Commit | Line | Data |
---|---|---|
1ccea77e | 1 | /* SPDX-License-Identifier: GPL-2.0-or-later */ |
d15c345f PM |
2 | /* |
3 | * NetLabel Management Support | |
4 | * | |
5 | * This file defines the management functions for the NetLabel system. The | |
6 | * NetLabel system manages static and dynamic label mappings for network | |
7 | * protocols such as CIPSO and RIPSO. | |
8 | * | |
82c21bfa | 9 | * Author: Paul Moore <paul@paul-moore.com> |
d15c345f PM |
10 | */ |
11 | ||
12 | /* | |
13 | * (c) Copyright Hewlett-Packard Development Company, L.P., 2006 | |
d15c345f PM |
14 | */ |
15 | ||
16 | #ifndef _NETLABEL_MGMT_H | |
17 | #define _NETLABEL_MGMT_H | |
18 | ||
19 | #include <net/netlabel.h> | |
60063497 | 20 | #include <linux/atomic.h> |
d15c345f PM |
21 | |
22 | /* | |
fd385855 | 23 | * The following NetLabel payloads are supported by the management interface. |
d15c345f PM |
24 | * |
25 | * o ADD: | |
26 | * Sent by an application to add a domain mapping to the NetLabel system. | |
d15c345f | 27 | * |
fd385855 | 28 | * Required attributes: |
d15c345f | 29 | * |
fd385855 PM |
30 | * NLBL_MGMT_A_DOMAIN |
31 | * NLBL_MGMT_A_PROTOCOL | |
d15c345f | 32 | * |
63c41688 PM |
33 | * If IPv4 is specified the following attributes are required: |
34 | * | |
35 | * NLBL_MGMT_A_IPV4ADDR | |
36 | * NLBL_MGMT_A_IPV4MASK | |
37 | * | |
38 | * If IPv6 is specified the following attributes are required: | |
39 | * | |
40 | * NLBL_MGMT_A_IPV6ADDR | |
41 | * NLBL_MGMT_A_IPV6MASK | |
42 | * | |
fd385855 | 43 | * If using NETLBL_NLTYPE_CIPSOV4 the following attributes are required: |
d15c345f | 44 | * |
fd385855 | 45 | * NLBL_MGMT_A_CV4DOI |
d15c345f | 46 | * |
8f18e675 HD |
47 | * If using NETLBL_NLTYPE_UNLABELED no other attributes are required, |
48 | * however the following attribute may optionally be sent: | |
49 | * | |
50 | * NLBL_MGMT_A_FAMILY | |
d15c345f PM |
51 | * |
52 | * o REMOVE: | |
53 | * Sent by an application to remove a domain mapping from the NetLabel | |
fd385855 | 54 | * system. |
d15c345f | 55 | * |
fd385855 | 56 | * Required attributes: |
d15c345f | 57 | * |
fd385855 | 58 | * NLBL_MGMT_A_DOMAIN |
d15c345f | 59 | * |
fd385855 | 60 | * o LISTALL: |
d15c345f | 61 | * This message can be sent either from an application or by the kernel in |
fd385855 PM |
62 | * response to an application generated LISTALL message. When sent by an |
63 | * application there is no payload and the NLM_F_DUMP flag should be set. | |
64 | * The kernel should respond with a series of the following messages. | |
d15c345f | 65 | * |
fd385855 | 66 | * Required attributes: |
d15c345f | 67 | * |
fd385855 | 68 | * NLBL_MGMT_A_DOMAIN |
8f18e675 | 69 | * NLBL_MGMT_A_FAMILY |
63c41688 PM |
70 | * |
71 | * If the IP address selectors are not used the following attribute is | |
72 | * required: | |
73 | * | |
fd385855 | 74 | * NLBL_MGMT_A_PROTOCOL |
d15c345f | 75 | * |
63c41688 PM |
76 | * If the IP address selectors are used then the following attritbute is |
77 | * required: | |
78 | * | |
79 | * NLBL_MGMT_A_SELECTORLIST | |
80 | * | |
81 | * If the mapping is using the NETLBL_NLTYPE_CIPSOV4 type then the following | |
82 | * attributes are required: | |
d15c345f | 83 | * |
fd385855 | 84 | * NLBL_MGMT_A_CV4DOI |
d15c345f | 85 | * |
63c41688 PM |
86 | * If the mapping is using the NETLBL_NLTYPE_UNLABELED type no other |
87 | * attributes are required. | |
d15c345f PM |
88 | * |
89 | * o ADDDEF: | |
90 | * Sent by an application to set the default domain mapping for the NetLabel | |
fd385855 | 91 | * system. |
d15c345f | 92 | * |
fd385855 | 93 | * Required attributes: |
d15c345f | 94 | * |
fd385855 | 95 | * NLBL_MGMT_A_PROTOCOL |
d15c345f | 96 | * |
fd385855 | 97 | * If using NETLBL_NLTYPE_CIPSOV4 the following attributes are required: |
d15c345f | 98 | * |
fd385855 | 99 | * NLBL_MGMT_A_CV4DOI |
d15c345f | 100 | * |
8f18e675 HD |
101 | * If using NETLBL_NLTYPE_UNLABELED no other attributes are required, |
102 | * however the following attribute may optionally be sent: | |
103 | * | |
104 | * NLBL_MGMT_A_FAMILY | |
d15c345f PM |
105 | * |
106 | * o REMOVEDEF: | |
107 | * Sent by an application to remove the default domain mapping from the | |
fd385855 | 108 | * NetLabel system, there is no payload. |
d15c345f PM |
109 | * |
110 | * o LISTDEF: | |
111 | * This message can be sent either from an application or by the kernel in | |
112 | * response to an application generated LISTDEF message. When sent by an | |
8f18e675 | 113 | * application there may be an optional payload. |
d15c345f | 114 | * |
8f18e675 HD |
115 | * NLBL_MGMT_A_FAMILY |
116 | * | |
117 | * On success the kernel should send a response using the following format: | |
118 | * | |
119 | * If the IP address selectors are not used the following attributes are | |
63c41688 | 120 | * required: |
d15c345f | 121 | * |
fd385855 | 122 | * NLBL_MGMT_A_PROTOCOL |
8f18e675 | 123 | * NLBL_MGMT_A_FAMILY |
d15c345f | 124 | * |
63c41688 PM |
125 | * If the IP address selectors are used then the following attritbute is |
126 | * required: | |
127 | * | |
128 | * NLBL_MGMT_A_SELECTORLIST | |
129 | * | |
130 | * If the mapping is using the NETLBL_NLTYPE_CIPSOV4 type then the following | |
131 | * attributes are required: | |
d15c345f | 132 | * |
fd385855 | 133 | * NLBL_MGMT_A_CV4DOI |
d15c345f | 134 | * |
63c41688 PM |
135 | * If the mapping is using the NETLBL_NLTYPE_UNLABELED type no other |
136 | * attributes are required. | |
d15c345f | 137 | * |
fd385855 PM |
138 | * o PROTOCOLS: |
139 | * Sent by an application to request a list of configured NetLabel protocols | |
140 | * in the kernel. When sent by an application there is no payload and the | |
141 | * NLM_F_DUMP flag should be set. The kernel should respond with a series of | |
142 | * the following messages. | |
d15c345f | 143 | * |
fd385855 | 144 | * Required attributes: |
d15c345f | 145 | * |
fd385855 | 146 | * NLBL_MGMT_A_PROTOCOL |
d15c345f PM |
147 | * |
148 | * o VERSION: | |
fd385855 PM |
149 | * Sent by an application to request the NetLabel version. When sent by an |
150 | * application there is no payload. This message type is also used by the | |
151 | * kernel to respond to an VERSION request. | |
d15c345f | 152 | * |
fd385855 | 153 | * Required attributes: |
d15c345f | 154 | * |
fd385855 | 155 | * NLBL_MGMT_A_VERSION |
d15c345f PM |
156 | * |
157 | */ | |
158 | ||
159 | /* NetLabel Management commands */ | |
160 | enum { | |
161 | NLBL_MGMT_C_UNSPEC, | |
d15c345f PM |
162 | NLBL_MGMT_C_ADD, |
163 | NLBL_MGMT_C_REMOVE, | |
fd385855 | 164 | NLBL_MGMT_C_LISTALL, |
d15c345f PM |
165 | NLBL_MGMT_C_ADDDEF, |
166 | NLBL_MGMT_C_REMOVEDEF, | |
167 | NLBL_MGMT_C_LISTDEF, | |
fd385855 | 168 | NLBL_MGMT_C_PROTOCOLS, |
d15c345f PM |
169 | NLBL_MGMT_C_VERSION, |
170 | __NLBL_MGMT_C_MAX, | |
171 | }; | |
d15c345f | 172 | |
fd385855 PM |
173 | /* NetLabel Management attributes */ |
174 | enum { | |
175 | NLBL_MGMT_A_UNSPEC, | |
176 | NLBL_MGMT_A_DOMAIN, | |
177 | /* (NLA_NUL_STRING) | |
178 | * the NULL terminated LSM domain string */ | |
179 | NLBL_MGMT_A_PROTOCOL, | |
180 | /* (NLA_U32) | |
181 | * the NetLabel protocol type (defined by NETLBL_NLTYPE_*) */ | |
182 | NLBL_MGMT_A_VERSION, | |
183 | /* (NLA_U32) | |
184 | * the NetLabel protocol version number (defined by | |
185 | * NETLBL_PROTO_VERSION) */ | |
186 | NLBL_MGMT_A_CV4DOI, | |
187 | /* (NLA_U32) | |
188 | * the CIPSOv4 DOI value */ | |
63c41688 PM |
189 | NLBL_MGMT_A_IPV6ADDR, |
190 | /* (NLA_BINARY, struct in6_addr) | |
191 | * an IPv6 address */ | |
192 | NLBL_MGMT_A_IPV6MASK, | |
193 | /* (NLA_BINARY, struct in6_addr) | |
194 | * an IPv6 address mask */ | |
195 | NLBL_MGMT_A_IPV4ADDR, | |
196 | /* (NLA_BINARY, struct in_addr) | |
197 | * an IPv4 address */ | |
198 | NLBL_MGMT_A_IPV4MASK, | |
199 | /* (NLA_BINARY, struct in_addr) | |
200 | * and IPv4 address mask */ | |
201 | NLBL_MGMT_A_ADDRSELECTOR, | |
202 | /* (NLA_NESTED) | |
203 | * an IP address selector, must contain an address, mask, and protocol | |
204 | * attribute plus any protocol specific attributes */ | |
205 | NLBL_MGMT_A_SELECTORLIST, | |
206 | /* (NLA_NESTED) | |
207 | * the selector list, there must be at least one | |
208 | * NLBL_MGMT_A_ADDRSELECTOR attribute */ | |
8f18e675 HD |
209 | NLBL_MGMT_A_FAMILY, |
210 | /* (NLA_U16) | |
211 | * The address family */ | |
dc7de73f HD |
212 | NLBL_MGMT_A_CLPDOI, |
213 | /* (NLA_U32) | |
214 | * the CALIPSO DOI value */ | |
fd385855 PM |
215 | __NLBL_MGMT_A_MAX, |
216 | }; | |
217 | #define NLBL_MGMT_A_MAX (__NLBL_MGMT_A_MAX - 1) | |
218 | ||
d15c345f PM |
219 | /* NetLabel protocol functions */ |
220 | int netlbl_mgmt_genl_init(void); | |
221 | ||
c783f1ce PM |
222 | /* NetLabel configured protocol reference counter */ |
223 | extern atomic_t netlabel_mgmt_protocount; | |
23bcdc1a | 224 | |
d15c345f | 225 | #endif |