1 /* 2 * A security identifier table (sidtab) is a hash table 3 * of security context structures indexed by SID value. 4 * 5 * Author : Stephen Smalley, <sds@epoch.ncsc.mil> 6 */ 7 #ifndef _SS_SIDTAB_H_ 8 #define _SS_SIDTAB_H_ 9 10 #include "context.h" 11 12 struct sidtab_node { 13 u32 sid; /* security identifier */ 14 struct context context; /* security context structure */ 15 struct sidtab_node *next; 16 }; 17 18 #define SIDTAB_HASH_BITS 7 19 #define SIDTAB_HASH_BUCKETS (1 << SIDTAB_HASH_BITS) 20 #define SIDTAB_HASH_MASK (SIDTAB_HASH_BUCKETS-1) 21 22 #define SIDTAB_SIZE SIDTAB_HASH_BUCKETS 23 24 struct sidtab { 25 struct sidtab_node **htable; 26 unsigned int nel; /* number of elements */ 27 unsigned int next_sid; /* next SID to allocate */ 28 unsigned char shutdown; 29 spinlock_t lock; 30 }; 31 32 int sidtab_init(struct sidtab *s); 33 int sidtab_insert(struct sidtab *s, u32 sid, struct context *context); 34 struct context *sidtab_search(struct sidtab *s, u32 sid); 35 36 int sidtab_map(struct sidtab *s, 37 int (*apply) (u32 sid, 38 struct context *context, 39 void *args), 40 void *args); 41 42 void sidtab_map_remove_on_error(struct sidtab *s, 43 int (*apply) (u32 sid, 44 struct context *context, 45 void *args), 46 void *args); 47 48 int sidtab_context_to_sid(struct sidtab *s, 49 struct context *context, 50 u32 *sid); 51 52 void sidtab_hash_eval(struct sidtab *h, char *tag); 53 void sidtab_destroy(struct sidtab *s); 54 void sidtab_set(struct sidtab *dst, struct sidtab *src); 55 void sidtab_shutdown(struct sidtab *s); 56 57 #endif /* _SS_SIDTAB_H_ */ 58 59 60