1 files changed, 68 insertions, 0 deletions
diff --git a/libqpol/include/qpol/polcap_query.h b/libqpol/include/qpol/polcap_query.h
new file mode 100644
index 0000000..d8de4a0
--- /dev/null
+++ b/libqpol/include/qpol/polcap_query.h
@@ -0,0 +1,68 @@
+/**
+ *  @file
+ *  Defines the public interface for searching and iterating over the policy capabilities
+ *
+ *  @author Steve Lawrence slawrence@tresys.com
+ *
+ *  Copyright (C) 2006-2009 Tresys Technology, LLC
+ *
+ *  This library is free software; you can redistribute it and/or
+ *  modify it under the terms of the GNU Lesser General Public
+ *  License as published by the Free Software Foundation; either
+ *  version 2.1 of the License, or (at your option) any later version.
+ *
+ *  This library is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  Lesser General Public License for more details.
+ *
+ *  You should have received a copy of the GNU Lesser General Public
+ *  License along with this library; if not, write to the Free Software
+ *  Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
+ */
+
+#ifndef QPOL_POLCAP_QUERY_H
+#define QPOL_POLCAP_QUERY_H
+
+#ifdef	__cplusplus
+extern "C"
+{
+#endif
+
+#include <stddef.h>
+#include <stdint.h>
+#include <qpol/iterator.h>
+#include <qpol/policy.h>
+
+	typedef struct qpol_polcap qpol_polcap_t;
+
+/**
+ *  Get an iterator for the policay capabilities in a policy.
+ *  @param policy The policy from which to create the iterator.
+ *  @param iter Iterator over items of type qpol_isid_t returned.
+ *  The caller is responsible for calling qpol_iterator_destroy 
+ *  to free memory used by this iterator.
+ *  It is important to note that this iterator is only valid as long 
+ *  as the policy is unmodified.
+ *  @return 0 on success and < 0 on failure; if the call fails, 
+ *  errno will be set and *iter will be NULL.
+ */
+	extern int qpol_policy_get_polcap_iter(const qpol_policy_t *policy, qpol_iterator_t **iter);
+
+
+/**
+ *  Get the name which identifies a policy capability from its datum.
+ *  @param policy The policy with which the policy capability is associated.
+ *  @param datum Polcap datum for which to get the name. Must be non-NULL.
+ *  @param name Pointer to the string in which to store the name.
+ *  Must be non-NULL. The caller should not free the string.
+ *  @return Returns 0 on success and < 0 on failure; if the call fails,
+ *  errno will be set and *name will be NULL.
+ */
+	extern int qpol_polcap_get_name(const qpol_policy_t *policy, const qpol_polcap_t *datum, const char **name);
+
+#ifdef	__cplusplus
+}
+#endif
+
+#endif				       /* QPOL_POLCAP_QUERY_H */