security/tomoyo/network.c

20 	u8 *addr; /* This may not be '\0' terminated string. */
38 	[0] = " ", /* Dummy for avoiding NULL pointer dereference. */
39 	[4] = " ", /* Dummy for avoiding NULL pointer dereference. */
45  * @param: Pointer to "struct tomoyo_acl_param".
46  * @ptr:   Pointer to "struct tomoyo_ipaddr_union".
53 	u8 * const min = ptr->ip[0].in6_u.u6_addr8;  in tomoyo_parse_ipaddr_union()
59 	    in4_pton(address, -1, min, '-', &end) > 0) {  in tomoyo_parse_ipaddr_union()
62 			ptr->ip[1].s6_addr32[0] = ptr->ip[0].s6_addr32[0];  in tomoyo_parse_ipaddr_union()
64 			 in4_pton(end, -1, max, '\0', &end) <= 0 || *end)  in tomoyo_parse_ipaddr_union()
68 	if (in6_pton(address, -1, min, '-', &end) > 0) {  in tomoyo_parse_ipaddr_union()
73 			 in6_pton(end, -1, max, '\0', &end) <= 0 || *end)  in tomoyo_parse_ipaddr_union()
85  * @min_ip:     Pointer to __be32.
86  * @max_ip:     Pointer to __be32.
94 		 *min_ip == *max_ip ? '\0' : '-', max_ip);  in tomoyo_print_ipv4()
102  * @min_ip:     Pointer to "struct in6_addr".
103  * @max_ip:     Pointer to "struct in6_addr".
112 		 !memcmp(min_ip, max_ip, 16) ? '\0' : '-', max_ip);  in tomoyo_print_ipv6()
120  * @ptr:  Pointer to "struct ipaddr_union".
128 		tomoyo_print_ipv6(buf, size, &ptr->ip[0], &ptr->ip[1]);  in tomoyo_print_ip()
130 		tomoyo_print_ipv4(buf, size, &ptr->ip[0].s6_addr32[0],  in tomoyo_print_ip()
131 				  &ptr->ip[1].s6_addr32[0]);  in tomoyo_print_ip()
187  * @a: Pointer to "struct tomoyo_acl_info".
188  * @b: Pointer to "struct tomoyo_acl_info".
206  * @a: Pointer to "struct tomoyo_acl_info".
207  * @b: Pointer to "struct tomoyo_acl_info".
224  * @a:         Pointer to "struct tomoyo_acl_info".
225  * @b:         Pointer to "struct tomoyo_acl_info".
250  * @a:         Pointer to "struct tomoyo_acl_info".
251  * @b:         Pointer to "struct tomoyo_acl_info".
276  * @param: Pointer to "struct tomoyo_acl_param".
278  * Returns 0 on success, negative value otherwise.
290 	for (e.protocol = 0; e.protocol < TOMOYO_SOCK_MAX; e.protocol++)  in tomoyo_write_inet_network()
293 	for (type = 0; type < TOMOYO_MAX_NETWORK_OPERATION; type++)  in tomoyo_write_inet_network()
298 	if (param->data[0] == '@') {  in tomoyo_write_inet_network()
323  * @param: Pointer to "struct tomoyo_acl_param".
325  * Returns 0 on success, negative value otherwise.
335 	for (e.protocol = 0; e.protocol < TOMOYO_SOCK_MAX; e.protocol++)  in tomoyo_write_unix_network()
338 	for (type = 0; type < TOMOYO_MAX_NETWORK_OPERATION; type++)  in tomoyo_write_unix_network()
355  * @r:         Pointer to "struct tomoyo_request_info".
361  * Returns 0 on success, negative value otherwise.
375  * @r: Pointer to "struct tomoyo_request_info".
377  * Returns 0 on success, negative value otherwise.
400  * @r: Pointer to "struct tomoyo_request_info".
402  * Returns 0 on success, negative value otherwise.
414  * @r:   Pointer to "struct tomoyo_request_info".
415  * @ptr: Pointer to "struct tomoyo_acl_info".
435 		memcmp(&acl->address.ip[0],  in tomoyo_check_inet_acl()
436 		       r->param.inet_network.address, size) <= 0 &&  in tomoyo_check_inet_acl()
438 		       &acl->address.ip[1], size) <= 0;  in tomoyo_check_inet_acl()
444  * @r:   Pointer to "struct tomoyo_request_info".
445  * @ptr: Pointer to "struct tomoyo_acl_info".
463  * @address: Pointer to "struct tomoyo_addr_info".
465  * Returns 0 on success, negative value otherwise.
471 	int error = 0;  in tomoyo_inet_entry()
494  * @addr:     Pointer to "struct sockaddr".
497  * @address:  Pointer to "struct tomoyo_addr_info".
499  * Returns 0 on success, negative value otherwise.
509 		return 0;  in tomoyo_check_inet_address()
534 	return 0;  in tomoyo_check_inet_address()
540  * @address: Pointer to "struct tomoyo_addr_info".
542  * Returns 0 on success, negative value otherwise.
548 	int error = 0;  in tomoyo_unix_entry()
556 		if (len <= 0) {  in tomoyo_unix_entry()
559 		} else if (buf[0]) {  in tomoyo_unix_entry()
587  * @addr:     Pointer to "struct sockaddr".
589  * @address:  Pointer to "struct tomoyo_addr_info".
591  * Returns 0 on success, negative value otherwise.
600 		return 0;  in tomoyo_check_unix_address()
602 		return 0;  in tomoyo_check_unix_address()
622  * @sk: Pointer to "struct sock".
624  * Returns one of PF_INET, PF_INET6, PF_UNIX or 0.
631 		return 0;  in tomoyo_sock_family()
639 		return 0;  in tomoyo_sock_family()
646  * @sock: Pointer to "struct socket".
648  * Returns 0 on success, negative value otherwise.
659 		return 0;  in tomoyo_socket_listen_permission()
662 						     &addr, 0);  in tomoyo_socket_listen_permission()
664 		if (error < 0)  in tomoyo_socket_listen_permission()
674 					 0, &address);  in tomoyo_socket_listen_permission()
680  * @sock:     Pointer to "struct socket".
681  * @addr:     Pointer to "struct sockaddr".
684  * Returns 0 on success, negative value otherwise.
694 		return 0;  in tomoyo_socket_connect_permission()
706 		return 0;  in tomoyo_socket_connect_permission()
717  * @sock:     Pointer to "struct socket".
718  * @addr:     Pointer to "struct sockaddr".
721  * Returns 0 on success, negative value otherwise.
731 		return 0;  in tomoyo_socket_bind_permission()
741 		return 0;  in tomoyo_socket_bind_permission()
752  * @sock: Pointer to "struct socket".
753  * @msg:  Pointer to "struct msghdr".
756  * Returns 0 on success, negative value otherwise.
767 		return 0;  in tomoyo_socket_sendmsg_permission()