1*1ccea77eSThomas Gleixner // SPDX-License-Identifier: GPL-2.0-or-later
2d15c345fSPaul Moore /*
3d15c345fSPaul Moore * NetLabel NETLINK Interface
4d15c345fSPaul Moore *
5d15c345fSPaul Moore * This file defines the NETLINK interface for the NetLabel system. The
6d15c345fSPaul Moore * NetLabel system manages static and dynamic label mappings for network
7d15c345fSPaul Moore * protocols such as CIPSO and RIPSO.
8d15c345fSPaul Moore *
982c21bfaSPaul Moore * Author: Paul Moore <paul@paul-moore.com>
10d15c345fSPaul Moore */
11d15c345fSPaul Moore
12d15c345fSPaul Moore /*
13d15c345fSPaul Moore * (c) Copyright Hewlett-Packard Development Company, L.P., 2006
14d15c345fSPaul Moore */
15d15c345fSPaul Moore
16d15c345fSPaul Moore #include <linux/init.h>
17d15c345fSPaul Moore #include <linux/types.h>
18d15c345fSPaul Moore #include <linux/list.h>
19d15c345fSPaul Moore #include <linux/socket.h>
2032f50cdeSPaul Moore #include <linux/audit.h>
2132f50cdeSPaul Moore #include <linux/tty.h>
2232f50cdeSPaul Moore #include <linux/security.h>
235a0e3ad6STejun Heo #include <linux/gfp.h>
24d15c345fSPaul Moore #include <net/sock.h>
25d15c345fSPaul Moore #include <net/netlink.h>
26d15c345fSPaul Moore #include <net/genetlink.h>
27d15c345fSPaul Moore #include <net/netlabel.h>
28d15c345fSPaul Moore #include <asm/bug.h>
29d15c345fSPaul Moore
30d15c345fSPaul Moore #include "netlabel_mgmt.h"
31d15c345fSPaul Moore #include "netlabel_unlabeled.h"
32d15c345fSPaul Moore #include "netlabel_cipso_v4.h"
33cb72d382SHuw Davies #include "netlabel_calipso.h"
34d15c345fSPaul Moore #include "netlabel_user.h"
35d15c345fSPaul Moore
36d15c345fSPaul Moore /*
37d15c345fSPaul Moore * NetLabel NETLINK Setup Functions
38d15c345fSPaul Moore */
39d15c345fSPaul Moore
40d15c345fSPaul Moore /**
41d15c345fSPaul Moore * netlbl_netlink_init - Initialize the NETLINK communication channel
42d15c345fSPaul Moore *
43d15c345fSPaul Moore * Description:
44d15c345fSPaul Moore * Call out to the NetLabel components so they can register their families and
45d15c345fSPaul Moore * commands with the Generic NETLINK mechanism. Returns zero on success and
46d15c345fSPaul Moore * non-zero on failure.
47d15c345fSPaul Moore *
48d15c345fSPaul Moore */
netlbl_netlink_init(void)4905705e4eSPavel Emelyanov int __init netlbl_netlink_init(void)
50d15c345fSPaul Moore {
51d15c345fSPaul Moore int ret_val;
52d15c345fSPaul Moore
53d15c345fSPaul Moore ret_val = netlbl_mgmt_genl_init();
54d15c345fSPaul Moore if (ret_val != 0)
55d15c345fSPaul Moore return ret_val;
56d15c345fSPaul Moore
57d15c345fSPaul Moore ret_val = netlbl_cipsov4_genl_init();
58d15c345fSPaul Moore if (ret_val != 0)
59d15c345fSPaul Moore return ret_val;
60d15c345fSPaul Moore
61cb72d382SHuw Davies ret_val = netlbl_calipso_genl_init();
62cb72d382SHuw Davies if (ret_val != 0)
63cb72d382SHuw Davies return ret_val;
64cb72d382SHuw Davies
6516b99a4fSFabian Frederick return netlbl_unlabel_genl_init();
66d15c345fSPaul Moore }
6732f50cdeSPaul Moore
6832f50cdeSPaul Moore /*
6932f50cdeSPaul Moore * NetLabel Audit Functions
7032f50cdeSPaul Moore */
7132f50cdeSPaul Moore
7232f50cdeSPaul Moore /**
7332f50cdeSPaul Moore * netlbl_audit_start_common - Start an audit message
7432f50cdeSPaul Moore * @type: audit message type
7595d4e6beSPaul Moore * @audit_info: NetLabel audit information
7632f50cdeSPaul Moore *
7732f50cdeSPaul Moore * Description:
7832f50cdeSPaul Moore * Start an audit message using the type specified in @type and fill the audit
7932f50cdeSPaul Moore * message with some fields common to all NetLabel audit messages. Returns
8032f50cdeSPaul Moore * a pointer to the audit buffer on success, NULL on failure.
8132f50cdeSPaul Moore *
8232f50cdeSPaul Moore */
netlbl_audit_start_common(int type,struct netlbl_audit * audit_info)8395d4e6beSPaul Moore struct audit_buffer *netlbl_audit_start_common(int type,
8495d4e6beSPaul Moore struct netlbl_audit *audit_info)
8532f50cdeSPaul Moore {
8632f50cdeSPaul Moore struct audit_buffer *audit_buf;
8732f50cdeSPaul Moore char *secctx;
8832f50cdeSPaul Moore u32 secctx_len;
8932f50cdeSPaul Moore
90f7859590SRichard Guy Briggs if (audit_enabled == AUDIT_OFF)
91de64688fSPaul Moore return NULL;
92de64688fSPaul Moore
93cdfb6b34SRichard Guy Briggs audit_buf = audit_log_start(audit_context(), GFP_ATOMIC, type);
9432f50cdeSPaul Moore if (audit_buf == NULL)
9532f50cdeSPaul Moore return NULL;
9632f50cdeSPaul Moore
972532386fSEric Paris audit_log_format(audit_buf, "netlabel: auid=%u ses=%u",
98e1760bd5SEric W. Biederman from_kuid(&init_user_ns, audit_info->loginuid),
992532386fSEric Paris audit_info->sessionid);
10032f50cdeSPaul Moore
10195d4e6beSPaul Moore if (audit_info->secid != 0 &&
10295d4e6beSPaul Moore security_secid_to_secctx(audit_info->secid,
10395d4e6beSPaul Moore &secctx,
104e6e0871cSPaul Moore &secctx_len) == 0) {
10532f50cdeSPaul Moore audit_log_format(audit_buf, " subj=%s", secctx);
106e6e0871cSPaul Moore security_release_secctx(secctx, secctx_len);
107e6e0871cSPaul Moore }
10832f50cdeSPaul Moore
10932f50cdeSPaul Moore return audit_buf;
11032f50cdeSPaul Moore }
111