2 * NetLabel Unlabeled Support
4 * This file defines functions for dealing with unlabeled packets for the
5 * NetLabel system. The NetLabel system manages static and dynamic label
6 * mappings for network protocols such as CIPSO and RIPSO.
8 * Author: Paul Moore <paul.moore@hp.com>
13 * (c) Copyright Hewlett-Packard Development Company, L.P., 2006
15 * This program is free software; you can redistribute it and/or modify
16 * it under the terms of the GNU General Public License as published by
17 * the Free Software Foundation; either version 2 of the License, or
18 * (at your option) any later version.
20 * This program is distributed in the hope that it will be useful,
21 * but WITHOUT ANY WARRANTY; without even the implied warranty of
22 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See
23 * the GNU General Public License for more details.
25 * You should have received a copy of the GNU General Public License
26 * along with this program; if not, write to the Free Software
27 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
31 #ifndef _NETLABEL_UNLABELED_H
32 #define _NETLABEL_UNLABELED_H
34 #include <net/netlabel.h>
37 * The following NetLabel payloads are supported by the Unlabeled subsystem.
40 * Sent by the kernel in response to an applications message, applications
41 * should never send this message.
43 * +----------------------+-----------------------+
44 * | seq number (32 bits) | return code (32 bits) |
45 * +----------------------+-----------------------+
47 * seq number: the sequence number of the original message, taken from the
49 * return code: return value, based on errno values
52 * This message is sent from an application to specify if the kernel should
53 * allow unlabled packets to pass if they do not match any of the static
54 * mappings defined in the unlabeled module.
60 * allow: if true (1) then allow the packets to pass, if false (0) then
64 * This message can be sent either from an application or by the kernel in
65 * response to an application generated LIST message. When sent by an
66 * application there is no payload. The kernel should respond to a LIST
67 * message either with a LIST message on success or an ACK message on
70 * +-----------------------+
71 * | accept flag (32 bits) |
72 * +-----------------------+
74 * accept flag: if true (1) then unlabeled packets are allowed to pass,
75 * if false (0) then unlabeled packets are rejected
79 /* NetLabel Unlabeled commands */
81 NLBL_UNLABEL_C_UNSPEC
,
83 NLBL_UNLABEL_C_ACCEPT
,
87 #define NLBL_UNLABEL_C_MAX (__NLBL_UNLABEL_C_MAX - 1)
89 /* NetLabel protocol functions */
90 int netlbl_unlabel_genl_init(void);
92 /* Process Unlabeled incoming network packets */
93 int netlbl_unlabel_getattr(struct netlbl_lsm_secattr
*secattr
);
95 /* Set the default configuration to allow Unlabeled packets */
96 int netlbl_unlabel_defconf(void);
This page took 0.038601 seconds and 6 git commands to generate.