Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1 | /* |
| 2 | * An access vector table (avtab) is a hash table |
| 3 | * of access vectors and transition types indexed |
| 4 | * by a type pair and a class. An access vector |
| 5 | * table is used to represent the type enforcement |
| 6 | * tables. |
| 7 | * |
| 8 | * Author : Stephen Smalley, <sds@epoch.ncsc.mil> |
| 9 | */ |
| 10 | |
| 11 | /* Updated: Frank Mayer <mayerf@tresys.com> and Karl MacMillan <kmacmillan@tresys.com> |
| 12 | * |
| 13 | * Added conditional policy language extensions |
| 14 | * |
| 15 | * Copyright (C) 2003 Tresys Technology, LLC |
| 16 | * This program is free software; you can redistribute it and/or modify |
Eric Paris | 652bb9b | 2011-02-01 11:05:40 -0500 | [diff] [blame] | 17 | * it under the terms of the GNU General Public License as published by |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 18 | * the Free Software Foundation, version 2. |
Yuichi Nakamura | 3232c11 | 2007-08-24 11:55:11 +0900 | [diff] [blame] | 19 | * |
| 20 | * Updated: Yuichi Nakamura <ynakam@hitachisoft.jp> |
| 21 | * Tuned number of hash slots for avtab to reduce memory usage |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 22 | */ |
| 23 | #ifndef _SS_AVTAB_H_ |
| 24 | #define _SS_AVTAB_H_ |
| 25 | |
Stephen Smalley | ba39db6 | 2015-03-24 16:54:16 -0400 | [diff] [blame] | 26 | #include <linux/flex_array.h> |
| 27 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 28 | struct avtab_key { |
Stephen Smalley | 782ebb9 | 2005-09-03 15:55:16 -0700 | [diff] [blame] | 29 | u16 source_type; /* source type */ |
| 30 | u16 target_type; /* target type */ |
| 31 | u16 target_class; /* target object class */ |
Eric Paris | 652bb9b | 2011-02-01 11:05:40 -0500 | [diff] [blame] | 32 | #define AVTAB_ALLOWED 0x0001 |
| 33 | #define AVTAB_AUDITALLOW 0x0002 |
| 34 | #define AVTAB_AUDITDENY 0x0004 |
| 35 | #define AVTAB_AV (AVTAB_ALLOWED | AVTAB_AUDITALLOW | AVTAB_AUDITDENY) |
| 36 | #define AVTAB_TRANSITION 0x0010 |
| 37 | #define AVTAB_MEMBER 0x0020 |
| 38 | #define AVTAB_CHANGE 0x0040 |
| 39 | #define AVTAB_TYPE (AVTAB_TRANSITION | AVTAB_MEMBER | AVTAB_CHANGE) |
| 40 | #define AVTAB_ENABLED_OLD 0x80000000 /* reserved for used in cond_avtab */ |
| 41 | #define AVTAB_ENABLED 0x8000 /* reserved for used in cond_avtab */ |
Stephen Smalley | 782ebb9 | 2005-09-03 15:55:16 -0700 | [diff] [blame] | 42 | u16 specified; /* what field is specified */ |
| 43 | }; |
| 44 | |
| 45 | struct avtab_datum { |
| 46 | u32 data; /* access vector or type value */ |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 47 | }; |
| 48 | |
| 49 | struct avtab_node { |
| 50 | struct avtab_key key; |
| 51 | struct avtab_datum datum; |
| 52 | struct avtab_node *next; |
| 53 | }; |
| 54 | |
| 55 | struct avtab { |
Stephen Smalley | ba39db6 | 2015-03-24 16:54:16 -0400 | [diff] [blame] | 56 | struct flex_array *htable; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 57 | u32 nel; /* number of elements */ |
Yuichi Nakamura | 3232c11 | 2007-08-24 11:55:11 +0900 | [diff] [blame] | 58 | u32 nslot; /* number of hash slots */ |
John Brooks | 33ebc193 | 2015-03-24 16:54:17 -0400 | [diff] [blame] | 59 | u32 mask; /* mask to compute hash func */ |
Yuichi Nakamura | 3232c11 | 2007-08-24 11:55:11 +0900 | [diff] [blame] | 60 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 61 | }; |
| 62 | |
| 63 | int avtab_init(struct avtab *); |
Yuichi Nakamura | 3232c11 | 2007-08-24 11:55:11 +0900 | [diff] [blame] | 64 | int avtab_alloc(struct avtab *, u32); |
Stephen Smalley | 782ebb9 | 2005-09-03 15:55:16 -0700 | [diff] [blame] | 65 | struct avtab_datum *avtab_search(struct avtab *h, struct avtab_key *k); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 66 | void avtab_destroy(struct avtab *h); |
| 67 | void avtab_hash_eval(struct avtab *h, char *tag); |
| 68 | |
Stephen Smalley | 45e5421 | 2007-11-07 10:08:00 -0500 | [diff] [blame] | 69 | struct policydb; |
| 70 | int avtab_read_item(struct avtab *a, void *fp, struct policydb *pol, |
Stephen Smalley | 782ebb9 | 2005-09-03 15:55:16 -0700 | [diff] [blame] | 71 | int (*insert)(struct avtab *a, struct avtab_key *k, |
| 72 | struct avtab_datum *d, void *p), |
| 73 | void *p); |
| 74 | |
Stephen Smalley | 45e5421 | 2007-11-07 10:08:00 -0500 | [diff] [blame] | 75 | int avtab_read(struct avtab *a, void *fp, struct policydb *pol); |
Eric Paris | cee74f4 | 2010-10-13 17:50:25 -0400 | [diff] [blame] | 76 | int avtab_write_item(struct policydb *p, struct avtab_node *cur, void *fp); |
| 77 | int avtab_write(struct policydb *p, struct avtab *a, void *fp); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 78 | |
| 79 | struct avtab_node *avtab_insert_nonunique(struct avtab *h, struct avtab_key *key, |
| 80 | struct avtab_datum *datum); |
| 81 | |
Stephen Smalley | 782ebb9 | 2005-09-03 15:55:16 -0700 | [diff] [blame] | 82 | struct avtab_node *avtab_search_node(struct avtab *h, struct avtab_key *key); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 83 | |
| 84 | struct avtab_node *avtab_search_node_next(struct avtab_node *node, int specified); |
| 85 | |
| 86 | void avtab_cache_init(void); |
| 87 | void avtab_cache_destroy(void); |
| 88 | |
Stephen Smalley | cf7b6c0 | 2015-03-24 16:54:18 -0400 | [diff] [blame] | 89 | #define MAX_AVTAB_HASH_BITS 16 |
Yuichi Nakamura | 3232c11 | 2007-08-24 11:55:11 +0900 | [diff] [blame] | 90 | #define MAX_AVTAB_HASH_BUCKETS (1 << MAX_AVTAB_HASH_BITS) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 91 | |
| 92 | #endif /* _SS_AVTAB_H_ */ |
| 93 | |