mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
synced 2024-11-01 17:08:10 +00:00
2a7dba391e
SELinux would like to implement a new labeling behavior of newly created inodes. We currently label new inodes based on the parent and the creating process. This new behavior would also take into account the name of the new object when deciding the new label. This is not the (supposed) full path, just the last component of the path. This is very useful because creating /etc/shadow is different than creating /etc/passwd but the kernel hooks are unable to differentiate these operations. We currently require that userspace realize it is doing some difficult operation like that and than userspace jumps through SELinux hoops to get things set up correctly. This patch does not implement new behavior, that is obviously contained in a seperate SELinux patch, but it does pass the needed name down to the correct LSM hook. If no such name exists it is fine to pass NULL. Signed-off-by: Eric Paris <eparis@redhat.com>
75 lines
2.6 KiB
C
75 lines
2.6 KiB
C
/*
|
|
* Copyright (C) International Business Machines Corp., 2000-2002
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See
|
|
* the GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
*/
|
|
|
|
#ifndef H_JFS_XATTR
|
|
#define H_JFS_XATTR
|
|
|
|
/*
|
|
* jfs_ea_list describe the on-disk format of the extended attributes.
|
|
* I know the null-terminator is redundant since namelen is stored, but
|
|
* I am maintaining compatibility with OS/2 where possible.
|
|
*/
|
|
struct jfs_ea {
|
|
u8 flag; /* Unused? */
|
|
u8 namelen; /* Length of name */
|
|
__le16 valuelen; /* Length of value */
|
|
char name[0]; /* Attribute name (includes null-terminator) */
|
|
}; /* Value immediately follows name */
|
|
|
|
struct jfs_ea_list {
|
|
__le32 size; /* overall size */
|
|
struct jfs_ea ea[0]; /* Variable length list */
|
|
};
|
|
|
|
/* Macros for defining maxiumum number of bytes supported for EAs */
|
|
#define MAXEASIZE 65535
|
|
#define MAXEALISTSIZE MAXEASIZE
|
|
|
|
/*
|
|
* some macros for dealing with variable length EA lists.
|
|
*/
|
|
#define EA_SIZE(ea) \
|
|
(sizeof (struct jfs_ea) + (ea)->namelen + 1 + \
|
|
le16_to_cpu((ea)->valuelen))
|
|
#define NEXT_EA(ea) ((struct jfs_ea *) (((char *) (ea)) + (EA_SIZE (ea))))
|
|
#define FIRST_EA(ealist) ((ealist)->ea)
|
|
#define EALIST_SIZE(ealist) le32_to_cpu((ealist)->size)
|
|
#define END_EALIST(ealist) \
|
|
((struct jfs_ea *) (((char *) (ealist)) + EALIST_SIZE(ealist)))
|
|
|
|
extern int __jfs_setxattr(tid_t, struct inode *, const char *, const void *,
|
|
size_t, int);
|
|
extern int jfs_setxattr(struct dentry *, const char *, const void *, size_t,
|
|
int);
|
|
extern ssize_t __jfs_getxattr(struct inode *, const char *, void *, size_t);
|
|
extern ssize_t jfs_getxattr(struct dentry *, const char *, void *, size_t);
|
|
extern ssize_t jfs_listxattr(struct dentry *, char *, size_t);
|
|
extern int jfs_removexattr(struct dentry *, const char *);
|
|
|
|
#ifdef CONFIG_JFS_SECURITY
|
|
extern int jfs_init_security(tid_t, struct inode *, struct inode *,
|
|
const struct qstr *);
|
|
#else
|
|
static inline int jfs_init_security(tid_t tid, struct inode *inode,
|
|
struct inode *dir, const struct qstr *qstr)
|
|
{
|
|
return 0;
|
|
}
|
|
#endif
|
|
|
|
#endif /* H_JFS_XATTR */
|