1 /* SPDX-License-Identifier: GPL-2.0-or-later */
8  * Author: Paul Moore <paul@paul-moore.com>
12  * (c) Copyright Hewlett-Packard Development Company, L.P., 2006, 2008
32  * NetLabel - A management interface for maintaining network packet label
38  * inside the kernel; NetLabel provides a mechanism for user space applications
42  * send messages between kernel and user space.  The general format of a
45  *  +-----------------+-------------------+--------- --- -- -
47  *  +-----------------+-------------------+--------- --- -- -
51  * 'nlmsghdr->nlmsg_type' and should be defined below, supporting functions
88  * NetLabel - Kernel API for accessing the network packet label mappings.
90  * The following functions are provided for use by other kernel modules,
91  * specifically kernel LSM modules, to provide a consistent, transparent API
110  * struct netlbl_lsm_cache - NetLabel LSM security attribute cache
131  * struct netlbl_lsm_catmap - NetLabel LSM secattr category bitmap
160  * struct netlbl_lsm_secattr - NetLabel LSM security attributes
190 	/* bitmap meta-values for 'flags' */
208  * struct netlbl_calipso_ops - NetLabel CALIPSO operations
270  * netlbl_secattr_cache_alloc - Allocate and initialize a secattr cache
284 		refcount_set(&cache->refcount, 1);  in netlbl_secattr_cache_alloc_noprof()
291  * netlbl_secattr_cache_free - Frees a netlbl_lsm_cache struct
300 	if (!refcount_dec_and_test(&cache->refcount))  in netlbl_secattr_cache_free()
303 	if (cache->free)  in netlbl_secattr_cache_free()
304 		cache->free(cache->data);  in netlbl_secattr_cache_free()
309  * netlbl_catmap_alloc - Allocate a LSM secattr catmap
324  * netlbl_catmap_free - Free a LSM secattr catmap
337 		catmap = catmap->next;  in netlbl_catmap_free()
343  * netlbl_secattr_init - Initialize a netlbl_lsm_secattr struct
356  * netlbl_secattr_destroy - Clears a netlbl_lsm_secattr struct
366 	if (secattr->flags & NETLBL_SECATTR_FREE_DOMAIN)  in netlbl_secattr_destroy()
367 		kfree(secattr->domain);  in netlbl_secattr_destroy()
368 	if (secattr->flags & NETLBL_SECATTR_CACHE)  in netlbl_secattr_destroy()
369 		netlbl_secattr_cache_free(secattr->cache);  in netlbl_secattr_destroy()
370 	if (secattr->flags & NETLBL_SECATTR_MLS_CAT)  in netlbl_secattr_destroy()
371 		netlbl_catmap_free(secattr->attr.mls.cat);  in netlbl_secattr_destroy()
375  * netlbl_secattr_alloc - Allocate and initialize a netlbl_lsm_secattr struct
390  * netlbl_secattr_free - Frees a netlbl_lsm_secattr struct
408 		       u16 family,
413 			     u16 family,
421 				u16 family,
428 				u16 family,
473  * LSM protocol operations (NetLabel LSM/kernel API)
477 			u16 family,
490 			  u16 family,
493 			  u16 family,
495 void netlbl_skbuff_err(struct sk_buff *skb, u16 family, int error, int gateway);
502 int netlbl_cache_add(const struct sk_buff *skb, u16 family,
512 				     u16 family,  in netlbl_cfg_map_del()  argument
517 	return -ENOSYS;  in netlbl_cfg_map_del()
520 					   u16 family,  in netlbl_cfg_unlbl_map_add()  argument
525 	return -ENOSYS;  in netlbl_cfg_unlbl_map_add()
531 					      u16 family,  in netlbl_cfg_unlbl_static_add()  argument
535 	return -ENOSYS;  in netlbl_cfg_unlbl_static_add()
541 					      u16 family,  in netlbl_cfg_unlbl_static_del()  argument
544 	return -ENOSYS;  in netlbl_cfg_unlbl_static_del()
549 	return -ENOSYS;  in netlbl_cfg_cipsov4_add()
562 	return -ENOSYS;  in netlbl_cfg_cipsov4_map_add()
567 	return -ENOSYS;  in netlbl_cfg_calipso_add()
580 	return -ENOSYS;  in netlbl_cfg_calipso_map_add()
585 	return -ENOENT;  in netlbl_catmap_walk()
590 	return -ENOENT;  in netlbl_catmap_walkrng()
623 				      u16 family,  in netlbl_sock_setattr()  argument
627 	return -ENOSYS;  in netlbl_sock_setattr()
635 	return -ENOSYS;  in netlbl_sock_getattr()
641 	return -ENOSYS;  in netlbl_conn_setattr()
646 	return -ENOSYS;  in netlbl_req_setattr()
653 				      u16 family,  in netlbl_skbuff_setattr()  argument
656 	return -ENOSYS;  in netlbl_skbuff_setattr()
659 					u16 family,  in netlbl_skbuff_getattr()  argument
662 	return -ENOSYS;  in netlbl_skbuff_getattr()
674 static inline int netlbl_cache_add(const struct sk_buff *skb, u16 family,  in netlbl_cache_add()  argument