40 lines
1.0 KiB
C
40 lines
1.0 KiB
C
/*
|
|
* A security identifier table (sidtab) is a hash table
|
|
* of security context structures indexed by SID value.
|
|
*/
|
|
#ifndef _SELINUX_AVC_SIDTAB_H_
|
|
#define _SELINUX_AVC_SIDTAB_H_
|
|
|
|
#include <selinux/selinux.h>
|
|
#include <selinux/avc.h>
|
|
#include "dso.h"
|
|
|
|
struct sidtab_node {
|
|
struct security_id sid_s;
|
|
struct sidtab_node *next;
|
|
};
|
|
|
|
#define SIDTAB_HASH_BITS 7
|
|
#define SIDTAB_HASH_BUCKETS (1 << SIDTAB_HASH_BITS)
|
|
#define SIDTAB_HASH_MASK (SIDTAB_HASH_BUCKETS-1)
|
|
#define SIDTAB_SIZE SIDTAB_HASH_BUCKETS
|
|
|
|
struct sidtab {
|
|
struct sidtab_node **htable;
|
|
unsigned nel;
|
|
};
|
|
|
|
int sidtab_init(struct sidtab *s) hidden;
|
|
int sidtab_insert(struct sidtab *s, security_context_t ctx) hidden;
|
|
void sidtab_remove(struct sidtab *s, security_id_t sid) hidden;
|
|
security_id_t sidtab_claim_sid(struct sidtab *s) hidden;
|
|
|
|
int sidtab_context_to_sid(struct sidtab *s,
|
|
security_context_t ctx,
|
|
security_id_t *sid) hidden;
|
|
|
|
void sidtab_sid_stats(struct sidtab *s, char *buf, int buflen) hidden;
|
|
void sidtab_destroy(struct sidtab *s) hidden;
|
|
|
|
#endif /* _SELINUX_AVC_SIDTAB_H_ */
|