/* * SELinux services exported to the rest of the kernel. * * Author: James Morris * * Copyright (C) 2005 Red Hat, Inc., James Morris * Copyright (C) 2006 Trusted Computer Solutions, Inc. * Copyright (C) 2006 IBM Corporation, Timothy R. Chavez * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License version 2, * as published by the Free Software Foundation. */ #include #include #include #include #include #include #include #include "security.h" #include "objsec.h" /* SECMARK reference count */ extern atomic_t selinux_secmark_refcount; int selinux_string_to_sid(char *str, u32 *sid) { if (selinux_enabled) return security_context_to_sid(str, strlen(str), sid); else { *sid = 0; return 0; } } EXPORT_SYMBOL_GPL(selinux_string_to_sid); int selinux_secmark_relabel_packet_permission(u32 sid) { if (selinux_enabled) { const struct task_security_struct *__tsec; u32 tsid; __tsec = current_security(); tsid = __tsec->sid; return avc_has_perm(tsid, sid, SECCLASS_PACKET, PACKET__RELABELTO, NULL); } return 0; } EXPORT_SYMBOL_GPL(selinux_secmark_relabel_packet_permission); void selinux_secmark_refcount_inc(void) { atomic_inc(&selinux_secmark_refcount); } EXPORT_SYMBOL_GPL(selinux_secmark_refcount_inc); void selinux_secmark_refcount_dec(void) { atomic_dec(&selinux_secmark_refcount); } EXPORT_SYMBOL_GPL(selinux_secmark_refcount_dec);