1 /* 2 * AppArmor security module 3 * 4 * This file contains AppArmor filesystem definitions. 5 * 6 * Copyright (C) 1998-2008 Novell/SUSE 7 * Copyright 2009-2010 Canonical Ltd. 8 * 9 * This program is free software; you can redistribute it and/or 10 * modify it under the terms of the GNU General Public License as 11 * published by the Free Software Foundation, version 2 of the 12 * License. 13 */ 14 15 #ifndef __AA_APPARMORFS_H 16 #define __AA_APPARMORFS_H 17 18 extern struct path aa_null; 19 20 enum aa_sfs_type { 21 AA_SFS_TYPE_BOOLEAN, 22 AA_SFS_TYPE_STRING, 23 AA_SFS_TYPE_U64, 24 AA_SFS_TYPE_FOPS, 25 AA_SFS_TYPE_DIR, 26 }; 27 28 struct aa_sfs_entry; 29 30 struct aa_sfs_entry { 31 const char *name; 32 struct dentry *dentry; 33 umode_t mode; 34 enum aa_sfs_type v_type; 35 union { 36 bool boolean; 37 char *string; 38 unsigned long u64; 39 struct aa_sfs_entry *files; 40 } v; 41 const struct file_operations *file_ops; 42 }; 43 44 extern const struct file_operations aa_sfs_seq_file_ops; 45 46 #define AA_SFS_FILE_BOOLEAN(_name, _value) \ 47 { .name = (_name), .mode = 0444, \ 48 .v_type = AA_SFS_TYPE_BOOLEAN, .v.boolean = (_value), \ 49 .file_ops = &aa_sfs_seq_file_ops } 50 #define AA_SFS_FILE_STRING(_name, _value) \ 51 { .name = (_name), .mode = 0444, \ 52 .v_type = AA_SFS_TYPE_STRING, .v.string = (_value), \ 53 .file_ops = &aa_sfs_seq_file_ops } 54 #define AA_SFS_FILE_U64(_name, _value) \ 55 { .name = (_name), .mode = 0444, \ 56 .v_type = AA_SFS_TYPE_U64, .v.u64 = (_value), \ 57 .file_ops = &aa_sfs_seq_file_ops } 58 #define AA_SFS_FILE_FOPS(_name, _mode, _fops) \ 59 { .name = (_name), .v_type = AA_SFS_TYPE_FOPS, \ 60 .mode = (_mode), .file_ops = (_fops) } 61 #define AA_SFS_DIR(_name, _value) \ 62 { .name = (_name), .v_type = AA_SFS_TYPE_DIR, .v.files = (_value) } 63 64 extern void __init aa_destroy_aafs(void); 65 66 struct aa_profile; 67 struct aa_ns; 68 69 enum aafs_ns_type { 70 AAFS_NS_DIR, 71 AAFS_NS_PROFS, 72 AAFS_NS_NS, 73 AAFS_NS_RAW_DATA, 74 AAFS_NS_LOAD, 75 AAFS_NS_REPLACE, 76 AAFS_NS_REMOVE, 77 AAFS_NS_REVISION, 78 AAFS_NS_COUNT, 79 AAFS_NS_MAX_COUNT, 80 AAFS_NS_SIZE, 81 AAFS_NS_MAX_SIZE, 82 AAFS_NS_OWNER, 83 AAFS_NS_SIZEOF, 84 }; 85 86 enum aafs_prof_type { 87 AAFS_PROF_DIR, 88 AAFS_PROF_PROFS, 89 AAFS_PROF_NAME, 90 AAFS_PROF_MODE, 91 AAFS_PROF_ATTACH, 92 AAFS_PROF_HASH, 93 AAFS_PROF_RAW_DATA, 94 AAFS_PROF_RAW_HASH, 95 AAFS_PROF_RAW_ABI, 96 AAFS_PROF_SIZEOF, 97 }; 98 99 #define ns_dir(X) ((X)->dents[AAFS_NS_DIR]) 100 #define ns_subns_dir(X) ((X)->dents[AAFS_NS_NS]) 101 #define ns_subprofs_dir(X) ((X)->dents[AAFS_NS_PROFS]) 102 #define ns_subdata_dir(X) ((X)->dents[AAFS_NS_RAW_DATA]) 103 #define ns_subload(X) ((X)->dents[AAFS_NS_LOAD]) 104 #define ns_subreplace(X) ((X)->dents[AAFS_NS_REPLACE]) 105 #define ns_subremove(X) ((X)->dents[AAFS_NS_REMOVE]) 106 #define ns_subrevision(X) ((X)->dents[AAFS_NS_REVISION]) 107 108 #define prof_dir(X) ((X)->dents[AAFS_PROF_DIR]) 109 #define prof_child_dir(X) ((X)->dents[AAFS_PROF_PROFS]) 110 111 void __aa_bump_ns_revision(struct aa_ns *ns); 112 void __aafs_profile_rmdir(struct aa_profile *profile); 113 void __aafs_profile_migrate_dents(struct aa_profile *old, 114 struct aa_profile *new); 115 int __aafs_profile_mkdir(struct aa_profile *profile, struct dentry *parent); 116 void __aafs_ns_rmdir(struct aa_ns *ns); 117 int __aafs_ns_mkdir(struct aa_ns *ns, struct dentry *parent, const char *name, 118 struct dentry *dent); 119 120 struct aa_loaddata; 121 void __aa_fs_remove_rawdata(struct aa_loaddata *rawdata); 122 int __aa_fs_create_rawdata(struct aa_ns *ns, struct aa_loaddata *rawdata); 123 124 #endif /* __AA_APPARMORFS_H */ 125