From ace9429bb58fd418f0c81d4c2835699bddf6bde6 Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Thu, 11 Apr 2024 10:27:49 +0200 Subject: Adding upstream version 6.6.15. Signed-off-by: Daniel Baumann --- security/selinux/ss/services.h | 46 ++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 46 insertions(+) create mode 100644 security/selinux/ss/services.h (limited to 'security/selinux/ss/services.h') diff --git a/security/selinux/ss/services.h b/security/selinux/ss/services.h new file mode 100644 index 0000000000..d24b0a3d19 --- /dev/null +++ b/security/selinux/ss/services.h @@ -0,0 +1,46 @@ +/* SPDX-License-Identifier: GPL-2.0 */ +/* + * Implementation of the security services. + * + * Author : Stephen Smalley, + */ +#ifndef _SS_SERVICES_H_ +#define _SS_SERVICES_H_ + +#include "policydb.h" + +/* Mapping for a single class */ +struct selinux_mapping { + u16 value; /* policy value for class */ + u16 num_perms; /* number of permissions in class */ + u32 perms[sizeof(u32) * 8]; /* policy values for permissions */ +}; + +/* Map for all of the classes, with array size */ +struct selinux_map { + struct selinux_mapping *mapping; /* indexed by class */ + u16 size; /* array size of mapping */ +}; + +struct selinux_policy { + struct sidtab *sidtab; + struct policydb policydb; + struct selinux_map map; + u32 latest_granting; +} __randomize_layout; + +struct convert_context_args { + struct policydb *oldp; + struct policydb *newp; +}; + +void services_compute_xperms_drivers(struct extended_perms *xperms, + struct avtab_node *node); +void services_compute_xperms_decision(struct extended_perms_decision *xpermd, + struct avtab_node *node); + +int services_convert_context(struct convert_context_args *args, + struct context *oldc, struct context *newc, + gfp_t gfp_flags); + +#endif /* _SS_SERVICES_H_ */ -- cgit v1.2.3