John Johansen | 121d4a9 | 2017-01-16 00:42:17 -0800 | [diff] [blame] | 1 | /* |
| 2 | * AppArmor security module |
| 3 | * |
| 4 | * This file contains AppArmor security identifier (secid) definitions |
| 5 | * |
John Johansen | c092921 | 2017-07-31 17:36:45 -0700 | [diff] [blame] | 6 | * Copyright 2009-2018 Canonical Ltd. |
John Johansen | 121d4a9 | 2017-01-16 00:42:17 -0800 | [diff] [blame] | 7 | * |
| 8 | * This program is free software; you can redistribute it and/or |
| 9 | * modify it under the terms of the GNU General Public License as |
| 10 | * published by the Free Software Foundation, version 2 of the |
| 11 | * License. |
| 12 | */ |
| 13 | |
| 14 | #ifndef __AA_SECID_H |
| 15 | #define __AA_SECID_H |
| 16 | |
John Johansen | c092921 | 2017-07-31 17:36:45 -0700 | [diff] [blame] | 17 | #include <linux/slab.h> |
John Johansen | 121d4a9 | 2017-01-16 00:42:17 -0800 | [diff] [blame] | 18 | #include <linux/types.h> |
| 19 | |
John Johansen | c092921 | 2017-07-31 17:36:45 -0700 | [diff] [blame] | 20 | struct aa_label; |
| 21 | |
John Johansen | 121d4a9 | 2017-01-16 00:42:17 -0800 | [diff] [blame] | 22 | /* secid value that will not be allocated */ |
| 23 | #define AA_SECID_INVALID 0 |
John Johansen | 121d4a9 | 2017-01-16 00:42:17 -0800 | [diff] [blame] | 24 | |
Matthew Garrett | 617a629 | 2018-05-24 13:27:45 -0700 | [diff] [blame] | 25 | /* secid value that matches any other secid */ |
| 26 | #define AA_SECID_WILDCARD 1 |
| 27 | |
John Johansen | c092921 | 2017-07-31 17:36:45 -0700 | [diff] [blame] | 28 | struct aa_label *aa_secid_to_label(u32 secid); |
| 29 | int apparmor_secid_to_secctx(u32 secid, char **secdata, u32 *seclen); |
| 30 | int apparmor_secctx_to_secid(const char *secdata, u32 seclen, u32 *secid); |
| 31 | void apparmor_release_secctx(char *secdata, u32 seclen); |
| 32 | |
| 33 | |
John Johansen | a4c3f89 | 2018-06-04 19:44:59 -0700 | [diff] [blame] | 34 | int aa_alloc_secid(struct aa_label *label, gfp_t gfp); |
John Johansen | 121d4a9 | 2017-01-16 00:42:17 -0800 | [diff] [blame] | 35 | void aa_free_secid(u32 secid); |
John Johansen | c092921 | 2017-07-31 17:36:45 -0700 | [diff] [blame] | 36 | void aa_secid_update(u32 secid, struct aa_label *label); |
John Johansen | 121d4a9 | 2017-01-16 00:42:17 -0800 | [diff] [blame] | 37 | |
John Johansen | a4c3f89 | 2018-06-04 19:44:59 -0700 | [diff] [blame] | 38 | void aa_secids_init(void); |
| 39 | |
John Johansen | 121d4a9 | 2017-01-16 00:42:17 -0800 | [diff] [blame] | 40 | #endif /* __AA_SECID_H */ |