3e7773f8da
As part of on ongoing effort to perform more automated testing and provide more tools for individual developers to validate their patches before submitting, we are trying to make our code "clang-format clean". My hope is that once we have fixed all of our style "quirks", developers will be able to run clang-format on their patches to help avoid silly formatting problems and ensure their changes fit in well with the rest of the SELinux kernel code. Signed-off-by: Paul Moore <paul@paul-moore.com>
138 lines
3.4 KiB
C
138 lines
3.4 KiB
C
/* SPDX-License-Identifier: GPL-2.0-or-later */
|
|
/*
|
|
* SELinux interface to the NetLabel subsystem
|
|
*
|
|
* Author: Paul Moore <paul@paul-moore.com>
|
|
*/
|
|
|
|
/*
|
|
* (c) Copyright Hewlett-Packard Development Company, L.P., 2006
|
|
*/
|
|
|
|
#ifndef _SELINUX_NETLABEL_H_
|
|
#define _SELINUX_NETLABEL_H_
|
|
|
|
#include <linux/types.h>
|
|
#include <linux/fs.h>
|
|
#include <linux/net.h>
|
|
#include <linux/skbuff.h>
|
|
#include <net/sock.h>
|
|
#include <net/request_sock.h>
|
|
#include <net/sctp/structs.h>
|
|
|
|
#include "avc.h"
|
|
#include "objsec.h"
|
|
|
|
#ifdef CONFIG_NETLABEL
|
|
void selinux_netlbl_cache_invalidate(void);
|
|
|
|
void selinux_netlbl_err(struct sk_buff *skb, u16 family, int error,
|
|
int gateway);
|
|
|
|
void selinux_netlbl_sk_security_free(struct sk_security_struct *sksec);
|
|
void selinux_netlbl_sk_security_reset(struct sk_security_struct *sksec);
|
|
|
|
int selinux_netlbl_skbuff_getsid(struct sk_buff *skb, u16 family, u32 *type,
|
|
u32 *sid);
|
|
int selinux_netlbl_skbuff_setsid(struct sk_buff *skb, u16 family, u32 sid);
|
|
int selinux_netlbl_sctp_assoc_request(struct sctp_association *asoc,
|
|
struct sk_buff *skb);
|
|
int selinux_netlbl_inet_conn_request(struct request_sock *req, u16 family);
|
|
void selinux_netlbl_inet_csk_clone(struct sock *sk, u16 family);
|
|
void selinux_netlbl_sctp_sk_clone(struct sock *sk, struct sock *newsk);
|
|
int selinux_netlbl_socket_post_create(struct sock *sk, u16 family);
|
|
int selinux_netlbl_sock_rcv_skb(struct sk_security_struct *sksec,
|
|
struct sk_buff *skb, u16 family,
|
|
struct common_audit_data *ad);
|
|
int selinux_netlbl_socket_setsockopt(struct socket *sock, int level,
|
|
int optname);
|
|
int selinux_netlbl_socket_connect(struct sock *sk, struct sockaddr *addr);
|
|
int selinux_netlbl_socket_connect_locked(struct sock *sk,
|
|
struct sockaddr *addr);
|
|
|
|
#else
|
|
static inline void selinux_netlbl_cache_invalidate(void)
|
|
{
|
|
return;
|
|
}
|
|
|
|
static inline void selinux_netlbl_err(struct sk_buff *skb, u16 family,
|
|
int error, int gateway)
|
|
{
|
|
return;
|
|
}
|
|
|
|
static inline void
|
|
selinux_netlbl_sk_security_free(struct sk_security_struct *sksec)
|
|
{
|
|
return;
|
|
}
|
|
|
|
static inline void
|
|
selinux_netlbl_sk_security_reset(struct sk_security_struct *sksec)
|
|
{
|
|
return;
|
|
}
|
|
|
|
static inline int selinux_netlbl_skbuff_getsid(struct sk_buff *skb, u16 family,
|
|
u32 *type, u32 *sid)
|
|
{
|
|
*type = NETLBL_NLTYPE_NONE;
|
|
*sid = SECSID_NULL;
|
|
return 0;
|
|
}
|
|
static inline int selinux_netlbl_skbuff_setsid(struct sk_buff *skb, u16 family,
|
|
u32 sid)
|
|
{
|
|
return 0;
|
|
}
|
|
|
|
static inline int
|
|
selinux_netlbl_sctp_assoc_request(struct sctp_association *asoc,
|
|
struct sk_buff *skb)
|
|
{
|
|
return 0;
|
|
}
|
|
static inline int selinux_netlbl_inet_conn_request(struct request_sock *req,
|
|
u16 family)
|
|
{
|
|
return 0;
|
|
}
|
|
static inline void selinux_netlbl_inet_csk_clone(struct sock *sk, u16 family)
|
|
{
|
|
return;
|
|
}
|
|
static inline void selinux_netlbl_sctp_sk_clone(struct sock *sk,
|
|
struct sock *newsk)
|
|
{
|
|
return;
|
|
}
|
|
static inline int selinux_netlbl_socket_post_create(struct sock *sk, u16 family)
|
|
{
|
|
return 0;
|
|
}
|
|
static inline int selinux_netlbl_sock_rcv_skb(struct sk_security_struct *sksec,
|
|
struct sk_buff *skb, u16 family,
|
|
struct common_audit_data *ad)
|
|
{
|
|
return 0;
|
|
}
|
|
static inline int selinux_netlbl_socket_setsockopt(struct socket *sock,
|
|
int level, int optname)
|
|
{
|
|
return 0;
|
|
}
|
|
static inline int selinux_netlbl_socket_connect(struct sock *sk,
|
|
struct sockaddr *addr)
|
|
{
|
|
return 0;
|
|
}
|
|
static inline int selinux_netlbl_socket_connect_locked(struct sock *sk,
|
|
struct sockaddr *addr)
|
|
{
|
|
return 0;
|
|
}
|
|
#endif /* CONFIG_NETLABEL */
|
|
|
|
#endif
|