FM / net

/usr/src/linux-headers-5.15.0-190/include/net/

/usr/src/linux-headers-5.15.0-190/include/net

Name	Size	Mode	Actions
9p/	-	0755	rm
bluetooth/	-	0755	rm
caif/	-	0755	rm
iucv/	-	0755	rm
netfilter/	-	0755	rm
netns/	-	0755	rm
nfc/	-	0755	rm
phonet/	-	0755	rm
sctp/	-	0755	rm
tc_act/	-	0755	rm
6lowpan.h	10270	0644	edit dl rm
act_api.h	8728	0644	edit dl rm
addrconf.h	14594	0644	edit dl rm
af_ieee802154.h	1220	0644	edit dl rm
af_rxrpc.h	2798	0644	edit dl rm
af_unix.h	3375	0644	edit dl rm
af_vsock.h	7592	0644	edit dl rm
ah.h	382	0644	edit dl rm
arp.h	2141	0644	edit dl rm
atmclip.h	1515	0644	edit dl rm
ax25.h	15443	0644	edit dl rm
ax88796.h	1440	0644	edit dl rm
bareudp.h	572	0644	edit dl rm
bonding.h	20263	0644	edit dl rm
bond_3ad.h	9706	0644	edit dl rm
bond_alb.h	6251	0644	edit dl rm
bond_options.h	3876	0644	edit dl rm
bpf_sk_storage.h	1780	0644	edit dl rm
busy_poll.h	3959	0644	edit dl rm
calipso.h	1590	0644	edit dl rm
cfg80211-wext.h	1854	0644	edit dl rm
cfg80211.h	301317	0644	edit dl rm
cfg802154.h	10779	0644	edit dl rm
checksum.h	4869	0644	edit dl rm
cipso_ipv4.h	7548	0644	edit dl rm
cls_cgroup.h	2086	0644	edit dl rm
codel.h	5782	0644	edit dl rm
codel_impl.h	8167	0644	edit dl rm
codel_qdisc.h	2973	0644	edit dl rm
compat.h	2586	0644	edit dl rm
datalink.h	619	0644	edit dl rm
dcbevent.h	742	0644	edit dl rm
dcbnl.h	4317	0644	edit dl rm
devlink.h	63593	0644	edit dl rm
dsa.h	36231	0644	edit dl rm
dsfield.h	1147	0644	edit dl rm
dst.h	15153	0644	edit dl rm
dst_cache.h	3031	0644	edit dl rm
dst_metadata.h	5521	0644	edit dl rm
dst_ops.h	2125	0644	edit dl rm
erspan.h	9180	0644	edit dl rm
esp.h	1190	0644	edit dl rm
espintcp.h	966	0644	edit dl rm
ethoc.h	391	0644	edit dl rm
failover.h	1178	0644	edit dl rm
fib_notifier.h	1384	0644	edit dl rm
fib_rules.h	6450	0644	edit dl rm
firewire.h	636	0644	edit dl rm
flow.h	5119	0644	edit dl rm
flow_dissector.h	11033	0644	edit dl rm
flow_offload.h	15938	0644	edit dl rm
fou.h	549	0644	edit dl rm
fq.h	2528	0644	edit dl rm
fq_impl.h	8076	0644	edit dl rm
garp.h	2678	0644	edit dl rm
genetlink.h	13854	0644	edit dl rm
geneve.h	1898	0644	edit dl rm
gen_stats.h	2889	0644	edit dl rm
gre.h	3369	0644	edit dl rm
gro.h	783	0644	edit dl rm
gro_cells.h	443	0644	edit dl rm
gtp.h	633	0644	edit dl rm
gue.h	3313	0644	edit dl rm
hwbm.h	969	0644	edit dl rm
icmp.h	1918	0644	edit dl rm
ieee80211_radiotap.h	13518	0644	edit dl rm
ieee802154_netdev.h	10095	0644	edit dl rm
ife.h	1057	0644	edit dl rm
if_inet6.h	6692	0644	edit dl rm
ila.h	291	0644	edit dl rm
inet6_connection_sock.h	765	0644	edit dl rm
inet6_hashtables.h	4259	0644	edit dl rm
inetpeer.h	3372	0644	edit dl rm
inet_common.h	2614	0644	edit dl rm
inet_connection_sock.h	11608	0644	edit dl rm
inet_ecn.h	7625	0644	edit dl rm
inet_frag.h	5046	0644	edit dl rm
inet_hashtables.h	12532	0644	edit dl rm
inet_sock.h	9994	0644	edit dl rm
inet_timewait_sock.h	3735	0644	edit dl rm
ioam6.h	1248	0644	edit dl rm
ip.h	22759	0644	edit dl rm
ip6_checksum.h	2770	0644	edit dl rm
ip6_fib.h	16280	0644	edit dl rm
ip6_route.h	10230	0644	edit dl rm
ip6_tunnel.h	5096	0644	edit dl rm
ipcomp.h	659	0644	edit dl rm
ipconfig.h	811	0644	edit dl rm
ipv6.h	35990	0644	edit dl rm
ipv6_frag.h	3361	0644	edit dl rm
ipv6_stubs.h	3482	0644	edit dl rm
ip_fib.h	16346	0644	edit dl rm
ip_tunnels.h	15949	0644	edit dl rm
ip_vs.h	50588	0644	edit dl rm
iw_handler.h	21413	0644	edit dl rm
kcm.h	4961	0644	edit dl rm
l3mdev.h	7202	0644	edit dl rm
lag.h	409	0644	edit dl rm
lapb.h	4938	0644	edit dl rm
lib80211.h	4017	0644	edit dl rm
llc.h	4514	0644	edit dl rm
llc_conn.h	4155	0644	edit dl rm
llc_c_ac.h	9537	0644	edit dl rm
llc_c_ev.h	10940	0644	edit dl rm
llc_c_st.h	1762	0644	edit dl rm
llc_if.h	2210	0644	edit dl rm
llc_pdu.h	14697	0644	edit dl rm
llc_sap.h	1108	0644	edit dl rm
llc_s_ac.h	1591	0644	edit dl rm
llc_s_ev.h	2255	0644	edit dl rm
llc_s_st.h	947	0644	edit dl rm
lwtunnel.h	6806	0644	edit dl rm
mac80211.h	274120	0644	edit dl rm
mac802154.h	15235	0644	edit dl rm
macsec.h	7084	0644	edit dl rm
mctp.h	6155	0644	edit dl rm
mctpdevice.h	841	0644	edit dl rm
mip6.h	1016	0644	edit dl rm
mld.h	2918	0644	edit dl rm
mpls.h	943	0644	edit dl rm
mpls_iptunnel.h	429	0644	edit dl rm
mptcp.h	6776	0644	edit dl rm
mrp.h	3119	0644	edit dl rm
ncsi.h	1964	0644	edit dl rm
ndisc.h	15150	0644	edit dl rm
neighbour.h	16099	0644	edit dl rm
netevent.h	1044	0644	edit dl rm
netlabel.h	20676	0644	edit dl rm
netlink.h	61892	0644	edit dl rm
netprio_cgroup.h	1047	0644	edit dl rm
netrom.h	7895	0644	edit dl rm
net_failover.h	1023	0644	edit dl rm
net_namespace.h	12795	0644	edit dl rm
net_ratelimit.h	220	0644	edit dl rm
nexthop.h	12565	0644	edit dl rm
nl802154.h	12384	0644	edit dl rm
nsh.h	12602	0644	edit dl rm
p8022.h	447	0644	edit dl rm
page_pool.h	8646	0644	edit dl rm
pie.h	3695	0644	edit dl rm
ping.h	2970	0644	edit dl rm
pkt_cls.h	24431	0644	edit dl rm
pkt_sched.h	6042	0644	edit dl rm
pptp.h	557	0644	edit dl rm
protocol.h	3900	0644	edit dl rm
psample.h	1083	0644	edit dl rm
psnap.h	351	0644	edit dl rm
raw.h	2136	0644	edit dl rm
rawv6.h	854	0644	edit dl rm
red.h	11600	0644	edit dl rm
regulatory.h	10901	0644	edit dl rm
request_sock.h	6660	0644	edit dl rm
rose.h	7802	0644	edit dl rm
route.h	11361	0644	edit dl rm
rpl.h	839	0644	edit dl rm
rsi_91x.h	1710	0644	edit dl rm
rtnetlink.h	7638	0644	edit dl rm
rtnh.h	859	0644	edit dl rm
sch_generic.h	34991	0644	edit dl rm
scm.h	3877	0644	edit dl rm
secure_seq.h	855	0644	edit dl rm
seg6.h	2237	0644	edit dl rm
seg6_hmac.h	1473	0644	edit dl rm
seg6_local.h	644	0644	edit dl rm
selftests.h	582	0644	edit dl rm
slhc_vj.h	6831	0644	edit dl rm
smc.h	2513	0644	edit dl rm
snmp.h	5268	0644	edit dl rm
sock.h	86351	0644	edit dl rm
sock_reuseport.h	1873	0644	edit dl rm
Space.h	737	0644	edit dl rm
stp.h	383	0644	edit dl rm
strparser.h	4250	0644	edit dl rm
switchdev.h	14614	0644	edit dl rm
tcp.h	75327	0644	edit dl rm
tcp_states.h	1225	0644	edit dl rm
timewait_sock.h	925	0644	edit dl rm
tipc.h	2405	0644	edit dl rm
tls.h	21465	0644	edit dl rm
tls_toe.h	3006	0644	edit dl rm
transp_v6.h	1996	0644	edit dl rm
tso.h	566	0644	edit dl rm
tun_proto.h	988	0644	edit dl rm
udp.h	17035	0644	edit dl rm
udplite.h	3762	0644	edit dl rm
udp_tunnel.h	12739	0644	edit dl rm
vsock_addr.h	662	0644	edit dl rm
vxlan.h	14424	0644	edit dl rm
wext.h	1510	0644	edit dl rm
x25.h	9718	0644	edit dl rm
x25device.h	387	0644	edit dl rm
xdp.h	8829	0644	edit dl rm
xdp_priv.h	446	0644	edit dl rm
xdp_sock.h	2094	0644	edit dl rm
xdp_sock_drv.h	5607	0644	edit dl rm
xfrm.h	56304	0644	edit dl rm
xsk_buff_pool.h	5138	0644	edit dl rm

Edit: /usr/src/linux-headers-5.15.0-190/include/net/cipso_ipv4.h (7548B)

/* SPDX-License-Identifier: GPL-2.0-or-later */
/*
 * CIPSO - Commercial IP Security Option
 *
 * This is an implementation of the CIPSO 2.2 protocol as specified in
 * draft-ietf-cipso-ipsecurity-01.txt with additional tag types as found in
 * FIPS-188, copies of both documents can be found in the Documentation
 * directory.  While CIPSO never became a full IETF RFC standard many vendors
 * have chosen to adopt the protocol and over the years it has become a
 * de-facto standard for labeled networking.
 *
 * Author: Paul Moore <paul@paul-moore.com>
 */

/*
 * (c) Copyright Hewlett-Packard Development Company, L.P., 2006
 */

#ifndef _CIPSO_IPV4_H
#define _CIPSO_IPV4_H

#include <linux/types.h>
#include <linux/rcupdate.h>
#include <linux/list.h>
#include <linux/net.h>
#include <linux/skbuff.h>
#include <net/netlabel.h>
#include <net/request_sock.h>
#include <linux/atomic.h>
#include <linux/refcount.h>
#include <asm/unaligned.h>

/* known doi values */
#define CIPSO_V4_DOI_UNKNOWN          0x00000000

/* standard tag types */
#define CIPSO_V4_TAG_INVALID          0
#define CIPSO_V4_TAG_RBITMAP          1
#define CIPSO_V4_TAG_ENUM             2
#define CIPSO_V4_TAG_RANGE            5
#define CIPSO_V4_TAG_PBITMAP          6
#define CIPSO_V4_TAG_FREEFORM         7

/* non-standard tag types (tags > 127) */
#define CIPSO_V4_TAG_LOCAL            128

/* doi mapping types */
#define CIPSO_V4_MAP_UNKNOWN          0
#define CIPSO_V4_MAP_TRANS            1
#define CIPSO_V4_MAP_PASS             2
#define CIPSO_V4_MAP_LOCAL            3

/* limits */
#define CIPSO_V4_MAX_REM_LVLS         255
#define CIPSO_V4_INV_LVL              0x80000000
#define CIPSO_V4_MAX_LOC_LVLS         (CIPSO_V4_INV_LVL - 1)
#define CIPSO_V4_MAX_REM_CATS         65534
#define CIPSO_V4_INV_CAT              0x80000000
#define CIPSO_V4_MAX_LOC_CATS         (CIPSO_V4_INV_CAT - 1)

/*
 * CIPSO DOI definitions
 */

/* DOI definition struct */
#define CIPSO_V4_TAG_MAXCNT           5
struct cipso_v4_doi {
	u32 doi;
	u32 type;
	union {
		struct cipso_v4_std_map_tbl *std;
	} map;
	u8 tags[CIPSO_V4_TAG_MAXCNT];

refcount_t refcount;
	struct list_head list;
	struct rcu_head rcu;
};

/* Standard CIPSO mapping table */
/* NOTE: the highest order bit (i.e. 0x80000000) is an 'invalid' flag, if the
 *       bit is set then consider that value as unspecified, meaning the
 *       mapping for that particular level/category is invalid */
struct cipso_v4_std_map_tbl {
	struct {
		u32 *cipso;
		u32 *local;
		u32 cipso_size;
		u32 local_size;
	} lvl;
	struct {
		u32 *cipso;
		u32 *local;
		u32 cipso_size;
		u32 local_size;
	} cat;
};

/*
 * Sysctl Variables
 */

#ifdef CONFIG_NETLABEL
extern int cipso_v4_cache_enabled;
extern int cipso_v4_cache_bucketsize;
extern int cipso_v4_rbm_optfmt;
extern int cipso_v4_rbm_strictvalid;
#endif

/*
 * DOI List Functions
 */

#ifdef CONFIG_NETLABEL
int cipso_v4_doi_add(struct cipso_v4_doi *doi_def,
		     struct netlbl_audit *audit_info);
void cipso_v4_doi_free(struct cipso_v4_doi *doi_def);
int cipso_v4_doi_remove(u32 doi, struct netlbl_audit *audit_info);
struct cipso_v4_doi *cipso_v4_doi_getdef(u32 doi);
void cipso_v4_doi_putdef(struct cipso_v4_doi *doi_def);
int cipso_v4_doi_walk(u32 *skip_cnt,
		     int (*callback) (struct cipso_v4_doi *doi_def, void *arg),
	             void *cb_arg);
#else
static inline int cipso_v4_doi_add(struct cipso_v4_doi *doi_def,
				   struct netlbl_audit *audit_info)
{
	return -ENOSYS;
}

static inline void cipso_v4_doi_free(struct cipso_v4_doi *doi_def)
{
	return;
}

static inline int cipso_v4_doi_remove(u32 doi,
				      struct netlbl_audit *audit_info)
{
	return 0;
}

static inline struct cipso_v4_doi *cipso_v4_doi_getdef(u32 doi)
{
	return NULL;
}

static inline int cipso_v4_doi_walk(u32 *skip_cnt,
		     int (*callback) (struct cipso_v4_doi *doi_def, void *arg),
		     void *cb_arg)
{
	return 0;
}
#endif /* CONFIG_NETLABEL */

/*
 * Label Mapping Cache Functions
 */

#ifdef CONFIG_NETLABEL
void cipso_v4_cache_invalidate(void);
int cipso_v4_cache_add(const unsigned char *cipso_ptr,
		       const struct netlbl_lsm_secattr *secattr);
#else
static inline void cipso_v4_cache_invalidate(void)
{
	return;
}

static inline int cipso_v4_cache_add(const unsigned char *cipso_ptr,
				     const struct netlbl_lsm_secattr *secattr)
{
	return 0;
}
#endif /* CONFIG_NETLABEL */

/*
 * Protocol Handling Functions
 */

#ifdef CONFIG_NETLABEL
void cipso_v4_error(struct sk_buff *skb, int error, u32 gateway);
int cipso_v4_getattr(const unsigned char *cipso,
		     struct netlbl_lsm_secattr *secattr);
int cipso_v4_sock_setattr(struct sock *sk,
			  const struct cipso_v4_doi *doi_def,
			  const struct netlbl_lsm_secattr *secattr);
void cipso_v4_sock_delattr(struct sock *sk);
int cipso_v4_sock_getattr(struct sock *sk, struct netlbl_lsm_secattr *secattr);
int cipso_v4_req_setattr(struct request_sock *req,
			 const struct cipso_v4_doi *doi_def,
			 const struct netlbl_lsm_secattr *secattr);
void cipso_v4_req_delattr(struct request_sock *req);
int cipso_v4_skbuff_setattr(struct sk_buff *skb,
			    const struct cipso_v4_doi *doi_def,
			    const struct netlbl_lsm_secattr *secattr);
int cipso_v4_skbuff_delattr(struct sk_buff *skb);
int cipso_v4_skbuff_getattr(const struct sk_buff *skb,
			    struct netlbl_lsm_secattr *secattr);
unsigned char *cipso_v4_optptr(const struct sk_buff *skb);
int cipso_v4_validate(const struct sk_buff *skb, unsigned char **option);
#else
static inline void cipso_v4_error(struct sk_buff *skb,
				  int error,
				  u32 gateway)
{
	return;
}

static inline int cipso_v4_getattr(const unsigned char *cipso,
				   struct netlbl_lsm_secattr *secattr)
{
	return -ENOSYS;
}

static inline int cipso_v4_sock_setattr(struct sock *sk,
				      const struct cipso_v4_doi *doi_def,
				      const struct netlbl_lsm_secattr *secattr)
{
	return -ENOSYS;
}

static inline void cipso_v4_sock_delattr(struct sock *sk)
{
}

static inline int cipso_v4_sock_getattr(struct sock *sk,
					struct netlbl_lsm_secattr *secattr)
{
	return -ENOSYS;
}

static inline int cipso_v4_req_setattr(struct request_sock *req,
				       const struct cipso_v4_doi *doi_def,
				       const struct netlbl_lsm_secattr *secattr)
{
	return -ENOSYS;
}

static inline void cipso_v4_req_delattr(struct request_sock *req)
{
	return;
}

static inline int cipso_v4_skbuff_setattr(struct sk_buff *skb,
				      const struct cipso_v4_doi *doi_def,
				      const struct netlbl_lsm_secattr *secattr)
{
	return -ENOSYS;
}

static inline int cipso_v4_skbuff_delattr(struct sk_buff *skb)
{
	return -ENOSYS;
}

static inline int cipso_v4_skbuff_getattr(const struct sk_buff *skb,
					  struct netlbl_lsm_secattr *secattr)
{
	return -ENOSYS;
}

static inline unsigned char *cipso_v4_optptr(const struct sk_buff *skb)
{
	return NULL;
}

static inline int cipso_v4_validate(const struct sk_buff *skb,
				    unsigned char **option)
{
	unsigned char *opt = *option;
	unsigned char err_offset = 0;
	u8 opt_len = opt[1];
	u8 opt_iter;
	u8 tag_len;

if (opt_len < 8) {
		err_offset = 1;
		goto out;
	}

if (get_unaligned_be32(&opt[2]) == 0) {
		err_offset = 2;
		goto out;
	}

for (opt_iter = 6; opt_iter < opt_len;) {
		if (opt_iter + 1 == opt_len) {
			err_offset = opt_iter;
			goto out;
		}
		tag_len = opt[opt_iter + 1];
		if ((tag_len == 0) || (tag_len > (opt_len - opt_iter))) {
			err_offset = opt_iter + 1;
			goto out;
		}
		opt_iter += tag_len;
	}

out:
	*option = opt + err_offset;
	return err_offset;

}
#endif /* CONFIG_NETLABEL */

#endif /* _CIPSO_IPV4_H */

cmd: