1 /* SPDX-License-Identifier: GPL-2.0-only */ 2 /* 3 * AppArmor security module 4 * 5 * Code to provide backwards compatibility with older policy versions, 6 * by converting/mapping older policy formats into the newer internal 7 * formats. 8 * 9 * Copyright 2022 Canonical Ltd. 10 */ 11 12 #ifndef __POLICY_COMPAT_H 13 #define __POLICY_COMPAT_H 14 15 #include "policy.h" 16 17 #define K_ABI_MASK 0x3ff 18 #define FORCE_COMPLAIN_FLAG 0x800 19 #define VERSION_LT(X, Y) (((X) & K_ABI_MASK) < ((Y) & K_ABI_MASK)) 20 #define VERSION_LE(X, Y) (((X) & K_ABI_MASK) <= ((Y) & K_ABI_MASK)) 21 #define VERSION_GT(X, Y) (((X) & K_ABI_MASK) > ((Y) & K_ABI_MASK)) 22 23 #define v5 5 /* base version */ 24 #define v6 6 /* per entry policydb mediation check */ 25 #define v7 7 26 #define v8 8 /* full network masking */ 27 #define v9 9 /* xbits are used as permission bits in policydb */ 28 29 int aa_compat_map_xmatch(struct aa_policydb *policy); 30 int aa_compat_map_policy(struct aa_policydb *policy, u32 version); 31 int aa_compat_map_file(struct aa_policydb *policy); 32 33 #endif /* __POLICY_COMPAT_H */ 34