162306a36Sopenharmony_ci/* SPDX-License-Identifier: GPL-2.0-only */
262306a36Sopenharmony_ci/*
362306a36Sopenharmony_ci * AppArmor security module
462306a36Sopenharmony_ci *
562306a36Sopenharmony_ci * This file contains AppArmor security identifier (secid) definitions
662306a36Sopenharmony_ci *
762306a36Sopenharmony_ci * Copyright 2009-2018 Canonical Ltd.
862306a36Sopenharmony_ci */
962306a36Sopenharmony_ci
1062306a36Sopenharmony_ci#ifndef __AA_SECID_H
1162306a36Sopenharmony_ci#define __AA_SECID_H
1262306a36Sopenharmony_ci
1362306a36Sopenharmony_ci#include <linux/slab.h>
1462306a36Sopenharmony_ci#include <linux/types.h>
1562306a36Sopenharmony_ci
1662306a36Sopenharmony_cistruct aa_label;
1762306a36Sopenharmony_ci
1862306a36Sopenharmony_ci/* secid value that will not be allocated */
1962306a36Sopenharmony_ci#define AA_SECID_INVALID 0
2062306a36Sopenharmony_ci
2162306a36Sopenharmony_ci/* secid value that matches any other secid */
2262306a36Sopenharmony_ci#define AA_SECID_WILDCARD 1
2362306a36Sopenharmony_ci
2462306a36Sopenharmony_ci/* sysctl to enable displaying mode when converting secid to secctx */
2562306a36Sopenharmony_ciextern int apparmor_display_secid_mode;
2662306a36Sopenharmony_ci
2762306a36Sopenharmony_cistruct aa_label *aa_secid_to_label(u32 secid);
2862306a36Sopenharmony_ciint apparmor_secid_to_secctx(u32 secid, char **secdata, u32 *seclen);
2962306a36Sopenharmony_ciint apparmor_secctx_to_secid(const char *secdata, u32 seclen, u32 *secid);
3062306a36Sopenharmony_civoid apparmor_release_secctx(char *secdata, u32 seclen);
3162306a36Sopenharmony_ci
3262306a36Sopenharmony_ci
3362306a36Sopenharmony_ciint aa_alloc_secid(struct aa_label *label, gfp_t gfp);
3462306a36Sopenharmony_civoid aa_free_secid(u32 secid);
3562306a36Sopenharmony_civoid aa_secid_update(u32 secid, struct aa_label *label);
3662306a36Sopenharmony_ci
3762306a36Sopenharmony_ci#endif /* __AA_SECID_H */
38