acl.h File Reference

#include <linux/init.h>
#include <rsbac/types.h>

Go to the source code of this file.

Functions
int	rsbac_init_acl (void) __init
int	rsbac_mount_acl (kdev_t kdev)
int	rsbac_umount_acl (kdev_t kdev)
int	rsbac_stats_acl (void)
int	rsbac_check_acl (int correct, int check_inode)
int	rsbac_acl_set_acl_entry (rsbac_list_ta_number_t ta_number, enum rsbac_target_t target, union rsbac_target_id_t tid, enum rsbac_acl_subject_type_t subj_type, rsbac_acl_subject_id_t subj_id, rsbac_acl_rights_vector_t rights, rsbac_time_t ttl)
int	rsbac_acl_remove_acl_entry (rsbac_list_ta_number_t ta_number, enum rsbac_target_t target, union rsbac_target_id_t tid, enum rsbac_acl_subject_type_t subj_type, rsbac_acl_subject_id_t subj_id)
int	rsbac_acl_remove_acl (rsbac_list_ta_number_t ta_number, enum rsbac_target_t target, union rsbac_target_id_t tid)
int	rsbac_acl_add_to_acl_entry (rsbac_list_ta_number_t ta_number, enum rsbac_target_t target, union rsbac_target_id_t tid, enum rsbac_acl_subject_type_t subj_type, rsbac_acl_subject_id_t subj_id, rsbac_acl_rights_vector_t rights, rsbac_time_t ttl)
int	rsbac_acl_remove_from_acl_entry (rsbac_list_ta_number_t ta_number, enum rsbac_target_t target, union rsbac_target_id_t tid, enum rsbac_acl_subject_type_t subj_type, rsbac_acl_subject_id_t subj_id, rsbac_acl_rights_vector_t rights)
int	rsbac_acl_set_mask (rsbac_list_ta_number_t ta_number, enum rsbac_target_t target, union rsbac_target_id_t tid, rsbac_acl_rights_vector_t mask)
int	rsbac_acl_get_mask (rsbac_list_ta_number_t ta_number, enum rsbac_target_t target, union rsbac_target_id_t tid, rsbac_acl_rights_vector_t *mask_p)
int	rsbac_acl_get_rights (rsbac_list_ta_number_t ta_number, enum rsbac_target_t target, union rsbac_target_id_t tid, enum rsbac_acl_subject_type_t subj_type, rsbac_acl_subject_id_t subj_id, rsbac_acl_rights_vector_t *rights_p, rsbac_boolean_t inherit)
int	rsbac_acl_get_single_right (enum rsbac_target_t target, union rsbac_target_id_t tid, enum rsbac_acl_subject_type_t subj_type, rsbac_acl_subject_id_t subj_id, enum rsbac_adf_request_t right, rsbac_boolean_t *result)
int	rsbac_acl_copy_fd_acl (struct rsbac_fs_file_t file1, struct rsbac_fs_file_t file2)
int	rsbac_acl_copy_pp_acl (rsbac_pid_t old_pid, rsbac_pid_t new_pid)
int	rsbac_acl_get_tlist (rsbac_list_ta_number_t ta_number, enum rsbac_target_t target, union rsbac_target_id_t tid, struct rsbac_acl_entry_t **entry_pp, rsbac_time_t **ttl_pp)
int	rsbac_acl_add_group (rsbac_list_ta_number_t ta_number, rsbac_uid_t owner, enum rsbac_acl_group_type_t type, char *name, rsbac_acl_group_id_t *group_id_p)
int	rsbac_acl_change_group (rsbac_list_ta_number_t ta_number, rsbac_acl_group_id_t id, rsbac_uid_t owner, enum rsbac_acl_group_type_t type, char *name)
int	rsbac_acl_remove_group (rsbac_list_ta_number_t ta_number, rsbac_acl_group_id_t id)
int	rsbac_acl_get_group_entry (rsbac_list_ta_number_t ta_number, rsbac_acl_group_id_t group, struct rsbac_acl_group_entry_t *entry_p)
int	rsbac_acl_list_groups (rsbac_list_ta_number_t ta_number, rsbac_uid_t owner, rsbac_boolean_t include_global, struct rsbac_acl_group_entry_t **entry_pp)
rsbac_boolean_t	rsbac_acl_group_exist (rsbac_acl_group_id_t group)
int	rsbac_acl_add_group_member (rsbac_list_ta_number_t ta_number, rsbac_acl_group_id_t group, rsbac_uid_t user, rsbac_time_t ttl)
int	rsbac_acl_remove_group_member (rsbac_list_ta_number_t ta_number, rsbac_acl_group_id_t group, rsbac_uid_t user)
rsbac_boolean_t	rsbac_acl_group_member (rsbac_acl_group_id_t group, rsbac_uid_t user)
int	rsbac_acl_get_user_groups (rsbac_list_ta_number_t ta_number, rsbac_uid_t user, rsbac_acl_group_id_t **group_pp, rsbac_time_t **ttl_pp)
int	rsbac_acl_get_group_members (rsbac_list_ta_number_t ta_number, rsbac_acl_group_id_t group, rsbac_uid_t user_array[], rsbac_time_t ttl_array[], int maxnum)
int	rsbac_acl_remove_subject (rsbac_list_ta_number_t ta_number, struct rsbac_acl_entry_desc_t desc)
int	rsbac_acl_remove_user (rsbac_list_ta_number_t ta_number, rsbac_uid_t user)

---

Function Documentation

int rsbac_acl_add_group (  rsbac_list_ta_number_t  ta_number, rsbac_uid_t  owner, enum rsbac_acl_group_type_t  type, char *  name, rsbac_acl_group_id_t *  group_id_p )

Definition at line 9933 of file acl_data_structures.c. References ACLG_NONE, group_last_new, rsbac_acl_group_entry_t::id, rsbac_acl_group_entry_t::name, rsbac_acl_group_entry_t::owner, RSBAC_ACL_GROUP_NAMELEN, RSBAC_ECOULDNOTADDITEM, RSBAC_EEXISTS, RSBAC_EINVALIDPOINTER, RSBAC_EINVALIDVALUE, rsbac_ta_list_add_ttl(), rsbac_ta_list_exist(), and rsbac_acl_group_entry_t::type. Referenced by rsbac_acl_sys_group().

int rsbac_acl_add_group_member (  rsbac_list_ta_number_t  ta_number, rsbac_acl_group_id_t  group, rsbac_uid_t  user, rsbac_time_t  ttl )

Definition at line 10090 of file acl_data_structures.c. References NULL, RSBAC_EINVALIDVALUE, rsbac_ta_list_exist(), rsbac_ta_list_lol_add_ttl(), rsbac_ta_list_lol_exist(), and rsbac_ta_list_lol_subadd_ttl(). Referenced by rsbac_acl_sys_group().

int rsbac_acl_add_to_acl_entry (  rsbac_list_ta_number_t  ta_number, enum rsbac_target_t  target, union rsbac_target_id_t  tid, enum rsbac_acl_subject_type_t  subj_type, rsbac_acl_subject_id_t  subj_id, rsbac_acl_rights_vector_t  rights, rsbac_time_t  ttl )

Definition at line 6482 of file acl_data_structures.c. References acl_lookup_device(), ACLS_NONE, AST_none, D_none, fd_hash(), rsbac_target_id_t::group, rsbac_acl_device_list_item_t::handles, I_none, rsbac_target_id_t::ipc, rsbac_acl_device_list_head_t::lock, rsbac_target_id_t::netdev, rsbac_target_id_t::netobj, rsbac_target_id_t::nettemp, NULL, rsbac_target_id_t::process, RSBAC_ACL_DEFAULT_DEV_MASK, RSBAC_ACL_DEFAULT_FD_MASK, RSBAC_ACL_DEFAULT_G_MASK, RSBAC_ACL_DEFAULT_NETDEV_MASK, RSBAC_ACL_DEFAULT_NETOBJ_MASK, RSBAC_ACL_DEFAULT_NETTEMP_MASK, RSBAC_ACL_DEFAULT_SCD_MASK, RSBAC_ACL_DEFAULT_U_MASK, RSBAC_EINVALIDDEV, RSBAC_EINVALIDTARGET, RSBAC_EINVALIDVALUE, RSBAC_ENOTINITIALIZED, rsbac_get_super_block(), rsbac_is_initialized(), RSBAC_NO_GROUP, RSBAC_NO_USER, rsbac_ta_list_add_ttl(), rsbac_ta_list_get_data_ttl(), rsbac_ta_list_lol_add_ttl(), rsbac_ta_list_lol_exist(), rsbac_ta_list_lol_get_subdata_ttl(), rsbac_ta_list_lol_subadd_ttl(), rsbac_ta_net_template_exist(), rsbac_target_id_t::scd, rsbac_net_obj_desc_t::sock_p, rsbac_acl_entry_desc_t::subj_id, rsbac_acl_entry_desc_t::subj_type, T_DEV, T_DIR, T_FIFO, T_FILE, T_GROUP, T_IPC, T_NETDEV, T_NETOBJ, T_NETTEMP, T_NETTEMP_NT, T_PROCESS, T_SCD, T_SYMLINK, T_USER, rsbac_ipc_t::type, and rsbac_target_id_t::user. Referenced by rsbac_acl_check_right(), and rsbac_acl_sys_add_to_acl_entry().

int rsbac_acl_change_group (  rsbac_list_ta_number_t  ta_number, rsbac_acl_group_id_t  id, rsbac_uid_t  owner, enum rsbac_acl_group_type_t  type, char *  name )

Definition at line 9981 of file acl_data_structures.c. References rsbac_acl_group_entry_t::id, rsbac_acl_group_entry_t::name, rsbac_acl_group_entry_t::owner, RSBAC_ACL_GROUP_NAMELEN, RSBAC_EINVALIDPOINTER, RSBAC_EINVALIDVALUE, RSBAC_ENOTFOUND, rsbac_ta_list_add_ttl(), rsbac_ta_list_exist(), and rsbac_acl_group_entry_t::type. Referenced by rsbac_acl_sys_group().

int rsbac_acl_copy_fd_acl (  struct rsbac_fs_file_t  file1, struct rsbac_fs_file_t  file2 )

int rsbac_acl_copy_pp_acl (  rsbac_pid_t  old_pid, rsbac_pid_t  new_pid )

int rsbac_acl_get_group_entry (  rsbac_list_ta_number_t  ta_number, rsbac_acl_group_id_t  group, struct rsbac_acl_group_entry_t *  entry_p )

Definition at line 10029 of file acl_data_structures.c. References NULL, RSBAC_EINVALIDPOINTER, RSBAC_EINVALIDVALUE, and rsbac_ta_list_get_data_ttl(). Referenced by rsbac_acl_sys_group(), sys_rsbac_acl(), sys_rsbac_acl_get_rights(), sys_rsbac_acl_get_rights_n(), and sys_rsbac_acl_n().

int rsbac_acl_get_group_members (  rsbac_list_ta_number_t  ta_number, rsbac_acl_group_id_t  group, rsbac_uid_t  user_array[], rsbac_time_t  ttl_array[], int  maxnum )

Definition at line 10157 of file acl_data_structures.c. References NULL, RSBAC_EINVALIDPOINTER, RSBAC_EINVALIDVALUE, rsbac_ta_list_exist(), rsbac_ta_list_lol_get_all_desc(), rsbac_ta_list_lol_get_subdata_ttl(), and rsbac_vfree. Referenced by rsbac_acl_sys_group().

int rsbac_acl_get_mask (  rsbac_list_ta_number_t  ta_number, enum rsbac_target_t  target, union rsbac_target_id_t  tid, rsbac_acl_rights_vector_t *  mask_p )

Definition at line 7767 of file acl_data_structures.c. References acl_lookup_device(), AST_none, D_none, fd_hash(), rsbac_target_id_t::group, rsbac_acl_device_list_item_t::handles, rsbac_acl_device_list_head_t::lock, rsbac_target_id_t::netdev, rsbac_target_id_t::netobj, rsbac_target_id_t::nettemp, NULL, RSBAC_ACL_DEFAULT_DEV_MASK, RSBAC_ACL_DEFAULT_FD_MASK, RSBAC_ACL_DEFAULT_G_MASK, RSBAC_ACL_DEFAULT_NETDEV_MASK, RSBAC_ACL_DEFAULT_NETOBJ_MASK, RSBAC_ACL_DEFAULT_NETTEMP_MASK, RSBAC_ACL_DEFAULT_SCD_MASK, RSBAC_ACL_DEFAULT_U_MASK, RSBAC_EINVALIDDEV, RSBAC_EINVALIDTARGET, RSBAC_ENOTFOUND, RSBAC_ENOTINITIALIZED, rsbac_get_super_block(), rsbac_is_initialized(), RSBAC_NO_GROUP, RSBAC_NO_USER, rsbac_ta_list_lol_get_data_ttl(), rsbac_ta_net_template_exist(), rsbac_target_id_t::scd, rsbac_net_obj_desc_t::sock_p, T_DEV, T_DIR, T_FIFO, T_FILE, T_GROUP, T_NETDEV, T_NETOBJ, T_NETTEMP, T_NETTEMP_NT, T_NONE, T_SCD, T_SYMLINK, T_USER, and rsbac_target_id_t::user.

int rsbac_acl_get_rights (  rsbac_list_ta_number_t  ta_number, enum rsbac_target_t  target, union rsbac_target_id_t  tid, enum rsbac_acl_subject_type_t  subj_type, rsbac_acl_subject_id_t  subj_id, rsbac_acl_rights_vector_t *  rights_p, rsbac_boolean_t  inherit )

Definition at line 8047 of file acl_data_structures.c. References acl_lookup_device(), ACLS_NONE, AST_none, D_none, default_dev_rights, default_fd_rights, default_ipc_rights, default_p_rights, default_scd_rights, default_u_rights, fd_hash(), rsbac_target_id_t::group, rsbac_acl_device_list_item_t::handles, rsbac_acl_device_list_head_t::lock, rsbac_target_id_t::netdev, rsbac_target_id_t::netobj, rsbac_target_id_t::nettemp, NULL, RSBAC_ACL_DEFAULT_DEV_MASK, RSBAC_ACL_DEFAULT_FD_MASK, RSBAC_ACL_DEFAULT_G_MASK, RSBAC_ACL_DEFAULT_NETDEV_MASK, RSBAC_ACL_DEFAULT_NETOBJ_MASK, RSBAC_ACL_DEFAULT_NETTEMP_MASK, RSBAC_ACL_DEFAULT_SCD_MASK, RSBAC_ACL_DEFAULT_U_MASK, RSBAC_EINVALIDDEV, RSBAC_EINVALIDPOINTER, RSBAC_EINVALIDTARGET, RSBAC_EINVALIDVALUE, RSBAC_ENOTINITIALIZED, rsbac_get_parent(), rsbac_get_super_block(), rsbac_is_initialized(), RSBAC_NO_GROUP, RSBAC_NO_USER, rsbac_ta_list_get_data_ttl(), rsbac_ta_list_lol_get_data_ttl(), rsbac_ta_list_lol_get_subdata_ttl(), rsbac_ta_net_lookup_templates(), rsbac_ta_net_template_exist(), rsbac_target_id_t::scd, rsbac_net_obj_desc_t::sock_p, ST_none, rsbac_acl_entry_desc_t::subj_id, rsbac_acl_entry_desc_t::subj_type, T_DEV, T_DIR, T_FIFO, T_FILE, T_GROUP, T_IPC, T_NETDEV, T_NETOBJ, T_NETTEMP, T_NETTEMP_NT, T_PROCESS, T_SCD, T_SYMLINK, T_USER, and rsbac_target_id_t::user.

int rsbac_acl_get_single_right (  enum rsbac_target_t  target, union rsbac_target_id_t  tid, enum rsbac_acl_subject_type_t  subj_type, rsbac_acl_subject_id_t  subj_id, enum rsbac_adf_request_t  right, rsbac_boolean_t *  result )

Definition at line 8742 of file acl_data_structures.c. References acl_lookup_device(), ACLR_NONE, ACLR_SUPERVISOR, ACLS_NONE, AST_none, D_none, default_dev_rights, default_fd_rights, default_ipc_rights, default_p_rights, default_scd_rights, default_u_rights, FALSE, fd_hash(), rsbac_target_id_t::group, rsbac_acl_device_list_item_t::handles, rsbac_acl_device_list_head_t::lock, rsbac_target_id_t::netdev, rsbac_target_id_t::netobj, rsbac_target_id_t::nettemp, NULL, R_CREATE, RSBAC_EINVALIDPOINTER, RSBAC_EINVALIDTARGET, RSBAC_EINVALIDVALUE, RSBAC_ENOTINITIALIZED, rsbac_get_parent(), rsbac_get_super_block(), rsbac_is_initialized(), rsbac_net_remote_request(), rsbac_net_template_exist(), RSBAC_NO_GROUP, RSBAC_NO_USER, rsbac_ta_list_get_data_ttl(), rsbac_ta_list_lol_get_data_ttl(), rsbac_ta_list_lol_get_subdata_ttl(), rsbac_ta_net_lookup_templates(), rsbac_target_id_t::scd, rsbac_net_obj_desc_t::sock_p, rsbac_acl_entry_desc_t::subj_id, rsbac_acl_entry_desc_t::subj_type, T_DEV, T_DIR, T_FIFO, T_FILE, T_GROUP, T_IPC, T_NETDEV, T_NETOBJ, T_NETTEMP, T_NETTEMP_NT, T_PROCESS, T_SCD, T_SYMLINK, T_USER, TRUE, and rsbac_target_id_t::user. Referenced by rsbac_acl_check_right(), rsbac_acl_check_super(), and rsbac_acl_sys_get_rights().

int rsbac_acl_get_tlist (  rsbac_list_ta_number_t  ta_number, enum rsbac_target_t  target, union rsbac_target_id_t  tid, struct rsbac_acl_entry_t **  entry_pp, rsbac_time_t **  ttl_pp )

Definition at line 9594 of file acl_data_structures.c. References acl_lookup_device(), AST_none, D_none, fd_hash(), rsbac_target_id_t::group, rsbac_acl_device_list_item_t::handles, rsbac_acl_device_list_head_t::lock, rsbac_target_id_t::netdev, rsbac_target_id_t::netobj, rsbac_target_id_t::nettemp, RSBAC_EINVALIDDEV, RSBAC_EINVALIDPOINTER, RSBAC_EINVALIDTARGET, RSBAC_ENOTINITIALIZED, rsbac_get_super_block(), rsbac_is_initialized(), RSBAC_NO_GROUP, RSBAC_NO_USER, rsbac_ta_list_get_all_items_ttl(), rsbac_ta_list_lol_get_all_subitems_ttl(), rsbac_ta_net_template_exist(), rsbac_target_id_t::scd, rsbac_net_obj_desc_t::sock_p, ST_none, T_DEV, T_DIR, T_FD, T_FIFO, T_FILE, T_GROUP, T_IPC, T_NETDEV, T_NETOBJ, T_NETTEMP, T_NETTEMP_NT, T_PROCESS, T_SCD, T_SYMLINK, T_USER, and rsbac_target_id_t::user.

int rsbac_acl_get_user_groups (  rsbac_list_ta_number_t  ta_number, rsbac_uid_t  user, rsbac_acl_group_id_t **  group_pp, rsbac_time_t **  ttl_pp )

Definition at line 10143 of file acl_data_structures.c. References rsbac_ta_list_lol_get_all_subdesc_ttl(). Referenced by rsbac_acl_check_right(), rsbac_acl_check_super(), rsbac_acl_sys_get_rights(), and rsbac_acl_sys_group().

rsbac_boolean_t rsbac_acl_group_exist (  rsbac_acl_group_id_t  group  )

Definition at line 10083 of file acl_data_structures.c. References rsbac_ta_list_exist(), and TRUE.

rsbac_boolean_t rsbac_acl_group_member (  rsbac_acl_group_id_t  group, rsbac_uid_t  user )

Definition at line 10135 of file acl_data_structures.c. References rsbac_ta_list_lol_subexist().

int rsbac_acl_list_groups (  rsbac_list_ta_number_t  ta_number, rsbac_uid_t  owner, rsbac_boolean_t  include_global, struct rsbac_acl_group_entry_t **  entry_pp )

Definition at line 10041 of file acl_data_structures.c. References ACLG_GLOBAL, RSBAC_EINVALIDPOINTER, RSBAC_ENOMEM, rsbac_ta_list_get_all_data(), rsbac_vfree, and rsbac_vmalloc. Referenced by rsbac_acl_sys_group().

int rsbac_acl_remove_acl (  rsbac_list_ta_number_t  ta_number, enum rsbac_target_t  target, union rsbac_target_id_t  tid )

Definition at line 6208 of file acl_data_structures.c. References acl_lookup_device(), AST_none, D_none, fd_hash(), get_acl_scd_type_name(), rsbac_target_id_t::group, rsbac_acl_device_list_item_t::handles, rsbac_acl_device_list_head_t::lock, rsbac_target_id_t::netdev, rsbac_target_id_t::netobj, rsbac_target_id_t::nettemp, RSBAC_EINVALIDDEV, RSBAC_EINVALIDTARGET, RSBAC_ENOTINITIALIZED, rsbac_get_super_block(), rsbac_is_initialized(), RSBAC_NO_GROUP, RSBAC_NO_USER, rsbac_ta_list_lol_remove(), rsbac_target_id_t::scd, rsbac_net_obj_desc_t::sock_p, T_DEV, T_DIR, T_FIFO, T_FILE, T_GROUP, T_NETDEV, T_NETOBJ, T_NETTEMP, T_NETTEMP_NT, T_SCD, T_SYMLINK, T_USER, and rsbac_target_id_t::user. Referenced by rsbac_acl_sys_remove_acl(), and rsbac_ta_remove_target().

int rsbac_acl_remove_acl_entry (  rsbac_list_ta_number_t  ta_number, enum rsbac_target_t  target, union rsbac_target_id_t  tid, enum rsbac_acl_subject_type_t  subj_type, rsbac_acl_subject_id_t  subj_id )

Definition at line 5766 of file acl_data_structures.c. References acl_lookup_device(), ACLS_NONE, AST_none, D_none, fd_hash(), get_acl_scd_type_name(), get_acl_subject_type_name(), rsbac_target_id_t::group, rsbac_acl_device_list_item_t::handles, I_none, rsbac_target_id_t::ipc, rsbac_acl_device_list_head_t::lock, rsbac_target_id_t::netdev, rsbac_target_id_t::netobj, rsbac_target_id_t::nettemp, NULL, rsbac_target_id_t::process, RSBAC_ACL_DEFAULT_DEV_MASK, RSBAC_ACL_DEFAULT_FD_MASK, RSBAC_ACL_DEFAULT_G_MASK, RSBAC_ACL_DEFAULT_NETDEV_MASK, RSBAC_ACL_DEFAULT_NETOBJ_MASK, RSBAC_ACL_DEFAULT_NETTEMP_MASK, RSBAC_ACL_DEFAULT_SCD_MASK, RSBAC_ACL_DEFAULT_U_MASK, RSBAC_EINVALIDDEV, RSBAC_EINVALIDTARGET, RSBAC_EINVALIDVALUE, RSBAC_ENOTINITIALIZED, rsbac_get_super_block(), rsbac_is_initialized(), RSBAC_MAXNAMELEN, RSBAC_NO_GROUP, RSBAC_NO_USER, rsbac_ta_list_lol_get_data_ttl(), rsbac_ta_list_lol_remove(), rsbac_ta_list_lol_subcount(), rsbac_ta_list_lol_subremove(), rsbac_ta_list_remove(), rsbac_ta_net_template_exist(), rsbac_target_id_t::scd, rsbac_net_obj_desc_t::sock_p, rsbac_acl_entry_desc_t::subj_id, rsbac_acl_entry_desc_t::subj_type, T_DEV, T_DIR, T_FIFO, T_FILE, T_GROUP, T_IPC, T_NETDEV, T_NETOBJ, T_NETTEMP, T_NETTEMP_NT, T_PROCESS, T_SCD, T_SYMLINK, T_USER, rsbac_ipc_t::type, and rsbac_target_id_t::user. Referenced by rsbac_acl_sys_remove_acl_entry().

int rsbac_acl_remove_from_acl_entry (  rsbac_list_ta_number_t  ta_number, enum rsbac_target_t  target, union rsbac_target_id_t  tid, enum rsbac_acl_subject_type_t  subj_type, rsbac_acl_subject_id_t  subj_id, rsbac_acl_rights_vector_t  rights )

Definition at line 6984 of file acl_data_structures.c. References acl_lookup_device(), ACLS_NONE, AST_none, D_none, fd_hash(), rsbac_target_id_t::group, rsbac_acl_device_list_item_t::handles, I_none, rsbac_target_id_t::ipc, rsbac_acl_device_list_head_t::lock, rsbac_target_id_t::netdev, rsbac_target_id_t::netobj, rsbac_target_id_t::nettemp, rsbac_target_id_t::process, RSBAC_EINVALIDDEV, RSBAC_EINVALIDTARGET, RSBAC_EINVALIDVALUE, RSBAC_ENOTINITIALIZED, rsbac_get_super_block(), rsbac_is_initialized(), RSBAC_NO_GROUP, RSBAC_NO_USER, rsbac_ta_list_add_ttl(), rsbac_ta_list_get_data_ttl(), rsbac_ta_list_lol_get_subdata_ttl(), rsbac_ta_list_lol_subadd_ttl(), rsbac_ta_net_template_exist(), rsbac_target_id_t::scd, rsbac_net_obj_desc_t::sock_p, rsbac_acl_entry_desc_t::subj_id, rsbac_acl_entry_desc_t::subj_type, T_DEV, T_DIR, T_FIFO, T_FILE, T_GROUP, T_IPC, T_NETDEV, T_NETOBJ, T_NETTEMP, T_NETTEMP_NT, T_PROCESS, T_SCD, T_SYMLINK, T_USER, rsbac_ipc_t::type, and rsbac_target_id_t::user. Referenced by rsbac_acl_sys_remove_from_acl_entry().

int rsbac_acl_remove_group (  rsbac_list_ta_number_t  ta_number, rsbac_acl_group_id_t  id )

Definition at line 10006 of file acl_data_structures.c. References ACLS_GROUP, rsbac_acl_remove_subject(), RSBAC_EINVALIDVALUE, rsbac_ta_list_lol_subremove_from_all(), rsbac_ta_list_remove(), rsbac_acl_entry_desc_t::subj_id, and rsbac_acl_entry_desc_t::subj_type. Referenced by rsbac_acl_sys_group().

int rsbac_acl_remove_group_member (  rsbac_list_ta_number_t  ta_number, rsbac_acl_group_id_t  group, rsbac_uid_t  user )

Definition at line 10112 of file acl_data_structures.c. References RSBAC_EINVALIDVALUE, rsbac_ta_list_exist(), rsbac_ta_list_lol_remove(), rsbac_ta_list_lol_subcount(), and rsbac_ta_list_lol_subremove(). Referenced by rsbac_acl_sys_group().

int rsbac_acl_remove_subject (  rsbac_list_ta_number_t  ta_number, struct rsbac_acl_entry_desc_t  desc )

Definition at line 9859 of file acl_data_structures.c. References ACLS_NONE, rsbac_acl_device_list_item_t::handles, rsbac_acl_device_list_head_t::head, rsbac_acl_device_list_head_t::lock, rsbac_acl_device_list_item_t::next, RSBAC_EINVALIDVALUE, rsbac_ta_list_lol_subremove_from_all(), rsbac_ta_list_remove(), and rsbac_acl_entry_desc_t::subj_type. Referenced by rsbac_acl_remove_group(), rsbac_acl_remove_user(), and rsbac_rc_set_item().

int rsbac_acl_remove_user (  rsbac_list_ta_number_t  ta_number, rsbac_uid_t  user )

Definition at line 10201 of file acl_data_structures.c. References ACLS_USER, rsbac_acl_remove_subject(), rsbac_ta_list_get_all_data(), rsbac_ta_list_lol_remove(), rsbac_ta_list_lol_subremove_from_all(), rsbac_ta_list_remove(), rsbac_vfree, rsbac_acl_entry_desc_t::subj_id, and rsbac_acl_entry_desc_t::subj_type. Referenced by rsbac_acl_sys_remove_user().

int rsbac_acl_set_acl_entry (  rsbac_list_ta_number_t  ta_number, enum rsbac_target_t  target, union rsbac_target_id_t  tid, enum rsbac_acl_subject_type_t  subj_type, rsbac_acl_subject_id_t  subj_id, rsbac_acl_rights_vector_t  rights, rsbac_time_t  ttl )

Definition at line 5346 of file acl_data_structures.c. References acl_lookup_device(), ACLS_NONE, AST_none, D_none, fd_hash(), rsbac_target_id_t::group, rsbac_acl_device_list_item_t::handles, I_none, rsbac_target_id_t::ipc, rsbac_acl_device_list_head_t::lock, rsbac_target_id_t::netdev, rsbac_target_id_t::netobj, rsbac_target_id_t::nettemp, rsbac_target_id_t::process, RSBAC_ACL_DEFAULT_DEV_MASK, RSBAC_ACL_DEFAULT_FD_MASK, RSBAC_ACL_DEFAULT_G_MASK, RSBAC_ACL_DEFAULT_NETDEV_MASK, RSBAC_ACL_DEFAULT_NETOBJ_MASK, RSBAC_ACL_DEFAULT_NETTEMP_MASK, RSBAC_ACL_DEFAULT_SCD_MASK, RSBAC_ACL_DEFAULT_U_MASK, RSBAC_EINVALIDDEV, RSBAC_EINVALIDTARGET, RSBAC_EINVALIDVALUE, RSBAC_ENOTINITIALIZED, rsbac_get_super_block(), rsbac_is_initialized(), RSBAC_NO_GROUP, RSBAC_NO_USER, rsbac_ta_list_add_ttl(), rsbac_ta_list_lol_add_ttl(), rsbac_ta_list_lol_exist(), rsbac_ta_list_lol_subadd_ttl(), rsbac_ta_net_template_exist(), rsbac_target_id_t::scd, rsbac_net_obj_desc_t::sock_p, rsbac_acl_entry_desc_t::subj_id, rsbac_acl_entry_desc_t::subj_type, T_DEV, T_DIR, T_FIFO, T_FILE, T_GROUP, T_IPC, T_NETDEV, T_NETOBJ, T_NETTEMP, T_NETTEMP_NT, T_PROCESS, T_SCD, T_SYMLINK, T_USER, rsbac_ipc_t::type, and rsbac_target_id_t::user. Referenced by rsbac_acl_sys_set_acl_entry().

int rsbac_acl_set_mask (  rsbac_list_ta_number_t  ta_number, enum rsbac_target_t  target, union rsbac_target_id_t  tid, rsbac_acl_rights_vector_t  mask )

Definition at line 7472 of file acl_data_structures.c. References acl_lookup_device(), AST_none, D_none, fd_hash(), get_acl_scd_type_name(), rsbac_target_id_t::group, rsbac_acl_device_list_item_t::handles, rsbac_acl_device_list_head_t::lock, rsbac_target_id_t::netdev, rsbac_target_id_t::netobj, rsbac_target_id_t::nettemp, RSBAC_EINVALIDDEV, RSBAC_EINVALIDTARGET, RSBAC_ENOTINITIALIZED, rsbac_get_super_block(), rsbac_is_initialized(), RSBAC_NO_GROUP, RSBAC_NO_USER, rsbac_ta_list_lol_add_ttl(), rsbac_ta_net_template_exist(), rsbac_target_id_t::scd, rsbac_net_obj_desc_t::sock_p, T_DEV, T_DIR, T_FIFO, T_FILE, T_GROUP, T_NETDEV, T_NETOBJ, T_NETTEMP, T_NETTEMP_NT, T_NONE, T_SCD, T_SYMLINK, T_USER, and rsbac_target_id_t::user. Referenced by rsbac_acl_sys_set_mask().

int rsbac_check_acl (  int  correct, int  check_inode )

Definition at line 3847 of file acl_data_structures.c. References ACLS_GROUP, ACLS_ROLE, rsbac_acl_device_list_head_t::count, rsbac_acl_device_list_item_t::handles, rsbac_acl_device_list_head_t::head, rsbac_acl_device_list_item_t::id, rsbac_acl_device_list_head_t::lock, rsbac_acl_device_list_item_t::next, NULL, RC_role_max_value, RSBAC_ENOTINITIALIZED, rsbac_get_super_block(), rsbac_is_initialized(), rsbac_list_count(), rsbac_list_exist(), rsbac_list_lol_count(), rsbac_list_lol_get_all_desc(), rsbac_list_lol_get_all_subdesc(), rsbac_list_lol_remove(), rsbac_list_lol_subremove(), and rsbac_vfree. Referenced by rsbac_do_init(), and sys_rsbac_check().

int rsbac_init_acl (  void   )

Definition at line 2468 of file acl_data_structures.c. References acl_register_fd_lists(), add_device_item(), rsbac_acl_device_list_head_t::count, create_device_item(), rsbac_acl_device_list_head_t::curr, rsbac_list_lol_info_t::data_size, rsbac_list_info_t::data_size, def_dev_get_conv(), def_fd_get_conv(), def_g_get_conv(), def_ipc_get_conv(), def_netdev_get_conv(), def_netobj_get_conv(), def_nettemp_nt_get_conv(), def_p_get_conv(), def_scd_get_conv(), def_u_get_conv(), rsbac_list_lol_info_t::desc_size, rsbac_list_info_t::desc_size, dev_compare(), dev_get_conv(), dev_get_subconv(), entry_compare(), get_error_name(), group_last_new, rsbac_acl_device_list_head_t::head, rsbac_list_lol_info_t::key, rsbac_list_info_t::key, rsbac_acl_device_list_head_t::lock, rsbac_list_lol_info_t::max_age, rsbac_list_info_t::max_age, netdev_get_conv(), netdev_get_subconv(), nettemp_get_conv(), nettemp_get_subconv(), nettemp_nt_get_conv(), nettemp_nt_get_subconv(), NULL, proc_rsbac_root_p, registration_error(), rsbac_acl_entry_t::rights, RSBAC_ACL_ACMAN_DEV_ENTRY, RSBAC_ACL_ACMAN_FD_ENTRY, RSBAC_ACL_ACMAN_G_ENTRY, RSBAC_ACL_ACMAN_IPC_ENTRY, RSBAC_ACL_ACMAN_NETDEV_ENTRY, RSBAC_ACL_ACMAN_NETOBJ_ENTRY, RSBAC_ACL_ACMAN_NETTEMP_NT_ENTRY, RSBAC_ACL_ACMAN_P_ENTRY, RSBAC_ACL_ACMAN_SCD_ENTRY, RSBAC_ACL_ACMAN_SCD_OTHER_ENTRY, RSBAC_ACL_ACMAN_U_ENTRY, RSBAC_ACL_AUDITOR_SCD_RSBACLOG_ENTRY, RSBAC_ACL_DEF_DEV_FILENAME, RSBAC_ACL_DEF_DEV_LIST_VERSION, RSBAC_ACL_DEF_FD_FILENAME, RSBAC_ACL_DEF_FD_LIST_VERSION, RSBAC_ACL_DEF_G_FILENAME, RSBAC_ACL_DEF_G_LIST_VERSION, RSBAC_ACL_DEF_IPC_FILENAME, RSBAC_ACL_DEF_IPC_LIST_VERSION, RSBAC_ACL_DEF_NETDEV_FILENAME, RSBAC_ACL_DEF_NETDEV_LIST_VERSION, RSBAC_ACL_DEF_NETOBJ_FILENAME, RSBAC_ACL_DEF_NETOBJ_LIST_VERSION, RSBAC_ACL_DEF_NETTEMP_NT_FILENAME, RSBAC_ACL_DEF_NETTEMP_NT_LIST_VERSION, RSBAC_ACL_DEF_P_FILENAME, RSBAC_ACL_DEF_P_LIST_VERSION, RSBAC_ACL_DEF_SCD_FILENAME, RSBAC_ACL_DEF_SCD_LIST_VERSION, RSBAC_ACL_DEF_U_FILENAME, RSBAC_ACL_DEF_U_LIST_VERSION, RSBAC_ACL_DEFAULT_DEV_MASK, RSBAC_ACL_DEFAULT_G_MASK, RSBAC_ACL_DEFAULT_NETDEV_MASK, RSBAC_ACL_DEFAULT_NETOBJ_MASK, RSBAC_ACL_DEFAULT_NETTEMP_MASK, RSBAC_ACL_DEFAULT_SCD_MASK, RSBAC_ACL_DEFAULT_U_MASK, RSBAC_ACL_DEV_FILENAME, RSBAC_ACL_DEV_LIST_VERSION, RSBAC_ACL_G_FILENAME, RSBAC_ACL_G_LIST_VERSION, RSBAC_ACL_GENERAL_DEV_ENTRY, RSBAC_ACL_GENERAL_FD_ENTRY, RSBAC_ACL_GENERAL_G_ENTRY, RSBAC_ACL_GENERAL_IPC_ENTRY, RSBAC_ACL_GENERAL_NETDEV_ENTRY, RSBAC_ACL_GENERAL_NETOBJ_ENTRY, RSBAC_ACL_GENERAL_NETTEMP_NT_ENTRY, RSBAC_ACL_GENERAL_P_ENTRY, RSBAC_ACL_GENERAL_SCD_ENTRY, RSBAC_ACL_GENERAL_SCD_NETWORK_ENTRY, RSBAC_ACL_GENERAL_SCD_OTHER_ENTRY, RSBAC_ACL_GENERAL_U_ENTRY, RSBAC_ACL_GM_FILENAME, RSBAC_ACL_GM_VERSION, RSBAC_ACL_GROUP_FILENAME, RSBAC_ACL_GROUP_VERSION, RSBAC_ACL_LIST_KEY, RSBAC_ACL_NETDEV_FILENAME, RSBAC_ACL_NETDEV_LIST_VERSION, RSBAC_ACL_NETOBJ_FILENAME, RSBAC_ACL_NETOBJ_LIST_VERSION, RSBAC_ACL_NETTEMP_FILENAME, RSBAC_ACL_NETTEMP_LIST_VERSION, RSBAC_ACL_NETTEMP_NT_FILENAME, RSBAC_ACL_NETTEMP_NT_LIST_VERSION, RSBAC_ACL_SCD_FILENAME, RSBAC_ACL_SCD_LIST_VERSION, RSBAC_ACL_SYSADM_DEV_ENTRY, RSBAC_ACL_SYSADM_FD_ENTRY, RSBAC_ACL_SYSADM_G_ENTRY, RSBAC_ACL_SYSADM_IPC_ENTRY, RSBAC_ACL_SYSADM_NETDEV_ENTRY, RSBAC_ACL_SYSADM_NETOBJ_ENTRY, RSBAC_ACL_SYSADM_NETTEMP_NT_ENTRY, RSBAC_ACL_SYSADM_P_ENTRY, RSBAC_ACL_SYSADM_SCD_ENTRY, RSBAC_ACL_SYSADM_SCD_OTHER_ENTRY, RSBAC_ACL_SYSADM_U_ENTRY, RSBAC_ACL_U_FILENAME, RSBAC_ACL_U_LIST_VERSION, RSBAC_ECOULDNOTADDDEVICE, RSBAC_EREINIT, rsbac_is_initialized(), rsbac_list_add(), RSBAC_LIST_BACKUP, rsbac_list_compare_u32(), rsbac_list_count(), RSBAC_LIST_DEF_DATA, rsbac_list_get_max_desc(), rsbac_list_lol_add(), rsbac_list_lol_count(), rsbac_list_lol_register(), rsbac_list_lol_subadd(), RSBAC_LIST_PERSIST, rsbac_list_register(), RSBAC_LIST_VERSION, rsbac_no_defaults, rsbac_root_dev, scd_get_conv(), scd_get_subconv(), ST_firewall, ST_ioports, ST_kmem, ST_network, ST_other, ST_priority, ST_rlimit, ST_rsbac, ST_rsbaclog, ST_sysfs, ST_time_strucs, rsbac_list_lol_info_t::subdata_size, rsbac_list_lol_info_t::subdesc_size, rsbac_acl_entry_t::subj_id, rsbac_acl_entry_desc_t::subj_id, rsbac_acl_entry_t::subj_type, rsbac_acl_entry_desc_t::subj_type, rsbac_acl_device_list_head_t::tail, rsbac_list_lol_info_t::version, and rsbac_list_info_t::version. Referenced by rsbac_do_init().

int rsbac_mount_acl (  kdev_t  kdev  )

Definition at line 3510 of file acl_data_structures.c. References acl_lookup_device(), acl_register_fd_lists(), add_device_item(), clear_device_item(), create_device_item(), get_error_name(), rsbac_acl_device_list_head_t::lock, rsbac_acl_device_list_item_t::mount_count, RSBAC_ECOULDNOTADDDEVICE, RSBAC_ENOTINITIALIZED, rsbac_is_initialized(), rsbac_kfree(), rsbac_kmalloc(), and RSBAC_MAXNAMELEN. Referenced by rsbac_mount().

int rsbac_stats_acl (  void   )

Definition at line 3707 of file acl_data_structures.c. References A_none, rsbac_attribute_value_t::dummy, group_last_new, rsbac_acl_device_list_item_t::handles, rsbac_acl_device_list_head_t::head, rsbac_acl_device_list_item_t::id, rsbac_acl_device_list_head_t::lock, rsbac_acl_device_list_item_t::next, R_GET_STATUS_DATA, rsbac_adf_request(), RSBAC_ENOTINITIALIZED, rsbac_is_initialized(), rsbac_list_count(), rsbac_list_lol_all_subcount(), rsbac_list_lol_count(), rsbac_target_id_t::scd, ST_rsbac, and T_SCD. Referenced by rsbac_stats().

int rsbac_umount_acl (  kdev_t  kdev  )

Definition at line 3639 of file acl_data_structures.c. References acl_lookup_device(), rsbac_acl_device_list_head_t::lock, rsbac_acl_device_list_item_t::mount_count, remove_device_item(), RSBAC_ENOTINITIALIZED, and rsbac_is_initialized(). Referenced by rsbac_umount().

---