netlabel.h 3.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151
  1. /*
  2. * SELinux interface to the NetLabel subsystem
  3. *
  4. * Author: Paul Moore <paul@paul-moore.com>
  5. *
  6. */
  7. /*
  8. * (c) Copyright Hewlett-Packard Development Company, L.P., 2006
  9. *
  10. * This program is free software; you can redistribute it and/or modify
  11. * it under the terms of the GNU General Public License as published by
  12. * the Free Software Foundation; either version 2 of the License, or
  13. * (at your option) any later version.
  14. *
  15. * This program is distributed in the hope that it will be useful,
  16. * but WITHOUT ANY WARRANTY; without even the implied warranty of
  17. * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See
  18. * the GNU General Public License for more details.
  19. *
  20. * You should have received a copy of the GNU General Public License
  21. * along with this program; if not, write to the Free Software
  22. * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
  23. *
  24. */
  25. #ifndef _SELINUX_NETLABEL_H_
  26. #define _SELINUX_NETLABEL_H_
  27. #include <linux/types.h>
  28. #include <linux/fs.h>
  29. #include <linux/net.h>
  30. #include <linux/skbuff.h>
  31. #include <net/sock.h>
  32. #include <net/request_sock.h>
  33. #include "avc.h"
  34. #include "objsec.h"
  35. #ifdef CONFIG_NETLABEL
  36. void selinux_netlbl_cache_invalidate(void);
  37. void selinux_netlbl_err(struct sk_buff *skb, u16 family, int error,
  38. int gateway);
  39. void selinux_netlbl_sk_security_free(struct sk_security_struct *sksec);
  40. void selinux_netlbl_sk_security_reset(struct sk_security_struct *sksec);
  41. int selinux_netlbl_skbuff_getsid(struct sk_buff *skb,
  42. u16 family,
  43. u32 *type,
  44. u32 *sid);
  45. int selinux_netlbl_skbuff_setsid(struct sk_buff *skb,
  46. u16 family,
  47. u32 sid);
  48. int selinux_netlbl_inet_conn_request(struct request_sock *req, u16 family);
  49. void selinux_netlbl_inet_csk_clone(struct sock *sk, u16 family);
  50. int selinux_netlbl_socket_post_create(struct sock *sk, u16 family);
  51. int selinux_netlbl_sock_rcv_skb(struct sk_security_struct *sksec,
  52. struct sk_buff *skb,
  53. u16 family,
  54. struct common_audit_data *ad);
  55. int selinux_netlbl_socket_setsockopt(struct socket *sock,
  56. int level,
  57. int optname);
  58. int selinux_netlbl_socket_connect(struct sock *sk, struct sockaddr *addr);
  59. #else
  60. static inline void selinux_netlbl_cache_invalidate(void)
  61. {
  62. return;
  63. }
  64. static inline void selinux_netlbl_err(struct sk_buff *skb,
  65. u16 family,
  66. int error,
  67. int gateway)
  68. {
  69. return;
  70. }
  71. static inline void selinux_netlbl_sk_security_free(
  72. struct sk_security_struct *sksec)
  73. {
  74. return;
  75. }
  76. static inline void selinux_netlbl_sk_security_reset(
  77. struct sk_security_struct *sksec)
  78. {
  79. return;
  80. }
  81. static inline int selinux_netlbl_skbuff_getsid(struct sk_buff *skb,
  82. u16 family,
  83. u32 *type,
  84. u32 *sid)
  85. {
  86. *type = NETLBL_NLTYPE_NONE;
  87. *sid = SECSID_NULL;
  88. return 0;
  89. }
  90. static inline int selinux_netlbl_skbuff_setsid(struct sk_buff *skb,
  91. u16 family,
  92. u32 sid)
  93. {
  94. return 0;
  95. }
  96. static inline int selinux_netlbl_conn_setsid(struct sock *sk,
  97. struct sockaddr *addr)
  98. {
  99. return 0;
  100. }
  101. static inline int selinux_netlbl_inet_conn_request(struct request_sock *req,
  102. u16 family)
  103. {
  104. return 0;
  105. }
  106. static inline void selinux_netlbl_inet_csk_clone(struct sock *sk, u16 family)
  107. {
  108. return;
  109. }
  110. static inline int selinux_netlbl_socket_post_create(struct sock *sk,
  111. u16 family)
  112. {
  113. return 0;
  114. }
  115. static inline int selinux_netlbl_sock_rcv_skb(struct sk_security_struct *sksec,
  116. struct sk_buff *skb,
  117. u16 family,
  118. struct common_audit_data *ad)
  119. {
  120. return 0;
  121. }
  122. static inline int selinux_netlbl_socket_setsockopt(struct socket *sock,
  123. int level,
  124. int optname)
  125. {
  126. return 0;
  127. }
  128. static inline int selinux_netlbl_socket_connect(struct sock *sk,
  129. struct sockaddr *addr)
  130. {
  131. return 0;
  132. }
  133. #endif /* CONFIG_NETLABEL */
  134. #endif