diff options
Diffstat (limited to 'libqpol/src/policy_define.h')
| -rw-r--r-- | libqpol/src/policy_define.h | 75 |
1 files changed, 75 insertions, 0 deletions
diff --git a/libqpol/src/policy_define.h b/libqpol/src/policy_define.h new file mode 100644 index 0000000..7be626c --- /dev/null +++ b/libqpol/src/policy_define.h @@ -0,0 +1,75 @@ +/** + * @file policy_define.h + * This file is based upon checkpolicy/policy_define.h from NSA's SVN + * repository. + */ + +/* Functions used to define policy grammar components. */ + +#ifndef _POLICY_DEFINE_H_ +#define _POLICY_DEFINE_H_ + +/* + * We need the following so we have a valid error return code in yacc + * when we have a parse error for a conditional rule. We can't check + * for NULL (ie 0) because that is a potentially valid return. + */ +#define COND_ERR ((avrule_t *)-1) + +#define TRUE 1 +#define FALSE 0 + +/** parser used to support fs_use_psid declarations, so revert that bit + * of code here */ +#define SECURITY_FS_USE_PSIDS 6 + +avrule_t *define_cond_compute_type(int which); +avrule_t *define_cond_pol_list(avrule_t * avlist, avrule_t * stmt); +avrule_t *define_cond_te_avtab(int which); +cond_expr_t *define_cond_expr(uint32_t expr_type, void *arg1, void *arg2); +int define_attrib(void); +int define_av_perms(int inherits); +int define_bool(void); +int define_category(void); +int define_class(void); +int define_common_perms(void); +int define_compute_type(int which); +int define_conditional(cond_expr_t * expr, avrule_t * t_list, avrule_t * f_list); +int define_constraint(constraint_expr_t * expr); +int define_dominance(void); +int define_fs_context(unsigned int major, unsigned int minor); +int define_fs_use(int behavior); +int define_genfs_context(int has_type); +int define_initial_sid_context(void); +int define_initial_sid(void); +int define_ipv4_node_context(void); +int define_ipv6_node_context(void); +int define_level(void); +int define_mls(void); +int define_netif_context(void); +int define_permissive(void); +int define_polcap(void); +int define_port_context(unsigned int low, unsigned int high); +int define_pirq_context(unsigned int pirq); +int define_iomem_context(unsigned long low, unsigned long high); +int define_ioport_context(unsigned long low, unsigned long high); +int define_pcidevice_context(unsigned long device); +int define_range_trans(int class_specified); +int define_role_allow(void); +int define_role_trans(void); +int define_role_types(void); +int define_sens(void); +int define_te_avtab(int which); +int define_typealias(void); +int define_typeattribute(void); +int define_typebounds(void); +int define_type(int alias); +int define_user(void); +int define_validatetrans(constraint_expr_t * expr); +int insert_id(char *id, int push); +int insert_separator(int push); +role_datum_t *define_role_dom(role_datum_t * r); +role_datum_t *merge_roles_dom(role_datum_t * r1, role_datum_t * r2); +uintptr_t define_cexpr(uint32_t expr_type, uintptr_t arg1, uintptr_t arg2); + +#endif /* _POLICY_DEFINE_H_ */ |