security/ipe/policy.h

Source file repositories/reference/linux-study-clean/security/ipe/policy.h

File Facts

System
Linux kernel
Corpus path
security/ipe/policy.h
Extension
.h
Size
1915 bytes
Lines
99
Domain
Core OS
Bucket
Security And Isolation
Inferred role
Core OS: implementation source
Status
source implementation candidate

Why This File Exists

Core operating-system implementation surface: boot, tasks, memory, VFS, syscall-facing interfaces, synchronization, credentials, and isolation.

Dependency Surface

Detected Declarations

Annotated Snippet

struct ipe_prop {
	struct list_head next;
	enum ipe_prop_type type;
	void *value;
};

struct ipe_rule {
	enum ipe_op_type op;
	enum ipe_action_type action;
	struct list_head props;
	struct list_head next;
};

struct ipe_op_table {
	struct list_head rules;
	enum ipe_action_type default_action;
};

struct ipe_parsed_policy {
	const char *name;
	struct {
		u16 major;
		u16 minor;
		u16 rev;
	} version;

	enum ipe_action_type global_default_action;

	struct ipe_op_table rules[__IPE_OP_MAX];
};

struct ipe_policy {
	const char *pkcs7;
	size_t pkcs7len;

	const char *text;
	size_t textlen;

	struct ipe_parsed_policy *parsed;

	struct dentry *policyfs;
};

struct ipe_policy *ipe_new_policy(const char *text, size_t textlen,
				  const char *pkcs7, size_t pkcs7len);
void ipe_free_policy(struct ipe_policy *pol);
int ipe_update_policy(struct inode *root, const char *text, size_t textlen,
		      const char *pkcs7, size_t pkcs7len);
int ipe_set_active_pol(const struct ipe_policy *p);
extern struct mutex ipe_policy_lock;

#endif /* _IPE_POLICY_H */

Annotation

Implementation Notes