Commit | Line | Data |
---|---|---|
d15c345f PM |
1 | /* |
2 | * NetLabel Management Support | |
3 | * | |
4 | * This file defines the management functions for the NetLabel system. The | |
5 | * NetLabel system manages static and dynamic label mappings for network | |
6 | * protocols such as CIPSO and RIPSO. | |
7 | * | |
82c21bfa | 8 | * Author: Paul Moore <paul@paul-moore.com> |
d15c345f PM |
9 | * |
10 | */ | |
11 | ||
12 | /* | |
13 | * (c) Copyright Hewlett-Packard Development Company, L.P., 2006 | |
14 | * | |
15 | * This program is free software; you can redistribute it and/or modify | |
16 | * it under the terms of the GNU General Public License as published by | |
17 | * the Free Software Foundation; either version 2 of the License, or | |
18 | * (at your option) any later version. | |
19 | * | |
20 | * This program is distributed in the hope that it will be useful, | |
21 | * but WITHOUT ANY WARRANTY; without even the implied warranty of | |
22 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See | |
23 | * the GNU General Public License for more details. | |
24 | * | |
25 | * You should have received a copy of the GNU General Public License | |
d484ff15 | 26 | * along with this program; if not, see <http://www.gnu.org/licenses/>. |
d15c345f PM |
27 | * |
28 | */ | |
29 | ||
30 | #ifndef _NETLABEL_MGMT_H | |
31 | #define _NETLABEL_MGMT_H | |
32 | ||
33 | #include <net/netlabel.h> | |
60063497 | 34 | #include <linux/atomic.h> |
d15c345f PM |
35 | |
36 | /* | |
fd385855 | 37 | * The following NetLabel payloads are supported by the management interface. |
d15c345f PM |
38 | * |
39 | * o ADD: | |
40 | * Sent by an application to add a domain mapping to the NetLabel system. | |
d15c345f | 41 | * |
fd385855 | 42 | * Required attributes: |
d15c345f | 43 | * |
fd385855 PM |
44 | * NLBL_MGMT_A_DOMAIN |
45 | * NLBL_MGMT_A_PROTOCOL | |
d15c345f | 46 | * |
63c41688 PM |
47 | * If IPv4 is specified the following attributes are required: |
48 | * | |
49 | * NLBL_MGMT_A_IPV4ADDR | |
50 | * NLBL_MGMT_A_IPV4MASK | |
51 | * | |
52 | * If IPv6 is specified the following attributes are required: | |
53 | * | |
54 | * NLBL_MGMT_A_IPV6ADDR | |
55 | * NLBL_MGMT_A_IPV6MASK | |
56 | * | |
fd385855 | 57 | * If using NETLBL_NLTYPE_CIPSOV4 the following attributes are required: |
d15c345f | 58 | * |
fd385855 | 59 | * NLBL_MGMT_A_CV4DOI |
d15c345f | 60 | * |
8f18e675 HD |
61 | * If using NETLBL_NLTYPE_UNLABELED no other attributes are required, |
62 | * however the following attribute may optionally be sent: | |
63 | * | |
64 | * NLBL_MGMT_A_FAMILY | |
d15c345f PM |
65 | * |
66 | * o REMOVE: | |
67 | * Sent by an application to remove a domain mapping from the NetLabel | |
fd385855 | 68 | * system. |
d15c345f | 69 | * |
fd385855 | 70 | * Required attributes: |
d15c345f | 71 | * |
fd385855 | 72 | * NLBL_MGMT_A_DOMAIN |
d15c345f | 73 | * |
fd385855 | 74 | * o LISTALL: |
d15c345f | 75 | * This message can be sent either from an application or by the kernel in |
fd385855 PM |
76 | * response to an application generated LISTALL message. When sent by an |
77 | * application there is no payload and the NLM_F_DUMP flag should be set. | |
78 | * The kernel should respond with a series of the following messages. | |
d15c345f | 79 | * |
fd385855 | 80 | * Required attributes: |
d15c345f | 81 | * |
fd385855 | 82 | * NLBL_MGMT_A_DOMAIN |
8f18e675 | 83 | * NLBL_MGMT_A_FAMILY |
63c41688 PM |
84 | * |
85 | * If the IP address selectors are not used the following attribute is | |
86 | * required: | |
87 | * | |
fd385855 | 88 | * NLBL_MGMT_A_PROTOCOL |
d15c345f | 89 | * |
63c41688 PM |
90 | * If the IP address selectors are used then the following attritbute is |
91 | * required: | |
92 | * | |
93 | * NLBL_MGMT_A_SELECTORLIST | |
94 | * | |
95 | * If the mapping is using the NETLBL_NLTYPE_CIPSOV4 type then the following | |
96 | * attributes are required: | |
d15c345f | 97 | * |
fd385855 | 98 | * NLBL_MGMT_A_CV4DOI |
d15c345f | 99 | * |
63c41688 PM |
100 | * If the mapping is using the NETLBL_NLTYPE_UNLABELED type no other |
101 | * attributes are required. | |
d15c345f PM |
102 | * |
103 | * o ADDDEF: | |
104 | * Sent by an application to set the default domain mapping for the NetLabel | |
fd385855 | 105 | * system. |
d15c345f | 106 | * |
fd385855 | 107 | * Required attributes: |
d15c345f | 108 | * |
fd385855 | 109 | * NLBL_MGMT_A_PROTOCOL |
d15c345f | 110 | * |
fd385855 | 111 | * If using NETLBL_NLTYPE_CIPSOV4 the following attributes are required: |
d15c345f | 112 | * |
fd385855 | 113 | * NLBL_MGMT_A_CV4DOI |
d15c345f | 114 | * |
8f18e675 HD |
115 | * If using NETLBL_NLTYPE_UNLABELED no other attributes are required, |
116 | * however the following attribute may optionally be sent: | |
117 | * | |
118 | * NLBL_MGMT_A_FAMILY | |
d15c345f PM |
119 | * |
120 | * o REMOVEDEF: | |
121 | * Sent by an application to remove the default domain mapping from the | |
fd385855 | 122 | * NetLabel system, there is no payload. |
d15c345f PM |
123 | * |
124 | * o LISTDEF: | |
125 | * This message can be sent either from an application or by the kernel in | |
126 | * response to an application generated LISTDEF message. When sent by an | |
8f18e675 | 127 | * application there may be an optional payload. |
d15c345f | 128 | * |
8f18e675 HD |
129 | * NLBL_MGMT_A_FAMILY |
130 | * | |
131 | * On success the kernel should send a response using the following format: | |
132 | * | |
133 | * If the IP address selectors are not used the following attributes are | |
63c41688 | 134 | * required: |
d15c345f | 135 | * |
fd385855 | 136 | * NLBL_MGMT_A_PROTOCOL |
8f18e675 | 137 | * NLBL_MGMT_A_FAMILY |
d15c345f | 138 | * |
63c41688 PM |
139 | * If the IP address selectors are used then the following attritbute is |
140 | * required: | |
141 | * | |
142 | * NLBL_MGMT_A_SELECTORLIST | |
143 | * | |
144 | * If the mapping is using the NETLBL_NLTYPE_CIPSOV4 type then the following | |
145 | * attributes are required: | |
d15c345f | 146 | * |
fd385855 | 147 | * NLBL_MGMT_A_CV4DOI |
d15c345f | 148 | * |
63c41688 PM |
149 | * If the mapping is using the NETLBL_NLTYPE_UNLABELED type no other |
150 | * attributes are required. | |
d15c345f | 151 | * |
fd385855 PM |
152 | * o PROTOCOLS: |
153 | * Sent by an application to request a list of configured NetLabel protocols | |
154 | * in the kernel. When sent by an application there is no payload and the | |
155 | * NLM_F_DUMP flag should be set. The kernel should respond with a series of | |
156 | * the following messages. | |
d15c345f | 157 | * |
fd385855 | 158 | * Required attributes: |
d15c345f | 159 | * |
fd385855 | 160 | * NLBL_MGMT_A_PROTOCOL |
d15c345f PM |
161 | * |
162 | * o VERSION: | |
fd385855 PM |
163 | * Sent by an application to request the NetLabel version. When sent by an |
164 | * application there is no payload. This message type is also used by the | |
165 | * kernel to respond to an VERSION request. | |
d15c345f | 166 | * |
fd385855 | 167 | * Required attributes: |
d15c345f | 168 | * |
fd385855 | 169 | * NLBL_MGMT_A_VERSION |
d15c345f PM |
170 | * |
171 | */ | |
172 | ||
173 | /* NetLabel Management commands */ | |
174 | enum { | |
175 | NLBL_MGMT_C_UNSPEC, | |
d15c345f PM |
176 | NLBL_MGMT_C_ADD, |
177 | NLBL_MGMT_C_REMOVE, | |
fd385855 | 178 | NLBL_MGMT_C_LISTALL, |
d15c345f PM |
179 | NLBL_MGMT_C_ADDDEF, |
180 | NLBL_MGMT_C_REMOVEDEF, | |
181 | NLBL_MGMT_C_LISTDEF, | |
fd385855 | 182 | NLBL_MGMT_C_PROTOCOLS, |
d15c345f PM |
183 | NLBL_MGMT_C_VERSION, |
184 | __NLBL_MGMT_C_MAX, | |
185 | }; | |
d15c345f | 186 | |
fd385855 PM |
187 | /* NetLabel Management attributes */ |
188 | enum { | |
189 | NLBL_MGMT_A_UNSPEC, | |
190 | NLBL_MGMT_A_DOMAIN, | |
191 | /* (NLA_NUL_STRING) | |
192 | * the NULL terminated LSM domain string */ | |
193 | NLBL_MGMT_A_PROTOCOL, | |
194 | /* (NLA_U32) | |
195 | * the NetLabel protocol type (defined by NETLBL_NLTYPE_*) */ | |
196 | NLBL_MGMT_A_VERSION, | |
197 | /* (NLA_U32) | |
198 | * the NetLabel protocol version number (defined by | |
199 | * NETLBL_PROTO_VERSION) */ | |
200 | NLBL_MGMT_A_CV4DOI, | |
201 | /* (NLA_U32) | |
202 | * the CIPSOv4 DOI value */ | |
63c41688 PM |
203 | NLBL_MGMT_A_IPV6ADDR, |
204 | /* (NLA_BINARY, struct in6_addr) | |
205 | * an IPv6 address */ | |
206 | NLBL_MGMT_A_IPV6MASK, | |
207 | /* (NLA_BINARY, struct in6_addr) | |
208 | * an IPv6 address mask */ | |
209 | NLBL_MGMT_A_IPV4ADDR, | |
210 | /* (NLA_BINARY, struct in_addr) | |
211 | * an IPv4 address */ | |
212 | NLBL_MGMT_A_IPV4MASK, | |
213 | /* (NLA_BINARY, struct in_addr) | |
214 | * and IPv4 address mask */ | |
215 | NLBL_MGMT_A_ADDRSELECTOR, | |
216 | /* (NLA_NESTED) | |
217 | * an IP address selector, must contain an address, mask, and protocol | |
218 | * attribute plus any protocol specific attributes */ | |
219 | NLBL_MGMT_A_SELECTORLIST, | |
220 | /* (NLA_NESTED) | |
221 | * the selector list, there must be at least one | |
222 | * NLBL_MGMT_A_ADDRSELECTOR attribute */ | |
8f18e675 HD |
223 | NLBL_MGMT_A_FAMILY, |
224 | /* (NLA_U16) | |
225 | * The address family */ | |
dc7de73f HD |
226 | NLBL_MGMT_A_CLPDOI, |
227 | /* (NLA_U32) | |
228 | * the CALIPSO DOI value */ | |
fd385855 PM |
229 | __NLBL_MGMT_A_MAX, |
230 | }; | |
231 | #define NLBL_MGMT_A_MAX (__NLBL_MGMT_A_MAX - 1) | |
232 | ||
d15c345f PM |
233 | /* NetLabel protocol functions */ |
234 | int netlbl_mgmt_genl_init(void); | |
235 | ||
c783f1ce PM |
236 | /* NetLabel configured protocol reference counter */ |
237 | extern atomic_t netlabel_mgmt_protocount; | |
23bcdc1a | 238 | |
d15c345f | 239 | #endif |