security/apparmor/include/apparmorfs.h

   1 /*
   2  * AppArmor security module
   3  *
   4  * This file contains AppArmor filesystem definitions.
   5  *
   6  * Copyright (C) 1998-2008 Novell/SUSE
   7  * Copyright 2009-2010 Canonical Ltd.
   8  *
   9  * This program is free software; you can redistribute it and/or
  10  * modify it under the terms of the GNU General Public License as
  11  * published by the Free Software Foundation, version 2 of the
  12  * License.
  13  */
  14
  15 #ifndef __AA_APPARMORFS_H
  16 #define __AA_APPARMORFS_H
  17
  18 enum aa_fs_type {
  19         AA_FS_TYPE_BOOLEAN,
  20         AA_FS_TYPE_STRING,
  21         AA_FS_TYPE_U64,
  22         AA_FS_TYPE_FOPS,
  23         AA_FS_TYPE_DIR,
  24 };
  25
  26 struct aa_fs_entry;
  27
  28 struct aa_fs_entry {
  29         const char *name;
  30         struct dentry *dentry;
  31         umode_t mode;
  32         enum aa_fs_type v_type;
  33         union {
  34                 bool boolean;
  35                 char *string;
  36                 unsigned long u64;
  37                 struct aa_fs_entry *files;
  38         } v;
  39         const struct file_operations *file_ops;
  40 };
  41
  42 extern const struct file_operations aa_fs_seq_file_ops;
  43
  44 #define AA_FS_FILE_BOOLEAN(_name, _value) \
  45         { .name = (_name), .mode = 0444, \
  46           .v_type = AA_FS_TYPE_BOOLEAN, .v.boolean = (_value), \
  47           .file_ops = &aa_fs_seq_file_ops }
  48 #define AA_FS_FILE_STRING(_name, _value) \
  49         { .name = (_name), .mode = 0444, \
  50           .v_type = AA_FS_TYPE_STRING, .v.string = (_value), \
  51           .file_ops = &aa_fs_seq_file_ops }
  52 #define AA_FS_FILE_U64(_name, _value) \
  53         { .name = (_name), .mode = 0444, \
  54           .v_type = AA_FS_TYPE_U64, .v.u64 = (_value), \
  55           .file_ops = &aa_fs_seq_file_ops }
  56 #define AA_FS_FILE_FOPS(_name, _mode, _fops) \
  57         { .name = (_name), .v_type = AA_FS_TYPE_FOPS, \
  58           .mode = (_mode), .file_ops = (_fops) }
  59 #define AA_FS_DIR(_name, _value) \
  60         { .name = (_name), .v_type = AA_FS_TYPE_DIR, .v.files = (_value) }
  61
  62 extern void __init aa_destroy_aafs(void);
  63
  64 struct aa_profile;
  65 struct aa_namespace;
  66
  67 enum aafs_ns_type {
  68         AAFS_NS_DIR,
  69         AAFS_NS_PROFS,
  70         AAFS_NS_NS,
  71         AAFS_NS_COUNT,
  72         AAFS_NS_MAX_COUNT,
  73         AAFS_NS_SIZE,
  74         AAFS_NS_MAX_SIZE,
  75         AAFS_NS_OWNER,
  76         AAFS_NS_SIZEOF,
  77 };
  78
  79 enum aafs_prof_type {
  80         AAFS_PROF_DIR,
  81         AAFS_PROF_PROFS,
  82         AAFS_PROF_NAME,
  83         AAFS_PROF_MODE,
  84         AAFS_PROF_ATTACH,
  85         AAFS_PROF_HASH,
  86         AAFS_PROF_SIZEOF,
  87 };
  88
  89 #define ns_dir(X) ((X)->dents[AAFS_NS_DIR])
  90 #define ns_subns_dir(X) ((X)->dents[AAFS_NS_NS])
  91 #define ns_subprofs_dir(X) ((X)->dents[AAFS_NS_PROFS])
  92
  93 #define prof_dir(X) ((X)->dents[AAFS_PROF_DIR])
  94 #define prof_child_dir(X) ((X)->dents[AAFS_PROF_PROFS])
  95
  96 void __aa_fs_profile_rmdir(struct aa_profile *profile);
  97 void __aa_fs_profile_migrate_dents(struct aa_profile *old,
  98                                    struct aa_profile *new);
  99 int __aa_fs_profile_mkdir(struct aa_profile *profile, struct dentry *parent);
 100 void __aa_fs_namespace_rmdir(struct aa_namespace *ns);
 101 int __aa_fs_namespace_mkdir(struct aa_namespace *ns, struct dentry *parent,
 102                             const char *name);
 103
 104 #endif /* __AA_APPARMORFS_H */