Venkat Yekkirala | 7420ed2 | 2006-08-04 23:17:57 -0700 | [diff] [blame] | 1 | /* |
| 2 | * SELinux interface to the NetLabel subsystem |
| 3 | * |
Paul Moore | 82c21bf | 2011-08-01 11:10:33 +0000 | [diff] [blame] | 4 | * Author: Paul Moore <paul@paul-moore.com> |
Venkat Yekkirala | 7420ed2 | 2006-08-04 23:17:57 -0700 | [diff] [blame] | 5 | * |
| 6 | */ |
| 7 | |
| 8 | /* |
| 9 | * (c) Copyright Hewlett-Packard Development Company, L.P., 2006 |
| 10 | * |
| 11 | * This program is free software; you can redistribute it and/or modify |
| 12 | * it under the terms of the GNU General Public License as published by |
| 13 | * the Free Software Foundation; either version 2 of the License, or |
| 14 | * (at your option) any later version. |
| 15 | * |
| 16 | * This program is distributed in the hope that it will be useful, |
| 17 | * but WITHOUT ANY WARRANTY; without even the implied warranty of |
| 18 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See |
| 19 | * the GNU General Public License for more details. |
| 20 | * |
| 21 | * You should have received a copy of the GNU General Public License |
| 22 | * along with this program; if not, write to the Free Software |
| 23 | * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA |
| 24 | * |
| 25 | */ |
| 26 | |
| 27 | #ifndef _SELINUX_NETLABEL_H_ |
| 28 | #define _SELINUX_NETLABEL_H_ |
| 29 | |
Paul Moore | 7a0e1d6 | 2006-08-29 17:56:04 -0700 | [diff] [blame] | 30 | #include <linux/types.h> |
| 31 | #include <linux/fs.h> |
| 32 | #include <linux/net.h> |
| 33 | #include <linux/skbuff.h> |
| 34 | #include <net/sock.h> |
Paul Moore | 389fb800 | 2009-03-27 17:10:34 -0400 | [diff] [blame] | 35 | #include <net/request_sock.h> |
Paul Moore | 7a0e1d6 | 2006-08-29 17:56:04 -0700 | [diff] [blame] | 36 | |
| 37 | #include "avc.h" |
| 38 | #include "objsec.h" |
| 39 | |
Venkat Yekkirala | 7420ed2 | 2006-08-04 23:17:57 -0700 | [diff] [blame] | 40 | #ifdef CONFIG_NETLABEL |
| 41 | void selinux_netlbl_cache_invalidate(void); |
Paul Moore | 5778eab | 2007-02-28 15:14:22 -0500 | [diff] [blame] | 42 | |
Huw Davies | a04e71f | 2016-06-27 15:06:16 -0400 | [diff] [blame] | 43 | void selinux_netlbl_err(struct sk_buff *skb, u16 family, int error, |
| 44 | int gateway); |
Paul Moore | dfaebe9 | 2008-10-10 10:16:31 -0400 | [diff] [blame] | 45 | |
Eric Paris | dd3e783 | 2010-04-07 15:08:46 -0400 | [diff] [blame] | 46 | void selinux_netlbl_sk_security_free(struct sk_security_struct *sksec); |
| 47 | void selinux_netlbl_sk_security_reset(struct sk_security_struct *sksec); |
Paul Moore | 5778eab | 2007-02-28 15:14:22 -0500 | [diff] [blame] | 48 | |
Paul Moore | 75e2291 | 2008-01-29 08:38:04 -0500 | [diff] [blame] | 49 | int selinux_netlbl_skbuff_getsid(struct sk_buff *skb, |
| 50 | u16 family, |
Paul Moore | 220deb9 | 2008-01-29 08:38:23 -0500 | [diff] [blame] | 51 | u32 *type, |
Paul Moore | 75e2291 | 2008-01-29 08:38:04 -0500 | [diff] [blame] | 52 | u32 *sid); |
Paul Moore | 948bf85 | 2008-10-10 10:16:32 -0400 | [diff] [blame] | 53 | int selinux_netlbl_skbuff_setsid(struct sk_buff *skb, |
| 54 | u16 family, |
| 55 | u32 sid); |
Paul Moore | 5778eab | 2007-02-28 15:14:22 -0500 | [diff] [blame] | 56 | |
Paul Moore | 389fb800 | 2009-03-27 17:10:34 -0400 | [diff] [blame] | 57 | int selinux_netlbl_inet_conn_request(struct request_sock *req, u16 family); |
| 58 | void selinux_netlbl_inet_csk_clone(struct sock *sk, u16 family); |
| 59 | int selinux_netlbl_socket_post_create(struct sock *sk, u16 family); |
Paul Moore | 5778eab | 2007-02-28 15:14:22 -0500 | [diff] [blame] | 60 | int selinux_netlbl_sock_rcv_skb(struct sk_security_struct *sksec, |
| 61 | struct sk_buff *skb, |
Paul Moore | 75e2291 | 2008-01-29 08:38:04 -0500 | [diff] [blame] | 62 | u16 family, |
Thomas Liu | 2bf4969 | 2009-07-14 12:14:09 -0400 | [diff] [blame] | 63 | struct common_audit_data *ad); |
Paul Moore | f8687af | 2006-10-30 15:22:15 -0800 | [diff] [blame] | 64 | int selinux_netlbl_socket_setsockopt(struct socket *sock, |
| 65 | int level, |
| 66 | int optname); |
Paul Moore | 014ab19 | 2008-10-10 10:16:33 -0400 | [diff] [blame] | 67 | int selinux_netlbl_socket_connect(struct sock *sk, struct sockaddr *addr); |
| 68 | |
Venkat Yekkirala | 7420ed2 | 2006-08-04 23:17:57 -0700 | [diff] [blame] | 69 | #else |
| 70 | static inline void selinux_netlbl_cache_invalidate(void) |
| 71 | { |
| 72 | return; |
| 73 | } |
| 74 | |
Paul Moore | dfaebe9 | 2008-10-10 10:16:31 -0400 | [diff] [blame] | 75 | static inline void selinux_netlbl_err(struct sk_buff *skb, |
Huw Davies | a04e71f | 2016-06-27 15:06:16 -0400 | [diff] [blame] | 76 | u16 family, |
Paul Moore | dfaebe9 | 2008-10-10 10:16:31 -0400 | [diff] [blame] | 77 | int error, |
| 78 | int gateway) |
| 79 | { |
| 80 | return; |
| 81 | } |
| 82 | |
Paul Moore | 6c5b3fc | 2008-10-10 10:16:33 -0400 | [diff] [blame] | 83 | static inline void selinux_netlbl_sk_security_free( |
Eric Paris | dd3e783 | 2010-04-07 15:08:46 -0400 | [diff] [blame] | 84 | struct sk_security_struct *sksec) |
Paul Moore | 6c5b3fc | 2008-10-10 10:16:33 -0400 | [diff] [blame] | 85 | { |
| 86 | return; |
| 87 | } |
| 88 | |
Paul Moore | 5778eab | 2007-02-28 15:14:22 -0500 | [diff] [blame] | 89 | static inline void selinux_netlbl_sk_security_reset( |
Eric Paris | dd3e783 | 2010-04-07 15:08:46 -0400 | [diff] [blame] | 90 | struct sk_security_struct *sksec) |
Paul Moore | 5778eab | 2007-02-28 15:14:22 -0500 | [diff] [blame] | 91 | { |
| 92 | return; |
| 93 | } |
Paul Moore | 5778eab | 2007-02-28 15:14:22 -0500 | [diff] [blame] | 94 | |
Paul Moore | 3de4bab | 2006-11-17 17:38:54 -0500 | [diff] [blame] | 95 | static inline int selinux_netlbl_skbuff_getsid(struct sk_buff *skb, |
Paul Moore | 75e2291 | 2008-01-29 08:38:04 -0500 | [diff] [blame] | 96 | u16 family, |
Paul Moore | 220deb9 | 2008-01-29 08:38:23 -0500 | [diff] [blame] | 97 | u32 *type, |
Paul Moore | 3de4bab | 2006-11-17 17:38:54 -0500 | [diff] [blame] | 98 | u32 *sid) |
| 99 | { |
Paul Moore | 220deb9 | 2008-01-29 08:38:23 -0500 | [diff] [blame] | 100 | *type = NETLBL_NLTYPE_NONE; |
Paul Moore | 3de4bab | 2006-11-17 17:38:54 -0500 | [diff] [blame] | 101 | *sid = SECSID_NULL; |
| 102 | return 0; |
| 103 | } |
Paul Moore | 948bf85 | 2008-10-10 10:16:32 -0400 | [diff] [blame] | 104 | static inline int selinux_netlbl_skbuff_setsid(struct sk_buff *skb, |
| 105 | u16 family, |
| 106 | u32 sid) |
| 107 | { |
| 108 | return 0; |
| 109 | } |
Paul Moore | 3de4bab | 2006-11-17 17:38:54 -0500 | [diff] [blame] | 110 | |
Paul Moore | 014ab19 | 2008-10-10 10:16:33 -0400 | [diff] [blame] | 111 | static inline int selinux_netlbl_conn_setsid(struct sock *sk, |
| 112 | struct sockaddr *addr) |
| 113 | { |
| 114 | return 0; |
| 115 | } |
| 116 | |
Paul Moore | 389fb800 | 2009-03-27 17:10:34 -0400 | [diff] [blame] | 117 | static inline int selinux_netlbl_inet_conn_request(struct request_sock *req, |
| 118 | u16 family) |
Paul Moore | 5778eab | 2007-02-28 15:14:22 -0500 | [diff] [blame] | 119 | { |
| 120 | return 0; |
| 121 | } |
Paul Moore | 389fb800 | 2009-03-27 17:10:34 -0400 | [diff] [blame] | 122 | static inline void selinux_netlbl_inet_csk_clone(struct sock *sk, u16 family) |
| 123 | { |
| 124 | return; |
| 125 | } |
| 126 | static inline int selinux_netlbl_socket_post_create(struct sock *sk, |
| 127 | u16 family) |
Paul Moore | 5778eab | 2007-02-28 15:14:22 -0500 | [diff] [blame] | 128 | { |
| 129 | return 0; |
| 130 | } |
Venkat Yekkirala | 7420ed2 | 2006-08-04 23:17:57 -0700 | [diff] [blame] | 131 | static inline int selinux_netlbl_sock_rcv_skb(struct sk_security_struct *sksec, |
| 132 | struct sk_buff *skb, |
Paul Moore | 75e2291 | 2008-01-29 08:38:04 -0500 | [diff] [blame] | 133 | u16 family, |
Thomas Liu | 2bf4969 | 2009-07-14 12:14:09 -0400 | [diff] [blame] | 134 | struct common_audit_data *ad) |
Venkat Yekkirala | 7420ed2 | 2006-08-04 23:17:57 -0700 | [diff] [blame] | 135 | { |
| 136 | return 0; |
| 137 | } |
Paul Moore | f8687af | 2006-10-30 15:22:15 -0800 | [diff] [blame] | 138 | static inline int selinux_netlbl_socket_setsockopt(struct socket *sock, |
| 139 | int level, |
| 140 | int optname) |
| 141 | { |
| 142 | return 0; |
| 143 | } |
Paul Moore | 014ab19 | 2008-10-10 10:16:33 -0400 | [diff] [blame] | 144 | static inline int selinux_netlbl_socket_connect(struct sock *sk, |
| 145 | struct sockaddr *addr) |
| 146 | { |
| 147 | return 0; |
| 148 | } |
Venkat Yekkirala | 7420ed2 | 2006-08-04 23:17:57 -0700 | [diff] [blame] | 149 | #endif /* CONFIG_NETLABEL */ |
| 150 | |
| 151 | #endif |