security/selinux/exports.c

   1 /*
   2  * SELinux services exported to the rest of the kernel.
   3  *
   4  * Author: James Morris <jmorris@redhat.com>
   5  *
   6  * Copyright (C) 2005 Red Hat, Inc., James Morris <jmorris@redhat.com>
   7  * Copyright (C) 2006 Trusted Computer Solutions, Inc. <dgoeddel@trustedcs.com>
   8  * Copyright (C) 2006 IBM Corporation, Timothy R. Chavez <tinytim@us.ibm.com>
   9  *
  10  * This program is free software; you can redistribute it and/or modify
  11  * it under the terms of the GNU General Public License version 2,
  12  * as published by the Free Software Foundation.
  13  */
  14 #include <linux/types.h>
  15 #include <linux/kernel.h>
  16 #include <linux/module.h>
  17 #include <linux/selinux.h>
  18 #include <linux/fs.h>
  19 #include <linux/ipc.h>
  20 #include <asm/atomic.h>
  21
  22 #include "security.h"
  23 #include "objsec.h"
  24
  25 /* SECMARK reference count */
  26 extern atomic_t selinux_secmark_refcount;
  27
  28 int selinux_string_to_sid(char *str, u32 *sid)
  29 {
  30         if (selinux_enabled)
  31                 return security_context_to_sid(str, strlen(str), sid);
  32         else {
  33                 *sid = 0;
  34                 return 0;
  35         }
  36 }
  37 EXPORT_SYMBOL_GPL(selinux_string_to_sid);
  38
  39 int selinux_secmark_relabel_packet_permission(u32 sid)
  40 {
  41         if (selinux_enabled) {
  42                 struct task_security_struct *tsec = current->security;
  43
  44                 return avc_has_perm(tsec->sid, sid, SECCLASS_PACKET,
  45                                     PACKET__RELABELTO, NULL);
  46         }
  47         return 0;
  48 }
  49 EXPORT_SYMBOL_GPL(selinux_secmark_relabel_packet_permission);
  50
  51 void selinux_secmark_refcount_inc(void)
  52 {
  53         atomic_inc(&selinux_secmark_refcount);
  54 }
  55 EXPORT_SYMBOL_GPL(selinux_secmark_refcount_inc);
  56
  57 void selinux_secmark_refcount_dec(void)
  58 {
  59         atomic_dec(&selinux_secmark_refcount);
  60 }
  61 EXPORT_SYMBOL_GPL(selinux_secmark_refcount_dec);