1d15c345fSPaul Moore /* 2d15c345fSPaul Moore * NetLabel NETLINK Interface 3d15c345fSPaul Moore * 4d15c345fSPaul Moore * This file defines the NETLINK interface for the NetLabel system. The 5d15c345fSPaul Moore * NetLabel system manages static and dynamic label mappings for network 6d15c345fSPaul Moore * protocols such as CIPSO and RIPSO. 7d15c345fSPaul Moore * 8d15c345fSPaul Moore * Author: Paul Moore <paul.moore@hp.com> 9d15c345fSPaul Moore * 10d15c345fSPaul Moore */ 11d15c345fSPaul Moore 12d15c345fSPaul Moore /* 13d15c345fSPaul Moore * (c) Copyright Hewlett-Packard Development Company, L.P., 2006 14d15c345fSPaul Moore * 15d15c345fSPaul Moore * This program is free software; you can redistribute it and/or modify 16d15c345fSPaul Moore * it under the terms of the GNU General Public License as published by 17d15c345fSPaul Moore * the Free Software Foundation; either version 2 of the License, or 18d15c345fSPaul Moore * (at your option) any later version. 19d15c345fSPaul Moore * 20d15c345fSPaul Moore * This program is distributed in the hope that it will be useful, 21d15c345fSPaul Moore * but WITHOUT ANY WARRANTY; without even the implied warranty of 22d15c345fSPaul Moore * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See 23d15c345fSPaul Moore * the GNU General Public License for more details. 24d15c345fSPaul Moore * 25d15c345fSPaul Moore * You should have received a copy of the GNU General Public License 26d15c345fSPaul Moore * along with this program; if not, write to the Free Software 27d15c345fSPaul Moore * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA 28d15c345fSPaul Moore * 29d15c345fSPaul Moore */ 30d15c345fSPaul Moore 31d15c345fSPaul Moore #include <linux/init.h> 32d15c345fSPaul Moore #include <linux/types.h> 33d15c345fSPaul Moore #include <linux/list.h> 34d15c345fSPaul Moore #include <linux/socket.h> 3532f50cdeSPaul Moore #include <linux/audit.h> 3632f50cdeSPaul Moore #include <linux/tty.h> 3732f50cdeSPaul Moore #include <linux/security.h> 38d15c345fSPaul Moore #include <net/sock.h> 39d15c345fSPaul Moore #include <net/netlink.h> 40d15c345fSPaul Moore #include <net/genetlink.h> 41d15c345fSPaul Moore #include <net/netlabel.h> 42d15c345fSPaul Moore #include <asm/bug.h> 43d15c345fSPaul Moore 44d15c345fSPaul Moore #include "netlabel_mgmt.h" 45d15c345fSPaul Moore #include "netlabel_unlabeled.h" 46d15c345fSPaul Moore #include "netlabel_cipso_v4.h" 47d15c345fSPaul Moore #include "netlabel_user.h" 48d15c345fSPaul Moore 49d15c345fSPaul Moore /* 50d15c345fSPaul Moore * NetLabel NETLINK Setup Functions 51d15c345fSPaul Moore */ 52d15c345fSPaul Moore 53d15c345fSPaul Moore /** 54d15c345fSPaul Moore * netlbl_netlink_init - Initialize the NETLINK communication channel 55d15c345fSPaul Moore * 56d15c345fSPaul Moore * Description: 57d15c345fSPaul Moore * Call out to the NetLabel components so they can register their families and 58d15c345fSPaul Moore * commands with the Generic NETLINK mechanism. Returns zero on success and 59d15c345fSPaul Moore * non-zero on failure. 60d15c345fSPaul Moore * 61d15c345fSPaul Moore */ 62d15c345fSPaul Moore int netlbl_netlink_init(void) 63d15c345fSPaul Moore { 64d15c345fSPaul Moore int ret_val; 65d15c345fSPaul Moore 66d15c345fSPaul Moore ret_val = netlbl_mgmt_genl_init(); 67d15c345fSPaul Moore if (ret_val != 0) 68d15c345fSPaul Moore return ret_val; 69d15c345fSPaul Moore 70d15c345fSPaul Moore ret_val = netlbl_cipsov4_genl_init(); 71d15c345fSPaul Moore if (ret_val != 0) 72d15c345fSPaul Moore return ret_val; 73d15c345fSPaul Moore 74d15c345fSPaul Moore ret_val = netlbl_unlabel_genl_init(); 75d15c345fSPaul Moore if (ret_val != 0) 76d15c345fSPaul Moore return ret_val; 77d15c345fSPaul Moore 78d15c345fSPaul Moore return 0; 79d15c345fSPaul Moore } 8032f50cdeSPaul Moore 8132f50cdeSPaul Moore /* 8232f50cdeSPaul Moore * NetLabel Audit Functions 8332f50cdeSPaul Moore */ 8432f50cdeSPaul Moore 8532f50cdeSPaul Moore /** 8632f50cdeSPaul Moore * netlbl_audit_start_common - Start an audit message 8732f50cdeSPaul Moore * @type: audit message type 88*95d4e6beSPaul Moore * @audit_info: NetLabel audit information 8932f50cdeSPaul Moore * 9032f50cdeSPaul Moore * Description: 9132f50cdeSPaul Moore * Start an audit message using the type specified in @type and fill the audit 9232f50cdeSPaul Moore * message with some fields common to all NetLabel audit messages. Returns 9332f50cdeSPaul Moore * a pointer to the audit buffer on success, NULL on failure. 9432f50cdeSPaul Moore * 9532f50cdeSPaul Moore */ 96*95d4e6beSPaul Moore struct audit_buffer *netlbl_audit_start_common(int type, 97*95d4e6beSPaul Moore struct netlbl_audit *audit_info) 9832f50cdeSPaul Moore { 9932f50cdeSPaul Moore struct audit_context *audit_ctx = current->audit_context; 10032f50cdeSPaul Moore struct audit_buffer *audit_buf; 10132f50cdeSPaul Moore char *secctx; 10232f50cdeSPaul Moore u32 secctx_len; 10332f50cdeSPaul Moore 10432f50cdeSPaul Moore audit_buf = audit_log_start(audit_ctx, GFP_ATOMIC, type); 10532f50cdeSPaul Moore if (audit_buf == NULL) 10632f50cdeSPaul Moore return NULL; 10732f50cdeSPaul Moore 108*95d4e6beSPaul Moore audit_log_format(audit_buf, "netlabel: auid=%u", audit_info->loginuid); 10932f50cdeSPaul Moore 110*95d4e6beSPaul Moore if (audit_info->secid != 0 && 111*95d4e6beSPaul Moore security_secid_to_secctx(audit_info->secid, 112*95d4e6beSPaul Moore &secctx, 113*95d4e6beSPaul Moore &secctx_len) == 0) 11432f50cdeSPaul Moore audit_log_format(audit_buf, " subj=%s", secctx); 11532f50cdeSPaul Moore 11632f50cdeSPaul Moore return audit_buf; 11732f50cdeSPaul Moore } 118