Skip to content
Snippets Groups Projects
  • Huw Davies's avatar
    3f09354a
    netlabel: Implement CALIPSO config functions for SMACK. · 3f09354a
    Huw Davies authored
    
    SMACK uses similar functions to control CIPSO, these are
    the equivalent functions for CALIPSO and follow exactly
    the same semantics.
    
    int netlbl_cfg_calipso_add(struct calipso_doi *doi_def,
                               struct netlbl_audit *audit_info)
        Adds a CALIPSO doi.
    
    void netlbl_cfg_calipso_del(u32 doi, struct netlbl_audit *audit_info)
        Removes a CALIPSO doi.
    
    int netlbl_cfg_calipso_map_add(u32 doi, const char *domain,
                                   const struct in6_addr *addr,
                                   const struct in6_addr *mask,
                                   struct netlbl_audit *audit_info)
        Creates a mapping between a domain and a CALIPSO doi.  If
        addr and mask are non-NULL this creates an address-selector
        type mapping.
    
    This also extends netlbl_cfg_map_del() to remove IPv6 address-selector
    mappings.
    
    Signed-off-by: default avatarHuw Davies <huw@codeweavers.com>
    Signed-off-by: default avatarPaul Moore <paul@paul-moore.com>
    3f09354a
    History
    netlabel: Implement CALIPSO config functions for SMACK.
    Huw Davies authored
    
    SMACK uses similar functions to control CIPSO, these are
    the equivalent functions for CALIPSO and follow exactly
    the same semantics.
    
    int netlbl_cfg_calipso_add(struct calipso_doi *doi_def,
                               struct netlbl_audit *audit_info)
        Adds a CALIPSO doi.
    
    void netlbl_cfg_calipso_del(u32 doi, struct netlbl_audit *audit_info)
        Removes a CALIPSO doi.
    
    int netlbl_cfg_calipso_map_add(u32 doi, const char *domain,
                                   const struct in6_addr *addr,
                                   const struct in6_addr *mask,
                                   struct netlbl_audit *audit_info)
        Creates a mapping between a domain and a CALIPSO doi.  If
        addr and mask are non-NULL this creates an address-selector
        type mapping.
    
    This also extends netlbl_cfg_map_del() to remove IPv6 address-selector
    mappings.
    
    Signed-off-by: default avatarHuw Davies <huw@codeweavers.com>
    Signed-off-by: default avatarPaul Moore <paul@paul-moore.com>
Code owners
Assign users and groups as approvers for specific file changes. Learn more.