mirror of
https://github.com/torvalds/linux
synced 2024-07-21 10:41:44 +00:00
793f9add02
As part of on ongoing effort to perform more automated testing and provide more tools for individual developers to validate their patches before submitting, we are trying to make our code "clang-format clean". My hope is that once we have fixed all of our style "quirks", developers will be able to run clang-format on their patches to help avoid silly formatting problems and ensure their changes fit in well with the rest of the SELinux kernel code. Signed-off-by: Paul Moore <paul@paul-moore.com>
53 lines
1.4 KiB
C
53 lines
1.4 KiB
C
/* SPDX-License-Identifier: GPL-2.0 */
|
|
/*
|
|
* Type definitions for the multi-level security (MLS) policy.
|
|
*
|
|
* Author : Stephen Smalley, <stephen.smalley.work@gmail.com>
|
|
*/
|
|
|
|
/*
|
|
* Updated: Trusted Computer Solutions, Inc. <dgoeddel@trustedcs.com>
|
|
* Support for enhanced MLS infrastructure.
|
|
* Copyright (C) 2004-2005 Trusted Computer Solutions, Inc.
|
|
*/
|
|
|
|
#ifndef _SS_MLS_TYPES_H_
|
|
#define _SS_MLS_TYPES_H_
|
|
|
|
#include "security.h"
|
|
#include "ebitmap.h"
|
|
|
|
struct mls_level {
|
|
u32 sens; /* sensitivity */
|
|
struct ebitmap cat; /* category set */
|
|
};
|
|
|
|
struct mls_range {
|
|
struct mls_level level[2]; /* low == level[0], high == level[1] */
|
|
};
|
|
|
|
static inline int mls_level_eq(const struct mls_level *l1,
|
|
const struct mls_level *l2)
|
|
{
|
|
return ((l1->sens == l2->sens) && ebitmap_cmp(&l1->cat, &l2->cat));
|
|
}
|
|
|
|
static inline int mls_level_dom(const struct mls_level *l1,
|
|
const struct mls_level *l2)
|
|
{
|
|
return ((l1->sens >= l2->sens) &&
|
|
ebitmap_contains(&l1->cat, &l2->cat, 0));
|
|
}
|
|
|
|
#define mls_level_incomp(l1, l2) \
|
|
(!mls_level_dom((l1), (l2)) && !mls_level_dom((l2), (l1)))
|
|
|
|
#define mls_level_between(l1, l2, l3) \
|
|
(mls_level_dom((l1), (l2)) && mls_level_dom((l3), (l1)))
|
|
|
|
#define mls_range_contains(r1, r2) \
|
|
(mls_level_dom(&(r2).level[0], &(r1).level[0]) && \
|
|
mls_level_dom(&(r1).level[1], &(r2).level[1]))
|
|
|
|
#endif /* _SS_MLS_TYPES_H_ */
|