kevin/linux
1
Fork 0
Code

selinux: fix style issues in security/selinux/ss/policydb.h

Browse Source 
As part of on ongoing effort to perform more automated testing and
provide more tools for individual developers to validate their
patches before submitting, we are trying to make our code
"clang-format clean".  My hope is that once we have fixed all of our
style "quirks", developers will be able to run clang-format on their
patches to help avoid silly formatting problems and ensure their
changes fit in well with the rest of the SELinux kernel code.

Signed-off-by: Paul Moore <paul@paul-moore.com>
This commit is contained in:
Paul Moore 2024-02-22 18:52:33 -05:00
parent 793f9add02
commit a32582db36
1 changed files with 95 additions and 97 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

192
security/selinux/ss/policydb.h
View File

@ -8,15 +8,13 @@
/* /*
* Updated: Trusted Computer Solutions, Inc. <dgoeddel@trustedcs.com> * Updated: Trusted Computer Solutions, Inc. <dgoeddel@trustedcs.com>
* Support for enhanced MLS infrastructure.
* Copyright (C) 2004-2005 Trusted Computer Solutions, Inc.
* *
* Support for enhanced MLS infrastructure. * Updated: Frank Mayer <mayerf@tresys.com> and
* * Karl MacMillan <kmacmillan@tresys.com>
* Updated: Frank Mayer <mayerf@tresys.com> and Karl MacMillan <kmacmillan@tresys.com> * Added conditional policy language extensions
* * Copyright (C) 2003-2004 Tresys Technology, LLC
* Added conditional policy language extensions
*
* Copyright (C) 2004-2005 Trusted Computer Solutions, Inc.
* Copyright (C) 2003 - 2004 Tresys Technology, LLC
*/ */
#ifndef _SS_POLICYDB_H_ #ifndef _SS_POLICYDB_H_
@ -39,104 +37,103 @@
/* Permission attributes */ /* Permission attributes */
struct perm_datum { struct perm_datum {
u32 value; /* permission bit + 1 */ u32 value; /* permission bit + 1 */
}; };
/* Attributes of a common prefix for access vectors */ /* Attributes of a common prefix for access vectors */
struct common_datum { struct common_datum {
u32 value; /* internal common value */ u32 value; /* internal common value */
struct symtab permissions; /* common permissions */ struct symtab permissions; /* common permissions */
}; };
/* Class attributes */ /* Class attributes */
struct class_datum { struct class_datum {
u32 value; /* class value */ u32 value; /* class value */
char *comkey; /* common name */ char *comkey; /* common name */
struct common_datum *comdatum; /* common datum */ struct common_datum *comdatum; /* common datum */
struct symtab permissions; /* class-specific permission symbol table */ struct symtab permissions; /* class-specific permission symbol table */
struct constraint_node *constraints; /* constraints on class permissions */ struct constraint_node *constraints; /* constraints on class perms */
struct constraint_node *validatetrans; /* special transition rules */ struct constraint_node *validatetrans; /* special transition rules */
/* Options how a new object user, role, and type should be decided */ /* Options how a new object user, role, and type should be decided */
#define DEFAULT_SOURCE 1 #define DEFAULT_SOURCE 1
#define DEFAULT_TARGET 2 #define DEFAULT_TARGET 2
char default_user; char default_user;
char default_role; char default_role;
char default_type; char default_type;
/* Options how a new object range should be decided */ /* Options how a new object range should be decided */
#define DEFAULT_SOURCE_LOW 1 #define DEFAULT_SOURCE_LOW 1
#define DEFAULT_SOURCE_HIGH 2 #define DEFAULT_SOURCE_HIGH 2
#define DEFAULT_SOURCE_LOW_HIGH 3 #define DEFAULT_SOURCE_LOW_HIGH 3
#define DEFAULT_TARGET_LOW 4 #define DEFAULT_TARGET_LOW 4
#define DEFAULT_TARGET_HIGH 5 #define DEFAULT_TARGET_HIGH 5
#define DEFAULT_TARGET_LOW_HIGH 6 #define DEFAULT_TARGET_LOW_HIGH 6
#define DEFAULT_GLBLUB 7 #define DEFAULT_GLBLUB 7
char default_range; char default_range;
}; };
/* Role attributes */ /* Role attributes */
struct role_datum { struct role_datum {
u32 value; /* internal role value */ u32 value; /* internal role value */
u32 bounds; /* boundary of role */ u32 bounds; /* boundary of role */
struct ebitmap dominates; /* set of roles dominated by this role */ struct ebitmap dominates; /* set of roles dominated by this role */
struct ebitmap types; /* set of authorized types for role */ struct ebitmap types; /* set of authorized types for role */
}; };
struct role_trans_key { struct role_trans_key {
u32 role; /* current role */ u32 role; /* current role */
u32 type; /* program executable type, or new object type */ u32 type; /* program executable type, or new object type */
u32 tclass; /* process class, or new object class */ u32 tclass; /* process class, or new object class */
}; };
struct role_trans_datum { struct role_trans_datum {
u32 new_role; /* new role */ u32 new_role; /* new role */
}; };
struct filename_trans_key { struct filename_trans_key {
u32 ttype; /* parent dir context */ u32 ttype; /* parent dir context */
u16 tclass; /* class of new object */ u16 tclass; /* class of new object */
const char *name; /* last path component */ const char *name; /* last path component */
}; };
struct filename_trans_datum { struct filename_trans_datum {
struct ebitmap stypes; /* bitmap of source types for this otype */ struct ebitmap stypes; /* bitmap of source types for this otype */
u32 otype; /* resulting type of new object */ u32 otype; /* resulting type of new object */
struct filename_trans_datum *next; /* record for next otype*/ struct filename_trans_datum *next; /* record for next otype*/
}; };
struct role_allow { struct role_allow {
u32 role; /* current role */ u32 role; /* current role */
u32 new_role; /* new role */ u32 new_role; /* new role */
struct role_allow *next; struct role_allow *next;
}; };
/* Type attributes */ /* Type attributes */
struct type_datum { struct type_datum {
u32 value; /* internal type value */ u32 value; /* internal type value */
u32 bounds; /* boundary of type */ u32 bounds; /* boundary of type */
unsigned char primary; /* primary name? */ unsigned char primary; /* primary name? */
unsigned char attribute;/* attribute ?*/ unsigned char attribute; /* attribute ?*/
}; };
/* User attributes */ /* User attributes */
struct user_datum { struct user_datum {
u32 value; /* internal user value */ u32 value; /* internal user value */
u32 bounds; /* bounds of user */ u32 bounds; /* bounds of user */
struct ebitmap roles; /* set of authorized roles for user */ struct ebitmap roles; /* set of authorized roles for user */
struct mls_range range; /* MLS range (min - max) for user */ struct mls_range range; /* MLS range (min - max) for user */
struct mls_level dfltlevel; /* default login MLS level for user */ struct mls_level dfltlevel; /* default login MLS level for user */
}; };
/* Sensitivity attributes */ /* Sensitivity attributes */
struct level_datum { struct level_datum {
struct mls_level *level; /* sensitivity and associated categories */ struct mls_level *level; /* sensitivity and associated categories */
unsigned char isalias; /* is this sensitivity an alias for another? */ unsigned char isalias; /* is this sensitivity an alias for another? */
}; };
/* Category attributes */ /* Category attributes */
struct cat_datum { struct cat_datum {
u32 value; /* internal category bit + 1 */ u32 value; /* internal category bit + 1 */
unsigned char isalias; /* is this category an alias for another? */ unsigned char isalias; /* is this category an alias for another? */
}; };
struct range_trans { struct range_trans {
@ -147,7 +144,7 @@ struct range_trans {
/* Boolean data type */ /* Boolean data type */
struct cond_bool_datum { struct cond_bool_datum {
__u32 value; /* internal type value */ __u32 value; /* internal type value */
int state; int state;
}; };
@ -173,20 +170,20 @@ struct type_set {
*/ */
struct ocontext { struct ocontext {
union { union {
char *name; /* name of initial SID, fs, netif, fstype, path */ char *name; /* name of initial SID, fs, netif, fstype, path */
struct { struct {
u8 protocol; u8 protocol;
u16 low_port; u16 low_port;
u16 high_port; u16 high_port;
} port; /* TCP or UDP port information */ } port; /* TCP or UDP port information */
struct { struct {
u32 addr; u32 addr;
u32 mask; u32 mask;
} node; /* node information */ } node; /* node information */
struct { struct {
u32 addr[4]; u32 addr[4];
u32 mask[4]; u32 mask[4];
} node6; /* IPv6 node information */ } node6; /* IPv6 node information */
struct { struct {
u64 subnet_prefix; u64 subnet_prefix;
u16 low_pkey; u16 low_pkey;
@ -198,11 +195,11 @@ struct ocontext {
} ibendport; } ibendport;
} u; } u;
union { union {
u32 sclass; /* security class for genfs */ u32 sclass; /* security class for genfs */
u32 behavior; /* labeling behavior for fs_use */ u32 behavior; /* labeling behavior for fs_use */
} v; } v;
struct context context[2]; /* security context(s) */ struct context context[2]; /* security context(s) */
u32 sid[2]; /* SID(s) */ u32 sid[2]; /* SID(s) */
struct ocontext *next; struct ocontext *next;
}; };
@ -221,19 +218,19 @@ struct genfs {
#define SYM_BOOLS 5 #define SYM_BOOLS 5
#define SYM_LEVELS 6 #define SYM_LEVELS 6
#define SYM_CATS 7 #define SYM_CATS 7
#define SYM_NUM 8 #define SYM_NUM 8
/* object context array indices */ /* object context array indices */
#define OCON_ISID 0 /* initial SIDs */ #define OCON_ISID 0 /* initial SIDs */
#define OCON_FS 1 /* unlabeled file systems (deprecated) */ #define OCON_FS 1 /* unlabeled file systems (deprecated) */
#define OCON_PORT 2 /* TCP and UDP port numbers */ #define OCON_PORT 2 /* TCP and UDP port numbers */
#define OCON_NETIF 3 /* network interfaces */ #define OCON_NETIF 3 /* network interfaces */
#define OCON_NODE 4 /* nodes */ #define OCON_NODE 4 /* nodes */
#define OCON_FSUSE 5 /* fs_use */ #define OCON_FSUSE 5 /* fs_use */
#define OCON_NODE6 6 /* IPv6 nodes */ #define OCON_NODE6 6 /* IPv6 nodes */
#define OCON_IBPKEY 7 /* Infiniband PKeys */ #define OCON_IBPKEY 7 /* Infiniband PKeys */
#define OCON_IBENDPORT 8 /* Infiniband end ports */ #define OCON_IBENDPORT 8 /* Infiniband end ports */
#define OCON_NUM 9 #define OCON_NUM 9
/* The policy database */ /* The policy database */
struct policydb { struct policydb {
@ -243,15 +240,15 @@ struct policydb {
struct symtab symtab[SYM_NUM]; struct symtab symtab[SYM_NUM];
#define p_commons symtab[SYM_COMMONS] #define p_commons symtab[SYM_COMMONS]
#define p_classes symtab[SYM_CLASSES] #define p_classes symtab[SYM_CLASSES]
#define p_roles symtab[SYM_ROLES] #define p_roles symtab[SYM_ROLES]
#define p_types symtab[SYM_TYPES] #define p_types symtab[SYM_TYPES]
#define p_users symtab[SYM_USERS] #define p_users symtab[SYM_USERS]
#define p_bools symtab[SYM_BOOLS] #define p_bools symtab[SYM_BOOLS]
#define p_levels symtab[SYM_LEVELS] #define p_levels symtab[SYM_LEVELS]
#define p_cats symtab[SYM_CATS] #define p_cats symtab[SYM_CATS]
/* symbol names indexed by (value - 1) */ /* symbol names indexed by (value - 1) */
char **sym_val_to_name[SYM_NUM]; char **sym_val_to_name[SYM_NUM];
/* class, role, and user attributes indexed by (value - 1) */ /* class, role, and user attributes indexed by (value - 1) */
struct class_datum **class_val_to_struct; struct class_datum **class_val_to_struct;
@ -324,25 +321,25 @@ extern int policydb_role_isvalid(struct policydb *p, unsigned int role);
extern int policydb_read(struct policydb *p, void *fp); extern int policydb_read(struct policydb *p, void *fp);
extern int policydb_write(struct policydb *p, void *fp); extern int policydb_write(struct policydb *p, void *fp);
extern struct filename_trans_datum *policydb_filenametr_search( extern struct filename_trans_datum *
struct policydb *p, struct filename_trans_key *key); policydb_filenametr_search(struct policydb *p, struct filename_trans_key *key);
extern struct mls_range *policydb_rangetr_search( extern struct mls_range *policydb_rangetr_search(struct policydb *p,
struct policydb *p, struct range_trans *key); struct range_trans *key);
extern struct role_trans_datum *policydb_roletr_search( extern struct role_trans_datum *
struct policydb *p, struct role_trans_key *key); policydb_roletr_search(struct policydb *p, struct role_trans_key *key);
#define POLICYDB_CONFIG_MLS 1 #define POLICYDB_CONFIG_MLS 1
/* the config flags related to unknown classes/perms are bits 2 and 3 */ /* the config flags related to unknown classes/perms are bits 2 and 3 */
#define REJECT_UNKNOWN 0x00000002 #define REJECT_UNKNOWN 0x00000002
#define ALLOW_UNKNOWN 0x00000004 #define ALLOW_UNKNOWN 0x00000004
#define OBJECT_R "object_r" #define OBJECT_R "object_r"
#define OBJECT_R_VAL 1 #define OBJECT_R_VAL 1
#define POLICYDB_MAGIC SELINUX_MAGIC #define POLICYDB_MAGIC SELINUX_MAGIC
#define POLICYDB_STRING "SE Linux" #define POLICYDB_STRING "SE Linux"
struct policy_file { struct policy_file {
@ -366,7 +363,8 @@ static inline int next_entry(void *buf, struct policy_file *fp, size_t bytes)
return 0; return 0;
} }
static inline int put_entry(const void *buf, size_t bytes, size_t num, struct policy_file *fp) static inline int put_entry(const void *buf, size_t bytes, size_t num,
struct policy_file *fp)
{ {
size_t len; size_t len;
@ -382,7 +380,8 @@ static inline int put_entry(const void *buf, size_t bytes, size_t num, struct po
return 0; return 0;
} }
static inline char *sym_name(struct policydb *p, unsigned int sym_num, unsigned int element_nr) static inline char *sym_name(struct policydb *p, unsigned int sym_num,
unsigned int element_nr)
{ {
return p->sym_val_to_name[sym_num][element_nr]; return p->sym_val_to_name[sym_num][element_nr];
} }
@ -390,5 +389,4 @@ static inline char *sym_name(struct policydb *p, unsigned int sym_num, unsigned
extern u16 string_to_security_class(struct policydb *p, const char *name); extern u16 string_to_security_class(struct policydb *p, const char *name);
extern u32 string_to_av_perm(struct policydb *p, u16 tclass, const char *name); extern u32 string_to_av_perm(struct policydb *p, u16 tclass, const char *name);
#endif /* _SS_POLICYDB_H_ */ #endif /* _SS_POLICYDB_H_ */