Lines Matching defs:option
83 /* Maximum size of the CIPSO IP option, derived from the fact that the maximum
87 /* Length of the base CIPSO option, this includes the option type (1 byte), the
88 * option length (1 byte), and the DOI (4 bytes). */
286 * @cipso_ptr: pointer to CIPSO IP option
1143 * cipso_v4_gentag_hdr - Generate a CIPSO option header
1146 * @buf: the CIPSO option buffer
1165 * @buffer: the option buffer
1169 * Generate a CIPSO option using the restricted bitmap tag, tag type #1. The
1266 * @buffer: the option buffer
1270 * Generate a CIPSO option using the enumerated tag, tag type #2. Returns the
1357 * @buffer: the option buffer
1361 * Generate a CIPSO option using the ranged tag, tag type #5. Returns the
1448 * @buffer: the option buffer
1452 * Generate a CIPSO option using the local tag. Returns the size of the tag
1493 * cipso_v4_optptr - Find the CIPSO option in the packet
1497 * Parse the packet's IP header looking for a CIPSO option. Returns a pointer
1498 * to the start of the CIPSO option on success, NULL if one is not found.
1531 * cipso_v4_validate - Validate a CIPSO option
1533 * @option: the start of the option, on error it is set to point to the error
1536 * This routine is called to validate a CIPSO option, it checks all of the
1538 * for details. If the option is valid then a zero value is returned and
1539 * the value of @option is unchanged. If the option is invalid then a
1540 * non-zero value is returned and @option is adjusted to point to the
1541 * offending portion of the option. From the IETF draft ...
1550 int cipso_v4_validate(const struct sk_buff *skb, unsigned char **option)
1552 unsigned char *opt = *option;
1689 *option = opt + err_offset;
1703 * "If the contents of the CIPSO [option] are valid but the security label is
1712 * same procedure is performed if a CIPSO [option] can not be added to an
1750 * cipso_v4_genopt - Generate a CIPSO option
1751 * @buf: the option buffer
1757 * Generate a CIPSO option using the DOI definition and security attributes
1758 * passed to the function. Returns the length of the option on success and
1772 /* XXX - This code assumes only one tag per CIPSO option which isn't
1818 * cipso_v4_sock_setattr - Add a CIPSO option to a socket
1824 * Set the CIPSO option on the given socket using the DOI definition and
1850 /* We allocate the maximum CIPSO option size here so we are probably
1868 * set the IPOPT_CIPSO option. */
1905 * cipso_v4_req_setattr - Add a CIPSO option to a connection request socket
1911 * Set the CIPSO option on the given socket using the DOI definition and
1927 /* We allocate the maximum CIPSO option size here so we are probably
1945 * set the IPOPT_CIPSO option. */
1972 * cipso_v4_delopt - Delete the CIPSO option from a set of IP options
1973 * @opt_ptr: IP option pointer
1976 * Deletes the CIPSO IP option from a set of IP options and makes the necessary
1977 * adjustments to the IP option structure. Returns zero on success, negative
2012 /* determining the new total option length is tricky because of
2015 * padding at the end to determine the actual option size and
2016 * from there we can determine the new total option length */
2029 /* only the cipso option was present on the socket so we can
2030 * remove the entire option struct */
2040 * cipso_v4_sock_delattr - Delete the CIPSO option from a socket
2044 * Removes the CIPSO option from a socket, if present.
2063 * cipso_v4_req_delattr - Delete the CIPSO option from a request socket
2067 * Removes the CIPSO option from a request socket, if present.
2077 * @cipso: the CIPSO v4 option
2100 /* XXX - This code assumes only one tag per CIPSO option which isn't
2131 * Query @sk to see if there is a CIPSO option attached to the sock and if
2154 * cipso_v4_skbuff_setattr - Set the CIPSO option on a packet
2160 * Set the CIPSO option on the given packet based on the security attributes.
2183 * room for the CIPSO option, the reason is that we _need_ to guarantee
2257 /* the easiest thing to do is just replace the cipso option with noop