FM / net

/usr/src/linux-headers-5.15.0-190/include/net/

/usr/src/linux-headers-5.15.0-190/include/net

Name	Size	Mode	Actions
9p/	-	0755	rm
bluetooth/	-	0755	rm
caif/	-	0755	rm
iucv/	-	0755	rm
netfilter/	-	0755	rm
netns/	-	0755	rm
nfc/	-	0755	rm
phonet/	-	0755	rm
sctp/	-	0755	rm
tc_act/	-	0755	rm
6lowpan.h	10270	0644	edit dl rm
act_api.h	8728	0644	edit dl rm
addrconf.h	14594	0644	edit dl rm
af_ieee802154.h	1220	0644	edit dl rm
af_rxrpc.h	2798	0644	edit dl rm
af_unix.h	3375	0644	edit dl rm
af_vsock.h	7592	0644	edit dl rm
ah.h	382	0644	edit dl rm
arp.h	2141	0644	edit dl rm
atmclip.h	1515	0644	edit dl rm
ax25.h	15443	0644	edit dl rm
ax88796.h	1440	0644	edit dl rm
bareudp.h	572	0644	edit dl rm
bonding.h	20263	0644	edit dl rm
bond_3ad.h	9706	0644	edit dl rm
bond_alb.h	6251	0644	edit dl rm
bond_options.h	3876	0644	edit dl rm
bpf_sk_storage.h	1780	0644	edit dl rm
busy_poll.h	3959	0644	edit dl rm
calipso.h	1590	0644	edit dl rm
cfg80211-wext.h	1854	0644	edit dl rm
cfg80211.h	301317	0644	edit dl rm
cfg802154.h	10779	0644	edit dl rm
checksum.h	4869	0644	edit dl rm
cipso_ipv4.h	7548	0644	edit dl rm
cls_cgroup.h	2086	0644	edit dl rm
codel.h	5782	0644	edit dl rm
codel_impl.h	8167	0644	edit dl rm
codel_qdisc.h	2973	0644	edit dl rm
compat.h	2586	0644	edit dl rm
datalink.h	619	0644	edit dl rm
dcbevent.h	742	0644	edit dl rm
dcbnl.h	4317	0644	edit dl rm
devlink.h	63593	0644	edit dl rm
dsa.h	36231	0644	edit dl rm
dsfield.h	1147	0644	edit dl rm
dst.h	15153	0644	edit dl rm
dst_cache.h	3031	0644	edit dl rm
dst_metadata.h	5521	0644	edit dl rm
dst_ops.h	2125	0644	edit dl rm
erspan.h	9180	0644	edit dl rm
esp.h	1190	0644	edit dl rm
espintcp.h	966	0644	edit dl rm
ethoc.h	391	0644	edit dl rm
failover.h	1178	0644	edit dl rm
fib_notifier.h	1384	0644	edit dl rm
fib_rules.h	6450	0644	edit dl rm
firewire.h	636	0644	edit dl rm
flow.h	5119	0644	edit dl rm
flow_dissector.h	11033	0644	edit dl rm
flow_offload.h	15938	0644	edit dl rm
fou.h	549	0644	edit dl rm
fq.h	2528	0644	edit dl rm
fq_impl.h	8076	0644	edit dl rm
garp.h	2678	0644	edit dl rm
genetlink.h	13854	0644	edit dl rm
geneve.h	1898	0644	edit dl rm
gen_stats.h	2889	0644	edit dl rm
gre.h	3369	0644	edit dl rm
gro.h	783	0644	edit dl rm
gro_cells.h	443	0644	edit dl rm
gtp.h	633	0644	edit dl rm
gue.h	3313	0644	edit dl rm
hwbm.h	969	0644	edit dl rm
icmp.h	1918	0644	edit dl rm
ieee80211_radiotap.h	13518	0644	edit dl rm
ieee802154_netdev.h	10095	0644	edit dl rm
ife.h	1057	0644	edit dl rm
if_inet6.h	6692	0644	edit dl rm
ila.h	291	0644	edit dl rm
inet6_connection_sock.h	765	0644	edit dl rm
inet6_hashtables.h	4259	0644	edit dl rm
inetpeer.h	3372	0644	edit dl rm
inet_common.h	2614	0644	edit dl rm
inet_connection_sock.h	11608	0644	edit dl rm
inet_ecn.h	7625	0644	edit dl rm
inet_frag.h	5046	0644	edit dl rm
inet_hashtables.h	12532	0644	edit dl rm
inet_sock.h	9994	0644	edit dl rm
inet_timewait_sock.h	3735	0644	edit dl rm
ioam6.h	1248	0644	edit dl rm
ip.h	22759	0644	edit dl rm
ip6_checksum.h	2770	0644	edit dl rm
ip6_fib.h	16280	0644	edit dl rm
ip6_route.h	10230	0644	edit dl rm
ip6_tunnel.h	5096	0644	edit dl rm
ipcomp.h	659	0644	edit dl rm
ipconfig.h	811	0644	edit dl rm
ipv6.h	35990	0644	edit dl rm
ipv6_frag.h	3361	0644	edit dl rm
ipv6_stubs.h	3482	0644	edit dl rm
ip_fib.h	16346	0644	edit dl rm
ip_tunnels.h	15949	0644	edit dl rm
ip_vs.h	50588	0644	edit dl rm
iw_handler.h	21413	0644	edit dl rm
kcm.h	4961	0644	edit dl rm
l3mdev.h	7202	0644	edit dl rm
lag.h	409	0644	edit dl rm
lapb.h	4938	0644	edit dl rm
lib80211.h	4017	0644	edit dl rm
llc.h	4514	0644	edit dl rm
llc_conn.h	4155	0644	edit dl rm
llc_c_ac.h	9537	0644	edit dl rm
llc_c_ev.h	10940	0644	edit dl rm
llc_c_st.h	1762	0644	edit dl rm
llc_if.h	2210	0644	edit dl rm
llc_pdu.h	14697	0644	edit dl rm
llc_sap.h	1108	0644	edit dl rm
llc_s_ac.h	1591	0644	edit dl rm
llc_s_ev.h	2255	0644	edit dl rm
llc_s_st.h	947	0644	edit dl rm
lwtunnel.h	6806	0644	edit dl rm
mac80211.h	274120	0644	edit dl rm
mac802154.h	15235	0644	edit dl rm
macsec.h	7084	0644	edit dl rm
mctp.h	6155	0644	edit dl rm
mctpdevice.h	841	0644	edit dl rm
mip6.h	1016	0644	edit dl rm
mld.h	2918	0644	edit dl rm
mpls.h	943	0644	edit dl rm
mpls_iptunnel.h	429	0644	edit dl rm
mptcp.h	6776	0644	edit dl rm
mrp.h	3119	0644	edit dl rm
ncsi.h	1964	0644	edit dl rm
ndisc.h	15150	0644	edit dl rm
neighbour.h	16099	0644	edit dl rm
netevent.h	1044	0644	edit dl rm
netlabel.h	20676	0644	edit dl rm
netlink.h	61892	0644	edit dl rm
netprio_cgroup.h	1047	0644	edit dl rm
netrom.h	7895	0644	edit dl rm
net_failover.h	1023	0644	edit dl rm
net_namespace.h	12795	0644	edit dl rm
net_ratelimit.h	220	0644	edit dl rm
nexthop.h	12565	0644	edit dl rm
nl802154.h	12384	0644	edit dl rm
nsh.h	12602	0644	edit dl rm
p8022.h	447	0644	edit dl rm
page_pool.h	8646	0644	edit dl rm
pie.h	3695	0644	edit dl rm
ping.h	2970	0644	edit dl rm
pkt_cls.h	24431	0644	edit dl rm
pkt_sched.h	6042	0644	edit dl rm
pptp.h	557	0644	edit dl rm
protocol.h	3900	0644	edit dl rm
psample.h	1083	0644	edit dl rm
psnap.h	351	0644	edit dl rm
raw.h	2136	0644	edit dl rm
rawv6.h	854	0644	edit dl rm
red.h	11600	0644	edit dl rm
regulatory.h	10901	0644	edit dl rm
request_sock.h	6660	0644	edit dl rm
rose.h	7802	0644	edit dl rm
route.h	11361	0644	edit dl rm
rpl.h	839	0644	edit dl rm
rsi_91x.h	1710	0644	edit dl rm
rtnetlink.h	7638	0644	edit dl rm
rtnh.h	859	0644	edit dl rm
sch_generic.h	34991	0644	edit dl rm
scm.h	3877	0644	edit dl rm
secure_seq.h	855	0644	edit dl rm
seg6.h	2237	0644	edit dl rm
seg6_hmac.h	1473	0644	edit dl rm
seg6_local.h	644	0644	edit dl rm
selftests.h	582	0644	edit dl rm
slhc_vj.h	6831	0644	edit dl rm
smc.h	2513	0644	edit dl rm
snmp.h	5268	0644	edit dl rm
sock.h	86351	0644	edit dl rm
sock_reuseport.h	1873	0644	edit dl rm
Space.h	737	0644	edit dl rm
stp.h	383	0644	edit dl rm
strparser.h	4250	0644	edit dl rm
switchdev.h	14614	0644	edit dl rm
tcp.h	75327	0644	edit dl rm
tcp_states.h	1225	0644	edit dl rm
timewait_sock.h	925	0644	edit dl rm
tipc.h	2405	0644	edit dl rm
tls.h	21465	0644	edit dl rm
tls_toe.h	3006	0644	edit dl rm
transp_v6.h	1996	0644	edit dl rm
tso.h	566	0644	edit dl rm
tun_proto.h	988	0644	edit dl rm
udp.h	17035	0644	edit dl rm
udplite.h	3762	0644	edit dl rm
udp_tunnel.h	12739	0644	edit dl rm
vsock_addr.h	662	0644	edit dl rm
vxlan.h	14424	0644	edit dl rm
wext.h	1510	0644	edit dl rm
x25.h	9718	0644	edit dl rm
x25device.h	387	0644	edit dl rm
xdp.h	8829	0644	edit dl rm
xdp_priv.h	446	0644	edit dl rm
xdp_sock.h	2094	0644	edit dl rm
xdp_sock_drv.h	5607	0644	edit dl rm
xfrm.h	56304	0644	edit dl rm
xsk_buff_pool.h	5138	0644	edit dl rm

Edit: /usr/src/linux-headers-5.15.0-190/include/net/netlabel.h (20676B)

/* SPDX-License-Identifier: GPL-2.0-or-later */
/*
 * NetLabel System
 *
 * The NetLabel system manages static and dynamic label mappings for network
 * protocols such as CIPSO and RIPSO.
 *
 * Author: Paul Moore <paul@paul-moore.com>
 */

/*
 * (c) Copyright Hewlett-Packard Development Company, L.P., 2006, 2008
 */

#ifndef _NETLABEL_H
#define _NETLABEL_H

#include <linux/types.h>
#include <linux/slab.h>
#include <linux/net.h>
#include <linux/skbuff.h>
#include <linux/in.h>
#include <linux/in6.h>
#include <net/netlink.h>
#include <net/request_sock.h>
#include <linux/refcount.h>

struct cipso_v4_doi;
struct calipso_doi;

/*
 * NetLabel - A management interface for maintaining network packet label
 *            mapping tables for explicit packet labling protocols.
 *
 * Network protocols such as CIPSO and RIPSO require a label translation layer
 * to convert the label on the packet into something meaningful on the host
 * machine.  In the current Linux implementation these mapping tables live
 * inside the kernel; NetLabel provides a mechanism for user space applications
 * to manage these mapping tables.
 *
 * NetLabel makes use of the Generic NETLINK mechanism as a transport layer to
 * send messages between kernel and user space.  The general format of a
 * NetLabel message is shown below:
 *
 *  +-----------------+-------------------+--------- --- -- -
 *  | struct nlmsghdr | struct genlmsghdr | payload
 *  +-----------------+-------------------+--------- --- -- -
 *
 * The 'nlmsghdr' and 'genlmsghdr' structs should be dealt with like normal.
 * The payload is dependent on the subsystem specified in the
 * 'nlmsghdr->nlmsg_type' and should be defined below, supporting functions
 * should be defined in the corresponding net/netlabel/netlabel_<subsys>.h|c
 * file.  All of the fields in the NetLabel payload are NETLINK attributes, see
 * the include/net/netlink.h file for more information on NETLINK attributes.
 *
 */

/*
 * NetLabel NETLINK protocol
 */

/* NetLabel NETLINK protocol version
 *  1: initial version
 *  2: added static labels for unlabeled connections
 *  3: network selectors added to the NetLabel/LSM domain mapping and the
 *     CIPSO_V4_MAP_LOCAL CIPSO mapping was added
 */
#define NETLBL_PROTO_VERSION            3

/* NetLabel NETLINK types/families */
#define NETLBL_NLTYPE_NONE              0
#define NETLBL_NLTYPE_MGMT              1
#define NETLBL_NLTYPE_MGMT_NAME         "NLBL_MGMT"
#define NETLBL_NLTYPE_RIPSO             2
#define NETLBL_NLTYPE_RIPSO_NAME        "NLBL_RIPSO"
#define NETLBL_NLTYPE_CIPSOV4           3
#define NETLBL_NLTYPE_CIPSOV4_NAME      "NLBL_CIPSOv4"
#define NETLBL_NLTYPE_CIPSOV6           4
#define NETLBL_NLTYPE_CIPSOV6_NAME      "NLBL_CIPSOv6"
#define NETLBL_NLTYPE_UNLABELED         5
#define NETLBL_NLTYPE_UNLABELED_NAME    "NLBL_UNLBL"
#define NETLBL_NLTYPE_ADDRSELECT        6
#define NETLBL_NLTYPE_ADDRSELECT_NAME   "NLBL_ADRSEL"
#define NETLBL_NLTYPE_CALIPSO           7
#define NETLBL_NLTYPE_CALIPSO_NAME      "NLBL_CALIPSO"

/*
 * NetLabel - Kernel API for accessing the network packet label mappings.
 *
 * The following functions are provided for use by other kernel modules,
 * specifically kernel LSM modules, to provide a consistent, transparent API
 * for dealing with explicit packet labeling protocols such as CIPSO and
 * RIPSO.  The functions defined here are implemented in the
 * net/netlabel/netlabel_kapi.c file.
 *
 */

/* NetLabel audit information */
struct netlbl_audit {
	struct lsmblob lsmdata;
	kuid_t loginuid;
	unsigned int sessionid;
};

/*
 * LSM security attributes
 */

/**
 * struct netlbl_lsm_cache - NetLabel LSM security attribute cache
 * @refcount: atomic reference counter
 * @free: LSM supplied function to free the cache data
 * @data: LSM supplied cache data
 *
 * Description:
 * This structure is provided for LSMs which wish to make use of the NetLabel
 * caching mechanism to store LSM specific data/attributes in the NetLabel
 * cache.  If the LSM has to perform a lot of translation from the NetLabel
 * security attributes into it's own internal representation then the cache
 * mechanism can provide a way to eliminate some or all of that translation
 * overhead on a cache hit.
 *
 */
struct netlbl_lsm_cache {
	refcount_t refcount;
	void (*free) (const void *data);
	void *data;
};

/**
 * struct netlbl_lsm_catmap - NetLabel LSM secattr category bitmap
 * @startbit: the value of the lowest order bit in the bitmap
 * @bitmap: the category bitmap
 * @next: pointer to the next bitmap "node" or NULL
 *
 * Description:
 * This structure is used to represent category bitmaps.  Due to the large
 * number of categories supported by most labeling protocols it is not
 * practical to transfer a full bitmap internally so NetLabel adopts a sparse
 * bitmap structure modeled after SELinux's ebitmap structure.
 * The catmap bitmap field MUST be a power of two in length and large
 * enough to hold at least 240 bits.  Special care (i.e. check the code!)
 * should be used when changing these values as the LSM implementation
 * probably has functions which rely on the sizes of these types to speed
 * processing.
 *
 */
#define NETLBL_CATMAP_MAPTYPE           u64
#define NETLBL_CATMAP_MAPCNT            4
#define NETLBL_CATMAP_MAPSIZE           (sizeof(NETLBL_CATMAP_MAPTYPE) * 8)
#define NETLBL_CATMAP_SIZE              (NETLBL_CATMAP_MAPSIZE * \
					 NETLBL_CATMAP_MAPCNT)
#define NETLBL_CATMAP_BIT               (NETLBL_CATMAP_MAPTYPE)0x01
struct netlbl_lsm_catmap {
	u32 startbit;
	NETLBL_CATMAP_MAPTYPE bitmap[NETLBL_CATMAP_MAPCNT];
	struct netlbl_lsm_catmap *next;
};

/**
 * struct netlbl_lsm_secattr - NetLabel LSM security attributes
 * @flags: indicate structure attributes, see NETLBL_SECATTR_*
 * @type: indicate the NLTYPE of the attributes
 * @domain: the NetLabel LSM domain
 * @cache: NetLabel LSM specific cache
 * @attr.mls: MLS sensitivity label
 * @attr.mls.cat: MLS category bitmap
 * @attr.mls.lvl: MLS sensitivity level
 * @attr.lsmblob: LSM specific data
 *
 * Description:
 * This structure is used to pass security attributes between NetLabel and the
 * LSM modules.  The flags field is used to specify which fields within the
 * struct are valid and valid values can be created by bitwise OR'ing the
 * NETLBL_SECATTR_* defines.  The domain field is typically set by the LSM to
 * specify domain specific configuration settings and is not usually used by
 * NetLabel itself when returning security attributes to the LSM.
 *
 */
struct netlbl_lsm_secattr {
	u32 flags;
	/* bitmap values for 'flags' */
#define NETLBL_SECATTR_NONE             0x00000000
#define NETLBL_SECATTR_DOMAIN           0x00000001
#define NETLBL_SECATTR_DOMAIN_CPY       (NETLBL_SECATTR_DOMAIN | \
					 NETLBL_SECATTR_FREE_DOMAIN)
#define NETLBL_SECATTR_CACHE            0x00000002
#define NETLBL_SECATTR_MLS_LVL          0x00000004
#define NETLBL_SECATTR_MLS_CAT          0x00000008
#define NETLBL_SECATTR_SECID            0x00000010
	/* bitmap meta-values for 'flags' */
#define NETLBL_SECATTR_FREE_DOMAIN      0x01000000
#define NETLBL_SECATTR_CACHEABLE        (NETLBL_SECATTR_MLS_LVL | \
					 NETLBL_SECATTR_MLS_CAT | \
					 NETLBL_SECATTR_SECID)
	u32 type;
	char *domain;
	struct netlbl_lsm_cache *cache;
	struct {
		struct {
			struct netlbl_lsm_catmap *cat;
			u32 lvl;
		} mls;
		struct lsmblob lsmblob;
	} attr;
};

/**
 * struct netlbl_calipso_ops - NetLabel CALIPSO operations
 * @doi_add: add a CALIPSO DOI
 * @doi_free: free a CALIPSO DOI
 * @doi_getdef: returns a reference to a DOI
 * @doi_putdef: releases a reference of a DOI
 * @doi_walk: enumerate the DOI list
 * @sock_getattr: retrieve the socket's attr
 * @sock_setattr: set the socket's attr
 * @sock_delattr: remove the socket's attr
 * @req_setattr: set the req socket's attr
 * @req_delattr: remove the req socket's attr
 * @opt_getattr: retrieve attr from memory block
 * @skbuff_optptr: find option in packet
 * @skbuff_setattr: set the skbuff's attr
 * @skbuff_delattr: remove the skbuff's attr
 * @cache_invalidate: invalidate cache
 * @cache_add: add cache entry
 *
 * Description:
 * This structure is filled out by the CALIPSO engine and passed
 * to the NetLabel core via a call to netlbl_calipso_ops_register().
 * It enables the CALIPSO engine (and hence IPv6) to be compiled
 * as a module.
 */
struct netlbl_calipso_ops {
	int (*doi_add)(struct calipso_doi *doi_def,
		       struct netlbl_audit *audit_info);
	void (*doi_free)(struct calipso_doi *doi_def);
	int (*doi_remove)(u32 doi, struct netlbl_audit *audit_info);
	struct calipso_doi *(*doi_getdef)(u32 doi);
	void (*doi_putdef)(struct calipso_doi *doi_def);
	int (*doi_walk)(u32 *skip_cnt,
			int (*callback)(struct calipso_doi *doi_def, void *arg),
			void *cb_arg);
	int (*sock_getattr)(struct sock *sk,
			    struct netlbl_lsm_secattr *secattr);
	int (*sock_setattr)(struct sock *sk,
			    const struct calipso_doi *doi_def,
			    const struct netlbl_lsm_secattr *secattr);
	void (*sock_delattr)(struct sock *sk);
	int (*req_setattr)(struct request_sock *req,
			   const struct calipso_doi *doi_def,
			   const struct netlbl_lsm_secattr *secattr);
	void (*req_delattr)(struct request_sock *req);
	int (*opt_getattr)(const unsigned char *calipso,
			   struct netlbl_lsm_secattr *secattr);
	unsigned char *(*skbuff_optptr)(const struct sk_buff *skb);
	int (*skbuff_setattr)(struct sk_buff *skb,
			      const struct calipso_doi *doi_def,
			      const struct netlbl_lsm_secattr *secattr);
	int (*skbuff_delattr)(struct sk_buff *skb);
	void (*cache_invalidate)(void);
	int (*cache_add)(const unsigned char *calipso_ptr,
			 const struct netlbl_lsm_secattr *secattr);
};

/*
 * LSM security attribute operations (inline)
 */

/**
 * netlbl_secattr_cache_alloc - Allocate and initialize a secattr cache
 * @flags: the memory allocation flags
 *
 * Description:
 * Allocate and initialize a netlbl_lsm_cache structure.  Returns a pointer
 * on success, NULL on failure.
 *
 */
static inline struct netlbl_lsm_cache *netlbl_secattr_cache_alloc(gfp_t flags)
{
	struct netlbl_lsm_cache *cache;

cache = kzalloc(sizeof(*cache), flags);
	if (cache)
		refcount_set(&cache->refcount, 1);
	return cache;
}

/**
 * netlbl_secattr_cache_free - Frees a netlbl_lsm_cache struct
 * @cache: the struct to free
 *
 * Description:
 * Frees @secattr including all of the internal buffers.
 *
 */
static inline void netlbl_secattr_cache_free(struct netlbl_lsm_cache *cache)
{
	if (!refcount_dec_and_test(&cache->refcount))
		return;

if (cache->free)
		cache->free(cache->data);
	kfree(cache);
}

/**
 * netlbl_catmap_alloc - Allocate a LSM secattr catmap
 * @flags: memory allocation flags
 *
 * Description:
 * Allocate memory for a LSM secattr catmap, returns a pointer on success, NULL
 * on failure.
 *
 */
static inline struct netlbl_lsm_catmap *netlbl_catmap_alloc(gfp_t flags)
{
	return kzalloc(sizeof(struct netlbl_lsm_catmap), flags);
}

/**
 * netlbl_catmap_free - Free a LSM secattr catmap
 * @catmap: the category bitmap
 *
 * Description:
 * Free a LSM secattr catmap.
 *
 */
static inline void netlbl_catmap_free(struct netlbl_lsm_catmap *catmap)
{
	struct netlbl_lsm_catmap *iter;

while (catmap) {
		iter = catmap;
		catmap = catmap->next;
		kfree(iter);
	}
}

/**
 * netlbl_secattr_init - Initialize a netlbl_lsm_secattr struct
 * @secattr: the struct to initialize
 *
 * Description:
 * Initialize an already allocated netlbl_lsm_secattr struct.
 *
 */
static inline void netlbl_secattr_init(struct netlbl_lsm_secattr *secattr)
{
	memset(secattr, 0, sizeof(*secattr));
}

/**
 * netlbl_secattr_destroy - Clears a netlbl_lsm_secattr struct
 * @secattr: the struct to clear
 *
 * Description:
 * Destroys the @secattr struct, including freeing all of the internal buffers.
 * The struct must be reset with a call to netlbl_secattr_init() before reuse.
 *
 */
static inline void netlbl_secattr_destroy(struct netlbl_lsm_secattr *secattr)
{
	if (secattr->flags & NETLBL_SECATTR_FREE_DOMAIN)
		kfree(secattr->domain);
	if (secattr->flags & NETLBL_SECATTR_CACHE)
		netlbl_secattr_cache_free(secattr->cache);
	if (secattr->flags & NETLBL_SECATTR_MLS_CAT)
		netlbl_catmap_free(secattr->attr.mls.cat);
}

/**
 * netlbl_secattr_alloc - Allocate and initialize a netlbl_lsm_secattr struct
 * @flags: the memory allocation flags
 *
 * Description:
 * Allocate and initialize a netlbl_lsm_secattr struct.  Returns a valid
 * pointer on success, or NULL on failure.
 *
 */
static inline struct netlbl_lsm_secattr *netlbl_secattr_alloc(gfp_t flags)
{
	return kzalloc(sizeof(struct netlbl_lsm_secattr), flags);
}

/**
 * netlbl_secattr_free - Frees a netlbl_lsm_secattr struct
 * @secattr: the struct to free
 *
 * Description:
 * Frees @secattr including all of the internal buffers.
 *
 */
static inline void netlbl_secattr_free(struct netlbl_lsm_secattr *secattr)
{
	netlbl_secattr_destroy(secattr);
	kfree(secattr);
}

#ifdef CONFIG_NETLABEL
/*
 * LSM configuration operations
 */
int netlbl_cfg_map_del(const char *domain,
		       u16 family,
		       const void *addr,
		       const void *mask,
		       struct netlbl_audit *audit_info);
int netlbl_cfg_unlbl_map_add(const char *domain,
			     u16 family,
			     const void *addr,
			     const void *mask,
			     struct netlbl_audit *audit_info);
int netlbl_cfg_unlbl_static_add(struct net *net,
				const char *dev_name,
				const void *addr,
				const void *mask,
				u16 family,
				struct lsmblob *lsmblob,
				struct netlbl_audit *audit_info);
int netlbl_cfg_unlbl_static_del(struct net *net,
				const char *dev_name,
				const void *addr,
				const void *mask,
				u16 family,
				struct netlbl_audit *audit_info);
int netlbl_cfg_cipsov4_add(struct cipso_v4_doi *doi_def,
			   struct netlbl_audit *audit_info);
void netlbl_cfg_cipsov4_del(u32 doi, struct netlbl_audit *audit_info);
int netlbl_cfg_cipsov4_map_add(u32 doi,
			       const char *domain,
			       const struct in_addr *addr,
			       const struct in_addr *mask,
			       struct netlbl_audit *audit_info);
int netlbl_cfg_calipso_add(struct calipso_doi *doi_def,
			   struct netlbl_audit *audit_info);
void netlbl_cfg_calipso_del(u32 doi, struct netlbl_audit *audit_info);
int netlbl_cfg_calipso_map_add(u32 doi,
			       const char *domain,
			       const struct in6_addr *addr,
			       const struct in6_addr *mask,
			       struct netlbl_audit *audit_info);
/*
 * LSM security attribute operations
 */
int netlbl_catmap_walk(struct netlbl_lsm_catmap *catmap, u32 offset);
int netlbl_catmap_walkrng(struct netlbl_lsm_catmap *catmap, u32 offset);
int netlbl_catmap_getlong(struct netlbl_lsm_catmap *catmap,
			  u32 *offset,
			  unsigned long *bitmap);
int netlbl_catmap_setbit(struct netlbl_lsm_catmap **catmap,
			 u32 bit,
			 gfp_t flags);
int netlbl_catmap_setrng(struct netlbl_lsm_catmap **catmap,
			 u32 start,
			 u32 end,
			 gfp_t flags);
int netlbl_catmap_setlong(struct netlbl_lsm_catmap **catmap,
			  u32 offset,
			  unsigned long bitmap,
			  gfp_t flags);

/* Bitmap functions
 */
int netlbl_bitmap_walk(const unsigned char *bitmap, u32 bitmap_len,
		       u32 offset, u8 state);
void netlbl_bitmap_setbit(unsigned char *bitmap, u32 bit, u8 state);

/*
 * LSM protocol operations (NetLabel LSM/kernel API)
 */
int netlbl_enabled(void);
int netlbl_sock_setattr(struct sock *sk,
			u16 family,
			const struct netlbl_lsm_secattr *secattr);
void netlbl_sock_delattr(struct sock *sk);
int netlbl_sock_getattr(struct sock *sk,
			struct netlbl_lsm_secattr *secattr);
int netlbl_conn_setattr(struct sock *sk,
			struct sockaddr *addr,
			const struct netlbl_lsm_secattr *secattr);
int netlbl_req_setattr(struct request_sock *req,
		       const struct netlbl_lsm_secattr *secattr);
void netlbl_req_delattr(struct request_sock *req);
int netlbl_skbuff_setattr(struct sk_buff *skb,
			  u16 family,
			  const struct netlbl_lsm_secattr *secattr);
int netlbl_skbuff_getattr(const struct sk_buff *skb,
			  u16 family,
			  struct netlbl_lsm_secattr *secattr);
void netlbl_skbuff_err(struct sk_buff *skb, u16 family, int error, int gateway);

/*
 * LSM label mapping cache operations
 */
void netlbl_cache_invalidate(void);
int netlbl_cache_add(const struct sk_buff *skb, u16 family,
		     const struct netlbl_lsm_secattr *secattr);

/*
 * Protocol engine operations
 */
struct audit_buffer *netlbl_audit_start(int type,
					struct netlbl_audit *audit_info);
#else
static inline int netlbl_cfg_map_del(const char *domain,
				     u16 family,
				     const void *addr,
				     const void *mask,
				     struct netlbl_audit *audit_info)
{
	return -ENOSYS;
}
static inline int netlbl_cfg_unlbl_map_add(const char *domain,
					   u16 family,
					   void *addr,
					   void *mask,
					   struct netlbl_audit *audit_info)
{
	return -ENOSYS;
}
static inline int netlbl_cfg_unlbl_static_add(struct net *net,
					      const char *dev_name,
					      const void *addr,
					      const void *mask,
					      u16 family,
					      struct lsmblob *lsmblob,
					      struct netlbl_audit *audit_info)
{
	return -ENOSYS;
}
static inline int netlbl_cfg_unlbl_static_del(struct net *net,
					      const char *dev_name,
					      const void *addr,
					      const void *mask,
					      u16 family,
					      struct netlbl_audit *audit_info)
{
	return -ENOSYS;
}
static inline int netlbl_cfg_cipsov4_add(struct cipso_v4_doi *doi_def,
					 struct netlbl_audit *audit_info)
{
	return -ENOSYS;
}
static inline void netlbl_cfg_cipsov4_del(u32 doi,
					  struct netlbl_audit *audit_info)
{
	return;
}
static inline int netlbl_cfg_cipsov4_map_add(u32 doi,
					     const char *domain,
					     const struct in_addr *addr,
					     const struct in_addr *mask,
					     struct netlbl_audit *audit_info)
{
	return -ENOSYS;
}
static inline int netlbl_cfg_calipso_add(struct calipso_doi *doi_def,
					 struct netlbl_audit *audit_info)
{
	return -ENOSYS;
}
static inline void netlbl_cfg_calipso_del(u32 doi,
					  struct netlbl_audit *audit_info)
{
	return;
}
static inline int netlbl_cfg_calipso_map_add(u32 doi,
					     const char *domain,
					     const struct in6_addr *addr,
					     const struct in6_addr *mask,
					     struct netlbl_audit *audit_info)
{
	return -ENOSYS;
}
static inline int netlbl_catmap_walk(struct netlbl_lsm_catmap *catmap,
				     u32 offset)
{
	return -ENOENT;
}
static inline int netlbl_catmap_walkrng(struct netlbl_lsm_catmap *catmap,
					u32 offset)
{
	return -ENOENT;
}
static inline int netlbl_catmap_getlong(struct netlbl_lsm_catmap *catmap,
					u32 *offset,
					unsigned long *bitmap)
{
	return 0;
}
static inline int netlbl_catmap_setbit(struct netlbl_lsm_catmap **catmap,
				       u32 bit,
				       gfp_t flags)
{
	return 0;
}
static inline int netlbl_catmap_setrng(struct netlbl_lsm_catmap **catmap,
				       u32 start,
				       u32 end,
				       gfp_t flags)
{
	return 0;
}
static inline int netlbl_catmap_setlong(struct netlbl_lsm_catmap **catmap,
					u32 offset,
					unsigned long bitmap,
					gfp_t flags)
{
	return 0;
}
static inline int netlbl_enabled(void)
{
	return 0;
}
static inline int netlbl_sock_setattr(struct sock *sk,
				      u16 family,
				      const struct netlbl_lsm_secattr *secattr)
{
	return -ENOSYS;
}
static inline void netlbl_sock_delattr(struct sock *sk)
{
}
static inline int netlbl_sock_getattr(struct sock *sk,
				      struct netlbl_lsm_secattr *secattr)
{
	return -ENOSYS;
}
static inline int netlbl_conn_setattr(struct sock *sk,
				      struct sockaddr *addr,
				      const struct netlbl_lsm_secattr *secattr)
{
	return -ENOSYS;
}
static inline int netlbl_req_setattr(struct request_sock *req,
				     const struct netlbl_lsm_secattr *secattr)
{
	return -ENOSYS;
}
static inline void netlbl_req_delattr(struct request_sock *req)
{
	return;
}
static inline int netlbl_skbuff_setattr(struct sk_buff *skb,
				      u16 family,
				      const struct netlbl_lsm_secattr *secattr)
{
	return -ENOSYS;
}
static inline int netlbl_skbuff_getattr(const struct sk_buff *skb,
					u16 family,
					struct netlbl_lsm_secattr *secattr)
{
	return -ENOSYS;
}
static inline void netlbl_skbuff_err(struct sk_buff *skb,
				     int error,
				     int gateway)
{
	return;
}
static inline void netlbl_cache_invalidate(void)
{
	return;
}
static inline int netlbl_cache_add(const struct sk_buff *skb, u16 family,
				   const struct netlbl_lsm_secattr *secattr)
{
	return 0;
}
static inline struct audit_buffer *netlbl_audit_start(int type,
						struct netlbl_audit *audit_info)
{
	return NULL;
}
#endif /* CONFIG_NETLABEL */

const struct netlbl_calipso_ops *
netlbl_calipso_ops_register(const struct netlbl_calipso_ops *ops);

#endif /* _NETLABEL_H */

cmd: