1 /*
2  * NetLabel Domain Hash Table
3  *
4  * This file manages the domain hash table that NetLabel uses to determine
5  * which network labeling protocol to use for a given domain.  The NetLabel
6  * system manages static and dynamic label mappings for network protocols such
7  * as CIPSO and RIPSO.
8  *
9  * Author: Paul Moore <paul@paul-moore.com>
10  *
11  */
12 
13 /*
14  * (c) Copyright Hewlett-Packard Development Company, L.P., 2006, 2008
15  *
16  * This program is free software;  you can redistribute it and/or modify
17  * it under the terms of the GNU General Public License as published by
18  * the Free Software Foundation; either version 2 of the License, or
19  * (at your option) any later version.
20  *
21  * This program is distributed in the hope that it will be useful,
22  * but WITHOUT ANY WARRANTY;  without even the implied warranty of
23  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See
24  * the GNU General Public License for more details.
25  *
26  * You should have received a copy of the GNU General Public License
27  * along with this program;  if not, see <http://www.gnu.org/licenses/>.
28  *
29  */
30 
31 #ifndef _NETLABEL_DOMAINHASH_H
32 #define _NETLABEL_DOMAINHASH_H
33 
34 #include <linux/types.h>
35 #include <linux/rcupdate.h>
36 #include <linux/list.h>
37 
38 #include "netlabel_addrlist.h"
39 
40 /* Domain hash table size */
41 /* XXX - currently this number is an uneducated guess */
42 #define NETLBL_DOMHSH_BITSIZE       7
43 
44 /* Domain mapping definition structures */
45 struct netlbl_domaddr_map {
46 	struct list_head list4;
47 	struct list_head list6;
48 };
49 struct netlbl_dommap_def {
50 	u32 type;
51 	union {
52 		struct netlbl_domaddr_map *addrsel;
53 		struct cipso_v4_doi *cipso;
54 	};
55 };
56 #define netlbl_domhsh_addr4_entry(iter) \
57 	container_of(iter, struct netlbl_domaddr4_map, list)
58 struct netlbl_domaddr4_map {
59 	struct netlbl_dommap_def def;
60 
61 	struct netlbl_af4list list;
62 };
63 #define netlbl_domhsh_addr6_entry(iter) \
64 	container_of(iter, struct netlbl_domaddr6_map, list)
65 struct netlbl_domaddr6_map {
66 	struct netlbl_dommap_def def;
67 
68 	struct netlbl_af6list list;
69 };
70 
71 struct netlbl_dom_map {
72 	char *domain;
73 	struct netlbl_dommap_def def;
74 
75 	u32 valid;
76 	struct list_head list;
77 	struct rcu_head rcu;
78 };
79 
80 /* init function */
81 int netlbl_domhsh_init(u32 size);
82 
83 /* Manipulate the domain hash table */
84 int netlbl_domhsh_add(struct netlbl_dom_map *entry,
85 		      struct netlbl_audit *audit_info);
86 int netlbl_domhsh_add_default(struct netlbl_dom_map *entry,
87 			      struct netlbl_audit *audit_info);
88 int netlbl_domhsh_remove_entry(struct netlbl_dom_map *entry,
89 			       struct netlbl_audit *audit_info);
90 int netlbl_domhsh_remove_af4(const char *domain,
91 			     const struct in_addr *addr,
92 			     const struct in_addr *mask,
93 			     struct netlbl_audit *audit_info);
94 int netlbl_domhsh_remove(const char *domain, struct netlbl_audit *audit_info);
95 int netlbl_domhsh_remove_default(struct netlbl_audit *audit_info);
96 struct netlbl_dom_map *netlbl_domhsh_getentry(const char *domain);
97 struct netlbl_dommap_def *netlbl_domhsh_getentry_af4(const char *domain,
98 						     __be32 addr);
99 #if IS_ENABLED(CONFIG_IPV6)
100 struct netlbl_dommap_def *netlbl_domhsh_getentry_af6(const char *domain,
101 						   const struct in6_addr *addr);
102 #endif /* IPv6 */
103 
104 int netlbl_domhsh_walk(u32 *skip_bkt,
105 		     u32 *skip_chain,
106 		     int (*callback) (struct netlbl_dom_map *entry, void *arg),
107 		     void *cb_arg);
108 
109 #endif
110