projects / deliverable / linux.git / blame
| Commit | Line | Data |
|---|---|---|
| 376bd9cb DG |
1 | /* |
| 2 | * SELinux services exported to the rest of the kernel. | |
| 3 | * | |
| 4 | * Author: James Morris <jmorris@redhat.com> | |
| 5 | * | |
| 6 | * Copyright (C) 2005 Red Hat, Inc., James Morris <jmorris@redhat.com> | |
| 7 | * Copyright (C) 2006 Trusted Computer Solutions, Inc. <dgoeddel@trustedcs.com> | |
| e7c34970 | 8 | * Copyright (C) 2006 IBM Corporation, Timothy R. Chavez <tinytim@us.ibm.com> |
| 376bd9cb DG |
9 | * |
| 10 | * This program is free software; you can redistribute it and/or modify | |
| 11 | * it under the terms of the GNU General Public License version 2, | |
| 12 | * as published by the Free Software Foundation. | |
| 13 | */ | |
| 14 | #include <linux/types.h> | |
| 15 | #include <linux/kernel.h> | |
| 16 | #include <linux/module.h> | |
| 17 | #include <linux/selinux.h> | |
| 1b50eed9 | 18 | #include <linux/fs.h> |
| 9c7aa6aa | 19 | #include <linux/ipc.h> |
| 376bd9cb DG |
20 | |
| 21 | #include "security.h" | |
| 22 | #include "objsec.h" | |
| 23 | ||
| 1a70cd40 | 24 | int selinux_sid_to_string(u32 sid, char **ctx, u32 *ctxlen) |
| 1b50eed9 SG |
25 | { |
| 26 | if (selinux_enabled) | |
| 1a70cd40 | 27 | return security_sid_to_context(sid, ctx, ctxlen); |
| 1b50eed9 SG |
28 | else { |
| 29 | *ctx = NULL; | |
| 30 | *ctxlen = 0; | |
| 31 | } | |
| 32 | ||
| 33 | return 0; | |
| 34 | } | |
| 35 | ||
| 36 | void selinux_get_inode_sid(const struct inode *inode, u32 *sid) | |
| 37 | { | |
| 38 | if (selinux_enabled) { | |
| 39 | struct inode_security_struct *isec = inode->i_security; | |
| 40 | *sid = isec->sid; | |
| 41 | return; | |
| 42 | } | |
| 43 | *sid = 0; | |
| 44 | } | |
| 45 | ||
| 9c7aa6aa SG |
46 | void selinux_get_ipc_sid(const struct kern_ipc_perm *ipcp, u32 *sid) |
| 47 | { | |
| 48 | if (selinux_enabled) { | |
| 49 | struct ipc_security_struct *isec = ipcp->security; | |
| 50 | *sid = isec->sid; | |
| 51 | return; | |
| 52 | } | |
| 53 | *sid = 0; | |
| 54 | } | |
| 55 | ||
| e7c34970 SG |
56 | void selinux_get_task_sid(struct task_struct *tsk, u32 *sid) |
| 57 | { | |
| 58 | if (selinux_enabled) { | |
| 59 | struct task_security_struct *tsec = tsk->security; | |
| 60 | *sid = tsec->sid; | |
| 61 | return; | |
| 62 | } | |
| 63 | *sid = 0; | |
| 64 | } | |
| 65 | ||
| c749b29f JM |
66 | int selinux_string_to_sid(char *str, u32 *sid) |
| 67 | { | |
| 68 | if (selinux_enabled) | |
| 69 | return security_context_to_sid(str, strlen(str), sid); | |
| 70 | else { | |
| 71 | *sid = 0; | |
| 72 | return 0; | |
| 73 | } | |
| 74 | } | |
| 75 | EXPORT_SYMBOL_GPL(selinux_string_to_sid); | |
| 76 | ||
| 77 | int selinux_relabel_packet_permission(u32 sid) | |
| 78 | { | |
| 79 | if (selinux_enabled) { | |
| 80 | struct task_security_struct *tsec = current->security; | |
| 81 | ||
| 82 | return avc_has_perm(tsec->sid, sid, SECCLASS_PACKET, | |
| 83 | PACKET__RELABELTO, NULL); | |
| 84 | } | |
| 85 | return 0; | |
| 86 | } | |
| 87 | EXPORT_SYMBOL_GPL(selinux_relabel_packet_permission); |