diff options
| author | John Johansen <john.johansen@canonical.com> | 2017-08-01 02:36:45 +0200 |
|---|---|---|
| committer | John Johansen <john.johansen@canonical.com> | 2018-05-02 09:48:55 +0200 |
| commit | c092921219d227b13cb80dbecd3545ee66ab89b3 (patch) | |
| tree | 9047e3ecae86ec35208de3a2f60ed31f3c7a3e1b /security/apparmor/include/secid.h | |
| parent | Merge tag 'v4.17-rc3' into apparmor-next (diff) | |
| download | linux-c092921219d227b13cb80dbecd3545ee66ab89b3.tar.xz linux-c092921219d227b13cb80dbecd3545ee66ab89b3.zip | |
apparmor: add support for mapping secids and using secctxes
Use a radix tree to provide a map between the secid and the label,
and along with it a basic ability to provide secctx conversion.
Shared/cached secctx will be added later.
Signed-off-by: John Johansen <john.johansen@canonical.com>
Diffstat (limited to 'security/apparmor/include/secid.h')
| -rw-r--r-- | security/apparmor/include/secid.h | 15 |
1 files changed, 12 insertions, 3 deletions
diff --git a/security/apparmor/include/secid.h b/security/apparmor/include/secid.h index 95ed86a0f1e2..686de8e50a79 100644 --- a/security/apparmor/include/secid.h +++ b/security/apparmor/include/secid.h @@ -3,7 +3,7 @@ * * This file contains AppArmor security identifier (secid) definitions * - * Copyright 2009-2010 Canonical Ltd. + * Copyright 2009-2018 Canonical Ltd. * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License as @@ -14,13 +14,22 @@ #ifndef __AA_SECID_H #define __AA_SECID_H +#include <linux/slab.h> #include <linux/types.h> +struct aa_label; + /* secid value that will not be allocated */ #define AA_SECID_INVALID 0 -#define AA_SECID_ALLOC AA_SECID_INVALID -u32 aa_alloc_secid(void); +struct aa_label *aa_secid_to_label(u32 secid); +int apparmor_secid_to_secctx(u32 secid, char **secdata, u32 *seclen); +int apparmor_secctx_to_secid(const char *secdata, u32 seclen, u32 *secid); +void apparmor_release_secctx(char *secdata, u32 seclen); + + +u32 aa_alloc_secid(struct aa_label *label, gfp_t gfp); void aa_free_secid(u32 secid); +void aa_secid_update(u32 secid, struct aa_label *label); #endif /* __AA_SECID_H */ |