From 47be9ff57e72906660bb62a515222f482131e1fb Mon Sep 17 00:00:00 2001 From: Miroslav Grepl Date: Fri, 11 Apr 2014 09:37:53 +0200 Subject: Create setools-3.3.7 git repo --- sechecker/modules/unreachable_doms.h | 73 ++++++++++++++++++++++++++++++++++++ 1 file changed, 73 insertions(+) create mode 100644 sechecker/modules/unreachable_doms.h (limited to 'sechecker/modules/unreachable_doms.h') diff --git a/sechecker/modules/unreachable_doms.h b/sechecker/modules/unreachable_doms.h new file mode 100644 index 0000000..660de76 --- /dev/null +++ b/sechecker/modules/unreachable_doms.h @@ -0,0 +1,73 @@ +/** + * @file + * Defines the interface for the unreachable domains module. + * + * @author Kevin Carr kcarr@tresys.com + * @author Jeremy A. Mowery jmowery@tresys.com + * @author Jason Tang jtang@tresys.com + * @author David Windsor dwindsor@tresys.com + * + * Copyright (C) 2005-2007 Tresys Technology, LLC + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation; either version 2 of the License, or + * (at your option) any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with this program; if not, write to the Free Software + * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA + */ + +#ifndef UNREACHABLE_DOMS +#define UNREACHABLE_DOMS + +#ifdef __cplusplus +extern "C" +{ +#endif + +#include "sechecker.h" +#include +#include +#include +#include +#include +#include +#include + +#define SECHK_INC_DOM_TRANS_HAS_TT 0x08 +#define SECHK_INC_DOM_TRANS_HAS_EXEC 0x04 +#define SECHK_INC_DOM_TRANS_HAS_TRANS 0x02 +#define SECHK_INC_DOM_TRANS_HAS_EP 0x01 +#define SECHK_INC_DOM_TRANS_COMPLETE (SECHK_INC_DOM_TRANS_HAS_EP|SECHK_INC_DOM_TRANS_HAS_TRANS|SECHK_INC_DOM_TRANS_HAS_EXEC) + +#define APOL_STR_SZ 128 + +/* The unreachable_doms_data structure is used to hold the check specific + * private data of a module. */ + typedef struct unreachable_doms_data + { + char *ctx_file_path; + /* vector of strings, read from default contexts file */ + apol_vector_t *ctx_vector; + } unreachable_doms_data_t; + + unreachable_doms_data_t *unreachable_doms_data_new(void); + void unreachable_doms_data_free(void *data); + + int unreachable_doms_register(sechk_lib_t * lib); + int unreachable_doms_init(sechk_module_t * mod, apol_policy_t * policy, void *arg); + int unreachable_doms_run(sechk_module_t * mod, apol_policy_t * policy, void *arg); + int unreachable_doms_print(sechk_module_t * mod, apol_policy_t * policy, void *arg); + +#ifdef __cplusplus +} +#endif + +#endif /* UNREACHABLE_DOMS */ -- cgit