[mirror_ubuntu-eoan-kernel.git] / security / selinux / ss / services.h

/* SPDX-License-Identifier: GPL-2.0 */
/*
 * Implementation of the security services.
 *
 * Author : Stephen Smalley, <sds@tycho.nsa.gov>
 */
#ifndef _SS_SERVICES_H_
#define _SS_SERVICES_H_

#include "policydb.h"
#include "sidtab.h"

/* Mapping for a single class */
struct selinux_mapping {
	u16 value; /* policy value for class */
	unsigned int num_perms; /* number of permissions in class */
	u32 perms[sizeof(u32) * 8]; /* policy values for permissions */
};

/* Map for all of the classes, with array size */
struct selinux_map {
	struct selinux_mapping *mapping; /* indexed by class */
	u16 size; /* array size of mapping */
};

struct selinux_ss {
	struct sidtab *sidtab;
	struct policydb policydb;
	rwlock_t policy_rwlock;
	u32 latest_granting;
	struct selinux_map map;
	struct page *status_page;
	struct mutex status_lock;
};

void services_compute_xperms_drivers(struct extended_perms *xperms,
				struct avtab_node *node);

void services_compute_xperms_decision(struct extended_perms_decision *xpermd,
					struct avtab_node *node);

#endif	/* _SS_SERVICES_H_ */
Commit	Line	Data
b2441318	1	/* SPDX-License-Identifier: GPL-2.0 */
1da177e4 LT	2	/*
	3	* Implementation of the security services.
	4	*
7efbb60b	5	* Author : Stephen Smalley, <sds@tycho.nsa.gov>
1da177e4 LT	6	*/
	7	#ifndef _SS_SERVICES_H_
	8	#define _SS_SERVICES_H_
	9
	10	#include "policydb.h"
	11	#include "sidtab.h"
	12
aa8e712c SS	13	/* Mapping for a single class */
	14	struct selinux_mapping {
	15	u16 value; /* policy value for class */
	16	unsigned int num_perms; /* number of permissions in class */
	17	u32 perms[sizeof(u32) * 8]; /* policy values for permissions */
	18	};
	19
	20	/* Map for all of the classes, with array size */
	21	struct selinux_map {
	22	struct selinux_mapping mapping; / indexed by class */
	23	u16 size; /* array size of mapping */
	24	};
	25
	26	struct selinux_ss {
24ed7fda	27	struct sidtab *sidtab;
aa8e712c SS	28	struct policydb policydb;
	29	rwlock_t policy_rwlock;
	30	u32 latest_granting;
	31	struct selinux_map map;
	32	struct page *status_page;
	33	struct mutex status_lock;
	34	};
1da177e4	35
fa1aa143 JVS	36	void services_compute_xperms_drivers(struct extended_perms *xperms,
	37	struct avtab_node *node);
	38
	39	void services_compute_xperms_decision(struct extended_perms_decision *xpermd,
	40	struct avtab_node *node);
	41
1da177e4	42	#endif /* _SS_SERVICES_H_ */