aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--security/tomoyo/common.h99
1 files changed, 54 insertions, 45 deletions
diff --git a/security/tomoyo/common.h b/security/tomoyo/common.h
index 1c8c97a4c069..3727296f01f9 100644
--- a/security/tomoyo/common.h
+++ b/security/tomoyo/common.h
@@ -62,15 +62,18 @@ struct linux_binprm;
62#define TOMOYO_ROOT_NAME_LEN (sizeof(TOMOYO_ROOT_NAME) - 1) 62#define TOMOYO_ROOT_NAME_LEN (sizeof(TOMOYO_ROOT_NAME) - 1)
63 63
64/* Index numbers for Access Controls. */ 64/* Index numbers for Access Controls. */
65#define TOMOYO_MAC_FOR_FILE 0 /* domain_policy.conf */ 65enum tomoyo_mac_index {
66#define TOMOYO_MAX_ACCEPT_ENTRY 1 66 TOMOYO_MAC_FOR_FILE, /* domain_policy.conf */
67#define TOMOYO_VERBOSE 2 67 TOMOYO_MAX_ACCEPT_ENTRY,
68#define TOMOYO_MAX_CONTROL_INDEX 3 68 TOMOYO_VERBOSE,
69 TOMOYO_MAX_CONTROL_INDEX
70};
69 71
70/* Index numbers for Access Controls. */ 72/* Index numbers for Access Controls. */
71 73enum tomoyo_acl_entry_type_index {
72#define TOMOYO_TYPE_SINGLE_PATH_ACL 0 74 TOMOYO_TYPE_SINGLE_PATH_ACL,
73#define TOMOYO_TYPE_DOUBLE_PATH_ACL 1 75 TOMOYO_TYPE_DOUBLE_PATH_ACL,
76};
74 77
75/* Index numbers for File Controls. */ 78/* Index numbers for File Controls. */
76 79
@@ -83,44 +86,50 @@ struct linux_binprm;
83 * automatically cleared if TYPE_READ_WRITE_ACL is cleared. 86 * automatically cleared if TYPE_READ_WRITE_ACL is cleared.
84 */ 87 */
85 88
86#define TOMOYO_TYPE_READ_WRITE_ACL 0 89enum tomoyo_path_acl_index {
87#define TOMOYO_TYPE_EXECUTE_ACL 1 90 TOMOYO_TYPE_READ_WRITE_ACL,
88#define TOMOYO_TYPE_READ_ACL 2 91 TOMOYO_TYPE_EXECUTE_ACL,
89#define TOMOYO_TYPE_WRITE_ACL 3 92 TOMOYO_TYPE_READ_ACL,
90#define TOMOYO_TYPE_CREATE_ACL 4 93 TOMOYO_TYPE_WRITE_ACL,
91#define TOMOYO_TYPE_UNLINK_ACL 5 94 TOMOYO_TYPE_CREATE_ACL,
92#define TOMOYO_TYPE_MKDIR_ACL 6 95 TOMOYO_TYPE_UNLINK_ACL,
93#define TOMOYO_TYPE_RMDIR_ACL 7 96 TOMOYO_TYPE_MKDIR_ACL,
94#define TOMOYO_TYPE_MKFIFO_ACL 8 97 TOMOYO_TYPE_RMDIR_ACL,
95#define TOMOYO_TYPE_MKSOCK_ACL 9 98 TOMOYO_TYPE_MKFIFO_ACL,
96#define TOMOYO_TYPE_MKBLOCK_ACL 10 99 TOMOYO_TYPE_MKSOCK_ACL,
97#define TOMOYO_TYPE_MKCHAR_ACL 11 100 TOMOYO_TYPE_MKBLOCK_ACL,
98#define TOMOYO_TYPE_TRUNCATE_ACL 12 101 TOMOYO_TYPE_MKCHAR_ACL,
99#define TOMOYO_TYPE_SYMLINK_ACL 13 102 TOMOYO_TYPE_TRUNCATE_ACL,
100#define TOMOYO_TYPE_REWRITE_ACL 14 103 TOMOYO_TYPE_SYMLINK_ACL,
101#define TOMOYO_TYPE_IOCTL_ACL 15 104 TOMOYO_TYPE_REWRITE_ACL,
102#define TOMOYO_TYPE_CHMOD_ACL 16 105 TOMOYO_TYPE_IOCTL_ACL,
103#define TOMOYO_TYPE_CHOWN_ACL 17 106 TOMOYO_TYPE_CHMOD_ACL,
104#define TOMOYO_TYPE_CHGRP_ACL 18 107 TOMOYO_TYPE_CHOWN_ACL,
105#define TOMOYO_TYPE_CHROOT_ACL 19 108 TOMOYO_TYPE_CHGRP_ACL,
106#define TOMOYO_TYPE_MOUNT_ACL 20 109 TOMOYO_TYPE_CHROOT_ACL,
107#define TOMOYO_TYPE_UMOUNT_ACL 21 110 TOMOYO_TYPE_MOUNT_ACL,
108#define TOMOYO_MAX_SINGLE_PATH_OPERATION 22 111 TOMOYO_TYPE_UMOUNT_ACL,
109 112 TOMOYO_MAX_SINGLE_PATH_OPERATION
110#define TOMOYO_TYPE_LINK_ACL 0 113};
111#define TOMOYO_TYPE_RENAME_ACL 1 114
112#define TOMOYO_TYPE_PIVOT_ROOT_ACL 2 115enum tomoyo_path2_acl_index {
113#define TOMOYO_MAX_DOUBLE_PATH_OPERATION 3 116 TOMOYO_TYPE_LINK_ACL,
114 117 TOMOYO_TYPE_RENAME_ACL,
115#define TOMOYO_DOMAINPOLICY 0 118 TOMOYO_TYPE_PIVOT_ROOT_ACL,
116#define TOMOYO_EXCEPTIONPOLICY 1 119 TOMOYO_MAX_DOUBLE_PATH_OPERATION
117#define TOMOYO_DOMAIN_STATUS 2 120};
118#define TOMOYO_PROCESS_STATUS 3 121
119#define TOMOYO_MEMINFO 4 122enum tomoyo_securityfs_interface_index {
120#define TOMOYO_SELFDOMAIN 5 123 TOMOYO_DOMAINPOLICY,
121#define TOMOYO_VERSION 6 124 TOMOYO_EXCEPTIONPOLICY,
122#define TOMOYO_PROFILE 7 125 TOMOYO_DOMAIN_STATUS,
123#define TOMOYO_MANAGER 8 126 TOMOYO_PROCESS_STATUS,
127 TOMOYO_MEMINFO,
128 TOMOYO_SELFDOMAIN,
129 TOMOYO_VERSION,
130 TOMOYO_PROFILE,
131 TOMOYO_MANAGER
132};
124 133
125/********** Structure definitions. **********/ 134/********** Structure definitions. **********/
126 135