~ [ source navigation ] ~ [ diff markup ] ~ [ identifier search ] ~

TOMOYO Linux Cross Reference
Linux/net/netlabel/netlabel_mgmt.h

Version: ~ [ linux-6.11.5 ] ~ [ linux-6.10.14 ] ~ [ linux-6.9.12 ] ~ [ linux-6.8.12 ] ~ [ linux-6.7.12 ] ~ [ linux-6.6.58 ] ~ [ linux-6.5.13 ] ~ [ linux-6.4.16 ] ~ [ linux-6.3.13 ] ~ [ linux-6.2.16 ] ~ [ linux-6.1.114 ] ~ [ linux-6.0.19 ] ~ [ linux-5.19.17 ] ~ [ linux-5.18.19 ] ~ [ linux-5.17.15 ] ~ [ linux-5.16.20 ] ~ [ linux-5.15.169 ] ~ [ linux-5.14.21 ] ~ [ linux-5.13.19 ] ~ [ linux-5.12.19 ] ~ [ linux-5.11.22 ] ~ [ linux-5.10.228 ] ~ [ linux-5.9.16 ] ~ [ linux-5.8.18 ] ~ [ linux-5.7.19 ] ~ [ linux-5.6.19 ] ~ [ linux-5.5.19 ] ~ [ linux-5.4.284 ] ~ [ linux-5.3.18 ] ~ [ linux-5.2.21 ] ~ [ linux-5.1.21 ] ~ [ linux-5.0.21 ] ~ [ linux-4.20.17 ] ~ [ linux-4.19.322 ] ~ [ linux-4.18.20 ] ~ [ linux-4.17.19 ] ~ [ linux-4.16.18 ] ~ [ linux-4.15.18 ] ~ [ linux-4.14.336 ] ~ [ linux-4.13.16 ] ~ [ linux-4.12.14 ] ~ [ linux-4.11.12 ] ~ [ linux-4.10.17 ] ~ [ linux-4.9.337 ] ~ [ linux-4.4.302 ] ~ [ linux-3.10.108 ] ~ [ linux-2.6.32.71 ] ~ [ linux-2.6.0 ] ~ [ linux-2.4.37.11 ] ~ [ unix-v6-master ] ~ [ ccs-tools-1.8.9 ] ~ [ policy-sample ] ~
Architecture: ~ [ i386 ] ~ [ alpha ] ~ [ m68k ] ~ [ mips ] ~ [ ppc ] ~ [ sparc ] ~ [ sparc64 ] ~

  1 /* SPDX-License-Identifier: GPL-2.0-or-later */
  2 /*
  3  * NetLabel Management Support
  4  *
  5  * This file defines the management functions for the NetLabel system.  The
  6  * NetLabel system manages static and dynamic label mappings for network
  7  * protocols such as CIPSO and RIPSO.
  8  *
  9  * Author: Paul Moore <paul@paul-moore.com>
 10  */
 11 
 12 /*
 13  * (c) Copyright Hewlett-Packard Development Company, L.P., 2006
 14  */
 15 
 16 #ifndef _NETLABEL_MGMT_H
 17 #define _NETLABEL_MGMT_H
 18 
 19 #include <net/netlabel.h>
 20 #include <linux/atomic.h>
 21 
 22 /*
 23  * The following NetLabel payloads are supported by the management interface.
 24  *
 25  * o ADD:
 26  *   Sent by an application to add a domain mapping to the NetLabel system.
 27  *
 28  *   Required attributes:
 29  *
 30  *     NLBL_MGMT_A_DOMAIN
 31  *     NLBL_MGMT_A_PROTOCOL
 32  *
 33  *   If IPv4 is specified the following attributes are required:
 34  *
 35  *     NLBL_MGMT_A_IPV4ADDR
 36  *     NLBL_MGMT_A_IPV4MASK
 37  *
 38  *   If IPv6 is specified the following attributes are required:
 39  *
 40  *     NLBL_MGMT_A_IPV6ADDR
 41  *     NLBL_MGMT_A_IPV6MASK
 42  *
 43  *   If using NETLBL_NLTYPE_CIPSOV4 the following attributes are required:
 44  *
 45  *     NLBL_MGMT_A_CV4DOI
 46  *
 47  *   If using NETLBL_NLTYPE_UNLABELED no other attributes are required,
 48  *   however the following attribute may optionally be sent:
 49  *
 50  *     NLBL_MGMT_A_FAMILY
 51  *
 52  * o REMOVE:
 53  *   Sent by an application to remove a domain mapping from the NetLabel
 54  *   system.
 55  *
 56  *   Required attributes:
 57  *
 58  *     NLBL_MGMT_A_DOMAIN
 59  *
 60  * o LISTALL:
 61  *   This message can be sent either from an application or by the kernel in
 62  *   response to an application generated LISTALL message.  When sent by an
 63  *   application there is no payload and the NLM_F_DUMP flag should be set.
 64  *   The kernel should respond with a series of the following messages.
 65  *
 66  *   Required attributes:
 67  *
 68  *     NLBL_MGMT_A_DOMAIN
 69  *     NLBL_MGMT_A_FAMILY
 70  *
 71  *   If the IP address selectors are not used the following attribute is
 72  *   required:
 73  *
 74  *     NLBL_MGMT_A_PROTOCOL
 75  *
 76  *   If the IP address selectors are used then the following attritbute is
 77  *   required:
 78  *
 79  *     NLBL_MGMT_A_SELECTORLIST
 80  *
 81  *   If the mapping is using the NETLBL_NLTYPE_CIPSOV4 type then the following
 82  *   attributes are required:
 83  *
 84  *     NLBL_MGMT_A_CV4DOI
 85  *
 86  *   If the mapping is using the NETLBL_NLTYPE_UNLABELED type no other
 87  *   attributes are required.
 88  *
 89  * o ADDDEF:
 90  *   Sent by an application to set the default domain mapping for the NetLabel
 91  *   system.
 92  *
 93  *   Required attributes:
 94  *
 95  *     NLBL_MGMT_A_PROTOCOL
 96  *
 97  *   If using NETLBL_NLTYPE_CIPSOV4 the following attributes are required:
 98  *
 99  *     NLBL_MGMT_A_CV4DOI
100  *
101  *   If using NETLBL_NLTYPE_UNLABELED no other attributes are required,
102  *   however the following attribute may optionally be sent:
103  *
104  *     NLBL_MGMT_A_FAMILY
105  *
106  * o REMOVEDEF:
107  *   Sent by an application to remove the default domain mapping from the
108  *   NetLabel system, there is no payload.
109  *
110  * o LISTDEF:
111  *   This message can be sent either from an application or by the kernel in
112  *   response to an application generated LISTDEF message.  When sent by an
113  *   application there may be an optional payload.
114  *
115  *     NLBL_MGMT_A_FAMILY
116  *
117  *   On success the kernel should send a response using the following format:
118  *
119  *   If the IP address selectors are not used the following attributes are
120  *   required:
121  *
122  *     NLBL_MGMT_A_PROTOCOL
123  *     NLBL_MGMT_A_FAMILY
124  *
125  *   If the IP address selectors are used then the following attritbute is
126  *   required:
127  *
128  *     NLBL_MGMT_A_SELECTORLIST
129  *
130  *   If the mapping is using the NETLBL_NLTYPE_CIPSOV4 type then the following
131  *   attributes are required:
132  *
133  *     NLBL_MGMT_A_CV4DOI
134  *
135  *   If the mapping is using the NETLBL_NLTYPE_UNLABELED type no other
136  *   attributes are required.
137  *
138  * o PROTOCOLS:
139  *   Sent by an application to request a list of configured NetLabel protocols
140  *   in the kernel.  When sent by an application there is no payload and the
141  *   NLM_F_DUMP flag should be set.  The kernel should respond with a series of
142  *   the following messages.
143  *
144  *   Required attributes:
145  *
146  *     NLBL_MGMT_A_PROTOCOL
147  *
148  * o VERSION:
149  *   Sent by an application to request the NetLabel version.  When sent by an
150  *   application there is no payload.  This message type is also used by the
151  *   kernel to respond to an VERSION request.
152  *
153  *   Required attributes:
154  *
155  *     NLBL_MGMT_A_VERSION
156  *
157  */
158 
159 /* NetLabel Management commands */
160 enum {
161         NLBL_MGMT_C_UNSPEC,
162         NLBL_MGMT_C_ADD,
163         NLBL_MGMT_C_REMOVE,
164         NLBL_MGMT_C_LISTALL,
165         NLBL_MGMT_C_ADDDEF,
166         NLBL_MGMT_C_REMOVEDEF,
167         NLBL_MGMT_C_LISTDEF,
168         NLBL_MGMT_C_PROTOCOLS,
169         NLBL_MGMT_C_VERSION,
170         __NLBL_MGMT_C_MAX,
171 };
172 
173 /* NetLabel Management attributes */
174 enum {
175         NLBL_MGMT_A_UNSPEC,
176         NLBL_MGMT_A_DOMAIN,
177         /* (NLA_NUL_STRING)
178          * the NULL terminated LSM domain string */
179         NLBL_MGMT_A_PROTOCOL,
180         /* (NLA_U32)
181          * the NetLabel protocol type (defined by NETLBL_NLTYPE_*) */
182         NLBL_MGMT_A_VERSION,
183         /* (NLA_U32)
184          * the NetLabel protocol version number (defined by
185          * NETLBL_PROTO_VERSION) */
186         NLBL_MGMT_A_CV4DOI,
187         /* (NLA_U32)
188          * the CIPSOv4 DOI value */
189         NLBL_MGMT_A_IPV6ADDR,
190         /* (NLA_BINARY, struct in6_addr)
191          * an IPv6 address */
192         NLBL_MGMT_A_IPV6MASK,
193         /* (NLA_BINARY, struct in6_addr)
194          * an IPv6 address mask */
195         NLBL_MGMT_A_IPV4ADDR,
196         /* (NLA_BINARY, struct in_addr)
197          * an IPv4 address */
198         NLBL_MGMT_A_IPV4MASK,
199         /* (NLA_BINARY, struct in_addr)
200          * and IPv4 address mask */
201         NLBL_MGMT_A_ADDRSELECTOR,
202         /* (NLA_NESTED)
203          * an IP address selector, must contain an address, mask, and protocol
204          * attribute plus any protocol specific attributes */
205         NLBL_MGMT_A_SELECTORLIST,
206         /* (NLA_NESTED)
207          * the selector list, there must be at least one
208          * NLBL_MGMT_A_ADDRSELECTOR attribute */
209         NLBL_MGMT_A_FAMILY,
210         /* (NLA_U16)
211          * The address family */
212         NLBL_MGMT_A_CLPDOI,
213         /* (NLA_U32)
214          * the CALIPSO DOI value */
215         __NLBL_MGMT_A_MAX,
216 };
217 #define NLBL_MGMT_A_MAX (__NLBL_MGMT_A_MAX - 1)
218 
219 /* NetLabel protocol functions */
220 int netlbl_mgmt_genl_init(void);
221 
222 /* NetLabel configured protocol reference counter */
223 extern atomic_t netlabel_mgmt_protocount;
224 
225 #endif
226 

~ [ source navigation ] ~ [ diff markup ] ~ [ identifier search ] ~

kernel.org | git.kernel.org | LWN.net | Project Home | SVN repository | Mail admin

Linux® is a registered trademark of Linus Torvalds in the United States and other countries.
TOMOYO® is a registered trademark of NTT DATA CORPORATION.

sflogo.php