/*
 * SELinux support for the XFRM LSM hooks
 *
 * Author : Trent Jaeger, <jaegert@us.ibm.com>
 * Updated : Venkat Yekkirala, <vyekkirala@TrustedCS.com>
 */
#ifndef _SELINUX_XFRM_H_
#define _SELINUX_XFRM_H_

#include <net/flow.h>

int selinux_xfrm_policy_alloc(struct xfrm_sec_ctx **ctxp,
			      struct xfrm_user_sec_ctx *uctx,
			      gfp_t gfp);
int selinux_xfrm_policy_clone(struct xfrm_sec_ctx *old_ctx,
			      struct xfrm_sec_ctx **new_ctxp);
void selinux_xfrm_policy_free(struct xfrm_sec_ctx *ctx);
int selinux_xfrm_policy_delete(struct xfrm_sec_ctx *ctx);
int selinux_xfrm_state_alloc(struct xfrm_state *x,
			     struct xfrm_user_sec_ctx *uctx);
int selinux_xfrm_state_alloc_acquire(struct xfrm_state *x,
				     struct xfrm_sec_ctx *polsec, u32 secid);
void selinux_xfrm_state_free(struct xfrm_state *x);
int selinux_xfrm_state_delete(struct xfrm_state *x);
int selinux_xfrm_policy_lookup(struct xfrm_sec_ctx *ctx, u32 fl_secid, u8 dir);
int selinux_xfrm_state_pol_flow_match(struct xfrm_state *x,
				      struct xfrm_policy *xp,
				      const struct flowi *fl);

#ifdef CONFIG_SECURITY_NETWORK_XFRM
extern atomic_t selinux_xfrm_refcount;

static inline int selinux_xfrm_enabled(void)
{
	return (atomic_read(&selinux_xfrm_refcount) > 0);
}

int selinux_xfrm_sock_rcv_skb(u32 sk_sid, struct sk_buff *skb,
			      struct common_audit_data *ad);
int selinux_xfrm_postroute_last(u32 sk_sid, struct sk_buff *skb,
				struct common_audit_data *ad, u8 proto);
int selinux_xfrm_decode_session(struct sk_buff *skb, u32 *sid, int ckall);
int selinux_xfrm_skb_sid(struct sk_buff *skb, u32 *sid);

static inline void selinux_xfrm_notify_policyload(void)
{
	struct net *net;

	rtnl_lock();
	for_each_net(net) {
		atomic_inc(&net->xfrm.flow_cache_genid);
		rt_genid_bump_all(net);
	}
	rtnl_unlock();
}
#else
static inline int selinux_xfrm_enabled(void)
{
	return 0;
}

static inline int selinux_xfrm_sock_rcv_skb(u32 sk_sid, struct sk_buff *skb,
					    struct common_audit_data *ad)
{
	return 0;
}

static inline int selinux_xfrm_postroute_last(u32 sk_sid, struct sk_buff *skb,
					      struct common_audit_data *ad,
					      u8 proto)
{
	return 0;
}

static inline int selinux_xfrm_decode_session(struct sk_buff *skb, u32 *sid,
					      int ckall)
{
	*sid = SECSID_NULL;
	return 0;
}

static inline void selinux_xfrm_notify_policyload(void)
{
}

static inline int selinux_xfrm_skb_sid(struct sk_buff *skb, u32 *sid)
{
	*sid = SECSID_NULL;
	return 0;
}
#endif

#endif /* _SELINUX_XFRM_H_ */
author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/cgit.cgi/linux/net-next.git/commit/?id=c14024dbb156c8392908aaa822097d27c6af8ec8'>root</a>/<a href='/cgit.cgi/linux/net-next.git/commit/sound?id=c14024dbb156c8392908aaa822097d27c6af8ec8'>sound</a>/<a href='/cgit.cgi/linux/net-next.git/commit/sound/core?id=c14024dbb156c8392908aaa822097d27c6af8ec8'>core</a>/<a href='/cgit.cgi/linux/net-next.git/commit/sound/core/seq?id=c14024dbb156c8392908aaa822097d27c6af8ec8'>seq</a>/<a href='/cgit.cgi/linux/net-next.git/commit/sound/core/seq/seq_system.h?id=c14024dbb156c8392908aaa822097d27c6af8ec8'>seq_system.h</a></div><div class='content'><div class='cgit-panel'><b>diff options</b><form method='get'><input type='hidden' name='id' value='c14024dbb156c8392908aaa822097d27c6af8ec8'/><table><tr><td colspan='2'/></tr><tr><td class='label'>context:</td><td class='ctrl'><select name='context' onchange='this.form.submit();'><option value='1'>1</option><option value='2'>2</option><option value='3' selected='selected'>3</option><option value='4'>4</option><option value='5'>5</option><option value='6'>6</option><option value='7'>7</option><option value='8'>8</option><option value='9'>9</option><option value='10'>10</option><option value='15'>15</option><option value='20'>20</option><option value='25'>25</option><option value='30'>30</option><option value='35'>35</option><option value='40'>40</option></select></td></tr><tr><td class='label'>space:</td><td class='ctrl'><select name='ignorews' onchange='this.form.submit();'><option value='0' selected='selected'>include</option><option value='1'>ignore</option></select></td></tr><tr><td class='label'>mode:</td><td class='ctrl'><select name='dt' onchange='this.form.submit();'><option value='0' selected='selected'>unified</option><option value='1'>ssdiff</option><option value='2'>stat only</option></select></td></tr><tr><td/><td class='ctrl'><noscript><input type='submit' value='reload'/></noscript></td></tr></table></form></div><table summary='commit info' class='commit-info'>
<tr><th>author</th><td>Jens Axboe &lt;axboe@fb.com&gt;</td><td class='right'>2017-01-27 11:56:06 -0700</td></tr>
<tr><th>committer</th><td>Jens Axboe &lt;axboe@fb.com&gt;</td><td class='right'>2017-01-27 11:56:06 -0700</td></tr>
<tr><th>commit</th><td colspan='2' class='oid'><a href='/cgit.cgi/linux/net-next.git/commit/sound/core/seq/seq_system.h?id=c14024dbb156c8392908aaa822097d27c6af8ec8'>c14024dbb156c8392908aaa822097d27c6af8ec8</a> (<a href='/cgit.cgi/linux/net-next.git/patch/sound/core/seq/seq_system.h?id=c14024dbb156c8392908aaa822097d27c6af8ec8'>patch</a>)</td></tr>
<tr><th>tree</th><td colspan='2' class='oid'><a href='/cgit.cgi/linux/net-next.git/tree/?id=c14024dbb156c8392908aaa822097d27c6af8ec8'>02f6ffa664b16bd76750c05f62708a518de2acdc</a> /<a href='/cgit.cgi/linux/net-next.git/tree/sound/core/seq/seq_system.h?id=c14024dbb156c8392908aaa822097d27c6af8ec8'>sound/core/seq/seq_system.h</a></td></tr>
<tr><th>parent</th><td colspan='2' class='oid'><a href='/cgit.cgi/linux/net-next.git/commit/sound/core/seq/seq_system.h?id=08965c2eba135bdfb6e86cf25308e01421c7e0ce'>08965c2eba135bdfb6e86cf25308e01421c7e0ce</a> (<a href='/cgit.cgi/linux/net-next.git/diff/sound/core/seq/seq_system.h?id=c14024dbb156c8392908aaa822097d27c6af8ec8&amp;id2=08965c2eba135bdfb6e86cf25308e01421c7e0ce'>diff</a>)</td></tr><tr><th>parent</th><td colspan='2' class='oid'><a href='/cgit.cgi/linux/net-next.git/commit/sound/core/seq/seq_system.h?id=3b4f18843e511193e7eb616710e838f5852e661d'>3b4f18843e511193e7eb616710e838f5852e661d</a> (<a href='/cgit.cgi/linux/net-next.git/diff/sound/core/seq/seq_system.h?id=c14024dbb156c8392908aaa822097d27c6af8ec8&amp;id2=3b4f18843e511193e7eb616710e838f5852e661d'>diff</a>)</td></tr></table>
<div class='commit-subject'>Merge branch 'stable/for-jens-4.10' of git://git.kernel.org/pub/scm/linux/kernel/git/konrad/xen into for-linus</div><div class='commit-msg'>Konrad writes:

Please pull in your 'for-linus' branch two little fixes for Xen
block front:

One fix is for handling the XEN_PAGE_SIZE != PAGE_SIZE (4KB vs 64KB
on ARM for example) mishandling while the other is fixing
the accounting for the configuration changes.
</div><div class='diffstat-header'><a href='/cgit.cgi/linux/net-next.git/diff/?id=c14024dbb156c8392908aaa822097d27c6af8ec8'>Diffstat</a> (limited to 'sound/core/seq/seq_system.h')</div><table summary='diffstat' class='diffstat'>