blob: 982bac0ac3286835b5fec99f6c6be3bd07e57282 [file] [log] [blame]
Venkat Yekkirala7420ed22006-08-04 23:17:57 -07001/*
2 * SELinux interface to the NetLabel subsystem
3 *
4 * Author : Paul Moore <paul.moore@hp.com>
5 *
6 */
7
8/*
9 * (c) Copyright Hewlett-Packard Development Company, L.P., 2006
10 *
11 * This program is free software; you can redistribute it and/or modify
12 * it under the terms of the GNU General Public License as published by
13 * the Free Software Foundation; either version 2 of the License, or
14 * (at your option) any later version.
15 *
16 * This program is distributed in the hope that it will be useful,
17 * but WITHOUT ANY WARRANTY; without even the implied warranty of
18 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See
19 * the GNU General Public License for more details.
20 *
21 * You should have received a copy of the GNU General Public License
22 * along with this program; if not, write to the Free Software
23 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
24 *
25 */
26
27#ifndef _SELINUX_NETLABEL_H_
28#define _SELINUX_NETLABEL_H_
29
Paul Moore7a0e1d62006-08-29 17:56:04 -070030#include <linux/types.h>
31#include <linux/fs.h>
32#include <linux/net.h>
33#include <linux/skbuff.h>
34#include <net/sock.h>
35
36#include "avc.h"
37#include "objsec.h"
38
Venkat Yekkirala7420ed22006-08-04 23:17:57 -070039#ifdef CONFIG_NETLABEL
40void selinux_netlbl_cache_invalidate(void);
Paul Moore5778eab2007-02-28 15:14:22 -050041
Paul Mooredfaebe92008-10-10 10:16:31 -040042void selinux_netlbl_err(struct sk_buff *skb, int error, int gateway);
43
Paul Moore9f2ad662006-11-17 17:38:53 -050044void selinux_netlbl_sk_security_reset(struct sk_security_struct *ssec,
45 int family);
Paul Moore5778eab2007-02-28 15:14:22 -050046
Paul Moore75e22912008-01-29 08:38:04 -050047int selinux_netlbl_skbuff_getsid(struct sk_buff *skb,
48 u16 family,
Paul Moore220deb92008-01-29 08:38:23 -050049 u32 *type,
Paul Moore75e22912008-01-29 08:38:04 -050050 u32 *sid);
Paul Moore948bf852008-10-10 10:16:32 -040051int selinux_netlbl_skbuff_setsid(struct sk_buff *skb,
52 u16 family,
53 u32 sid);
Paul Moore5778eab2007-02-28 15:14:22 -050054
Paul Moore014ab192008-10-10 10:16:33 -040055void selinux_netlbl_inet_conn_established(struct sock *sk, u16 family);
Paul Moore5778eab2007-02-28 15:14:22 -050056int selinux_netlbl_socket_post_create(struct socket *sock);
Paul Mooree448e932006-08-29 17:55:38 -070057int selinux_netlbl_inode_permission(struct inode *inode, int mask);
Paul Moore5778eab2007-02-28 15:14:22 -050058int selinux_netlbl_sock_rcv_skb(struct sk_security_struct *sksec,
59 struct sk_buff *skb,
Paul Moore75e22912008-01-29 08:38:04 -050060 u16 family,
Paul Moore5778eab2007-02-28 15:14:22 -050061 struct avc_audit_data *ad);
Paul Mooref8687af2006-10-30 15:22:15 -080062int selinux_netlbl_socket_setsockopt(struct socket *sock,
63 int level,
64 int optname);
Paul Moore014ab192008-10-10 10:16:33 -040065int selinux_netlbl_socket_connect(struct sock *sk, struct sockaddr *addr);
66
Venkat Yekkirala7420ed22006-08-04 23:17:57 -070067#else
68static inline void selinux_netlbl_cache_invalidate(void)
69{
70 return;
71}
72
Paul Mooredfaebe92008-10-10 10:16:31 -040073static inline void selinux_netlbl_err(struct sk_buff *skb,
74 int error,
75 int gateway)
76{
77 return;
78}
79
Paul Moore5778eab2007-02-28 15:14:22 -050080static inline void selinux_netlbl_sk_security_reset(
Eric Pariscc037662008-04-22 17:46:09 -040081 struct sk_security_struct *ssec,
Paul Moore5778eab2007-02-28 15:14:22 -050082 int family)
83{
84 return;
85}
Paul Moore5778eab2007-02-28 15:14:22 -050086
Paul Moore3de4bab2006-11-17 17:38:54 -050087static inline int selinux_netlbl_skbuff_getsid(struct sk_buff *skb,
Paul Moore75e22912008-01-29 08:38:04 -050088 u16 family,
Paul Moore220deb92008-01-29 08:38:23 -050089 u32 *type,
Paul Moore3de4bab2006-11-17 17:38:54 -050090 u32 *sid)
91{
Paul Moore220deb92008-01-29 08:38:23 -050092 *type = NETLBL_NLTYPE_NONE;
Paul Moore3de4bab2006-11-17 17:38:54 -050093 *sid = SECSID_NULL;
94 return 0;
95}
Paul Moore948bf852008-10-10 10:16:32 -040096static inline int selinux_netlbl_skbuff_setsid(struct sk_buff *skb,
97 u16 family,
98 u32 sid)
99{
100 return 0;
101}
Paul Moore3de4bab2006-11-17 17:38:54 -0500102
Paul Moore014ab192008-10-10 10:16:33 -0400103static inline int selinux_netlbl_conn_setsid(struct sock *sk,
104 struct sockaddr *addr)
105{
106 return 0;
107}
108
109static inline void selinux_netlbl_inet_conn_established(struct sock *sk,
110 u16 family)
Venkat Yekkirala7420ed22006-08-04 23:17:57 -0700111{
112 return;
113}
Paul Moore5778eab2007-02-28 15:14:22 -0500114static inline int selinux_netlbl_socket_post_create(struct socket *sock)
115{
116 return 0;
117}
118static inline int selinux_netlbl_inode_permission(struct inode *inode,
119 int mask)
120{
121 return 0;
122}
Venkat Yekkirala7420ed22006-08-04 23:17:57 -0700123static inline int selinux_netlbl_sock_rcv_skb(struct sk_security_struct *sksec,
124 struct sk_buff *skb,
Paul Moore75e22912008-01-29 08:38:04 -0500125 u16 family,
Venkat Yekkirala7420ed22006-08-04 23:17:57 -0700126 struct avc_audit_data *ad)
127{
128 return 0;
129}
Paul Mooref8687af2006-10-30 15:22:15 -0800130static inline int selinux_netlbl_socket_setsockopt(struct socket *sock,
131 int level,
132 int optname)
133{
134 return 0;
135}
Paul Moore014ab192008-10-10 10:16:33 -0400136static inline int selinux_netlbl_socket_connect(struct sock *sk,
137 struct sockaddr *addr)
138{
139 return 0;
140}
Venkat Yekkirala7420ed22006-08-04 23:17:57 -0700141#endif /* CONFIG_NETLABEL */
142
143#endif