1 /* 2 * NetLabel Domain Hash Table 3 * 4 * This file manages the domain hash table that NetLabel uses to determine 5 * which network labeling protocol to use for a given domain. The NetLabel 6 * system manages static and dynamic label mappings for network protocols such 7 * as CIPSO and RIPSO. 8 * 9 * Author: Paul Moore <paul@paul-moore.com> 10 * 11 */ 12 13 /* 14 * (c) Copyright Hewlett-Packard Development Company, L.P., 2006, 2008 15 * 16 * This program is free software; you can redistribute it and/or modify 17 * it under the terms of the GNU General Public License as published by 18 * the Free Software Foundation; either version 2 of the License, or 19 * (at your option) any later version. 20 * 21 * This program is distributed in the hope that it will be useful, 22 * but WITHOUT ANY WARRANTY; without even the implied warranty of 23 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See 24 * the GNU General Public License for more details. 25 * 26 * You should have received a copy of the GNU General Public License 27 * along with this program; if not, see <http://www.gnu.org/licenses/>. 28 * 29 */ 30 31 #ifndef _NETLABEL_DOMAINHASH_H 32 #define _NETLABEL_DOMAINHASH_H 33 34 #include <linux/types.h> 35 #include <linux/rcupdate.h> 36 #include <linux/list.h> 37 38 #include "netlabel_addrlist.h" 39 40 /* Domain hash table size */ 41 /* XXX - currently this number is an uneducated guess */ 42 #define NETLBL_DOMHSH_BITSIZE 7 43 44 /* Domain mapping definition structures */ 45 struct netlbl_domaddr_map { 46 struct list_head list4; 47 struct list_head list6; 48 }; 49 struct netlbl_dommap_def { 50 u32 type; 51 union { 52 struct netlbl_domaddr_map *addrsel; 53 struct cipso_v4_doi *cipso; 54 }; 55 }; 56 #define netlbl_domhsh_addr4_entry(iter) \ 57 container_of(iter, struct netlbl_domaddr4_map, list) 58 struct netlbl_domaddr4_map { 59 struct netlbl_dommap_def def; 60 61 struct netlbl_af4list list; 62 }; 63 #define netlbl_domhsh_addr6_entry(iter) \ 64 container_of(iter, struct netlbl_domaddr6_map, list) 65 struct netlbl_domaddr6_map { 66 struct netlbl_dommap_def def; 67 68 struct netlbl_af6list list; 69 }; 70 71 struct netlbl_dom_map { 72 char *domain; 73 struct netlbl_dommap_def def; 74 75 u32 valid; 76 struct list_head list; 77 struct rcu_head rcu; 78 }; 79 80 /* init function */ 81 int netlbl_domhsh_init(u32 size); 82 83 /* Manipulate the domain hash table */ 84 int netlbl_domhsh_add(struct netlbl_dom_map *entry, 85 struct netlbl_audit *audit_info); 86 int netlbl_domhsh_add_default(struct netlbl_dom_map *entry, 87 struct netlbl_audit *audit_info); 88 int netlbl_domhsh_remove_entry(struct netlbl_dom_map *entry, 89 struct netlbl_audit *audit_info); 90 int netlbl_domhsh_remove_af4(const char *domain, 91 const struct in_addr *addr, 92 const struct in_addr *mask, 93 struct netlbl_audit *audit_info); 94 int netlbl_domhsh_remove(const char *domain, struct netlbl_audit *audit_info); 95 int netlbl_domhsh_remove_default(struct netlbl_audit *audit_info); 96 struct netlbl_dom_map *netlbl_domhsh_getentry(const char *domain); 97 struct netlbl_dommap_def *netlbl_domhsh_getentry_af4(const char *domain, 98 __be32 addr); 99 #if IS_ENABLED(CONFIG_IPV6) 100 struct netlbl_dommap_def *netlbl_domhsh_getentry_af6(const char *domain, 101 const struct in6_addr *addr); 102 #endif /* IPv6 */ 103 104 int netlbl_domhsh_walk(u32 *skip_bkt, 105 u32 *skip_chain, 106 int (*callback) (struct netlbl_dom_map *entry, void *arg), 107 void *cb_arg); 108 109 #endif 110