66 lines
1.6 KiB
C
66 lines
1.6 KiB
C
|
/* SPDX-License-Identifier: GPL-2.0-only */
|
||
|
/*
|
||
|
* AppArmor security module
|
||
|
*
|
||
|
* This file contains AppArmor basic global
|
||
|
*
|
||
|
* Copyright (C) 1998-2008 Novell/SUSE
|
||
|
* Copyright 2009-2017 Canonical Ltd.
|
||
|
*/
|
||
|
|
||
|
#ifndef __APPARMOR_H
|
||
|
#define __APPARMOR_H
|
||
|
|
||
|
#include <linux/types.h>
|
||
|
|
||
|
/*
|
||
|
* Class of mediation types in the AppArmor policy db
|
||
|
*/
|
||
|
#define AA_CLASS_NONE 0
|
||
|
#define AA_CLASS_UNKNOWN 1
|
||
|
#define AA_CLASS_FILE 2
|
||
|
#define AA_CLASS_CAP 3
|
||
|
#define AA_CLASS_DEPRECATED 4
|
||
|
#define AA_CLASS_RLIMITS 5
|
||
|
#define AA_CLASS_DOMAIN 6
|
||
|
#define AA_CLASS_MOUNT 7
|
||
|
#define AA_CLASS_PTRACE 9
|
||
|
#define AA_CLASS_SIGNAL 10
|
||
|
#define AA_CLASS_XMATCH 11
|
||
|
#define AA_CLASS_NET 14
|
||
|
#define AA_CLASS_LABEL 16
|
||
|
#define AA_CLASS_POSIX_MQUEUE 17
|
||
|
#define AA_CLASS_IO_URING 18
|
||
|
#define AA_CLASS_MODULE 19
|
||
|
#define AA_CLASS_DISPLAY_LSM 20
|
||
|
|
||
|
#define AA_CLASS_X 31
|
||
|
#define AA_CLASS_DBUS 32
|
||
|
|
||
|
#define AA_CLASS_LAST AA_CLASS_DBUS
|
||
|
|
||
|
/* Control parameters settable through module/boot flags */
|
||
|
extern enum audit_mode aa_g_audit;
|
||
|
extern bool aa_g_audit_header;
|
||
|
extern bool aa_g_debug;
|
||
|
extern bool aa_g_hash_policy;
|
||
|
extern bool aa_g_export_binary;
|
||
|
extern int aa_g_rawdata_compression_level;
|
||
|
extern bool aa_g_lock_policy;
|
||
|
extern bool aa_g_logsyscall;
|
||
|
extern bool aa_g_paranoid_load;
|
||
|
extern unsigned int aa_g_path_max;
|
||
|
|
||
|
#ifdef CONFIG_SECURITY_APPARMOR_EXPORT_BINARY
|
||
|
#define AA_MIN_CLEVEL zstd_min_clevel()
|
||
|
#define AA_MAX_CLEVEL zstd_max_clevel()
|
||
|
#define AA_DEFAULT_CLEVEL ZSTD_CLEVEL_DEFAULT
|
||
|
#else
|
||
|
#define AA_MIN_CLEVEL 0
|
||
|
#define AA_MAX_CLEVEL 0
|
||
|
#define AA_DEFAULT_CLEVEL 0
|
||
|
#endif /* CONFIG_SECURITY_APPARMOR_EXPORT_BINARY */
|
||
|
|
||
|
|
||
|
#endif /* __APPARMOR_H */
|