Loading...
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 | /* * Copyright (c) 2001-2002 Silicon Graphics, Inc. All Rights Reserved. * * This program is free software; you can redistribute it and/or modify it * under the terms of version 2 of the GNU General Public License as * published by the Free Software Foundation. * * This program is distributed in the hope that it would be useful, but * WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. * * Further, this software is distributed without any warranty that it is * free of the rightful claim of any third person regarding infringement * or the like. Any license provided herein, whether implied or * otherwise, applies only to this software file. Patent licenses, if * any, provided herein do not apply to combinations of this program with * other software, or any other product whatsoever. * * You should have received a copy of the GNU General Public License along * with this program; if not, write the Free Software Foundation, Inc., 59 * Temple Place - Suite 330, Boston MA 02111-1307, USA. * * Contact information: Silicon Graphics, Inc., 1600 Amphitheatre Pkwy, * Mountain View, CA 94043, or: * * http://www.sgi.com * * For further information regarding this notice, see: * * http://oss.sgi.com/projects/GenInfo/SGIGPLNoticeExplan/ */ #ifndef __XFS_MAC_H__ #define __XFS_MAC_H__ /* * Mandatory Access Control * * Layout of a composite MAC label: * ml_list contains the list of categories (MSEN) followed by the list of * divisions (MINT). This is actually a header for the data structure which * will have an ml_list with more than one element. * * ------------------------------- * | ml_msen_type | ml_mint_type | * ------------------------------- * | ml_level | ml_grade | * ------------------------------- * | ml_catcount | * ------------------------------- * | ml_divcount | * ------------------------------- * | category 1 | * | . . . | * | category N | (where N = ml_catcount) * ------------------------------- * | division 1 | * | . . . | * | division M | (where M = ml_divcount) * ------------------------------- */ #define XFS_MAC_MAX_SETS 250 typedef struct xfs_mac_label { __uint8_t ml_msen_type; /* MSEN label type */ __uint8_t ml_mint_type; /* MINT label type */ __uint8_t ml_level; /* Hierarchical level */ __uint8_t ml_grade; /* Hierarchical grade */ __uint16_t ml_catcount; /* Category count */ __uint16_t ml_divcount; /* Division count */ /* Category set, then Division set */ __uint16_t ml_list[XFS_MAC_MAX_SETS]; } xfs_mac_label_t; /* MSEN label type names. Choose an upper case ASCII character. */ #define XFS_MSEN_ADMIN_LABEL 'A' /* Admin: low<admin != tcsec<high */ #define XFS_MSEN_EQUAL_LABEL 'E' /* Wildcard - always equal */ #define XFS_MSEN_HIGH_LABEL 'H' /* System High - always dominates */ #define XFS_MSEN_MLD_HIGH_LABEL 'I' /* System High, multi-level dir */ #define XFS_MSEN_LOW_LABEL 'L' /* System Low - always dominated */ #define XFS_MSEN_MLD_LABEL 'M' /* TCSEC label on a multi-level dir */ #define XFS_MSEN_MLD_LOW_LABEL 'N' /* System Low, multi-level dir */ #define XFS_MSEN_TCSEC_LABEL 'T' /* TCSEC label */ #define XFS_MSEN_UNKNOWN_LABEL 'U' /* unknown label */ /* MINT label type names. Choose a lower case ASCII character. */ #define XFS_MINT_BIBA_LABEL 'b' /* Dual of a TCSEC label */ #define XFS_MINT_EQUAL_LABEL 'e' /* Wildcard - always equal */ #define XFS_MINT_HIGH_LABEL 'h' /* High Grade - always dominates */ #define XFS_MINT_LOW_LABEL 'l' /* Low Grade - always dominated */ /* On-disk XFS extended attribute names */ #define SGI_MAC_FILE "SGI_MAC_FILE" #define SGI_MAC_FILE_SIZE (sizeof(SGI_MAC_FILE)-1) #ifdef __KERNEL__ #ifdef CONFIG_FS_POSIX_MAC /* NOT YET IMPLEMENTED */ #define MACEXEC 00100 #define MACWRITE 00200 #define MACREAD 00400 struct xfs_inode; extern int xfs_mac_iaccess(struct xfs_inode *, mode_t, cred_t *); #define _MAC_XFS_IACCESS(i,m,c) (xfs_mac_iaccess(i,m,c)) #define _MAC_VACCESS(v,c,m) (xfs_mac_vaccess(v,c,m)) #define _MAC_EXISTS xfs_mac_vhaslabel #else #define _MAC_XFS_IACCESS(i,m,c) (0) #define _MAC_VACCESS(v,c,m) (0) #define _MAC_EXISTS (NULL) #endif #endif /* __KERNEL__ */ #endif /* __XFS_MAC_H__ */ |