34 lines
1018 B
C
34 lines
1018 B
C
|
/* SPDX-License-Identifier: GPL-2.0-only */
|
||
|
|
/*
|
||
|
|
* AppArmor security module
|
||
|
|
*
|
||
|
|
* Code to provide backwards compatibility with older policy versions,
|
||
|
|
* by converting/mapping older policy formats into the newer internal
|
||
|
|
* formats.
|
||
|
|
*
|
||
|
|
* Copyright 2022 Canonical Ltd.
|
||
|
|
*/
|
||
|
|
|
||
|
|
#ifndef __POLICY_COMPAT_H
|
||
|
|
#define __POLICY_COMPAT_H
|
||
|
|
|
||
|
|
#include "policy.h"
|
||
|
|
|
||
|
|
#define K_ABI_MASK 0x3ff
|
||
|
|
#define FORCE_COMPLAIN_FLAG 0x800
|
||
|
|
#define VERSION_LT(X, Y) (((X) & K_ABI_MASK) < ((Y) & K_ABI_MASK))
|
||
|
|
#define VERSION_LE(X, Y) (((X) & K_ABI_MASK) <= ((Y) & K_ABI_MASK))
|
||
|
|
#define VERSION_GT(X, Y) (((X) & K_ABI_MASK) > ((Y) & K_ABI_MASK))
|
||
|
|
|
||
|
|
#define v5 5 /* base version */
|
||
|
|
#define v6 6 /* per entry policydb mediation check */
|
||
|
|
#define v7 7
|
||
|
|
#define v8 8 /* full network masking */
|
||
|
|
#define v9 9 /* xbits are used as permission bits in policydb */
|
||
|
|
|
||
|
|
int aa_compat_map_xmatch(struct aa_policydb *policy);
|
||
|
|
int aa_compat_map_policy(struct aa_policydb *policy, u32 version);
|
||
|
|
int aa_compat_map_file(struct aa_policydb *policy);
|
||
|
|
|
||
|
|
#endif /* __POLICY_COMPAT_H */
|