1 /* 2 * Copyright 2013 Tresys Technology, LLC. All rights reserved. 3 * 4 * Redistribution and use in source and binary forms, with or without 5 * modification, are permitted provided that the following conditions are met: 6 * 7 * 1. Redistributions of source code must retain the above copyright notice, 8 * this list of conditions and the following disclaimer. 9 * 10 * 2. Redistributions in binary form must reproduce the above copyright notice, 11 * this list of conditions and the following disclaimer in the documentation 12 * and/or other materials provided with the distribution. 13 * 14 * THIS SOFTWARE IS PROVIDED BY TRESYS TECHNOLOGY, LLC ``AS IS'' AND ANY EXPRESS 15 * OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF 16 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO 17 * EVENT SHALL TRESYS TECHNOLOGY, LLC OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, 18 * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, 19 * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 20 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF 21 * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE 22 * OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF 23 * ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 24 * 25 * The views and conclusions contained in the software and documentation are those 26 * of the authors and should not be interpreted as representing official policies, 27 * either expressed or implied, of Tresys Technology, LLC. 28 */ 29 30 #ifndef CIL_FLAVOR_H_ 31 #define CIL_FLAVOR_H_ 32 33 /* 34 Tree/list node types 35 */ 36 #define CIL_MIN_OP_OPERANDS 1000 37 #define CIL_MIN_DECLARATIVE 2000 38 39 enum cil_flavor { 40 CIL_NONE = 0, 41 CIL_ROOT, 42 CIL_NODE, 43 CIL_STRING, 44 CIL_DATUM, 45 CIL_LIST, 46 CIL_LIST_ITEM, 47 CIL_PARAM, 48 CIL_ARGS, 49 CIL_BLOCKINHERIT, 50 CIL_BLOCKABSTRACT, 51 CIL_IN, 52 CIL_CALL, 53 CIL_BOOLEANIF, 54 CIL_TUNABLEIF, 55 CIL_CONDBLOCK, 56 CIL_CONDTRUE, 57 CIL_CONDFALSE, 58 CIL_CLASSORDER, 59 CIL_CLASSCOMMON, 60 CIL_CLASSMAPPING, 61 CIL_CLASSPERMS, 62 CIL_CLASSPERMS_SET, 63 CIL_CLASSPERMISSIONSET, 64 CIL_USERPREFIX, 65 CIL_USERROLE, 66 CIL_USERATTRIBUTESET, 67 CIL_USERLEVEL, 68 CIL_USERRANGE, 69 CIL_USERBOUNDS, 70 CIL_SELINUXUSER, 71 CIL_SELINUXUSERDEFAULT, 72 CIL_ROLEATTRIBUTESET, 73 CIL_ROLETYPE, 74 CIL_ROLEBOUNDS, 75 CIL_TYPEATTRIBUTESET, 76 CIL_TYPEALIASACTUAL, 77 CIL_TYPEBOUNDS, 78 CIL_TYPEPERMISSIVE, 79 CIL_SENSALIASACTUAL, 80 CIL_SENSITIVITYORDER, 81 CIL_SENSCAT, 82 CIL_CATALIASACTUAL, 83 CIL_CATORDER, 84 CIL_SIDORDER, 85 CIL_ROLEALLOW, 86 CIL_AVRULE, 87 CIL_AVRULEX, 88 CIL_ROLETRANSITION, 89 CIL_TYPE_RULE, 90 CIL_NAMETYPETRANSITION, 91 CIL_RANGETRANSITION, 92 CIL_CONSTRAIN, 93 CIL_MLSCONSTRAIN, 94 CIL_VALIDATETRANS, 95 CIL_MLSVALIDATETRANS, 96 CIL_SIDCONTEXT, 97 CIL_FSUSE, 98 CIL_FILECON, 99 CIL_PORTCON, 100 CIL_NODECON, 101 CIL_GENFSCON, 102 CIL_NETIFCON, 103 CIL_PIRQCON, 104 CIL_IOMEMCON, 105 CIL_IOPORTCON, 106 CIL_PCIDEVICECON, 107 CIL_DEVICETREECON, 108 CIL_DEFAULTUSER, 109 CIL_DEFAULTROLE, 110 CIL_DEFAULTTYPE, 111 CIL_DEFAULTRANGE, 112 CIL_HANDLEUNKNOWN, 113 CIL_MLS, 114 115 /* 116 * boolean constraint set catset 117 * dom X 118 * domby X 119 * incomp X 120 * eq X X 121 * ne X X 122 * and X X X X 123 * not X X X X 124 * or X X X X 125 * xor X X X 126 * all X X 127 * range X 128 */ 129 CIL_OP = CIL_MIN_OP_OPERANDS, 130 CIL_ALL, 131 CIL_AND, 132 CIL_OR, 133 CIL_XOR, 134 CIL_NOT, 135 CIL_EQ, 136 CIL_NEQ, 137 CIL_RANGE, 138 CIL_CONS_DOM, 139 CIL_CONS_DOMBY, 140 CIL_CONS_INCOMP, 141 CIL_CONS_OPERAND, 142 CIL_CONS_U1, 143 CIL_CONS_U2, 144 CIL_CONS_U3, 145 CIL_CONS_T1, 146 CIL_CONS_T2, 147 CIL_CONS_T3, 148 CIL_CONS_R1, 149 CIL_CONS_R2, 150 CIL_CONS_R3, 151 CIL_CONS_L1, 152 CIL_CONS_L2, 153 CIL_CONS_H1, 154 CIL_CONS_H2, 155 156 CIL_BLOCK = CIL_MIN_DECLARATIVE, 157 CIL_MACRO, 158 CIL_OPTIONAL, 159 CIL_BOOL, 160 CIL_TUNABLE, 161 CIL_PERM, 162 CIL_MAP_PERM, 163 CIL_COMMON, 164 CIL_CLASS, 165 CIL_MAP_CLASS, 166 CIL_CLASSPERMISSION, 167 CIL_USER, 168 CIL_USERATTRIBUTE, 169 CIL_ROLE, 170 CIL_ROLEATTRIBUTE, 171 CIL_TYPE, 172 CIL_TYPEATTRIBUTE, 173 CIL_TYPEALIAS, 174 CIL_SENS, 175 CIL_SENSALIAS, 176 CIL_CAT, 177 CIL_CATSET, 178 CIL_CATALIAS, 179 CIL_LEVEL, 180 CIL_LEVELRANGE, 181 CIL_SID, 182 CIL_NAME, 183 CIL_CONTEXT, 184 CIL_IPADDR, 185 CIL_POLICYCAP, 186 CIL_PERMISSIONX 187 }; 188 189 190 #endif /* CIL_FLAVOR_H_ */ 191