[mirror_spl-debian.git] / include / sys / acl.h

/*****************************************************************************\
 *  Copyright (C) 2007-2010 Lawrence Livermore National Security, LLC.
 *  Copyright (C) 2007 The Regents of the University of California.
 *  Produced at Lawrence Livermore National Laboratory (cf, DISCLAIMER).
 *  Written by Brian Behlendorf <behlendorf1@llnl.gov>.
 *  UCRL-CODE-235197
 *
 *  This file is part of the SPL, Solaris Porting Layer.
 *  For details, see <http://github.com/behlendorf/spl/>.
 *
 *  The SPL is free software; you can redistribute it and/or modify it
 *  under the terms of the GNU General Public License as published by the
 *  Free Software Foundation; either version 2 of the License, or (at your
 *  option) any later version.
 *
 *  The SPL is distributed in the hope that it will be useful, but WITHOUT
 *  ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
 *  FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
 *  for more details.
 *
 *  You should have received a copy of the GNU General Public License along
 *  with the SPL.  If not, see <http://www.gnu.org/licenses/>.
\*****************************************************************************/

#ifndef _SPL_ACL_H
#define _SPL_ACL_H

#include <sys/types.h>

typedef struct ace {
        uid_t a_who;
        uint32_t a_access_mask;
        uint16_t a_flags;
        uint16_t a_type;
} ace_t;

typedef struct ace_object {
        uid_t           a_who;          /* uid or gid */
        uint32_t        a_access_mask;  /* read,write,... */
        uint16_t        a_flags;        /* see below */
        uint16_t        a_type;         /* allow or deny */
        uint8_t         a_obj_type[16]; /* obj type */
        uint8_t         a_inherit_obj_type[16];  /* inherit obj */
} ace_object_t;

#define ACE_READ_DATA                                   0x00000001
#define ACE_LIST_DIRECTORY                              0x00000001
#define ACE_WRITE_DATA                                  0x00000002
#define ACE_ADD_FILE                                    0x00000002
#define ACE_APPEND_DATA                                 0x00000004
#define ACE_ADD_SUBDIRECTORY                            0x00000004
#define ACE_READ_NAMED_ATTRS                            0x00000008
#define ACE_WRITE_NAMED_ATTRS                           0x00000010
#define ACE_EXECUTE                                     0x00000020
#define ACE_DELETE_CHILD                                0x00000040
#define ACE_READ_ATTRIBUTES                             0x00000080
#define ACE_WRITE_ATTRIBUTES                            0x00000100
#define ACE_DELETE                                      0x00010000
#define ACE_READ_ACL                                    0x00020000
#define ACE_WRITE_ACL                                   0x00040000
#define ACE_WRITE_OWNER                                 0x00080000
#define ACE_SYNCHRONIZE                                 0x00100000

#define ACE_FILE_INHERIT_ACE                            0x0001
#define ACE_DIRECTORY_INHERIT_ACE                       0x0002
#define ACE_NO_PROPAGATE_INHERIT_ACE                    0x0004
#define ACE_INHERIT_ONLY_ACE                            0x0008
#define ACE_SUCCESSFUL_ACCESS_ACE_FLAG                  0x0010
#define ACE_FAILED_ACCESS_ACE_FLAG                      0x0020
#define ACE_IDENTIFIER_GROUP                            0x0040
#define ACE_INHERITED_ACE                               0x0080
#define ACE_OWNER                                       0x1000
#define ACE_GROUP                                       0x2000
#define ACE_EVERYONE                                    0x4000

#define ACE_ACCESS_ALLOWED_ACE_TYPE                     0x0000
#define ACE_ACCESS_DENIED_ACE_TYPE                      0x0001
#define ACE_SYSTEM_AUDIT_ACE_TYPE                       0x0002
#define ACE_SYSTEM_ALARM_ACE_TYPE                       0x0003

#define ACL_AUTO_INHERIT                                0x0001
#define ACL_PROTECTED                                   0x0002
#define ACL_DEFAULTED                                   0x0004
#define ACL_FLAGS_ALL (ACL_AUTO_INHERIT|ACL_PROTECTED|ACL_DEFAULTED)

#define ACE_ACCESS_ALLOWED_COMPOUND_ACE_TYPE            0x04
#define ACE_ACCESS_ALLOWED_OBJECT_ACE_TYPE              0x05
#define ACE_ACCESS_DENIED_OBJECT_ACE_TYPE               0x06
#define ACE_SYSTEM_AUDIT_OBJECT_ACE_TYPE                0x07
#define ACE_SYSTEM_ALARM_OBJECT_ACE_TYPE                0x08
#define ACE_ACCESS_ALLOWED_CALLBACK_ACE_TYPE            0x09
#define ACE_ACCESS_DENIED_CALLBACK_ACE_TYPE             0x0A
#define ACE_ACCESS_ALLOWED_CALLBACK_OBJECT_ACE_TYPE     0x0B
#define ACE_ACCESS_DENIED_CALLBACK_OBJECT_ACE_TYPE      0x0C
#define ACE_SYSTEM_AUDIT_CALLBACK_ACE_TYPE              0x0D
#define ACE_SYSTEM_ALARM_CALLBACK_ACE_TYPE              0x0E
#define ACE_SYSTEM_AUDIT_CALLBACK_OBJECT_ACE_TYPE       0x0F
#define ACE_SYSTEM_ALARM_CALLBACK_OBJECT_ACE_TYPE       0x10

#define ACE_ALL_TYPES   0x001F

#define ACE_TYPE_FLAGS (ACE_OWNER|ACE_GROUP|ACE_EVERYONE|ACE_IDENTIFIER_GROUP)

#define ACE_ALL_PERMS   (ACE_READ_DATA|ACE_LIST_DIRECTORY|ACE_WRITE_DATA| \
     ACE_ADD_FILE|ACE_APPEND_DATA|ACE_ADD_SUBDIRECTORY|ACE_READ_NAMED_ATTRS| \
     ACE_WRITE_NAMED_ATTRS|ACE_EXECUTE|ACE_DELETE_CHILD|ACE_READ_ATTRIBUTES| \
     ACE_WRITE_ATTRIBUTES|ACE_DELETE|ACE_READ_ACL|ACE_WRITE_ACL| \
     ACE_WRITE_OWNER|ACE_SYNCHRONIZE)

#endif /* _SPL_ACL_H */
Commit	Line	Data
716154c5 BB	1	/*****************************************************************************\
	2	* Copyright (C) 2007-2010 Lawrence Livermore National Security, LLC.
	3	* Copyright (C) 2007 The Regents of the University of California.
	4	* Produced at Lawrence Livermore National Laboratory (cf, DISCLAIMER).
	5	* Written by Brian Behlendorf <behlendorf1@llnl.gov>.
	6	* UCRL-CODE-235197
	7	*
	8	* This file is part of the SPL, Solaris Porting Layer.
	9	* For details, see <http://github.com/behlendorf/spl/>.
	10	*
	11	* The SPL is free software; you can redistribute it and/or modify it
	12	* under the terms of the GNU General Public License as published by the
	13	* Free Software Foundation; either version 2 of the License, or (at your
	14	* option) any later version.
	15	*
	16	* The SPL is distributed in the hope that it will be useful, but WITHOUT
	17	* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
	18	* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
	19	* for more details.
	20	*
	21	* You should have received a copy of the GNU General Public License along
	22	* with the SPL. If not, see <http://www.gnu.org/licenses/>.
	23	\*****************************************************************************/
	24
4a4295b2	25	#ifndef _SPL_ACL_H
4a4295b2	26	#define _SPL_ACL_H
a713518f	27
a713518f	28	#include <sys/types.h>
a713518f	29
a713518f	30	typedef struct ace {
4a4295b2	31	uid_t a_who;
	32	uint32_t a_access_mask;
	33	uint16_t a_flags;
	34	uint16_t a_type;
a713518f	35	} ace_t;
a713518f	36
a713518f	37	typedef struct ace_object {
4a4295b2	38	uid_t a_who; /* uid or gid */
	39	uint32_t a_access_mask; /* read,write,... */
	40	uint16_t a_flags; /* see below */
	41	uint16_t a_type; /* allow or deny */
	42	uint8_t a_obj_type[16]; /* obj type */
	43	uint8_t a_inherit_obj_type[16]; /* inherit obj */
a713518f	44	} ace_object_t;
a713518f	45
4a4295b2	46	#define ACE_READ_DATA 0x00000001
	47	#define ACE_LIST_DIRECTORY 0x00000001
	48	#define ACE_WRITE_DATA 0x00000002
	49	#define ACE_ADD_FILE 0x00000002
	50	#define ACE_APPEND_DATA 0x00000004
	51	#define ACE_ADD_SUBDIRECTORY 0x00000004
	52	#define ACE_READ_NAMED_ATTRS 0x00000008
	53	#define ACE_WRITE_NAMED_ATTRS 0x00000010
	54	#define ACE_EXECUTE 0x00000020
	55	#define ACE_DELETE_CHILD 0x00000040
	56	#define ACE_READ_ATTRIBUTES 0x00000080
	57	#define ACE_WRITE_ATTRIBUTES 0x00000100
	58	#define ACE_DELETE 0x00010000
	59	#define ACE_READ_ACL 0x00020000
	60	#define ACE_WRITE_ACL 0x00040000
	61	#define ACE_WRITE_OWNER 0x00080000
	62	#define ACE_SYNCHRONIZE 0x00100000
	63
	64	#define ACE_FILE_INHERIT_ACE 0x0001
	65	#define ACE_DIRECTORY_INHERIT_ACE 0x0002
	66	#define ACE_NO_PROPAGATE_INHERIT_ACE 0x0004
	67	#define ACE_INHERIT_ONLY_ACE 0x0008
	68	#define ACE_SUCCESSFUL_ACCESS_ACE_FLAG 0x0010
	69	#define ACE_FAILED_ACCESS_ACE_FLAG 0x0020
	70	#define ACE_IDENTIFIER_GROUP 0x0040
	71	#define ACE_INHERITED_ACE 0x0080
	72	#define ACE_OWNER 0x1000
	73	#define ACE_GROUP 0x2000
	74	#define ACE_EVERYONE 0x4000
	75
	76	#define ACE_ACCESS_ALLOWED_ACE_TYPE 0x0000
	77	#define ACE_ACCESS_DENIED_ACE_TYPE 0x0001
	78	#define ACE_SYSTEM_AUDIT_ACE_TYPE 0x0002
	79	#define ACE_SYSTEM_ALARM_ACE_TYPE 0x0003
	80
	81	#define ACL_AUTO_INHERIT 0x0001
	82	#define ACL_PROTECTED 0x0002
	83	#define ACL_DEFAULTED 0x0004
	84	#define ACL_FLAGS_ALL (ACL_AUTO_INHERIT\|ACL_PROTECTED\|ACL_DEFAULTED)
	85
	86	#define ACE_ACCESS_ALLOWED_COMPOUND_ACE_TYPE 0x04
	87	#define ACE_ACCESS_ALLOWED_OBJECT_ACE_TYPE 0x05
	88	#define ACE_ACCESS_DENIED_OBJECT_ACE_TYPE 0x06
	89	#define ACE_SYSTEM_AUDIT_OBJECT_ACE_TYPE 0x07
	90	#define ACE_SYSTEM_ALARM_OBJECT_ACE_TYPE 0x08
	91	#define ACE_ACCESS_ALLOWED_CALLBACK_ACE_TYPE 0x09
	92	#define ACE_ACCESS_DENIED_CALLBACK_ACE_TYPE 0x0A
	93	#define ACE_ACCESS_ALLOWED_CALLBACK_OBJECT_ACE_TYPE 0x0B
	94	#define ACE_ACCESS_DENIED_CALLBACK_OBJECT_ACE_TYPE 0x0C
	95	#define ACE_SYSTEM_AUDIT_CALLBACK_ACE_TYPE 0x0D
	96	#define ACE_SYSTEM_ALARM_CALLBACK_ACE_TYPE 0x0E
	97	#define ACE_SYSTEM_AUDIT_CALLBACK_OBJECT_ACE_TYPE 0x0F
	98	#define ACE_SYSTEM_ALARM_CALLBACK_OBJECT_ACE_TYPE 0x10
	99
	100	#define ACE_ALL_TYPES 0x001F
	101
	102	#define ACE_TYPE_FLAGS (ACE_OWNER\|ACE_GROUP\|ACE_EVERYONE\|ACE_IDENTIFIER_GROUP)
	103
2a734e9c BB	104	#define ACE_ALL_PERMS (ACE_READ_DATA\|ACE_LIST_DIRECTORY\|ACE_WRITE_DATA\| \
	105	ACE_ADD_FILE\|ACE_APPEND_DATA\|ACE_ADD_SUBDIRECTORY\|ACE_READ_NAMED_ATTRS\| \
	106	ACE_WRITE_NAMED_ATTRS\|ACE_EXECUTE\|ACE_DELETE_CHILD\|ACE_READ_ATTRIBUTES\| \
	107	ACE_WRITE_ATTRIBUTES\|ACE_DELETE\|ACE_READ_ACL\|ACE_WRITE_ACL\| \
	108	ACE_WRITE_OWNER\|ACE_SYNCHRONIZE)
	109
4a4295b2	110	#endif /* _SPL_ACL_H */