blob: 1276715aaa8bf3f0aac5973022f38e98388b0605 [file] [log] [blame]
Linus Torvalds1da177e2005-04-16 15:20:36 -07001/*
2 * Multi-level security (MLS) policy operations.
3 *
4 * Author : Stephen Smalley, <sds@epoch.ncsc.mil>
5 */
6/*
7 * Updated: Trusted Computer Solutions, Inc. <dgoeddel@trustedcs.com>
8 *
9 * Support for enhanced MLS infrastructure.
10 *
Darrel Goeddel376bd9c2006-02-24 15:44:05 -060011 * Copyright (C) 2004-2006 Trusted Computer Solutions, Inc.
Linus Torvalds1da177e2005-04-16 15:20:36 -070012 */
Venkat Yekkirala7420ed22006-08-04 23:17:57 -070013/*
14 * Updated: Hewlett-Packard <paul.moore@hp.com>
15 *
Eric Parisd497fc82008-04-22 17:46:15 -040016 * Added support to import/export the MLS label from NetLabel
Venkat Yekkirala7420ed22006-08-04 23:17:57 -070017 *
18 * (c) Copyright Hewlett-Packard Development Company, L.P., 2006
19 */
Linus Torvalds1da177e2005-04-16 15:20:36 -070020
21#ifndef _SS_MLS_H_
22#define _SS_MLS_H_
23
24#include "context.h"
25#include "policydb.h"
26
27int mls_compute_context_len(struct context *context);
28void mls_sid_to_context(struct context *context, char **scontext);
29int mls_context_isvalid(struct policydb *p, struct context *c);
Stephen Smalley45e54212007-11-07 10:08:00 -050030int mls_range_isvalid(struct policydb *p, struct mls_range *r);
31int mls_level_isvalid(struct policydb *p, struct mls_level *l);
Linus Torvalds1da177e2005-04-16 15:20:36 -070032
Stephen Smalley12b29f32008-05-07 13:03:20 -040033int mls_context_to_sid(struct policydb *p,
34 char oldc,
Eric Parisd497fc82008-04-22 17:46:15 -040035 char **scontext,
James Morrisf5c1d5b2005-07-28 01:07:37 -070036 struct context *context,
37 struct sidtab *s,
38 u32 def_sid);
Linus Torvalds1da177e2005-04-16 15:20:36 -070039
Darrel Goeddel376bd9c2006-02-24 15:44:05 -060040int mls_from_string(char *str, struct context *context, gfp_t gfp_mask);
41
Linus Torvalds1da177e2005-04-16 15:20:36 -070042int mls_convert_context(struct policydb *oldp,
43 struct policydb *newp,
44 struct context *context);
45
46int mls_compute_sid(struct context *scontext,
47 struct context *tcontext,
48 u16 tclass,
49 u32 specified,
50 struct context *newcontext);
51
52int mls_setup_user_range(struct context *fromcon, struct user_datum *user,
Eric Parisd497fc82008-04-22 17:46:15 -040053 struct context *usercon);
Linus Torvalds1da177e2005-04-16 15:20:36 -070054
Paul Moore02752762006-11-29 13:18:18 -050055#ifdef CONFIG_NETLABEL
56void mls_export_netlbl_lvl(struct context *context,
57 struct netlbl_lsm_secattr *secattr);
58void mls_import_netlbl_lvl(struct context *context,
59 struct netlbl_lsm_secattr *secattr);
60int mls_export_netlbl_cat(struct context *context,
61 struct netlbl_lsm_secattr *secattr);
62int mls_import_netlbl_cat(struct context *context,
63 struct netlbl_lsm_secattr *secattr);
64#else
65static inline void mls_export_netlbl_lvl(struct context *context,
66 struct netlbl_lsm_secattr *secattr)
67{
68 return;
69}
70static inline void mls_import_netlbl_lvl(struct context *context,
71 struct netlbl_lsm_secattr *secattr)
72{
73 return;
74}
75static inline int mls_export_netlbl_cat(struct context *context,
76 struct netlbl_lsm_secattr *secattr)
77{
78 return -ENOMEM;
79}
80static inline int mls_import_netlbl_cat(struct context *context,
81 struct netlbl_lsm_secattr *secattr)
82{
83 return -ENOMEM;
84}
85#endif
Venkat Yekkirala7420ed22006-08-04 23:17:57 -070086
Linus Torvalds1da177e2005-04-16 15:20:36 -070087#endif /* _SS_MLS_H */
88