linux-imx

/*

 * Copyright (C) 2007 Casey Schaufler <casey@schaufler-ca.com>

 *

 *  This program is free software; you can redistribute it and/or modify

 *      it under the terms of the GNU General Public License as published by

 *  the Free Software Foundation, version 2.

 *

 * Authors:

 *  Casey Schaufler <casey@schaufler-ca.com>

 *  Ahmed S. Darwish <darwish.07@gmail.com>

 *

 * Special thanks to the authors of selinuxfs.

 *

 *  Karl MacMillan <kmacmillan@tresys.com>

 *  James Morris <jmorris@redhat.com>

 *

 */

​

#include <linux/kernel.h>

#include <linux/vmalloc.h>

#include <linux/security.h>

#include <linux/mutex.h>

#include <linux/slab.h>

#include <net/net_namespace.h>

#include <net/cipso_ipv4.h>

#include <linux/seq_file.h>

#include <linux/ctype.h>

#include <linux/audit.h>

#include <linux/magic.h>

#include "smack.h"

​

#define BEBITS  (sizeof(__be32) * 8)

/*

 * smackfs pseudo filesystem.

 */

​

enum smk_inos {

    SMK_ROOT_INO    = 2,

    SMK_LOAD    = 3,    /* load policy */

    SMK_CIPSO   = 4,    /* load label -> CIPSO mapping */

    SMK_DOI     = 5,    /* CIPSO DOI */

    SMK_DIRECT  = 6,    /* CIPSO level indicating direct label */

    SMK_AMBIENT = 7,    /* internet ambient label */

    SMK_NET4ADDR    = 8,    /* single label hosts */

    SMK_ONLYCAP = 9,    /* the only "capable" label */

    SMK_LOGGING = 10,   /* logging */

    SMK_LOAD_SELF   = 11,   /* task specific rules */

    SMK_ACCESSES    = 12,   /* access policy */

    SMK_MAPPED  = 13,   /* CIPSO level indicating mapped label */

    SMK_LOAD2   = 14,   /* load policy with long labels */

    SMK_LOAD_SELF2  = 15,   /* load task specific rules with long labels */

    SMK_ACCESS2 = 16,   /* make an access check with long labels */

    SMK_CIPSO2  = 17,   /* load long label -> CIPSO mapping */

    SMK_REVOKE_SUBJ = 18,   /* set rules with subject label to '-' */

    SMK_CHANGE_RULE = 19,   /* change or add rules (long labels) */

    SMK_SYSLOG  = 20,   /* change syslog label) */

    SMK_PTRACE  = 21,   /* set ptrace rule */

#ifdef CONFIG_SECURITY_SMACK_BRINGUP

    SMK_UNCONFINED  = 22,   /* define an unconfined label */

#endif

#if IS_ENABLED(CONFIG_IPV6)

    SMK_NET6ADDR    = 23,   /* single label IPv6 hosts */

#endif /* CONFIG_IPV6 */