sewardj | 35130ac | 2015-09-01 13:32:21 +0000 | [diff] [blame] | 1 | /* |
| 2 | This file is part of Valgrind, a dynamic binary instrumentation |
| 3 | framework. |
| 4 | |
Elliott Hughes | ed39800 | 2017-06-21 14:41:24 -0700 | [diff] [blame^] | 5 | Copyright (C) 2012-2017 Citrix |
sewardj | 35130ac | 2015-09-01 13:32:21 +0000 | [diff] [blame] | 6 | |
| 7 | This program is free software; you can redistribute it and/or |
| 8 | modify it under the terms of the GNU General Public License as |
| 9 | published by the Free Software Foundation; either version 2 of the |
| 10 | License, or (at your option) any later version. |
| 11 | |
| 12 | This program is distributed in the hope that it will be useful, but |
| 13 | WITHOUT ANY WARRANTY; without even the implied warranty of |
| 14 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU |
| 15 | General Public License for more details. |
| 16 | |
| 17 | You should have received a copy of the GNU General Public License |
| 18 | along with this program; if not, write to the Free Software |
| 19 | Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA |
| 20 | 02111-1307, USA. |
| 21 | |
| 22 | The GNU General Public License is contained in the file COPYING. |
| 23 | */ |
| 24 | |
| 25 | /* Contributed by Andrew Cooper <andrew.cooper3@citrix.com> |
| 26 | and Ian Campbell <ian.campbell@citrix.com> */ |
| 27 | |
bart | 4b1ad96 | 2015-06-28 16:55:45 +0000 | [diff] [blame] | 28 | #ifndef __VKI_XEN_XSM_H |
| 29 | #define __VKI_XEN_XSM_H |
| 30 | |
| 31 | #define VKI_XEN_FLASK_INTERFACE_VERSION 1 |
| 32 | |
| 33 | struct vki_xen_flask_sid_context { |
| 34 | /* IN/OUT: sid to convert to/from string */ |
| 35 | vki_uint32_t sid; |
| 36 | /* IN: size of the context buffer |
| 37 | * OUT: actual size of the output context string |
| 38 | */ |
| 39 | vki_uint32_t size; |
| 40 | VKI_XEN_GUEST_HANDLE(char) context; |
| 41 | }; |
| 42 | |
| 43 | struct vki_xen_flask_op { |
| 44 | vki_uint32_t cmd; |
| 45 | #define VKI_FLASK_LOAD 1 |
| 46 | #define VKI_FLASK_GETENFORCE 2 |
| 47 | #define VKI_FLASK_SETENFORCE 3 |
| 48 | #define VKI_FLASK_CONTEXT_TO_SID 4 |
| 49 | #define VKI_FLASK_SID_TO_CONTEXT 5 |
| 50 | #define VKI_FLASK_ACCESS 6 |
| 51 | #define VKI_FLASK_CREATE 7 |
| 52 | #define VKI_FLASK_RELABEL 8 |
| 53 | #define VKI_FLASK_USER 9 |
| 54 | #define VKI_FLASK_POLICYVERS 10 |
| 55 | #define VKI_FLASK_GETBOOL 11 |
| 56 | #define VKI_FLASK_SETBOOL 12 |
| 57 | #define VKI_FLASK_COMMITBOOLS 13 |
| 58 | #define VKI_FLASK_MLS 14 |
| 59 | #define VKI_FLASK_DISABLE 15 |
| 60 | #define VKI_FLASK_GETAVC_THRESHOLD 16 |
| 61 | #define VKI_FLASK_SETAVC_THRESHOLD 17 |
| 62 | #define VKI_FLASK_AVC_HASHSTATS 18 |
| 63 | #define VKI_FLASK_AVC_CACHESTATS 19 |
| 64 | #define VKI_FLASK_MEMBER 20 |
| 65 | #define VKI_FLASK_ADD_OCONTEXT 21 |
| 66 | #define VKI_FLASK_DEL_OCONTEXT 22 |
| 67 | #define VKI_FLASK_GET_PEER_SID 23 |
| 68 | #define VKI_FLASK_RELABEL_DOMAIN 24 |
| 69 | vki_uint32_t interface_version; /* VKI_XEN_FLASK_INTERFACE_VERSION */ |
| 70 | union { |
| 71 | //struct vki_xen_flask_load load; |
| 72 | //struct vki_xen_flask_setenforce enforce; |
| 73 | /* FLASK_CONTEXT_TO_SID and FLASK_SID_TO_CONTEXT */ |
| 74 | struct vki_xen_flask_sid_context sid_context; |
| 75 | //struct vki_xen_flask_access access; |
| 76 | /* FLASK_CREATE, FLASK_RELABEL, FLASK_MEMBER */ |
| 77 | //struct vki_xen_flask_transition transition; |
| 78 | //struct vki_xen_flask_userlist userlist; |
| 79 | /* FLASK_GETBOOL, FLASK_SETBOOL */ |
| 80 | //struct vki_xen_flask_boolean boolean; |
| 81 | //struct vki_xen_flask_setavc_threshold setavc_threshold; |
| 82 | //struct vki_xen_flask_hash_stats hash_stats; |
| 83 | //struct vki_xen_flask_cache_stats cache_stats; |
| 84 | /* FLASK_ADD_OCONTEXT, FLASK_DEL_OCONTEXT */ |
| 85 | //struct vki_xen_flask_ocontext ocontext; |
| 86 | //struct vki_xen_flask_peersid peersid; |
| 87 | //struct vki_xen_flask_relabel relabel; |
| 88 | } u; |
| 89 | }; |
| 90 | |
| 91 | #endif // __VKI_XEN_XSM_H |
| 92 | |
| 93 | /*--------------------------------------------------------------------*/ |
| 94 | /*--- end ---*/ |
| 95 | /*--------------------------------------------------------------------*/ |