linux-imx

/*

 * NetLabel System

 *

 * The NetLabel system manages static and dynamic label mappings for network

 * protocols such as CIPSO and RIPSO.

 *

 * Author: Paul Moore <paul@paul-moore.com>

 *

 */

​

/*

 * (c) Copyright Hewlett-Packard Development Company, L.P., 2006, 2008

 *

 * This program is free software;  you can redistribute it and/or modify

 * it under the terms of the GNU General Public License as published by

 * the Free Software Foundation; either version 2 of the License, or

 * (at your option) any later version.

 *

 * This program is distributed in the hope that it will be useful,

 * but WITHOUT ANY WARRANTY;  without even the implied warranty of

 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See

 * the GNU General Public License for more details.

 *

 * You should have received a copy of the GNU General Public License

 * along with this program;  if not, see <http://www.gnu.org/licenses/>.

 *

 */

​

#ifndef _NETLABEL_H

#define _NETLABEL_H

​

#include <linux/types.h>

#include <linux/slab.h>

#include <linux/net.h>

#include <linux/skbuff.h>

#include <linux/in.h>

#include <linux/in6.h>

#include <net/netlink.h>

#include <net/request_sock.h>

#include <linux/refcount.h>

​

struct cipso_v4_doi;

struct calipso_doi;

​

/*

 * NetLabel - A management interface for maintaining network packet label

 *            mapping tables for explicit packet labling protocols.

 *

 * Network protocols such as CIPSO and RIPSO require a label translation layer

 * to convert the label on the packet into something meaningful on the host

 * machine.  In the current Linux implementation these mapping tables live

 * inside the kernel; NetLabel provides a mechanism for user space applications

 * to manage these mapping tables.

 *

 * NetLabel makes use of the Generic NETLINK mechanism as a transport layer to

 * send messages between kernel and user space.  The general format of a

 * NetLabel message is shown below:

 *

 *  +-----------------+-------------------+--------- --- -- -

 *  | struct nlmsghdr | struct genlmsghdr | payload

 *  +-----------------+-------------------+--------- --- -- -

 *

 * The 'nlmsghdr' and 'genlmsghdr' structs should be dealt with like normal.

 * The payload is dependent on the subsystem specified in the

 * 'nlmsghdr->nlmsg_type' and should be defined below, supporting functions

 * should be defined in the corresponding net/netlabel/netlabel_<subsys>.h|c

 * file.  All of the fields in the NetLabel payload are NETLINK attributes, see

 * the include/net/netlink.h file for more information on NETLINK attributes.

 *

 */

​

/*

 * NetLabel NETLINK protocol

 */

​

/* NetLabel NETLINK protocol version

 *  1: initial version

 *  2: added static labels for unlabeled connections

 *  3: network selectors added to the NetLabel/LSM domain mapping and the

 *     CIPSO_V4_MAP_LOCAL CIPSO mapping was added

 */

#define NETLBL_PROTO_VERSION            3

​

/* NetLabel NETLINK types/families */

#define NETLBL_NLTYPE_NONE              0

#define NETLBL_NLTYPE_MGMT              1

#define NETLBL_NLTYPE_MGMT_NAME         "NLBL_MGMT"

#define NETLBL_NLTYPE_RIPSO             2

#define NETLBL_NLTYPE_RIPSO_NAME        "NLBL_RIPSO"

#define NETLBL_NLTYPE_CIPSOV4           3

#define NETLBL_NLTYPE_CIPSOV4_NAME      "NLBL_CIPSOv4"

#define NETLBL_NLTYPE_CIPSOV6           4