selinux_netlabel.h 3.2 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124
  1. /*
  2. * SELinux interface to the NetLabel subsystem
  3. *
  4. * Author : Paul Moore <paul.moore@hp.com>
  5. *
  6. */
  7. /*
  8. * (c) Copyright Hewlett-Packard Development Company, L.P., 2006
  9. *
  10. * This program is free software; you can redistribute it and/or modify
  11. * it under the terms of the GNU General Public License as published by
  12. * the Free Software Foundation; either version 2 of the License, or
  13. * (at your option) any later version.
  14. *
  15. * This program is distributed in the hope that it will be useful,
  16. * but WITHOUT ANY WARRANTY; without even the implied warranty of
  17. * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See
  18. * the GNU General Public License for more details.
  19. *
  20. * You should have received a copy of the GNU General Public License
  21. * along with this program; if not, write to the Free Software
  22. * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
  23. *
  24. */
  25. #ifndef _SELINUX_NETLABEL_H_
  26. #define _SELINUX_NETLABEL_H_
  27. #include <linux/types.h>
  28. #include <linux/fs.h>
  29. #include <linux/net.h>
  30. #include <linux/skbuff.h>
  31. #include <net/sock.h>
  32. #include "avc.h"
  33. #include "objsec.h"
  34. #ifdef CONFIG_NETLABEL
  35. void selinux_netlbl_cache_invalidate(void);
  36. int selinux_netlbl_skbuff_getsid(struct sk_buff *skb, u32 base_sid, u32 *sid);
  37. int selinux_netlbl_socket_post_create(struct socket *sock);
  38. void selinux_netlbl_sock_graft(struct sock *sk, struct socket *sock);
  39. int selinux_netlbl_sock_rcv_skb(struct sk_security_struct *sksec,
  40. struct sk_buff *skb,
  41. struct avc_audit_data *ad);
  42. void selinux_netlbl_sk_security_reset(struct sk_security_struct *ssec,
  43. int family);
  44. void selinux_netlbl_sk_security_init(struct sk_security_struct *ssec,
  45. int family);
  46. void selinux_netlbl_sk_security_clone(struct sk_security_struct *ssec,
  47. struct sk_security_struct *newssec);
  48. int selinux_netlbl_inode_permission(struct inode *inode, int mask);
  49. int selinux_netlbl_socket_setsockopt(struct socket *sock,
  50. int level,
  51. int optname);
  52. #else
  53. static inline void selinux_netlbl_cache_invalidate(void)
  54. {
  55. return;
  56. }
  57. static inline int selinux_netlbl_skbuff_getsid(struct sk_buff *skb,
  58. u32 base_sid,
  59. u32 *sid)
  60. {
  61. *sid = SECSID_NULL;
  62. return 0;
  63. }
  64. static inline int selinux_netlbl_socket_post_create(struct socket *sock)
  65. {
  66. return 0;
  67. }
  68. static inline void selinux_netlbl_sock_graft(struct sock *sk,
  69. struct socket *sock)
  70. {
  71. return;
  72. }
  73. static inline int selinux_netlbl_sock_rcv_skb(struct sk_security_struct *sksec,
  74. struct sk_buff *skb,
  75. struct avc_audit_data *ad)
  76. {
  77. return 0;
  78. }
  79. static inline void selinux_netlbl_sk_security_reset(
  80. struct sk_security_struct *ssec,
  81. int family)
  82. {
  83. return;
  84. }
  85. static inline void selinux_netlbl_sk_security_init(
  86. struct sk_security_struct *ssec,
  87. int family)
  88. {
  89. return;
  90. }
  91. static inline void selinux_netlbl_sk_security_clone(
  92. struct sk_security_struct *ssec,
  93. struct sk_security_struct *newssec)
  94. {
  95. return;
  96. }
  97. static inline int selinux_netlbl_inode_permission(struct inode *inode,
  98. int mask)
  99. {
  100. return 0;
  101. }
  102. static inline int selinux_netlbl_socket_setsockopt(struct socket *sock,
  103. int level,
  104. int optname)
  105. {
  106. return 0;
  107. }
  108. #endif /* CONFIG_NETLABEL */
  109. #endif