[deliverable/linux.git] / security / selinux / include / objsec.h

/*
 *  NSA Security-Enhanced Linux (SELinux) security module
 *
 *  This file contains the SELinux security data structures for kernel objects.
 *
 *  Author(s):  Stephen Smalley, <sds@epoch.ncsc.mil>
 *		Chris Vance, <cvance@nai.com>
 *		Wayne Salamon, <wsalamon@nai.com>
 *		James Morris <jmorris@redhat.com>
 *
 *  Copyright (C) 2001,2002 Networks Associates Technology, Inc.
 *  Copyright (C) 2003 Red Hat, Inc., James Morris <jmorris@redhat.com>
 *
 *	This program is free software; you can redistribute it and/or modify
 *	it under the terms of the GNU General Public License version 2,
 *	as published by the Free Software Foundation.
 */
#ifndef _SELINUX_OBJSEC_H_
#define _SELINUX_OBJSEC_H_

#include <linux/list.h>
#include <linux/sched.h>
#include <linux/fs.h>
#include <linux/binfmts.h>
#include <linux/in.h>
#include <linux/spinlock.h>
#include "flask.h"
#include "avc.h"

struct task_security_struct {
	u32 osid;		/* SID prior to last execve */
	u32 sid;		/* current SID */
	u32 exec_sid;		/* exec SID */
	u32 create_sid;		/* fscreate SID */
	u32 keycreate_sid;	/* keycreate SID */
	u32 sockcreate_sid;	/* fscreate SID */
};

struct inode_security_struct {
	struct inode *inode;	/* back pointer to inode object */
	struct list_head list;	/* list of inode_security_struct */
	u32 task_sid;		/* SID of creating task */
	u32 sid;		/* SID of this object */
	u16 sclass;		/* security class of this object */
	unsigned char initialized;	/* initialization flag */
	struct mutex lock;
};

struct file_security_struct {
	u32 sid;		/* SID of open file description */
	u32 fown_sid;		/* SID of file owner (for SIGIO) */
	u32 isid;		/* SID of inode at the time of file open */
	u32 pseqno;		/* Policy seqno at the time of file open */
};

struct superblock_security_struct {
	struct super_block *sb;		/* back pointer to sb object */
	struct list_head list;		/* list of superblock_security_struct */
	u32 sid;			/* SID of file system superblock */
	u32 def_sid;			/* default SID for labeling */
	u32 mntpoint_sid;		/* SECURITY_FS_USE_MNTPOINT context for files */
	unsigned int behavior;		/* labeling behavior */
	unsigned char initialized;	/* initialization flag */
	unsigned char flags;		/* which mount options were specified */
	unsigned char proc;		/* proc fs */
	struct mutex lock;
	struct list_head isec_head;
	spinlock_t isec_lock;
};

struct msg_security_struct {
	u32 sid;	/* SID of message */
};

struct ipc_security_struct {
	u16 sclass;	/* security class of this object */
	u32 sid;	/* SID of IPC resource */
};

struct netif_security_struct {
	int ifindex;			/* device index */
	u32 sid;			/* SID for this interface */
};

struct netnode_security_struct {
	union {
		__be32 ipv4;		/* IPv4 node address */
		struct in6_addr ipv6;	/* IPv6 node address */
	} addr;
	u32 sid;			/* SID for this node */
	u16 family;			/* address family */
};

struct netport_security_struct {
	u32 sid;			/* SID for this node */
	u16 port;			/* port number */
	u8 protocol;			/* transport protocol */
};

struct sk_security_struct {
#ifdef CONFIG_NETLABEL
	enum {				/* NetLabel state */
		NLBL_UNSET = 0,
		NLBL_REQUIRE,
		NLBL_LABELED,
		NLBL_REQSKB,
		NLBL_CONNLABELED,
	} nlbl_state;
	struct netlbl_lsm_secattr *nlbl_secattr; /* NetLabel sec attributes */
#endif
	u32 sid;			/* SID of this object */
	u32 peer_sid;			/* SID of peer */
	u16 sclass;			/* sock security class */
};

struct key_security_struct {
	u32 sid;	/* SID of key */
};

extern unsigned int selinux_checkreqprot;

#endif /* _SELINUX_OBJSEC_H_ */
Commit	Line	Data
	1	/*
	2	* NSA Security-Enhanced Linux (SELinux) security module
	3	*
	4	* This file contains the SELinux security data structures for kernel objects.
	5	*
	6	* Author(s): Stephen Smalley, <sds@epoch.ncsc.mil>
	7	* Chris Vance, <cvance@nai.com>
	8	* Wayne Salamon, <wsalamon@nai.com>
	9	* James Morris <jmorris@redhat.com>
	10	*
	11	* Copyright (C) 2001,2002 Networks Associates Technology, Inc.
	12	* Copyright (C) 2003 Red Hat, Inc., James Morris <jmorris@redhat.com>
	13	*
	14	* This program is free software; you can redistribute it and/or modify
	15	* it under the terms of the GNU General Public License version 2,
	16	* as published by the Free Software Foundation.
	17	*/
	18	#ifndef _SELINUX_OBJSEC_H_
	19	#define _SELINUX_OBJSEC_H_
	20
	21	#include <linux/list.h>
	22	#include <linux/sched.h>
	23	#include <linux/fs.h>
	24	#include <linux/binfmts.h>
	25	#include <linux/in.h>
	26	#include <linux/spinlock.h>
	27	#include "flask.h"
	28	#include "avc.h"
	29
	30	struct task_security_struct {
	31	u32 osid; /* SID prior to last execve */
	32	u32 sid; /* current SID */
	33	u32 exec_sid; /* exec SID */
	34	u32 create_sid; /* fscreate SID */
	35	u32 keycreate_sid; /* keycreate SID */
	36	u32 sockcreate_sid; /* fscreate SID */
	37	};
	38
	39	struct inode_security_struct {
	40	struct inode inode; / back pointer to inode object */
	41	struct list_head list; /* list of inode_security_struct */
	42	u32 task_sid; /* SID of creating task */
	43	u32 sid; /* SID of this object */
	44	u16 sclass; /* security class of this object */
	45	unsigned char initialized; /* initialization flag */
	46	struct mutex lock;
	47	};
	48
	49	struct file_security_struct {
	50	u32 sid; /* SID of open file description */
	51	u32 fown_sid; /* SID of file owner (for SIGIO) */
	52	u32 isid; /* SID of inode at the time of file open */
	53	u32 pseqno; /* Policy seqno at the time of file open */
	54	};
	55
	56	struct superblock_security_struct {
	57	struct super_block sb; / back pointer to sb object */
	58	struct list_head list; /* list of superblock_security_struct */
	59	u32 sid; /* SID of file system superblock */
	60	u32 def_sid; /* default SID for labeling */
	61	u32 mntpoint_sid; /* SECURITY_FS_USE_MNTPOINT context for files */
	62	unsigned int behavior; /* labeling behavior */
	63	unsigned char initialized; /* initialization flag */
	64	unsigned char flags; /* which mount options were specified */
	65	unsigned char proc; /* proc fs */
	66	struct mutex lock;
	67	struct list_head isec_head;
	68	spinlock_t isec_lock;
	69	};
	70
	71	struct msg_security_struct {
	72	u32 sid; /* SID of message */
	73	};
	74
	75	struct ipc_security_struct {
	76	u16 sclass; /* security class of this object */
	77	u32 sid; /* SID of IPC resource */
	78	};
	79
	80	struct netif_security_struct {
	81	int ifindex; /* device index */
	82	u32 sid; /* SID for this interface */
	83	};
	84
	85	struct netnode_security_struct {
	86	union {
	87	__be32 ipv4; /* IPv4 node address */
	88	struct in6_addr ipv6; /* IPv6 node address */
	89	} addr;
	90	u32 sid; /* SID for this node */
	91	u16 family; /* address family */
	92	};
	93
	94	struct netport_security_struct {
	95	u32 sid; /* SID for this node */
	96	u16 port; /* port number */
	97	u8 protocol; /* transport protocol */
	98	};
	99
	100	struct sk_security_struct {
	101	#ifdef CONFIG_NETLABEL
	102	enum { /* NetLabel state */
	103	NLBL_UNSET = 0,
	104	NLBL_REQUIRE,
	105	NLBL_LABELED,
	106	NLBL_REQSKB,
	107	NLBL_CONNLABELED,
	108	} nlbl_state;
	109	struct netlbl_lsm_secattr nlbl_secattr; / NetLabel sec attributes */
	110	#endif
	111	u32 sid; /* SID of this object */
	112	u32 peer_sid; /* SID of peer */
	113	u16 sclass; /* sock security class */
	114	};
	115
	116	struct key_security_struct {
	117	u32 sid; /* SID of key */
	118	};
	119
	120	extern unsigned int selinux_checkreqprot;
	121
	122	#endif /* _SELINUX_OBJSEC_H_ */