1 /* 2 * NetLabel Domain Hash Table 3 * 4 * This file manages the domain hash table that NetLabel uses to determine 5 * which network labeling protocol to use for a given domain. The NetLabel 6 * system manages static and dynamic label mappings for network protocols such 7 * as CIPSO and RIPSO. 8 * 9 * Author: Paul Moore <paul@paul-moore.com> 10 * 11 */ 12 13 /* 14 * (c) Copyright Hewlett-Packard Development Company, L.P., 2006, 2008 15 * 16 * This program is free software; you can redistribute it and/or modify 17 * it under the terms of the GNU General Public License as published by 18 * the Free Software Foundation; either version 2 of the License, or 19 * (at your option) any later version. 20 * 21 * This program is distributed in the hope that it will be useful, 22 * but WITHOUT ANY WARRANTY; without even the implied warranty of 23 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See 24 * the GNU General Public License for more details. 25 * 26 * You should have received a copy of the GNU General Public License 27 * along with this program; if not, write to the Free Software 28 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA 29 * 30 */ 31 32 #ifndef _NETLABEL_DOMAINHASH_H 33 #define _NETLABEL_DOMAINHASH_H 34 35 #include <linux/types.h> 36 #include <linux/rcupdate.h> 37 #include <linux/list.h> 38 39 #include "netlabel_addrlist.h" 40 41 /* Domain hash table size */ 42 /* XXX - currently this number is an uneducated guess */ 43 #define NETLBL_DOMHSH_BITSIZE 7 44 45 /* Domain mapping definition structures */ 46 struct netlbl_domaddr_map { 47 struct list_head list4; 48 struct list_head list6; 49 }; 50 struct netlbl_dommap_def { 51 u32 type; 52 union { 53 struct netlbl_domaddr_map *addrsel; 54 struct cipso_v4_doi *cipso; 55 }; 56 }; 57 #define netlbl_domhsh_addr4_entry(iter) \ 58 container_of(iter, struct netlbl_domaddr4_map, list) 59 struct netlbl_domaddr4_map { 60 struct netlbl_dommap_def def; 61 62 struct netlbl_af4list list; 63 }; 64 #define netlbl_domhsh_addr6_entry(iter) \ 65 container_of(iter, struct netlbl_domaddr6_map, list) 66 struct netlbl_domaddr6_map { 67 struct netlbl_dommap_def def; 68 69 struct netlbl_af6list list; 70 }; 71 72 struct netlbl_dom_map { 73 char *domain; 74 struct netlbl_dommap_def def; 75 76 u32 valid; 77 struct list_head list; 78 struct rcu_head rcu; 79 }; 80 81 /* init function */ 82 int netlbl_domhsh_init(u32 size); 83 84 /* Manipulate the domain hash table */ 85 int netlbl_domhsh_add(struct netlbl_dom_map *entry, 86 struct netlbl_audit *audit_info); 87 int netlbl_domhsh_add_default(struct netlbl_dom_map *entry, 88 struct netlbl_audit *audit_info); 89 int netlbl_domhsh_remove_entry(struct netlbl_dom_map *entry, 90 struct netlbl_audit *audit_info); 91 int netlbl_domhsh_remove_af4(const char *domain, 92 const struct in_addr *addr, 93 const struct in_addr *mask, 94 struct netlbl_audit *audit_info); 95 int netlbl_domhsh_remove(const char *domain, struct netlbl_audit *audit_info); 96 int netlbl_domhsh_remove_default(struct netlbl_audit *audit_info); 97 struct netlbl_dom_map *netlbl_domhsh_getentry(const char *domain); 98 struct netlbl_dommap_def *netlbl_domhsh_getentry_af4(const char *domain, 99 __be32 addr); 100 #if IS_ENABLED(CONFIG_IPV6) 101 struct netlbl_dommap_def *netlbl_domhsh_getentry_af6(const char *domain, 102 const struct in6_addr *addr); 103 #endif /* IPv6 */ 104 105 int netlbl_domhsh_walk(u32 *skip_bkt, 106 u32 *skip_chain, 107 int (*callback) (struct netlbl_dom_map *entry, void *arg), 108 void *cb_arg); 109 110 #endif 111