2 * NetLabel Management Support
4 * This file defines the management functions for the NetLabel system. The
5 * NetLabel system manages static and dynamic label mappings for network
6 * protocols such as CIPSO and RIPSO.
8 * Author: Paul Moore <paul.moore@hp.com>
13 * (c) Copyright Hewlett-Packard Development Company, L.P., 2006
15 * This program is free software; you can redistribute it and/or modify
16 * it under the terms of the GNU General Public License as published by
17 * the Free Software Foundation; either version 2 of the License, or
18 * (at your option) any later version.
20 * This program is distributed in the hope that it will be useful,
21 * but WITHOUT ANY WARRANTY; without even the implied warranty of
22 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See
23 * the GNU General Public License for more details.
25 * You should have received a copy of the GNU General Public License
26 * along with this program; if not, write to the Free Software
27 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
31 #ifndef _NETLABEL_MGMT_H
32 #define _NETLABEL_MGMT_H
34 #include <net/netlabel.h>
37 * The following NetLabel payloads are supported by the management interface.
40 * Sent by an application to add a domain mapping to the NetLabel system.
42 * Required attributes:
45 * NLBL_MGMT_A_PROTOCOL
47 * If using NETLBL_NLTYPE_CIPSOV4 the following attributes are required:
51 * If using NETLBL_NLTYPE_UNLABELED no other attributes are required.
54 * Sent by an application to remove a domain mapping from the NetLabel
57 * Required attributes:
62 * This message can be sent either from an application or by the kernel in
63 * response to an application generated LISTALL message. When sent by an
64 * application there is no payload and the NLM_F_DUMP flag should be set.
65 * The kernel should respond with a series of the following messages.
67 * Required attributes:
70 * NLBL_MGMT_A_PROTOCOL
72 * If using NETLBL_NLTYPE_CIPSOV4 the following attributes are required:
76 * If using NETLBL_NLTYPE_UNLABELED no other attributes are required.
79 * Sent by an application to set the default domain mapping for the NetLabel
82 * Required attributes:
84 * NLBL_MGMT_A_PROTOCOL
86 * If using NETLBL_NLTYPE_CIPSOV4 the following attributes are required:
90 * If using NETLBL_NLTYPE_UNLABELED no other attributes are required.
93 * Sent by an application to remove the default domain mapping from the
94 * NetLabel system, there is no payload.
97 * This message can be sent either from an application or by the kernel in
98 * response to an application generated LISTDEF message. When sent by an
99 * application there is no payload. On success the kernel should send a
100 * response using the following format.
102 * Required attributes:
104 * NLBL_MGMT_A_PROTOCOL
106 * If using NETLBL_NLTYPE_CIPSOV4 the following attributes are required:
110 * If using NETLBL_NLTYPE_UNLABELED no other attributes are required.
113 * Sent by an application to request a list of configured NetLabel protocols
114 * in the kernel. When sent by an application there is no payload and the
115 * NLM_F_DUMP flag should be set. The kernel should respond with a series of
116 * the following messages.
118 * Required attributes:
120 * NLBL_MGMT_A_PROTOCOL
123 * Sent by an application to request the NetLabel version. When sent by an
124 * application there is no payload. This message type is also used by the
125 * kernel to respond to an VERSION request.
127 * Required attributes:
129 * NLBL_MGMT_A_VERSION
133 /* NetLabel Management commands */
140 NLBL_MGMT_C_REMOVEDEF,
142 NLBL_MGMT_C_PROTOCOLS,
146 #define NLBL_MGMT_C_MAX (__NLBL_MGMT_C_MAX - 1)
148 /* NetLabel Management attributes */
153 * the NULL terminated LSM domain string */
154 NLBL_MGMT_A_PROTOCOL,
156 * the NetLabel protocol type (defined by NETLBL_NLTYPE_*) */
159 * the NetLabel protocol version number (defined by
160 * NETLBL_PROTO_VERSION) */
163 * the CIPSOv4 DOI value */
166 #define NLBL_MGMT_A_MAX (__NLBL_MGMT_A_MAX - 1)
168 /* NetLabel protocol functions */
169 int netlbl_mgmt_genl_init(void);