1 /* 2 * AppArmor security module 3 * 4 * This file contains AppArmor filesystem definitions. 5 * 6 * Copyright (C) 1998-2008 Novell/SUSE 7 * Copyright 2009-2010 Canonical Ltd. 8 * 9 * This program is free software; you can redistribute it and/or 10 * modify it under the terms of the GNU General Public License as 11 * published by the Free Software Foundation, version 2 of the 12 * License. 13 */ 14 15 #ifndef __AA_APPARMORFS_H 16 #define __AA_APPARMORFS_H 17 18 extern struct path aa_null; 19 20 enum aa_fs_type { 21 AA_FS_TYPE_BOOLEAN, 22 AA_FS_TYPE_STRING, 23 AA_FS_TYPE_U64, 24 AA_FS_TYPE_FOPS, 25 AA_FS_TYPE_DIR, 26 }; 27 28 struct aa_fs_entry; 29 30 struct aa_fs_entry { 31 const char *name; 32 struct dentry *dentry; 33 umode_t mode; 34 enum aa_fs_type v_type; 35 union { 36 bool boolean; 37 char *string; 38 unsigned long u64; 39 struct aa_fs_entry *files; 40 } v; 41 const struct file_operations *file_ops; 42 }; 43 44 extern const struct file_operations aa_fs_seq_file_ops; 45 46 #define AA_FS_FILE_BOOLEAN(_name, _value) \ 47 { .name = (_name), .mode = 0444, \ 48 .v_type = AA_FS_TYPE_BOOLEAN, .v.boolean = (_value), \ 49 .file_ops = &aa_fs_seq_file_ops } 50 #define AA_FS_FILE_STRING(_name, _value) \ 51 { .name = (_name), .mode = 0444, \ 52 .v_type = AA_FS_TYPE_STRING, .v.string = (_value), \ 53 .file_ops = &aa_fs_seq_file_ops } 54 #define AA_FS_FILE_U64(_name, _value) \ 55 { .name = (_name), .mode = 0444, \ 56 .v_type = AA_FS_TYPE_U64, .v.u64 = (_value), \ 57 .file_ops = &aa_fs_seq_file_ops } 58 #define AA_FS_FILE_FOPS(_name, _mode, _fops) \ 59 { .name = (_name), .v_type = AA_FS_TYPE_FOPS, \ 60 .mode = (_mode), .file_ops = (_fops) } 61 #define AA_FS_DIR(_name, _value) \ 62 { .name = (_name), .v_type = AA_FS_TYPE_DIR, .v.files = (_value) } 63 64 extern void __init aa_destroy_aafs(void); 65 66 struct aa_profile; 67 struct aa_ns; 68 69 enum aafs_ns_type { 70 AAFS_NS_DIR, 71 AAFS_NS_PROFS, 72 AAFS_NS_NS, 73 AAFS_NS_RAW_DATA, 74 AAFS_NS_LOAD, 75 AAFS_NS_REPLACE, 76 AAFS_NS_REMOVE, 77 AAFS_NS_COUNT, 78 AAFS_NS_MAX_COUNT, 79 AAFS_NS_SIZE, 80 AAFS_NS_MAX_SIZE, 81 AAFS_NS_OWNER, 82 AAFS_NS_SIZEOF, 83 }; 84 85 enum aafs_prof_type { 86 AAFS_PROF_DIR, 87 AAFS_PROF_PROFS, 88 AAFS_PROF_NAME, 89 AAFS_PROF_MODE, 90 AAFS_PROF_ATTACH, 91 AAFS_PROF_HASH, 92 AAFS_PROF_RAW_DATA, 93 AAFS_PROF_RAW_HASH, 94 AAFS_PROF_RAW_ABI, 95 AAFS_PROF_SIZEOF, 96 }; 97 98 #define ns_dir(X) ((X)->dents[AAFS_NS_DIR]) 99 #define ns_subns_dir(X) ((X)->dents[AAFS_NS_NS]) 100 #define ns_subprofs_dir(X) ((X)->dents[AAFS_NS_PROFS]) 101 #define ns_subdata_dir(X) ((X)->dents[AAFS_NS_RAW_DATA]) 102 #define ns_subload(X) ((X)->dents[AAFS_NS_LOAD]) 103 #define ns_subreplace(X) ((X)->dents[AAFS_NS_REPLACE]) 104 #define ns_subremove(X) ((X)->dents[AAFS_NS_REMOVE]) 105 106 #define prof_dir(X) ((X)->dents[AAFS_PROF_DIR]) 107 #define prof_child_dir(X) ((X)->dents[AAFS_PROF_PROFS]) 108 109 void __aa_fs_profile_rmdir(struct aa_profile *profile); 110 void __aa_fs_profile_migrate_dents(struct aa_profile *old, 111 struct aa_profile *new); 112 int __aa_fs_profile_mkdir(struct aa_profile *profile, struct dentry *parent); 113 void __aa_fs_ns_rmdir(struct aa_ns *ns); 114 int __aa_fs_ns_mkdir(struct aa_ns *ns, struct dentry *parent, 115 const char *name); 116 117 #endif /* __AA_APPARMORFS_H */ 118