John Johansen
11bd800e8f
BugLink: http://bugs.launchpad.net/bugs/2028253 Buglink: https://bugs.launchpad.net/bugs/2056496 Add the ability to mediate inet access at a port and address level. Signed-off-by: John Johansen <john.johansen@canonical.com> (cherry picked from commit fefa3cec7db83b9a0dd1a339f7c8d76c0b820ad8 https://git.launchpad.net/~apparmor-dev/ubuntu-kernel-next) Signed-off-by: Paolo Pisati <paolo.pisati@canonical.com>
43 lines
1.6 KiB
C
43 lines
1.6 KiB
C
/* SPDX-License-Identifier: GPL-2.0-only */
|
|
/*
|
|
* AppArmor security module
|
|
*
|
|
* This file contains AppArmor af_unix fine grained mediation
|
|
*
|
|
* Copyright 2024 Canonical Ltd.
|
|
*
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU General Public License as
|
|
* published by the Free Software Foundation, version 2 of the
|
|
* License.
|
|
*/
|
|
#ifndef __AA_AF_INET_H
|
|
|
|
#include "label.h"
|
|
|
|
int aa_inet_peer_perm(const struct cred *subj_cred,
|
|
struct aa_label *label, const char *op, u32 request,
|
|
struct sock *sk, struct sock *peer_sk,
|
|
struct aa_label *peer_label);
|
|
int aa_inet_label_sk_perm(const struct cred *subj_cred,
|
|
struct aa_label *label, const char *op, u32 request,
|
|
struct sock *sk);
|
|
int aa_inet_sock_perm(const char *op, u32 request, struct socket *sock);
|
|
int aa_inet_create_perm(struct aa_label *label, int family, int type,
|
|
int protocol);
|
|
int aa_inet_bind_perm(struct socket *sock, struct sockaddr *address,
|
|
int addrlen);
|
|
int aa_inet_connect_perm(struct socket *sock, struct sockaddr *address,
|
|
int addrlen);
|
|
int aa_inet_listen_perm(struct socket *sock, int backlog);
|
|
int aa_inet_accept_perm(struct socket *sock, struct socket *newsock);
|
|
int aa_inet_msg_perm(const char *op, u32 request, struct socket *sock,
|
|
struct msghdr *msg, int size);
|
|
int aa_inet_opt_perm(const char *op, u32 request, struct socket *sock, int level,
|
|
int optname);
|
|
int aa_inet_file_perm(const struct cred *subj_cred,
|
|
struct aa_label *label, const char *op, u32 request,
|
|
struct socket *sock);
|
|
|
|
#endif /* __AA_AF_INET_H */
|