Loading...
1/*
2 * Implementation of the security services.
3 *
4 * Author : Stephen Smalley, <sds@epoch.ncsc.mil>
5 */
6#ifndef _SS_SERVICES_H_
7#define _SS_SERVICES_H_
8
9#include "policydb.h"
10#include "sidtab.h"
11
12extern struct policydb policydb;
13
14void services_compute_xperms_drivers(struct extended_perms *xperms,
15 struct avtab_node *node);
16
17void services_compute_xperms_decision(struct extended_perms_decision *xpermd,
18 struct avtab_node *node);
19
20#endif /* _SS_SERVICES_H_ */
21
1/* SPDX-License-Identifier: GPL-2.0 */
2/*
3 * Implementation of the security services.
4 *
5 * Author : Stephen Smalley, <sds@tycho.nsa.gov>
6 */
7#ifndef _SS_SERVICES_H_
8#define _SS_SERVICES_H_
9
10#include "policydb.h"
11
12/* Mapping for a single class */
13struct selinux_mapping {
14 u16 value; /* policy value for class */
15 unsigned int num_perms; /* number of permissions in class */
16 u32 perms[sizeof(u32) * 8]; /* policy values for permissions */
17};
18
19/* Map for all of the classes, with array size */
20struct selinux_map {
21 struct selinux_mapping *mapping; /* indexed by class */
22 u16 size; /* array size of mapping */
23};
24
25struct selinux_ss {
26 struct sidtab *sidtab;
27 struct policydb policydb;
28 rwlock_t policy_rwlock;
29 u32 latest_granting;
30 struct selinux_map map;
31} __randomize_layout;
32
33void services_compute_xperms_drivers(struct extended_perms *xperms,
34 struct avtab_node *node);
35
36void services_compute_xperms_decision(struct extended_perms_decision *xpermd,
37 struct avtab_node *node);
38
39#endif /* _SS_SERVICES_H_ */