~ [ source navigation ] ~ [ diff markup ] ~ [ identifier search ] ~

TOMOYO Linux Cross Reference
Linux/security/selinux/ss/mls.h

Version: ~ [ linux-5.11 ] ~ [ linux-5.10.17 ] ~ [ linux-5.9.16 ] ~ [ linux-5.8.18 ] ~ [ linux-5.7.19 ] ~ [ linux-5.6.19 ] ~ [ linux-5.5.19 ] ~ [ linux-5.4.99 ] ~ [ linux-5.3.18 ] ~ [ linux-5.2.21 ] ~ [ linux-5.1.21 ] ~ [ linux-5.0.21 ] ~ [ linux-4.20.17 ] ~ [ linux-4.19.176 ] ~ [ linux-4.18.20 ] ~ [ linux-4.17.19 ] ~ [ linux-4.16.18 ] ~ [ linux-4.15.18 ] ~ [ linux-4.14.221 ] ~ [ linux-4.13.16 ] ~ [ linux-4.12.14 ] ~ [ linux-4.11.12 ] ~ [ linux-4.10.17 ] ~ [ linux-4.9.257 ] ~ [ linux-4.8.17 ] ~ [ linux-4.7.10 ] ~ [ linux-4.6.7 ] ~ [ linux-4.5.7 ] ~ [ linux-4.4.257 ] ~ [ linux-4.3.6 ] ~ [ linux-4.2.8 ] ~ [ linux-4.1.52 ] ~ [ linux-4.0.9 ] ~ [ linux-3.19.8 ] ~ [ linux-3.18.140 ] ~ [ linux-3.17.8 ] ~ [ linux-3.16.85 ] ~ [ linux-3.15.10 ] ~ [ linux-3.14.79 ] ~ [ linux-3.13.11 ] ~ [ linux-3.12.74 ] ~ [ linux-3.11.10 ] ~ [ linux-3.10.108 ] ~ [ linux-2.6.32.71 ] ~ [ linux-2.6.0 ] ~ [ linux-2.4.37.11 ] ~ [ unix-v6-master ] ~ [ ccs-tools-1.8.5 ] ~ [ policy-sample ] ~
Architecture: ~ [ i386 ] ~ [ alpha ] ~ [ m68k ] ~ [ mips ] ~ [ ppc ] ~ [ sparc ] ~ [ sparc64 ] ~

  1 /* SPDX-License-Identifier: GPL-2.0 */
  2 /*
  3  * Multi-level security (MLS) policy operations.
  4  *
  5  * Author : Stephen Smalley, <sds@tycho.nsa.gov>
  6  */
  7 /*
  8  * Updated: Trusted Computer Solutions, Inc. <dgoeddel@trustedcs.com>
  9  *
 10  *      Support for enhanced MLS infrastructure.
 11  *
 12  * Copyright (C) 2004-2006 Trusted Computer Solutions, Inc.
 13  */
 14 /*
 15  * Updated: Hewlett-Packard <paul@paul-moore.com>
 16  *
 17  *      Added support to import/export the MLS label from NetLabel
 18  *
 19  * (c) Copyright Hewlett-Packard Development Company, L.P., 2006
 20  */
 21 
 22 #ifndef _SS_MLS_H_
 23 #define _SS_MLS_H_
 24 
 25 #include <linux/jhash.h>
 26 
 27 #include "context.h"
 28 #include "ebitmap.h"
 29 #include "policydb.h"
 30 
 31 int mls_compute_context_len(struct policydb *p, struct context *context);
 32 void mls_sid_to_context(struct policydb *p, struct context *context,
 33                         char **scontext);
 34 int mls_context_isvalid(struct policydb *p, struct context *c);
 35 int mls_range_isvalid(struct policydb *p, struct mls_range *r);
 36 int mls_level_isvalid(struct policydb *p, struct mls_level *l);
 37 
 38 int mls_context_to_sid(struct policydb *p,
 39                        char oldc,
 40                        char *scontext,
 41                        struct context *context,
 42                        struct sidtab *s,
 43                        u32 def_sid);
 44 
 45 int mls_from_string(struct policydb *p, char *str, struct context *context,
 46                     gfp_t gfp_mask);
 47 
 48 int mls_range_set(struct context *context, struct mls_range *range);
 49 
 50 int mls_convert_context(struct policydb *oldp,
 51                         struct policydb *newp,
 52                         struct context *oldc,
 53                         struct context *newc);
 54 
 55 int mls_compute_sid(struct policydb *p,
 56                     struct context *scontext,
 57                     struct context *tcontext,
 58                     u16 tclass,
 59                     u32 specified,
 60                     struct context *newcontext,
 61                     bool sock);
 62 
 63 int mls_setup_user_range(struct policydb *p,
 64                          struct context *fromcon, struct user_datum *user,
 65                          struct context *usercon);
 66 
 67 #ifdef CONFIG_NETLABEL
 68 void mls_export_netlbl_lvl(struct policydb *p,
 69                            struct context *context,
 70                            struct netlbl_lsm_secattr *secattr);
 71 void mls_import_netlbl_lvl(struct policydb *p,
 72                            struct context *context,
 73                            struct netlbl_lsm_secattr *secattr);
 74 int mls_export_netlbl_cat(struct policydb *p,
 75                           struct context *context,
 76                           struct netlbl_lsm_secattr *secattr);
 77 int mls_import_netlbl_cat(struct policydb *p,
 78                           struct context *context,
 79                           struct netlbl_lsm_secattr *secattr);
 80 #else
 81 static inline void mls_export_netlbl_lvl(struct policydb *p,
 82                                          struct context *context,
 83                                          struct netlbl_lsm_secattr *secattr)
 84 {
 85         return;
 86 }
 87 static inline void mls_import_netlbl_lvl(struct policydb *p,
 88                                          struct context *context,
 89                                          struct netlbl_lsm_secattr *secattr)
 90 {
 91         return;
 92 }
 93 static inline int mls_export_netlbl_cat(struct policydb *p,
 94                                         struct context *context,
 95                                         struct netlbl_lsm_secattr *secattr)
 96 {
 97         return -ENOMEM;
 98 }
 99 static inline int mls_import_netlbl_cat(struct policydb *p,
100                                         struct context *context,
101                                         struct netlbl_lsm_secattr *secattr)
102 {
103         return -ENOMEM;
104 }
105 #endif
106 
107 static inline u32 mls_range_hash(const struct mls_range *r, u32 hash)
108 {
109         hash = jhash_2words(r->level[0].sens, r->level[1].sens, hash);
110         hash = ebitmap_hash(&r->level[0].cat, hash);
111         hash = ebitmap_hash(&r->level[1].cat, hash);
112         return hash;
113 }
114 
115 #endif  /* _SS_MLS_H */
116 
117 

~ [ source navigation ] ~ [ diff markup ] ~ [ identifier search ] ~

kernel.org | git.kernel.org | LWN.net | Project Home | Wiki (Japanese) | Wiki (English) | SVN repository | Mail admin

Linux® is a registered trademark of Linus Torvalds in the United States and other countries.
TOMOYO® is a registered trademark of NTT DATA CORPORATION.

osdn.jp