diff options
Diffstat (limited to 'nscd/selinux.h')
| -rw-r--r-- | nscd/selinux.h | 55 |
1 files changed, 55 insertions, 0 deletions
diff --git a/nscd/selinux.h b/nscd/selinux.h new file mode 100644 index 0000000000..b9eb053aa0 --- /dev/null +++ b/nscd/selinux.h @@ -0,0 +1,55 @@ +/* Header for nscd SELinux access controls. + Copyright (C) 2004 Free Software Foundation, Inc. + This file is part of the GNU C Library. + Contributed by Matthew Rickard <mjricka@epoch.ncsc.mil>, 2004. + + The GNU C Library is free software; you can redistribute it and/or + modify it under the terms of the GNU Lesser General Public + License as published by the Free Software Foundation; either + version 2.1 of the License, or (at your option) any later version. + + The GNU C Library is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + Lesser General Public License for more details. + + You should have received a copy of the GNU Lesser General Public + License along with the GNU C Library; if not, write to the Free + Software Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA + 02111-1307 USA. */ + +#ifndef _SELINUX_H +#define _SELINUX_H 1 + +#include "nscd.h" + +#ifdef HAVE_SELINUX +/* Global variable to tell if the kernel has SELinux support. */ +extern int selinux_enabled; + +/* Define this for AVC stat usage. */ +struct avc_cache_stats; + +/* Initialize the userspace AVC. */ +extern void nscd_avc_init (void); +/* Destroy the userspace AVC. */ +extern void nscd_avc_destroy (void); +/* Determine if we are running on an SELinux kernel. */ +extern void nscd_selinux_enabled (int *selinux_enabled); +/* Check if the client has permission for the request type. */ +extern int nscd_request_avc_has_perm (int fd, request_type req); +/* Initialize AVC statistic information. */ +extern void nscd_avc_cache_stats (struct avc_cache_stats *cstats); +/* Display statistics on AVC usage. */ +extern void nscd_avc_print_stats (struct avc_cache_stats *cstats); +#else +# define selinux_enabled 0 +# define nscd_avc_init() (void) 0 +# define nscd_avc_destroy() (void) 0 +# define nscd_selinux_enabled(selinux_enabled) (void) 0 +# define nscd_request_avc_has_perm(fd, req) 0 +# define nscd_avc_cache_stats(cstats) (void) 0 +# define nscd_avc_print_stats(cstats) (void) 0 +#endif /* HAVE_SELINUX */ + +#endif /* _SELINUX_H */ |