• Huw Davies's avatar
    netlabel: Implement CALIPSO config functions for SMACK. · 3f09354a
    Huw Davies authored
    SMACK uses similar functions to control CIPSO, these are
    the equivalent functions for CALIPSO and follow exactly
    the same semantics.
    int netlbl_cfg_calipso_add(struct calipso_doi *doi_def,
                               struct netlbl_audit *audit_info)
        Adds a CALIPSO doi.
    void netlbl_cfg_calipso_del(u32 doi, struct netlbl_audit *audit_info)
        Removes a CALIPSO doi.
    int netlbl_cfg_calipso_map_add(u32 doi, const char *domain,
                                   const struct in6_addr *addr,
                                   const struct in6_addr *mask,
                                   struct netlbl_audit *audit_info)
        Creates a mapping between a domain and a CALIPSO doi.  If
        addr and mask are non-NULL this creates an address-selector
        type mapping.
    This also extends netlbl_cfg_map_del() to remove IPv6 address-selector
    Signed-off-by: default avatarHuw Davies <huw@codeweavers.com>
    Signed-off-by: default avatarPaul Moore <paul@paul-moore.com>
netlabel_kapi.c 37.9 KB