Lines Matching +full:valid +full:- +full:mask
1 // SPDX-License-Identifier: GPL-2.0-or-later
9 * Author: Paul Moore <paul@paul-moore.com>
13 * (c) Copyright Hewlett-Packard Development Company, L.P., 2006 - 2008
87 u32 valid; member
126 .len = IFNAMSIZ - 1 },
135 * netlbl_unlhsh_free_iface - Frees an interface entry from the hash table
162 netlbl_af4list_foreach_safe(iter4, tmp4, &iface->addr4_list) { in netlbl_unlhsh_free_iface()
167 netlbl_af6list_foreach_safe(iter6, tmp6, &iface->addr6_list) { in netlbl_unlhsh_free_iface()
176 * netlbl_unlhsh_hash - Hashing function for the hash table
188 return ifindex & (netlbl_unlhsh_rcu_deref(netlbl_unlhsh)->size - 1); in netlbl_unlhsh_hash()
192 * netlbl_unlhsh_search_iface - Search for a matching interface entry
209 bkt_list = &netlbl_unlhsh_rcu_deref(netlbl_unlhsh)->tbl[bkt]; in netlbl_unlhsh_search_iface()
212 if (iter->valid && iter->ifindex == ifindex) in netlbl_unlhsh_search_iface()
219 * netlbl_unlhsh_add_addr4 - Add a new IPv4 address entry to the hash table
222 * @mask: IPv4 address mask in network byte order
233 const struct in_addr *mask, in netlbl_unlhsh_add_addr4() argument
241 return -ENOMEM; in netlbl_unlhsh_add_addr4()
243 entry->list.addr = addr->s_addr & mask->s_addr; in netlbl_unlhsh_add_addr4()
244 entry->list.mask = mask->s_addr; in netlbl_unlhsh_add_addr4()
245 entry->list.valid = 1; in netlbl_unlhsh_add_addr4()
246 entry->secid = secid; in netlbl_unlhsh_add_addr4()
249 ret_val = netlbl_af4list_add(&entry->list, &iface->addr4_list); in netlbl_unlhsh_add_addr4()
259 * netlbl_unlhsh_add_addr6 - Add a new IPv6 address entry to the hash table
262 * @mask: IPv6 address mask in network byte order
273 const struct in6_addr *mask, in netlbl_unlhsh_add_addr6() argument
281 return -ENOMEM; in netlbl_unlhsh_add_addr6()
283 entry->list.addr = *addr; in netlbl_unlhsh_add_addr6()
284 entry->list.addr.s6_addr32[0] &= mask->s6_addr32[0]; in netlbl_unlhsh_add_addr6()
285 entry->list.addr.s6_addr32[1] &= mask->s6_addr32[1]; in netlbl_unlhsh_add_addr6()
286 entry->list.addr.s6_addr32[2] &= mask->s6_addr32[2]; in netlbl_unlhsh_add_addr6()
287 entry->list.addr.s6_addr32[3] &= mask->s6_addr32[3]; in netlbl_unlhsh_add_addr6()
288 entry->list.mask = *mask; in netlbl_unlhsh_add_addr6()
289 entry->list.valid = 1; in netlbl_unlhsh_add_addr6()
290 entry->secid = secid; in netlbl_unlhsh_add_addr6()
293 ret_val = netlbl_af6list_add(&entry->list, &iface->addr6_list); in netlbl_unlhsh_add_addr6()
303 * netlbl_unlhsh_add_iface - Adds a new interface entry to the hash table
321 iface->ifindex = ifindex; in netlbl_unlhsh_add_iface()
322 INIT_LIST_HEAD(&iface->addr4_list); in netlbl_unlhsh_add_iface()
323 INIT_LIST_HEAD(&iface->addr6_list); in netlbl_unlhsh_add_iface()
324 iface->valid = 1; in netlbl_unlhsh_add_iface()
331 list_add_tail_rcu(&iface->list, in netlbl_unlhsh_add_iface()
332 &netlbl_unlhsh_rcu_deref(netlbl_unlhsh)->tbl[bkt]); in netlbl_unlhsh_add_iface()
334 INIT_LIST_HEAD(&iface->list); in netlbl_unlhsh_add_iface()
350 * netlbl_unlhsh_add - Adds a new entry to the unlabeled connection hash table
354 * @mask: address mask in network byte order
355 * @addr_len: length of address/mask (4 for IPv4, 16 for IPv6)
367 const void *mask, in netlbl_unlhsh_add() argument
382 return -EINVAL; in netlbl_unlhsh_add()
388 ret_val = -ENODEV; in netlbl_unlhsh_add()
391 ifindex = dev->ifindex; in netlbl_unlhsh_add()
400 ret_val = -ENOMEM; in netlbl_unlhsh_add()
409 const struct in_addr *mask4 = mask; in netlbl_unlhsh_add()
415 addr4->s_addr, in netlbl_unlhsh_add()
416 mask4->s_addr); in netlbl_unlhsh_add()
422 const struct in6_addr *mask6 = mask; in netlbl_unlhsh_add()
433 ret_val = -EINVAL; in netlbl_unlhsh_add()
454 * netlbl_unlhsh_remove_addr4 - Remove an IPv4 address entry
458 * @mask: IP address mask
469 const struct in_addr *mask, in netlbl_unlhsh_remove_addr4() argument
480 list_entry = netlbl_af4list_remove(addr->s_addr, mask->s_addr, in netlbl_unlhsh_remove_addr4()
481 &iface->addr4_list); in netlbl_unlhsh_remove_addr4()
491 dev = dev_get_by_index(net, iface->ifindex); in netlbl_unlhsh_remove_addr4()
493 (dev != NULL ? dev->name : NULL), in netlbl_unlhsh_remove_addr4()
494 addr->s_addr, mask->s_addr); in netlbl_unlhsh_remove_addr4()
498 security_secid_to_secctx(entry->secid, in netlbl_unlhsh_remove_addr4()
508 return -ENOENT; in netlbl_unlhsh_remove_addr4()
516 * netlbl_unlhsh_remove_addr6 - Remove an IPv6 address entry
520 * @mask: IP address mask
531 const struct in6_addr *mask, in netlbl_unlhsh_remove_addr6() argument
542 list_entry = netlbl_af6list_remove(addr, mask, &iface->addr6_list); in netlbl_unlhsh_remove_addr6()
552 dev = dev_get_by_index(net, iface->ifindex); in netlbl_unlhsh_remove_addr6()
554 (dev != NULL ? dev->name : NULL), in netlbl_unlhsh_remove_addr6()
555 addr, mask); in netlbl_unlhsh_remove_addr6()
559 security_secid_to_secctx(entry->secid, in netlbl_unlhsh_remove_addr6()
569 return -ENOENT; in netlbl_unlhsh_remove_addr6()
577 * netlbl_unlhsh_condremove_iface - Remove an interface entry
594 netlbl_af4list_foreach_rcu(iter4, &iface->addr4_list) in netlbl_unlhsh_condremove_iface()
597 netlbl_af6list_foreach_rcu(iter6, &iface->addr6_list) in netlbl_unlhsh_condremove_iface()
600 iface->valid = 0; in netlbl_unlhsh_condremove_iface()
601 if (iface->ifindex > 0) in netlbl_unlhsh_condremove_iface()
602 list_del_rcu(&iface->list); in netlbl_unlhsh_condremove_iface()
607 call_rcu(&iface->rcu, netlbl_unlhsh_free_iface); in netlbl_unlhsh_condremove_iface()
615 * netlbl_unlhsh_remove - Remove an entry from the unlabeled hash table
619 * @mask: address mask in network byte order
620 * @addr_len: length of address/mask (4 for IPv4, 16 for IPv6)
631 const void *mask, in netlbl_unlhsh_remove() argument
641 return -EINVAL; in netlbl_unlhsh_remove()
647 ret_val = -ENODEV; in netlbl_unlhsh_remove()
650 iface = netlbl_unlhsh_search_iface(dev->ifindex); in netlbl_unlhsh_remove()
654 ret_val = -ENOENT; in netlbl_unlhsh_remove()
660 iface, addr, mask, in netlbl_unlhsh_remove()
666 iface, addr, mask, in netlbl_unlhsh_remove()
671 ret_val = -EINVAL; in netlbl_unlhsh_remove()
688 * netlbl_unlhsh_netdev_handler - Network device notification handler
708 /* XXX - should this be a check for NETDEV_DOWN or _UNREGISTER? */ in netlbl_unlhsh_netdev_handler()
711 iface = netlbl_unlhsh_search_iface(dev->ifindex); in netlbl_unlhsh_netdev_handler()
712 if (iface != NULL && iface->valid) { in netlbl_unlhsh_netdev_handler()
713 iface->valid = 0; in netlbl_unlhsh_netdev_handler()
714 list_del_rcu(&iface->list); in netlbl_unlhsh_netdev_handler()
721 call_rcu(&iface->rcu, netlbl_unlhsh_free_iface); in netlbl_unlhsh_netdev_handler()
727 * netlbl_unlabel_acceptflg_set - Set the unlabeled accept flag
753 * netlbl_unlabel_addrinfo_get - Get the IPv4/6 address information
756 * @mask: the IP address mask
766 void **mask, in netlbl_unlabel_addrinfo_get() argument
771 if (info->attrs[NLBL_UNLABEL_A_IPV4ADDR] && in netlbl_unlabel_addrinfo_get()
772 info->attrs[NLBL_UNLABEL_A_IPV4MASK]) { in netlbl_unlabel_addrinfo_get()
773 addr_len = nla_len(info->attrs[NLBL_UNLABEL_A_IPV4ADDR]); in netlbl_unlabel_addrinfo_get()
775 addr_len != nla_len(info->attrs[NLBL_UNLABEL_A_IPV4MASK])) in netlbl_unlabel_addrinfo_get()
776 return -EINVAL; in netlbl_unlabel_addrinfo_get()
778 *addr = nla_data(info->attrs[NLBL_UNLABEL_A_IPV4ADDR]); in netlbl_unlabel_addrinfo_get()
779 *mask = nla_data(info->attrs[NLBL_UNLABEL_A_IPV4MASK]); in netlbl_unlabel_addrinfo_get()
781 } else if (info->attrs[NLBL_UNLABEL_A_IPV6ADDR]) { in netlbl_unlabel_addrinfo_get()
782 addr_len = nla_len(info->attrs[NLBL_UNLABEL_A_IPV6ADDR]); in netlbl_unlabel_addrinfo_get()
784 addr_len != nla_len(info->attrs[NLBL_UNLABEL_A_IPV6MASK])) in netlbl_unlabel_addrinfo_get()
785 return -EINVAL; in netlbl_unlabel_addrinfo_get()
787 *addr = nla_data(info->attrs[NLBL_UNLABEL_A_IPV6ADDR]); in netlbl_unlabel_addrinfo_get()
788 *mask = nla_data(info->attrs[NLBL_UNLABEL_A_IPV6MASK]); in netlbl_unlabel_addrinfo_get()
792 return -EINVAL; in netlbl_unlabel_addrinfo_get()
800 * netlbl_unlabel_accept - Handle an ACCEPT message
814 if (info->attrs[NLBL_UNLABEL_A_ACPTFLG]) { in netlbl_unlabel_accept()
815 value = nla_get_u8(info->attrs[NLBL_UNLABEL_A_ACPTFLG]); in netlbl_unlabel_accept()
823 return -EINVAL; in netlbl_unlabel_accept()
827 * netlbl_unlabel_list - Handle a LIST message
838 int ret_val = -EINVAL; in netlbl_unlabel_list()
848 ret_val = -ENOMEM; in netlbl_unlabel_list()
867 * netlbl_unlabel_staticadd - Handle a STATICADD message
883 void *mask; in netlbl_unlabel_staticadd() local
892 if (!info->attrs[NLBL_UNLABEL_A_SECCTX] || in netlbl_unlabel_staticadd()
893 !info->attrs[NLBL_UNLABEL_A_IFACE] || in netlbl_unlabel_staticadd()
894 !((!info->attrs[NLBL_UNLABEL_A_IPV4ADDR] || in netlbl_unlabel_staticadd()
895 !info->attrs[NLBL_UNLABEL_A_IPV4MASK]) ^ in netlbl_unlabel_staticadd()
896 (!info->attrs[NLBL_UNLABEL_A_IPV6ADDR] || in netlbl_unlabel_staticadd()
897 !info->attrs[NLBL_UNLABEL_A_IPV6MASK]))) in netlbl_unlabel_staticadd()
898 return -EINVAL; in netlbl_unlabel_staticadd()
902 ret_val = netlbl_unlabel_addrinfo_get(info, &addr, &mask, &addr_len); in netlbl_unlabel_staticadd()
905 dev_name = nla_data(info->attrs[NLBL_UNLABEL_A_IFACE]); in netlbl_unlabel_staticadd()
907 nla_data(info->attrs[NLBL_UNLABEL_A_SECCTX]), in netlbl_unlabel_staticadd()
908 nla_len(info->attrs[NLBL_UNLABEL_A_SECCTX]), in netlbl_unlabel_staticadd()
914 dev_name, addr, mask, addr_len, secid, in netlbl_unlabel_staticadd()
919 * netlbl_unlabel_staticadddef - Handle a STATICADDDEF message
934 void *mask; in netlbl_unlabel_staticadddef() local
943 if (!info->attrs[NLBL_UNLABEL_A_SECCTX] || in netlbl_unlabel_staticadddef()
944 !((!info->attrs[NLBL_UNLABEL_A_IPV4ADDR] || in netlbl_unlabel_staticadddef()
945 !info->attrs[NLBL_UNLABEL_A_IPV4MASK]) ^ in netlbl_unlabel_staticadddef()
946 (!info->attrs[NLBL_UNLABEL_A_IPV6ADDR] || in netlbl_unlabel_staticadddef()
947 !info->attrs[NLBL_UNLABEL_A_IPV6MASK]))) in netlbl_unlabel_staticadddef()
948 return -EINVAL; in netlbl_unlabel_staticadddef()
952 ret_val = netlbl_unlabel_addrinfo_get(info, &addr, &mask, &addr_len); in netlbl_unlabel_staticadddef()
956 nla_data(info->attrs[NLBL_UNLABEL_A_SECCTX]), in netlbl_unlabel_staticadddef()
957 nla_len(info->attrs[NLBL_UNLABEL_A_SECCTX]), in netlbl_unlabel_staticadddef()
963 NULL, addr, mask, addr_len, secid, in netlbl_unlabel_staticadddef()
968 * netlbl_unlabel_staticremove - Handle a STATICREMOVE message
984 void *mask; in netlbl_unlabel_staticremove() local
990 if (!info->attrs[NLBL_UNLABEL_A_IFACE] || in netlbl_unlabel_staticremove()
991 !((!info->attrs[NLBL_UNLABEL_A_IPV4ADDR] || in netlbl_unlabel_staticremove()
992 !info->attrs[NLBL_UNLABEL_A_IPV4MASK]) ^ in netlbl_unlabel_staticremove()
993 (!info->attrs[NLBL_UNLABEL_A_IPV6ADDR] || in netlbl_unlabel_staticremove()
994 !info->attrs[NLBL_UNLABEL_A_IPV6MASK]))) in netlbl_unlabel_staticremove()
995 return -EINVAL; in netlbl_unlabel_staticremove()
999 ret_val = netlbl_unlabel_addrinfo_get(info, &addr, &mask, &addr_len); in netlbl_unlabel_staticremove()
1002 dev_name = nla_data(info->attrs[NLBL_UNLABEL_A_IFACE]); in netlbl_unlabel_staticremove()
1005 dev_name, addr, mask, addr_len, in netlbl_unlabel_staticremove()
1010 * netlbl_unlabel_staticremovedef - Handle a STATICREMOVEDEF message
1025 void *mask; in netlbl_unlabel_staticremovedef() local
1031 if (!((!info->attrs[NLBL_UNLABEL_A_IPV4ADDR] || in netlbl_unlabel_staticremovedef()
1032 !info->attrs[NLBL_UNLABEL_A_IPV4MASK]) ^ in netlbl_unlabel_staticremovedef()
1033 (!info->attrs[NLBL_UNLABEL_A_IPV6ADDR] || in netlbl_unlabel_staticremovedef()
1034 !info->attrs[NLBL_UNLABEL_A_IPV6MASK]))) in netlbl_unlabel_staticremovedef()
1035 return -EINVAL; in netlbl_unlabel_staticremovedef()
1039 ret_val = netlbl_unlabel_addrinfo_get(info, &addr, &mask, &addr_len); in netlbl_unlabel_staticremovedef()
1044 NULL, addr, mask, addr_len, in netlbl_unlabel_staticremovedef()
1050 * netlbl_unlabel_staticlist_gen - Generate messages for STATICLIST[DEF]
1071 int ret_val = -ENOMEM; in netlbl_unlabel_staticlist_gen()
1079 data = genlmsg_put(cb_arg->skb, NETLINK_CB(cb_arg->nl_cb->skb).portid, in netlbl_unlabel_staticlist_gen()
1080 cb_arg->seq, &netlbl_unlabel_gnl_family, in netlbl_unlabel_staticlist_gen()
1085 if (iface->ifindex > 0) { in netlbl_unlabel_staticlist_gen()
1086 dev = dev_get_by_index(&init_net, iface->ifindex); in netlbl_unlabel_staticlist_gen()
1088 ret_val = -ENODEV; in netlbl_unlabel_staticlist_gen()
1091 ret_val = nla_put_string(cb_arg->skb, in netlbl_unlabel_staticlist_gen()
1092 NLBL_UNLABEL_A_IFACE, dev->name); in netlbl_unlabel_staticlist_gen()
1101 addr_struct.s_addr = addr4->list.addr; in netlbl_unlabel_staticlist_gen()
1102 ret_val = nla_put_in_addr(cb_arg->skb, in netlbl_unlabel_staticlist_gen()
1108 addr_struct.s_addr = addr4->list.mask; in netlbl_unlabel_staticlist_gen()
1109 ret_val = nla_put_in_addr(cb_arg->skb, in netlbl_unlabel_staticlist_gen()
1115 secid = addr4->secid; in netlbl_unlabel_staticlist_gen()
1117 ret_val = nla_put_in6_addr(cb_arg->skb, in netlbl_unlabel_staticlist_gen()
1119 &addr6->list.addr); in netlbl_unlabel_staticlist_gen()
1123 ret_val = nla_put_in6_addr(cb_arg->skb, in netlbl_unlabel_staticlist_gen()
1125 &addr6->list.mask); in netlbl_unlabel_staticlist_gen()
1129 secid = addr6->secid; in netlbl_unlabel_staticlist_gen()
1135 ret_val = nla_put(cb_arg->skb, in netlbl_unlabel_staticlist_gen()
1143 cb_arg->seq++; in netlbl_unlabel_staticlist_gen()
1144 genlmsg_end(cb_arg->skb, data); in netlbl_unlabel_staticlist_gen()
1148 genlmsg_cancel(cb_arg->skb, data); in netlbl_unlabel_staticlist_gen()
1153 * netlbl_unlabel_staticlist - Handle a STATICLIST message
1167 u32 skip_bkt = cb->args[0]; in netlbl_unlabel_staticlist()
1168 u32 skip_chain = cb->args[1]; in netlbl_unlabel_staticlist()
1169 u32 skip_addr4 = cb->args[2]; in netlbl_unlabel_staticlist()
1175 u32 skip_addr6 = cb->args[3]; in netlbl_unlabel_staticlist()
1181 cb_arg.seq = cb->nlh->nlmsg_seq; in netlbl_unlabel_staticlist()
1185 iter_bkt < rcu_dereference(netlbl_unlhsh)->size; in netlbl_unlabel_staticlist()
1187 iter_list = &rcu_dereference(netlbl_unlhsh)->tbl[iter_bkt]; in netlbl_unlabel_staticlist()
1189 if (!iface->valid || in netlbl_unlabel_staticlist()
1193 &iface->addr4_list) { in netlbl_unlabel_staticlist()
1202 iter_addr4--; in netlbl_unlabel_staticlist()
1203 iter_chain--; in netlbl_unlabel_staticlist()
1211 &iface->addr6_list) { in netlbl_unlabel_staticlist()
1220 iter_addr6--; in netlbl_unlabel_staticlist()
1221 iter_chain--; in netlbl_unlabel_staticlist()
1235 cb->args[0] = iter_bkt; in netlbl_unlabel_staticlist()
1236 cb->args[1] = iter_chain; in netlbl_unlabel_staticlist()
1237 cb->args[2] = iter_addr4; in netlbl_unlabel_staticlist()
1238 cb->args[3] = iter_addr6; in netlbl_unlabel_staticlist()
1239 return skb->len; in netlbl_unlabel_staticlist()
1243 * netlbl_unlabel_staticlistdef - Handle a STATICLISTDEF message
1266 cb_arg.seq = cb->nlh->nlmsg_seq; in netlbl_unlabel_staticlistdef()
1270 if (iface == NULL || !iface->valid) in netlbl_unlabel_staticlistdef()
1273 netlbl_af4list_foreach_rcu(addr4, &iface->addr4_list) { in netlbl_unlabel_staticlistdef()
1274 if (iter_addr4++ < cb->args[0]) in netlbl_unlabel_staticlistdef()
1281 iter_addr4--; in netlbl_unlabel_staticlistdef()
1286 netlbl_af6list_foreach_rcu(addr6, &iface->addr6_list) { in netlbl_unlabel_staticlistdef()
1287 if (iter_addr6++ < cb->args[1]) in netlbl_unlabel_staticlistdef()
1294 iter_addr6--; in netlbl_unlabel_staticlistdef()
1302 cb->args[0] = iter_addr4; in netlbl_unlabel_staticlistdef()
1303 cb->args[1] = iter_addr6; in netlbl_unlabel_staticlistdef()
1304 return skb->len; in netlbl_unlabel_staticlistdef()
1386 * netlbl_unlabel_genl_init - Register the Unlabeled NetLabel component
1407 * netlbl_unlabel_init - Initialize the unlabeled connection hash table
1414 * non-zero values on error.
1423 return -EINVAL; in netlbl_unlabel_init()
1427 return -ENOMEM; in netlbl_unlabel_init()
1428 hsh_tbl->size = 1 << size; in netlbl_unlabel_init()
1429 hsh_tbl->tbl = kcalloc(hsh_tbl->size, in netlbl_unlabel_init()
1432 if (hsh_tbl->tbl == NULL) { in netlbl_unlabel_init()
1434 return -ENOMEM; in netlbl_unlabel_init()
1436 for (iter = 0; iter < hsh_tbl->size; iter++) in netlbl_unlabel_init()
1437 INIT_LIST_HEAD(&hsh_tbl->tbl[iter]); in netlbl_unlabel_init()
1449 * netlbl_unlabel_getattr - Get the security attributes for an unlabled packet
1466 iface = netlbl_unlhsh_search_iface(skb->skb_iif); in netlbl_unlabel_getattr()
1469 if (iface == NULL || !iface->valid) in netlbl_unlabel_getattr()
1475 * receiving ip_hdr(skb)->version = 4. in netlbl_unlabel_getattr()
1477 if (family == PF_INET6 && ip_hdr(skb)->version == 4) in netlbl_unlabel_getattr()
1487 addr4 = netlbl_af4list_search(hdr4->saddr, in netlbl_unlabel_getattr()
1488 &iface->addr4_list); in netlbl_unlabel_getattr()
1491 secattr->attr.secid = netlbl_unlhsh_addr4_entry(addr4)->secid; in netlbl_unlabel_getattr()
1500 addr6 = netlbl_af6list_search(&hdr6->saddr, in netlbl_unlabel_getattr()
1501 &iface->addr6_list); in netlbl_unlabel_getattr()
1504 secattr->attr.secid = netlbl_unlhsh_addr6_entry(addr6)->secid; in netlbl_unlabel_getattr()
1513 secattr->flags |= NETLBL_SECATTR_SECID; in netlbl_unlabel_getattr()
1514 secattr->type = NETLBL_NLTYPE_UNLABELED; in netlbl_unlabel_getattr()
1520 return -ENOMSG; in netlbl_unlabel_getattr()
1521 secattr->type = NETLBL_NLTYPE_UNLABELED; in netlbl_unlabel_getattr()
1526 * netlbl_unlabel_defconf - Set the default config to allow unlabeled packets
1548 return -ENOMEM; in netlbl_unlabel_defconf()
1549 entry->family = AF_UNSPEC; in netlbl_unlabel_defconf()
1550 entry->def.type = NETLBL_NLTYPE_UNLABELED; in netlbl_unlabel_defconf()