← Back to branch summary

~ubuntu-branches/ubuntu/gutsy/checkpolicy/gutsy

« back to all changes in this revision

Viewing changes to include/avc_ss.h

  • Committer: Bazaar Package Importer
  • Author(s): Russell Coker
  • Date: 2004-05-20 04:32:00 UTC
  • Revision ID: james.westby@ubuntu.com-20040520043200-w4lzkx37dmmc3wt9
Tags: upstream-1.10
Import upstream version 1.10

Show diffs side-by-side

added added

removed removed

Lines of Context:
include/avc_ss.h
 
1
 
 
2
/* -*- linux-c -*- */
 
3
 
 
4
/*
 
5
 * Author : Stephen Smalley, <sds@epoch.ncsc.mil> 
 
6
 */
 
7
 
 
8
#ifndef _LINUX_AVC_SS_H_
 
9
#define _LINUX_AVC_SS_H_
 
10
 
 
11
/* 
 
12
 * Access vector cache interface for the security server
 
13
 */
 
14
 
 
15
#include "flask_types.h"
 
16
#include "flask.h"
 
17
 
 
18
/*
 
19
 * Any of the SID parameters may be wildcarded,
 
20
 * in which case the operation is applied to all
 
21
 * matching entries in the AVC.
 
22
 */
 
23
 
 
24
/* Grant previously denied permissions */
 
25
int avc_ss_grant(
 
26
        security_id_t ssid,             /* IN */
 
27
        security_id_t tsid,             /* IN */
 
28
        security_class_t tclass,        /* IN */
 
29
        access_vector_t perms,          /* IN */
 
30
        __u32 seqno);                   /* IN */
 
31
 
 
32
/*
 
33
 * Try to revoke previously granted permissions, but
 
34
 * only if they are not retained as migrated permissions.
 
35
 * Return the subset of permissions that are retained.
 
36
 */
 
37
int avc_ss_try_revoke(
 
38
        security_id_t ssid,             /* IN */
 
39
        security_id_t tsid,             /* IN */
 
40
        security_class_t tclass,        /* IN */
 
41
        access_vector_t perms,          /* IN */
 
42
        __u32 seqno,                    /* IN */
 
43
        access_vector_t *out_retained); /* OUT */
 
44
 
 
45
/*
 
46
 * Revoke previously granted permissions, even if
 
47
 * they are retained as migrated permissions.
 
48
 */
 
49
int avc_ss_revoke(
 
50
        security_id_t ssid,             /* IN */
 
51
        security_id_t tsid,             /* IN */
 
52
        security_class_t tclass,        /* IN */
 
53
        access_vector_t perms,          /* IN */
 
54
        __u32 seqno);                   /* IN */
 
55
 
 
56
/* 
 
57
 * Flush the cache and revalidate all migrated permissions.
 
58
 */
 
59
int avc_ss_reset(__u32 seqno);
 
60
 
 
61
 
 
62
/* Enable or disable auditing of granted permissions */
 
63
int avc_ss_set_auditallow(
 
64
        security_id_t ssid,             /* IN */
 
65
        security_id_t tsid,             /* IN */
 
66
        security_class_t tclass,        /* IN */
 
67
        access_vector_t perms,          /* IN */
 
68
        __u32 seqno,                    /* IN */
 
69
        __u32 enable);
 
70
 
 
71
/* Enable or disable auditing of denied permissions */
 
72
int avc_ss_set_auditdeny(
 
73
        security_id_t ssid,             /* IN */
 
74
        security_id_t tsid,             /* IN */
 
75
        security_class_t tclass,        /* IN */
 
76
        access_vector_t perms,          /* IN */
 
77
        __u32 seqno,                    /* IN */
 
78
        __u32 enable);
 
79
 
 
80
#endif /* _LINUX_AVC_SS_H_ */
 
81