Linux anchor 4.4.0-210-generic #242-Ubuntu SMP Fri Apr 16 09:57:56 UTC 2021 x86_64
Apache/2.4.18 (Ubuntu)
Server IP : 10.10.100.4 & Your IP : 216.73.217.150
Domains :
Cant Read [ /etc/named.conf ]
User : www-data
Terminal
Auto Root
Create File
Create Folder
Localroot Suggester
Backdoor Destroyer
Readme
/
usr /
src /
linux-headers-4.4.0-210 /
include /
net /
Delete
Unzip
Name
Size
Permission
Date
Action
9p
[ DIR ]
drwxr-xr-x
2021-04-21 07:33
bluetooth
[ DIR ]
drwxr-xr-x
2021-04-21 07:33
caif
[ DIR ]
drwxr-xr-x
2021-04-21 07:33
irda
[ DIR ]
drwxr-xr-x
2021-04-21 07:33
iucv
[ DIR ]
drwxr-xr-x
2021-04-21 07:33
netfilter
[ DIR ]
drwxr-xr-x
2021-04-21 07:33
netns
[ DIR ]
drwxr-xr-x
2021-04-21 07:33
nfc
[ DIR ]
drwxr-xr-x
2021-04-21 07:33
phonet
[ DIR ]
drwxr-xr-x
2021-04-21 07:33
sctp
[ DIR ]
drwxr-xr-x
2021-04-21 07:33
tc_act
[ DIR ]
drwxr-xr-x
2021-04-21 07:33
6lowpan.h
7.53
KB
-rw-r--r--
2016-01-11 00:01
Space.h
1.12
KB
-rw-r--r--
2016-01-11 00:01
act_api.h
4.21
KB
-rw-r--r--
2016-01-11 00:01
addrconf.h
11.59
KB
-rw-r--r--
2021-04-16 11:57
af_ieee802154.h
1.55
KB
-rw-r--r--
2016-01-11 00:01
af_rxrpc.h
1.82
KB
-rw-r--r--
2016-01-11 00:01
af_unix.h
2.12
KB
-rw-r--r--
2021-04-16 11:57
af_vsock.h
6.16
KB
-rw-r--r--
2021-04-16 11:57
ah.h
343
B
-rw-r--r--
2016-01-11 00:01
arp.h
1.96
KB
-rw-r--r--
2021-04-16 11:57
atmclip.h
1.44
KB
-rw-r--r--
2016-01-11 00:01
ax25.h
14.72
KB
-rw-r--r--
2021-04-16 11:57
ax88796.h
998
B
-rw-r--r--
2016-01-11 00:01
bond_3ad.h
9.73
KB
-rw-r--r--
2016-01-11 00:01
bond_alb.h
6.6
KB
-rw-r--r--
2016-01-11 00:01
bond_options.h
3.82
KB
-rw-r--r--
2016-01-11 00:01
bonding.h
18.67
KB
-rw-r--r--
2021-04-16 11:57
busy_poll.h
3.98
KB
-rw-r--r--
2021-04-16 11:57
cfg80211-wext.h
1.95
KB
-rw-r--r--
2016-01-11 00:01
cfg80211.h
188.01
KB
-rw-r--r--
2021-04-16 11:57
cfg802154.h
10.59
KB
-rw-r--r--
2016-01-11 00:01
checksum.h
4.53
KB
-rw-r--r--
2016-01-11 00:01
cipso_ipv4.h
8.17
KB
-rw-r--r--
2021-04-16 11:57
cls_cgroup.h
2.03
KB
-rw-r--r--
2016-01-11 00:01
codel.h
11.37
KB
-rw-r--r--
2021-04-16 11:57
compat.h
2
KB
-rw-r--r--
2016-01-11 00:01
datalink.h
580
B
-rw-r--r--
2016-01-11 00:01
dcbevent.h
1.26
KB
-rw-r--r--
2016-01-11 00:01
dcbnl.h
4.2
KB
-rw-r--r--
2016-01-11 00:01
dn.h
7
KB
-rw-r--r--
2016-01-11 00:01
dn_dev.h
5.32
KB
-rw-r--r--
2016-01-11 00:01
dn_fib.h
3.91
KB
-rw-r--r--
2016-01-11 00:01
dn_neigh.h
929
B
-rw-r--r--
2016-01-11 00:01
dn_nsp.h
5.87
KB
-rw-r--r--
2016-01-11 00:01
dn_route.h
4.36
KB
-rw-r--r--
2016-01-11 00:01
dsa.h
8.93
KB
-rw-r--r--
2016-01-11 00:01
dsfield.h
1.07
KB
-rw-r--r--
2016-01-11 00:01
dst.h
13.68
KB
-rw-r--r--
2021-04-16 11:57
dst_cache.h
2.49
KB
-rw-r--r--
2021-04-16 11:57
dst_metadata.h
3.61
KB
-rw-r--r--
2021-04-16 11:57
dst_ops.h
2.03
KB
-rw-r--r--
2021-04-16 11:57
esp.h
225
B
-rw-r--r--
2016-01-11 00:01
ethoc.h
538
B
-rw-r--r--
2016-01-11 00:01
fib_rules.h
3.03
KB
-rw-r--r--
2021-04-16 11:57
firewire.h
597
B
-rw-r--r--
2016-01-11 00:01
flow.h
6.78
KB
-rw-r--r--
2016-01-11 00:01
flow_dissector.h
5.15
KB
-rw-r--r--
2021-04-16 11:57
flowcache.h
561
B
-rw-r--r--
2016-01-11 00:01
fou.h
499
B
-rw-r--r--
2016-01-11 00:01
garp.h
2.58
KB
-rw-r--r--
2016-01-11 00:01
gen_stats.h
2.13
KB
-rw-r--r--
2016-01-11 00:01
genetlink.h
12.89
KB
-rw-r--r--
2021-04-16 11:57
geneve.h
1.82
KB
-rw-r--r--
2021-04-16 11:57
gre.h
661
B
-rw-r--r--
2016-01-11 00:01
gro_cells.h
2.08
KB
-rw-r--r--
2021-04-16 11:57
gue.h
3.19
KB
-rw-r--r--
2016-01-11 00:01
icmp.h
1.73
KB
-rw-r--r--
2021-04-16 11:57
ieee80211_radiotap.h
12.22
KB
-rw-r--r--
2016-01-11 00:01
ieee802154_netdev.h
9.13
KB
-rw-r--r--
2016-01-11 00:01
if_inet6.h
6.07
KB
-rw-r--r--
2016-01-11 00:01
inet6_connection_sock.h
1.1
KB
-rw-r--r--
2016-01-11 00:01
inet6_hashtables.h
3.25
KB
-rw-r--r--
2016-01-11 00:01
inet_common.h
1.6
KB
-rw-r--r--
2016-01-11 00:01
inet_connection_sock.h
10.41
KB
-rw-r--r--
2021-04-16 11:57
inet_ecn.h
6.08
KB
-rw-r--r--
2021-04-16 11:57
inet_frag.h
3.98
KB
-rw-r--r--
2021-04-16 11:57
inet_hashtables.h
12.02
KB
-rw-r--r--
2016-01-11 00:01
inet_sock.h
7.87
KB
-rw-r--r--
2021-04-16 11:57
inet_timewait_sock.h
4.16
KB
-rw-r--r--
2021-04-16 11:57
inetpeer.h
3.46
KB
-rw-r--r--
2021-04-16 11:57
ip.h
17.59
KB
-rw-r--r--
2021-04-16 11:57
ip6_checksum.h
2.91
KB
-rw-r--r--
2016-01-11 00:01
ip6_fib.h
7.28
KB
-rw-r--r--
2021-04-16 11:57
ip6_route.h
6.32
KB
-rw-r--r--
2021-04-16 11:57
ip6_tunnel.h
3
KB
-rw-r--r--
2021-04-16 11:57
ip_fib.h
9.48
KB
-rw-r--r--
2021-04-16 11:57
ip_tunnels.h
10.58
KB
-rw-r--r--
2021-04-16 11:57
ip_vs.h
46.15
KB
-rw-r--r--
2021-04-16 11:57
ipcomp.h
620
B
-rw-r--r--
2016-01-11 00:01
ipconfig.h
772
B
-rw-r--r--
2016-01-11 00:01
ipv6.h
28.29
KB
-rw-r--r--
2021-04-16 11:57
ipx.h
4.32
KB
-rw-r--r--
2016-01-11 00:01
iw_handler.h
22.21
KB
-rw-r--r--
2021-04-16 11:57
l3mdev.h
5.18
KB
-rw-r--r--
2021-04-16 11:57
lapb.h
4.69
KB
-rw-r--r--
2016-01-11 00:01
lib80211.h
3.88
KB
-rw-r--r--
2016-01-11 00:01
llc.h
4.38
KB
-rw-r--r--
2021-04-16 11:57
llc_c_ac.h
9.34
KB
-rw-r--r--
2016-01-11 00:01
llc_c_ev.h
10.68
KB
-rw-r--r--
2016-01-11 00:01
llc_c_st.h
1.72
KB
-rw-r--r--
2016-01-11 00:01
llc_conn.h
4.06
KB
-rw-r--r--
2021-04-16 11:57
llc_if.h
2.16
KB
-rw-r--r--
2016-01-11 00:01
llc_pdu.h
14.08
KB
-rw-r--r--
2016-01-11 00:01
llc_s_ac.h
1.55
KB
-rw-r--r--
2016-01-11 00:01
llc_s_ev.h
2.2
KB
-rw-r--r--
2016-01-11 00:01
llc_s_st.h
947
B
-rw-r--r--
2016-01-11 00:01
llc_sap.h
1.08
KB
-rw-r--r--
2016-01-11 00:01
lwtunnel.h
4.07
KB
-rw-r--r--
2016-01-11 00:01
mac80211.h
213.51
KB
-rw-r--r--
2021-04-16 11:57
mac802154.h
12.1
KB
-rw-r--r--
2016-01-11 00:01
mip6.h
1.58
KB
-rw-r--r--
2016-01-11 00:01
mld.h
2.76
KB
-rw-r--r--
2016-01-11 00:01
mpls.h
1.14
KB
-rw-r--r--
2016-01-11 00:01
mpls_iptunnel.h
815
B
-rw-r--r--
2016-01-11 00:01
mrp.h
2.99
KB
-rw-r--r--
2016-01-11 00:01
ndisc.h
5.75
KB
-rw-r--r--
2021-04-16 11:57
neighbour.h
14.62
KB
-rw-r--r--
2021-04-16 11:57
net_namespace.h
9.26
KB
-rw-r--r--
2021-04-16 11:57
net_ratelimit.h
181
B
-rw-r--r--
2016-01-11 00:01
netevent.h
739
B
-rw-r--r--
2016-01-11 00:01
netlabel.h
17.25
KB
-rw-r--r--
2016-01-11 00:01
netlink.h
36.53
KB
-rw-r--r--
2021-04-16 11:57
netprio_cgroup.h
1.08
KB
-rw-r--r--
2016-01-11 00:01
netrom.h
7.61
KB
-rw-r--r--
2016-01-11 00:01
nexthop.h
826
B
-rw-r--r--
2021-04-16 11:57
nl802154.h
11.89
KB
-rw-r--r--
2016-01-11 00:01
p8022.h
408
B
-rw-r--r--
2016-01-11 00:01
ping.h
3.52
KB
-rw-r--r--
2016-01-11 00:01
pkt_cls.h
9.61
KB
-rw-r--r--
2021-04-16 11:57
pkt_sched.h
3.77
KB
-rw-r--r--
2016-01-11 00:01
protocol.h
4.09
KB
-rw-r--r--
2016-01-11 00:01
psnap.h
312
B
-rw-r--r--
2016-01-11 00:01
raw.h
1.84
KB
-rw-r--r--
2016-01-11 00:01
rawv6.h
543
B
-rw-r--r--
2016-01-11 00:01
red.h
10.3
KB
-rw-r--r--
2021-04-16 11:57
regulatory.h
10.12
KB
-rw-r--r--
2021-04-16 11:57
request_sock.h
6.38
KB
-rw-r--r--
2016-01-11 00:01
rose.h
7.59
KB
-rw-r--r--
2016-01-11 00:01
route.h
9.51
KB
-rw-r--r--
2021-04-16 11:57
rtnetlink.h
5.37
KB
-rw-r--r--
2016-01-11 00:01
sch_generic.h
20.26
KB
-rw-r--r--
2021-04-16 11:57
scm.h
3.44
KB
-rw-r--r--
2021-04-16 11:57
secure_seq.h
677
B
-rw-r--r--
2016-01-11 00:01
slhc_vj.h
6.67
KB
-rw-r--r--
2021-04-16 11:57
snmp.h
5.75
KB
-rw-r--r--
2016-01-11 00:01
sock.h
66.2
KB
-rw-r--r--
2021-04-16 11:57
stp.h
344
B
-rw-r--r--
2016-01-11 00:01
switchdev.h
8.81
KB
-rw-r--r--
2021-04-16 11:57
tcp.h
55.29
KB
-rw-r--r--
2021-04-16 11:57
tcp_memcontrol.h
254
B
-rw-r--r--
2016-01-11 00:01
tcp_states.h
1.26
KB
-rw-r--r--
2016-01-11 00:01
timewait_sock.h
1.11
KB
-rw-r--r--
2016-01-11 00:01
transp_v6.h
1.83
KB
-rw-r--r--
2016-01-11 00:01
tso.h
446
B
-rw-r--r--
2016-01-11 00:01
udp.h
9.77
KB
-rw-r--r--
2016-01-11 00:01
udp_tunnel.h
3.24
KB
-rw-r--r--
2016-01-11 00:01
udplite.h
3.77
KB
-rw-r--r--
2021-04-16 11:57
vsock_addr.h
1.05
KB
-rw-r--r--
2016-01-11 00:01
vxlan.h
6.99
KB
-rw-r--r--
2021-04-16 11:57
wext.h
1.47
KB
-rw-r--r--
2016-01-11 00:01
wimax.h
19.97
KB
-rw-r--r--
2016-01-11 00:01
x25.h
9.35
KB
-rw-r--r--
2021-04-16 11:57
x25device.h
348
B
-rw-r--r--
2016-01-11 00:01
xfrm.h
49.64
KB
-rw-r--r--
2021-04-16 11:57
Save
Rename
/* * NetLabel System * * The NetLabel system manages static and dynamic label mappings for network * protocols such as CIPSO and RIPSO. * * Author: Paul Moore <paul@paul-moore.com> * */ /* * (c) Copyright Hewlett-Packard Development Company, L.P., 2006, 2008 * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation; either version 2 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See * the GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, see <http://www.gnu.org/licenses/>. * */ #ifndef _NETLABEL_H #define _NETLABEL_H #include <linux/types.h> #include <linux/slab.h> #include <linux/net.h> #include <linux/skbuff.h> #include <linux/in.h> #include <linux/in6.h> #include <net/netlink.h> #include <net/request_sock.h> #include <linux/atomic.h> struct cipso_v4_doi; /* * NetLabel - A management interface for maintaining network packet label * mapping tables for explicit packet labling protocols. * * Network protocols such as CIPSO and RIPSO require a label translation layer * to convert the label on the packet into something meaningful on the host * machine. In the current Linux implementation these mapping tables live * inside the kernel; NetLabel provides a mechanism for user space applications * to manage these mapping tables. * * NetLabel makes use of the Generic NETLINK mechanism as a transport layer to * send messages between kernel and user space. The general format of a * NetLabel message is shown below: * * +-----------------+-------------------+--------- --- -- - * | struct nlmsghdr | struct genlmsghdr | payload * +-----------------+-------------------+--------- --- -- - * * The 'nlmsghdr' and 'genlmsghdr' structs should be dealt with like normal. * The payload is dependent on the subsystem specified in the * 'nlmsghdr->nlmsg_type' and should be defined below, supporting functions * should be defined in the corresponding net/netlabel/netlabel_<subsys>.h|c * file. All of the fields in the NetLabel payload are NETLINK attributes, see * the include/net/netlink.h file for more information on NETLINK attributes. * */ /* * NetLabel NETLINK protocol */ /* NetLabel NETLINK protocol version * 1: initial version * 2: added static labels for unlabeled connections * 3: network selectors added to the NetLabel/LSM domain mapping and the * CIPSO_V4_MAP_LOCAL CIPSO mapping was added */ #define NETLBL_PROTO_VERSION 3 /* NetLabel NETLINK types/families */ #define NETLBL_NLTYPE_NONE 0 #define NETLBL_NLTYPE_MGMT 1 #define NETLBL_NLTYPE_MGMT_NAME "NLBL_MGMT" #define NETLBL_NLTYPE_RIPSO 2 #define NETLBL_NLTYPE_RIPSO_NAME "NLBL_RIPSO" #define NETLBL_NLTYPE_CIPSOV4 3 #define NETLBL_NLTYPE_CIPSOV4_NAME "NLBL_CIPSOv4" #define NETLBL_NLTYPE_CIPSOV6 4 #define NETLBL_NLTYPE_CIPSOV6_NAME "NLBL_CIPSOv6" #define NETLBL_NLTYPE_UNLABELED 5 #define NETLBL_NLTYPE_UNLABELED_NAME "NLBL_UNLBL" #define NETLBL_NLTYPE_ADDRSELECT 6 #define NETLBL_NLTYPE_ADDRSELECT_NAME "NLBL_ADRSEL" /* * NetLabel - Kernel API for accessing the network packet label mappings. * * The following functions are provided for use by other kernel modules, * specifically kernel LSM modules, to provide a consistent, transparent API * for dealing with explicit packet labeling protocols such as CIPSO and * RIPSO. The functions defined here are implemented in the * net/netlabel/netlabel_kapi.c file. * */ /* NetLabel audit information */ struct netlbl_audit { u32 secid; kuid_t loginuid; unsigned int sessionid; }; /* * LSM security attributes */ /** * struct netlbl_lsm_cache - NetLabel LSM security attribute cache * @refcount: atomic reference counter * @free: LSM supplied function to free the cache data * @data: LSM supplied cache data * * Description: * This structure is provided for LSMs which wish to make use of the NetLabel * caching mechanism to store LSM specific data/attributes in the NetLabel * cache. If the LSM has to perform a lot of translation from the NetLabel * security attributes into it's own internal representation then the cache * mechanism can provide a way to eliminate some or all of that translation * overhead on a cache hit. * */ struct netlbl_lsm_cache { atomic_t refcount; void (*free) (const void *data); void *data; }; /** * struct netlbl_lsm_catmap - NetLabel LSM secattr category bitmap * @startbit: the value of the lowest order bit in the bitmap * @bitmap: the category bitmap * @next: pointer to the next bitmap "node" or NULL * * Description: * This structure is used to represent category bitmaps. Due to the large * number of categories supported by most labeling protocols it is not * practical to transfer a full bitmap internally so NetLabel adopts a sparse * bitmap structure modeled after SELinux's ebitmap structure. * The catmap bitmap field MUST be a power of two in length and large * enough to hold at least 240 bits. Special care (i.e. check the code!) * should be used when changing these values as the LSM implementation * probably has functions which rely on the sizes of these types to speed * processing. * */ #define NETLBL_CATMAP_MAPTYPE u64 #define NETLBL_CATMAP_MAPCNT 4 #define NETLBL_CATMAP_MAPSIZE (sizeof(NETLBL_CATMAP_MAPTYPE) * 8) #define NETLBL_CATMAP_SIZE (NETLBL_CATMAP_MAPSIZE * \ NETLBL_CATMAP_MAPCNT) #define NETLBL_CATMAP_BIT (NETLBL_CATMAP_MAPTYPE)0x01 struct netlbl_lsm_catmap { u32 startbit; NETLBL_CATMAP_MAPTYPE bitmap[NETLBL_CATMAP_MAPCNT]; struct netlbl_lsm_catmap *next; }; /** * struct netlbl_lsm_secattr - NetLabel LSM security attributes * @flags: indicate structure attributes, see NETLBL_SECATTR_* * @type: indicate the NLTYPE of the attributes * @domain: the NetLabel LSM domain * @cache: NetLabel LSM specific cache * @attr.mls: MLS sensitivity label * @attr.mls.cat: MLS category bitmap * @attr.mls.lvl: MLS sensitivity level * @attr.secid: LSM specific secid token * * Description: * This structure is used to pass security attributes between NetLabel and the * LSM modules. The flags field is used to specify which fields within the * struct are valid and valid values can be created by bitwise OR'ing the * NETLBL_SECATTR_* defines. The domain field is typically set by the LSM to * specify domain specific configuration settings and is not usually used by * NetLabel itself when returning security attributes to the LSM. * */ struct netlbl_lsm_secattr { u32 flags; /* bitmap values for 'flags' */ #define NETLBL_SECATTR_NONE 0x00000000 #define NETLBL_SECATTR_DOMAIN 0x00000001 #define NETLBL_SECATTR_DOMAIN_CPY (NETLBL_SECATTR_DOMAIN | \ NETLBL_SECATTR_FREE_DOMAIN) #define NETLBL_SECATTR_CACHE 0x00000002 #define NETLBL_SECATTR_MLS_LVL 0x00000004 #define NETLBL_SECATTR_MLS_CAT 0x00000008 #define NETLBL_SECATTR_SECID 0x00000010 /* bitmap meta-values for 'flags' */ #define NETLBL_SECATTR_FREE_DOMAIN 0x01000000 #define NETLBL_SECATTR_CACHEABLE (NETLBL_SECATTR_MLS_LVL | \ NETLBL_SECATTR_MLS_CAT | \ NETLBL_SECATTR_SECID) u32 type; char *domain; struct netlbl_lsm_cache *cache; struct { struct { struct netlbl_lsm_catmap *cat; u32 lvl; } mls; u32 secid; } attr; }; /* * LSM security attribute operations (inline) */ /** * netlbl_secattr_cache_alloc - Allocate and initialize a secattr cache * @flags: the memory allocation flags * * Description: * Allocate and initialize a netlbl_lsm_cache structure. Returns a pointer * on success, NULL on failure. * */ static inline struct netlbl_lsm_cache *netlbl_secattr_cache_alloc(gfp_t flags) { struct netlbl_lsm_cache *cache; cache = kzalloc(sizeof(*cache), flags); if (cache) atomic_set(&cache->refcount, 1); return cache; } /** * netlbl_secattr_cache_free - Frees a netlbl_lsm_cache struct * @cache: the struct to free * * Description: * Frees @secattr including all of the internal buffers. * */ static inline void netlbl_secattr_cache_free(struct netlbl_lsm_cache *cache) { if (!atomic_dec_and_test(&cache->refcount)) return; if (cache->free) cache->free(cache->data); kfree(cache); } /** * netlbl_catmap_alloc - Allocate a LSM secattr catmap * @flags: memory allocation flags * * Description: * Allocate memory for a LSM secattr catmap, returns a pointer on success, NULL * on failure. * */ static inline struct netlbl_lsm_catmap *netlbl_catmap_alloc(gfp_t flags) { return kzalloc(sizeof(struct netlbl_lsm_catmap), flags); } /** * netlbl_catmap_free - Free a LSM secattr catmap * @catmap: the category bitmap * * Description: * Free a LSM secattr catmap. * */ static inline void netlbl_catmap_free(struct netlbl_lsm_catmap *catmap) { struct netlbl_lsm_catmap *iter; while (catmap) { iter = catmap; catmap = catmap->next; kfree(iter); } } /** * netlbl_secattr_init - Initialize a netlbl_lsm_secattr struct * @secattr: the struct to initialize * * Description: * Initialize an already allocated netlbl_lsm_secattr struct. * */ static inline void netlbl_secattr_init(struct netlbl_lsm_secattr *secattr) { memset(secattr, 0, sizeof(*secattr)); } /** * netlbl_secattr_destroy - Clears a netlbl_lsm_secattr struct * @secattr: the struct to clear * * Description: * Destroys the @secattr struct, including freeing all of the internal buffers. * The struct must be reset with a call to netlbl_secattr_init() before reuse. * */ static inline void netlbl_secattr_destroy(struct netlbl_lsm_secattr *secattr) { if (secattr->flags & NETLBL_SECATTR_FREE_DOMAIN) kfree(secattr->domain); if (secattr->flags & NETLBL_SECATTR_CACHE) netlbl_secattr_cache_free(secattr->cache); if (secattr->flags & NETLBL_SECATTR_MLS_CAT) netlbl_catmap_free(secattr->attr.mls.cat); } /** * netlbl_secattr_alloc - Allocate and initialize a netlbl_lsm_secattr struct * @flags: the memory allocation flags * * Description: * Allocate and initialize a netlbl_lsm_secattr struct. Returns a valid * pointer on success, or NULL on failure. * */ static inline struct netlbl_lsm_secattr *netlbl_secattr_alloc(gfp_t flags) { return kzalloc(sizeof(struct netlbl_lsm_secattr), flags); } /** * netlbl_secattr_free - Frees a netlbl_lsm_secattr struct * @secattr: the struct to free * * Description: * Frees @secattr including all of the internal buffers. * */ static inline void netlbl_secattr_free(struct netlbl_lsm_secattr *secattr) { netlbl_secattr_destroy(secattr); kfree(secattr); } #ifdef CONFIG_NETLABEL /* * LSM configuration operations */ int netlbl_cfg_map_del(const char *domain, u16 family, const void *addr, const void *mask, struct netlbl_audit *audit_info); int netlbl_cfg_unlbl_map_add(const char *domain, u16 family, const void *addr, const void *mask, struct netlbl_audit *audit_info); int netlbl_cfg_unlbl_static_add(struct net *net, const char *dev_name, const void *addr, const void *mask, u16 family, u32 secid, struct netlbl_audit *audit_info); int netlbl_cfg_unlbl_static_del(struct net *net, const char *dev_name, const void *addr, const void *mask, u16 family, struct netlbl_audit *audit_info); int netlbl_cfg_cipsov4_add(struct cipso_v4_doi *doi_def, struct netlbl_audit *audit_info); void netlbl_cfg_cipsov4_del(u32 doi, struct netlbl_audit *audit_info); int netlbl_cfg_cipsov4_map_add(u32 doi, const char *domain, const struct in_addr *addr, const struct in_addr *mask, struct netlbl_audit *audit_info); /* * LSM security attribute operations */ int netlbl_catmap_walk(struct netlbl_lsm_catmap *catmap, u32 offset); int netlbl_catmap_walkrng(struct netlbl_lsm_catmap *catmap, u32 offset); int netlbl_catmap_getlong(struct netlbl_lsm_catmap *catmap, u32 *offset, unsigned long *bitmap); int netlbl_catmap_setbit(struct netlbl_lsm_catmap **catmap, u32 bit, gfp_t flags); int netlbl_catmap_setrng(struct netlbl_lsm_catmap **catmap, u32 start, u32 end, gfp_t flags); int netlbl_catmap_setlong(struct netlbl_lsm_catmap **catmap, u32 offset, unsigned long bitmap, gfp_t flags); /* * LSM protocol operations (NetLabel LSM/kernel API) */ int netlbl_enabled(void); int netlbl_sock_setattr(struct sock *sk, u16 family, const struct netlbl_lsm_secattr *secattr); void netlbl_sock_delattr(struct sock *sk); int netlbl_sock_getattr(struct sock *sk, struct netlbl_lsm_secattr *secattr); int netlbl_conn_setattr(struct sock *sk, struct sockaddr *addr, const struct netlbl_lsm_secattr *secattr); int netlbl_req_setattr(struct request_sock *req, const struct netlbl_lsm_secattr *secattr); void netlbl_req_delattr(struct request_sock *req); int netlbl_skbuff_setattr(struct sk_buff *skb, u16 family, const struct netlbl_lsm_secattr *secattr); int netlbl_skbuff_getattr(const struct sk_buff *skb, u16 family, struct netlbl_lsm_secattr *secattr); void netlbl_skbuff_err(struct sk_buff *skb, int error, int gateway); /* * LSM label mapping cache operations */ void netlbl_cache_invalidate(void); int netlbl_cache_add(const struct sk_buff *skb, const struct netlbl_lsm_secattr *secattr); /* * Protocol engine operations */ struct audit_buffer *netlbl_audit_start(int type, struct netlbl_audit *audit_info); #else static inline int netlbl_cfg_map_del(const char *domain, u16 family, const void *addr, const void *mask, struct netlbl_audit *audit_info) { return -ENOSYS; } static inline int netlbl_cfg_unlbl_map_add(const char *domain, u16 family, void *addr, void *mask, struct netlbl_audit *audit_info) { return -ENOSYS; } static inline int netlbl_cfg_unlbl_static_add(struct net *net, const char *dev_name, const void *addr, const void *mask, u16 family, u32 secid, struct netlbl_audit *audit_info) { return -ENOSYS; } static inline int netlbl_cfg_unlbl_static_del(struct net *net, const char *dev_name, const void *addr, const void *mask, u16 family, struct netlbl_audit *audit_info) { return -ENOSYS; } static inline int netlbl_cfg_cipsov4_add(struct cipso_v4_doi *doi_def, struct netlbl_audit *audit_info) { return -ENOSYS; } static inline void netlbl_cfg_cipsov4_del(u32 doi, struct netlbl_audit *audit_info) { return; } static inline int netlbl_cfg_cipsov4_map_add(u32 doi, const char *domain, const struct in_addr *addr, const struct in_addr *mask, struct netlbl_audit *audit_info) { return -ENOSYS; } static inline int netlbl_catmap_walk(struct netlbl_lsm_catmap *catmap, u32 offset) { return -ENOENT; } static inline int netlbl_catmap_walkrng(struct netlbl_lsm_catmap *catmap, u32 offset) { return -ENOENT; } static inline int netlbl_catmap_getlong(struct netlbl_lsm_catmap *catmap, u32 *offset, unsigned long *bitmap) { return 0; } static inline int netlbl_catmap_setbit(struct netlbl_lsm_catmap **catmap, u32 bit, gfp_t flags) { return 0; } static inline int netlbl_catmap_setrng(struct netlbl_lsm_catmap **catmap, u32 start, u32 end, gfp_t flags) { return 0; } static inline int netlbl_catmap_setlong(struct netlbl_lsm_catmap **catmap, u32 offset, unsigned long bitmap, gfp_t flags) { return 0; } static inline int netlbl_enabled(void) { return 0; } static inline int netlbl_sock_setattr(struct sock *sk, u16 family, const struct netlbl_lsm_secattr *secattr) { return -ENOSYS; } static inline void netlbl_sock_delattr(struct sock *sk) { } static inline int netlbl_sock_getattr(struct sock *sk, struct netlbl_lsm_secattr *secattr) { return -ENOSYS; } static inline int netlbl_conn_setattr(struct sock *sk, struct sockaddr *addr, const struct netlbl_lsm_secattr *secattr) { return -ENOSYS; } static inline int netlbl_req_setattr(struct request_sock *req, const struct netlbl_lsm_secattr *secattr) { return -ENOSYS; } static inline void netlbl_req_delattr(struct request_sock *req) { return; } static inline int netlbl_skbuff_setattr(struct sk_buff *skb, u16 family, const struct netlbl_lsm_secattr *secattr) { return -ENOSYS; } static inline int netlbl_skbuff_getattr(const struct sk_buff *skb, u16 family, struct netlbl_lsm_secattr *secattr) { return -ENOSYS; } static inline void netlbl_skbuff_err(struct sk_buff *skb, int error, int gateway) { return; } static inline void netlbl_cache_invalidate(void) { return; } static inline int netlbl_cache_add(const struct sk_buff *skb, const struct netlbl_lsm_secattr *secattr) { return 0; } static inline struct audit_buffer *netlbl_audit_start(int type, struct netlbl_audit *audit_info) { return NULL; } #endif /* CONFIG_NETLABEL */ #endif /* _NETLABEL_H */