diff options
Diffstat (limited to 'security/selinux/ss/constraint.h')
| -rw-r--r-- | security/selinux/ss/constraint.h | 67 | 
1 files changed, 34 insertions, 33 deletions
diff --git a/security/selinux/ss/constraint.h b/security/selinux/ss/constraint.h index f76eb3128ad5..203033cfad67 100644 --- a/security/selinux/ss/constraint.h +++ b/security/selinux/ss/constraint.h @@ -13,6 +13,7 @@   *   * Author : Stephen Smalley, <[email protected]>   */ +  #ifndef _SS_CONSTRAINT_H_  #define _SS_CONSTRAINT_H_ @@ -21,43 +22,43 @@  #define CEXPR_MAXDEPTH 5  struct constraint_expr { -#define CEXPR_NOT		1 /* not expr */ -#define CEXPR_AND		2 /* expr and expr */ -#define CEXPR_OR		3 /* expr or expr */ -#define CEXPR_ATTR		4 /* attr op attr */ -#define CEXPR_NAMES		5 /* attr op names */ -	u32 expr_type;		/* expression type */ - -#define CEXPR_USER 1		/* user */ -#define CEXPR_ROLE 2		/* role */ -#define CEXPR_TYPE 4		/* type */ -#define CEXPR_TARGET 8		/* target if set, source otherwise */ -#define CEXPR_XTARGET 16	/* special 3rd target for validatetrans rule */ -#define CEXPR_L1L2 32		/* low level 1 vs. low level 2 */ -#define CEXPR_L1H2 64		/* low level 1 vs. high level 2 */ -#define CEXPR_H1L2 128		/* high level 1 vs. low level 2 */ -#define CEXPR_H1H2 256		/* high level 1 vs. high level 2 */ -#define CEXPR_L1H1 512		/* low level 1 vs. high level 1 */ -#define CEXPR_L2H2 1024		/* low level 2 vs. high level 2 */ -	u32 attr;		/* attribute */ - -#define CEXPR_EQ     1		/* == or eq */ -#define CEXPR_NEQ    2		/* != */ -#define CEXPR_DOM    3		/* dom */ -#define CEXPR_DOMBY  4		/* domby  */ -#define CEXPR_INCOMP 5		/* incomp */ -	u32 op;			/* operator */ - -	struct ebitmap names;	/* names */ +#define CEXPR_NOT   1 /* not expr */ +#define CEXPR_AND   2 /* expr and expr */ +#define CEXPR_OR    3 /* expr or expr */ +#define CEXPR_ATTR  4 /* attr op attr */ +#define CEXPR_NAMES 5 /* attr op names */ +	u32 expr_type; /* expression type */ + +#define CEXPR_USER    1 /* user */ +#define CEXPR_ROLE    2 /* role */ +#define CEXPR_TYPE    4 /* type */ +#define CEXPR_TARGET  8 /* target if set, source otherwise */ +#define CEXPR_XTARGET 16 /* special 3rd target for validatetrans rule */ +#define CEXPR_L1L2    32 /* low level 1 vs. low level 2 */ +#define CEXPR_L1H2    64 /* low level 1 vs. high level 2 */ +#define CEXPR_H1L2    128 /* high level 1 vs. low level 2 */ +#define CEXPR_H1H2    256 /* high level 1 vs. high level 2 */ +#define CEXPR_L1H1    512 /* low level 1 vs. high level 1 */ +#define CEXPR_L2H2    1024 /* low level 2 vs. high level 2 */ +	u32 attr; /* attribute */ + +#define CEXPR_EQ     1 /* == or eq */ +#define CEXPR_NEQ    2 /* != */ +#define CEXPR_DOM    3 /* dom */ +#define CEXPR_DOMBY  4 /* domby  */ +#define CEXPR_INCOMP 5 /* incomp */ +	u32 op; /* operator */ + +	struct ebitmap names; /* names */  	struct type_set *type_names; -	struct constraint_expr *next;   /* next expression */ +	struct constraint_expr *next; /* next expression */  };  struct constraint_node { -	u32 permissions;	/* constrained permissions */ -	struct constraint_expr *expr;	/* constraint on permissions */ -	struct constraint_node *next;	/* next constraint */ +	u32 permissions; /* constrained permissions */ +	struct constraint_expr *expr; /* constraint on permissions */ +	struct constraint_node *next; /* next constraint */  }; -#endif	/* _SS_CONSTRAINT_H_ */ +#endif /* _SS_CONSTRAINT_H_ */  |