linux-imx

/*

 * NetLabel Kernel API

 *

 * This file defines the kernel API for the NetLabel system.  The NetLabel

 * system manages static and dynamic label mappings for network protocols such

 * as CIPSO and RIPSO.

 *

 * Author: Paul Moore <paul@paul-moore.com>

 *

 */

​

/*

 * (c) Copyright Hewlett-Packard Development Company, L.P., 2006, 2008

 *

 * This program is free software;  you can redistribute it and/or modify

 * it under the terms of the GNU General Public License as published by

 * the Free Software Foundation; either version 2 of the License, or

 * (at your option) any later version.

 *

 * This program is distributed in the hope that it will be useful,

 * but WITHOUT ANY WARRANTY;  without even the implied warranty of

 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See

 * the GNU General Public License for more details.

 *

 * You should have received a copy of the GNU General Public License

 * along with this program;  if not, see <http://www.gnu.org/licenses/>.

 *

 */

​

#include <linux/init.h>

#include <linux/types.h>

#include <linux/slab.h>

#include <linux/audit.h>

#include <linux/in.h>

#include <linux/in6.h>

#include <net/ip.h>

#include <net/ipv6.h>

#include <net/netlabel.h>

#include <net/cipso_ipv4.h>

#include <net/calipso.h>

#include <asm/bug.h>

#include <linux/atomic.h>

​

#include "netlabel_domainhash.h"

#include "netlabel_unlabeled.h"

#include "netlabel_cipso_v4.h"

#include "netlabel_calipso.h"

#include "netlabel_user.h"

#include "netlabel_mgmt.h"

#include "netlabel_addrlist.h"

​

/*

 * Configuration Functions

 */

​

/**

 * netlbl_cfg_map_del - Remove a NetLabel/LSM domain mapping

 * @domain: the domain mapping to remove

 * @family: address family

 * @addr: IP address

 * @mask: IP address mask

 * @audit_info: NetLabel audit information

 *

 * Description:

 * Removes a NetLabel/LSM domain mapping.  A @domain value of NULL causes the

 * default domain mapping to be removed.  Returns zero on success, negative

 * values on failure.

 *

 */

int netlbl_cfg_map_del(const char *domain,

               u16 family,

               const void *addr,

               const void *mask,

               struct netlbl_audit *audit_info)

{

    if (addr == NULL && mask == NULL) {

        return netlbl_domhsh_remove(domain, family, audit_info);

    } else if (addr != NULL && mask != NULL) {

        switch (family) {

        case AF_INET:

            return netlbl_domhsh_remove_af4(domain, addr, mask,

                            audit_info);

#if IS_ENABLED(CONFIG_IPV6)

        case AF_INET6:

            return netlbl_domhsh_remove_af6(domain, addr, mask,

                            audit_info);

#endif /* IPv6 */

        default:

            return -EPFNOSUPPORT;

        }

    } else

        return -EINVAL;