Lines Matching defs:option
83 /* Maximum size of the CIPSO IP option, derived from the fact that the maximum
87 /* Length of the base CIPSO option, this includes the option type (1 byte), the
88 * option length (1 byte), and the DOI (4 bytes). */
285 * @cipso_ptr: pointer to CIPSO IP option
1142 * cipso_v4_gentag_hdr - Generate a CIPSO option header
1145 * @buf: the CIPSO option buffer
1164 * @buffer: the option buffer
1168 * Generate a CIPSO option using the restricted bitmap tag, tag type #1. The
1265 * @buffer: the option buffer
1269 * Generate a CIPSO option using the enumerated tag, tag type #2. Returns the
1356 * @buffer: the option buffer
1360 * Generate a CIPSO option using the ranged tag, tag type #5. Returns the
1447 * @buffer: the option buffer
1451 * Generate a CIPSO option using the local tag. Returns the size of the tag
1492 * cipso_v4_optptr - Find the CIPSO option in the packet
1496 * Parse the packet's IP header looking for a CIPSO option. Returns a pointer
1497 * to the start of the CIPSO option on success, NULL if one is not found.
1530 * cipso_v4_validate - Validate a CIPSO option
1532 * @option: the start of the option, on error it is set to point to the error
1535 * This routine is called to validate a CIPSO option, it checks all of the
1537 * for details. If the option is valid then a zero value is returned and
1538 * the value of @option is unchanged. If the option is invalid then a
1539 * non-zero value is returned and @option is adjusted to point to the
1540 * offending portion of the option. From the IETF draft ...
1549 int cipso_v4_validate(const struct sk_buff *skb, unsigned char **option)
1551 unsigned char *opt = *option;
1688 *option = opt + err_offset;
1702 * "If the contents of the CIPSO [option] are valid but the security label is
1711 * same procedure is performed if a CIPSO [option] can not be added to an
1749 * cipso_v4_genopt - Generate a CIPSO option
1750 * @buf: the option buffer
1756 * Generate a CIPSO option using the DOI definition and security attributes
1757 * passed to the function. Returns the length of the option on success and
1771 /* XXX - This code assumes only one tag per CIPSO option which isn't
1817 * cipso_v4_sock_setattr - Add a CIPSO option to a socket
1823 * Set the CIPSO option on the given socket using the DOI definition and
1849 /* We allocate the maximum CIPSO option size here so we are probably
1867 * set the IPOPT_CIPSO option. */
1904 * cipso_v4_req_setattr - Add a CIPSO option to a connection request socket
1910 * Set the CIPSO option on the given socket using the DOI definition and
1926 /* We allocate the maximum CIPSO option size here so we are probably
1944 * set the IPOPT_CIPSO option. */
1971 * cipso_v4_delopt - Delete the CIPSO option from a set of IP options
1972 * @opt_ptr: IP option pointer
1975 * Deletes the CIPSO IP option from a set of IP options and makes the necessary
1976 * adjustments to the IP option structure. Returns zero on success, negative
2011 /* determining the new total option length is tricky because of
2014 * padding at the end to determine the actual option size and
2015 * from there we can determine the new total option length */
2028 /* only the cipso option was present on the socket so we can
2029 * remove the entire option struct */
2039 * cipso_v4_sock_delattr - Delete the CIPSO option from a socket
2043 * Removes the CIPSO option from a socket, if present.
2062 * cipso_v4_req_delattr - Delete the CIPSO option from a request socket
2066 * Removes the CIPSO option from a request socket, if present.
2076 * @cipso: the CIPSO v4 option
2099 /* XXX - This code assumes only one tag per CIPSO option which isn't
2130 * Query @sk to see if there is a CIPSO option attached to the sock and if
2153 * cipso_v4_skbuff_setattr - Set the CIPSO option on a packet
2159 * Set the CIPSO option on the given packet based on the security attributes.
2182 * room for the CIPSO option, the reason is that we _need_ to guarantee
2256 /* the easiest thing to do is just replace the cipso option with noop