5c45899879
Moves the definition of the 3 structs containing object class and permission definitions from avc.c to avc_ss.h so that the security server can access them for validation on policy load. This also adds a new struct type, defined_classes_perms_t, suitable for allowing the security server to access these data structures from the avc. Signed-off-by: Chad Sellers <csellers@tresys.com> Acked-by: Stephen Smalley <sds@tycho.nsa.gov> Signed-off-by: James Morris <jmorris@namei.org>
39 lines
617 B
C
39 lines
617 B
C
/*
|
|
* Access vector cache interface for the security server.
|
|
*
|
|
* Author : Stephen Smalley, <sds@epoch.ncsc.mil>
|
|
*/
|
|
#ifndef _SELINUX_AVC_SS_H_
|
|
#define _SELINUX_AVC_SS_H_
|
|
|
|
#include "flask.h"
|
|
|
|
int avc_ss_reset(u32 seqno);
|
|
|
|
struct av_perm_to_string
|
|
{
|
|
u16 tclass;
|
|
u32 value;
|
|
const char *name;
|
|
};
|
|
|
|
struct av_inherit
|
|
{
|
|
u16 tclass;
|
|
const char **common_pts;
|
|
u32 common_base;
|
|
};
|
|
|
|
struct selinux_class_perm
|
|
{
|
|
const struct av_perm_to_string *av_perm_to_string;
|
|
u32 av_pts_len;
|
|
const char **class_to_string;
|
|
u32 cts_len;
|
|
const struct av_inherit *av_inherit;
|
|
u32 av_inherit_len;
|
|
};
|
|
|
|
#endif /* _SELINUX_AVC_SS_H_ */
|
|
|