UBUNTU: SAUCE: apparmor: af_unix mediation

[mirror_ubuntu-artful-kernel.git] / security / apparmor / include / net.h

diff --git a/security/apparmor/include/net.h b/security/apparmor/include/net.h
index 140c8efcf3644fdb6d3eadb348b7a8dd921c272c..0ae45240c352f6b37c2867edff3bad6c679f3e31 100644 (file)
--- a/security/apparmor/include/net.h
+++ b/security/apparmor/include/net.h
@@ -90,8 +90,6 @@ extern struct aa_sfs_entry aa_sfs_entry_network[];
 void audit_net_cb(struct audit_buffer *ab, void *va);
 int aa_profile_af_perm(struct aa_profile *profile, struct common_audit_data *sa,
                       u32 request, u16 family, int type);
-int aa_af_perm(struct aa_label *label, const char *op, u32 request, u16 family,
-              int type, int protocol);
 static inline int aa_profile_af_sk_perm(struct aa_profile *profile,
                                        struct common_audit_data *sa,
                                        u32 request,
@@ -100,8 +98,20 @@ static inline int aa_profile_af_sk_perm(struct aa_profile *profile,
        return aa_profile_af_perm(profile, sa, request, sk->sk_family,
                                  sk->sk_type);
 }
-int aa_sk_perm(const char *op, u32 request, struct sock *sk);
 
+int aa_sock_perm(const char *op, u32 request, struct socket *sock);
+int aa_sock_create_perm(struct aa_label *label, int family, int type,
+                       int protocol);
+int aa_sock_bind_perm(struct socket *sock, struct sockaddr *address,
+                     int addrlen);
+int aa_sock_connect_perm(struct socket *sock, struct sockaddr *address,
+                        int addrlen);
+int aa_sock_listen_perm(struct socket *sock, int backlog);
+int aa_sock_accept_perm(struct socket *sock, struct socket *newsock);
+int aa_sock_msg_perm(const char *op, u32 request, struct socket *sock,
+                    struct msghdr *msg, int size);
+int aa_sock_opt_perm(const char *op, u32 request, struct socket *sock, int level,
+                    int optname);
 int aa_sock_file_perm(struct aa_label *label, const char *op, u32 request,
                      struct socket *sock);