*) */
|
|
__NLBL_CALIPSO_A_MAX,
|
|
};
|
|
|
|
#define NLBL_CALIPSO_A_MAX (__NLBL_CALIPSO_A_MAX - 1)
|
|
|
|
/* NetLabel protocol functions */
|
|
#if IS_ENABLED(CONFIG_IPV6)
|
|
int netlbl_calipso_genl_init(void);
|
|
#else
|
|
static inline int netlbl_calipso_genl_init(void)
|
|
{
|
|
return 0;
|
|
}
|
|
#endif
|
|
|
|
int calipso_doi_add(struct calipso_doi *doi_def,
|
|
struct netlbl_audit *audit_info);
|
|
void calipso_doi_free(struct calipso_doi *doi_def);
|
|
int calipso_doi_remove(u32 doi, struct netlbl_audit *audit_info);
|
|
struct calipso_doi *calipso_doi_getdef(u32 doi);
|
|
void calipso_doi_putdef(struct calipso_doi *doi_def);
|
|
int calipso_doi_walk(u32 *skip_cnt,
|
|
int (*callback)(struct calipso_doi *doi_def, void *arg),
|
|
void *cb_arg);
|
|
int calipso_sock_getattr(struct sock *sk, struct netlbl_lsm_secattr *secattr);
|
|
int calipso_sock_setattr(struct sock *sk,
|
|
const struct calipso_doi *doi_def,
|
|
const struct netlbl_lsm_secattr *secattr);
|
|
void calipso_sock_delattr(struct sock *sk);
|
|
int calipso_req_setattr(struct request_sock *req,
|
|
const struct calipso_doi *doi_def,
|
|
const struct netlbl_lsm_secattr *secattr);
|
|
void calipso_req_delattr(struct request_sock *req);
|
|
unsigned char *calipso_optptr(const struct sk_buff *skb);
|
|
int calipso_getattr(const unsigned char *calipso,
|
|
struct netlbl_lsm_secattr *secattr);
|
|
int calipso_skbuff_setattr(struct sk_buff *skb,
|
|
const struct calipso_doi *doi_def,
|
|
const struct netlbl_lsm_secattr *secattr);
|
|
int calipso_skbuff_delattr(struct sk_buff *skb);
|
|
void calipso_cache_invalidate(void);
|
|
int calipso_cache_add(const unsigned char *calipso_ptr,
|
|
const struct netlbl_lsm_secattr *secattr);
|
|
|
|
#endif
|