[linux.git] / net / netlabel / netlabel_addrlist.h

/*
 * NetLabel Network Address Lists
 *
 * This file contains network address list functions used to manage ordered
 * lists of network addresses for use by the NetLabel subsystem.  The NetLabel
 * system manages static and dynamic label mappings for network protocols such
 * as CIPSO and RIPSO.
 *
 * Author: Paul Moore <[email protected]>
 *
 */

/*
 * (c) Copyright Hewlett-Packard Development Company, L.P., 2008
 *
 * This program is free software;  you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 2 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY;  without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See
 * the GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program;  if not, write to the Free Software
 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
 *
 */

#ifndef _NETLABEL_ADDRLIST_H
#define _NETLABEL_ADDRLIST_H

#include <linux/types.h>
#include <linux/rcupdate.h>
#include <linux/list.h>
#include <linux/in6.h>
#include <linux/audit.h>

/**
 * struct netlbl_af4list - NetLabel IPv4 address list
 * @addr: IPv4 address
 * @mask: IPv4 address mask
 * @valid: valid flag
 * @list: list structure, used internally
 */
struct netlbl_af4list {
	__be32 addr;
	__be32 mask;

	u32 valid;
	struct list_head list;
};

/**
 * struct netlbl_af6list - NetLabel IPv6 address list
 * @addr: IPv6 address
 * @mask: IPv6 address mask
 * @valid: valid flag
 * @list: list structure, used internally
 */
struct netlbl_af6list {
	struct in6_addr addr;
	struct in6_addr mask;

	u32 valid;
	struct list_head list;
};

#define __af4list_entry(ptr) container_of(ptr, struct netlbl_af4list, list)

static inline struct netlbl_af4list *__af4list_valid(struct list_head *s,
						     struct list_head *h)
{
	struct list_head *i = s;
	struct netlbl_af4list *n = __af4list_entry(s);
	while (i != h && !n->valid) {
		i = i->next;
		n = __af4list_entry(i);
	}
	return n;
}

static inline struct netlbl_af4list *__af4list_valid_rcu(struct list_head *s,
							 struct list_head *h)
{
	struct list_head *i = s;
	struct netlbl_af4list *n = __af4list_entry(s);
	while (i != h && !n->valid) {
		i = rcu_dereference(i->next);
		n = __af4list_entry(i);
	}
	return n;
}

#define netlbl_af4list_foreach(iter, head)				\
	for (iter = __af4list_valid((head)->next, head);		\
	     &iter->list != (head);					\
	     iter = __af4list_valid(iter->list.next, head))

#define netlbl_af4list_foreach_rcu(iter, head)				\
	for (iter = __af4list_valid_rcu((head)->next, head);		\
	     &iter->list != (head);					\
	     iter = __af4list_valid_rcu(iter->list.next, head))

#define netlbl_af4list_foreach_safe(iter, tmp, head)			\
	for (iter = __af4list_valid((head)->next, head),		\
		     tmp = __af4list_valid(iter->list.next, head);	\
	     &iter->list != (head);					\
	     iter = tmp, tmp = __af4list_valid(iter->list.next, head))

int netlbl_af4list_add(struct netlbl_af4list *entry,
		       struct list_head *head);
struct netlbl_af4list *netlbl_af4list_remove(__be32 addr, __be32 mask,
					     struct list_head *head);
void netlbl_af4list_remove_entry(struct netlbl_af4list *entry);
struct netlbl_af4list *netlbl_af4list_search(__be32 addr,
					     struct list_head *head);
struct netlbl_af4list *netlbl_af4list_search_exact(__be32 addr,
						   __be32 mask,
						   struct list_head *head);

#ifdef CONFIG_AUDIT
void netlbl_af4list_audit_addr(struct audit_buffer *audit_buf,
			       int src, const char *dev,
			       __be32 addr, __be32 mask);
#else
static inline void netlbl_af4list_audit_addr(struct audit_buffer *audit_buf,
					     int src, const char *dev,
					     __be32 addr, __be32 mask)
{
}
#endif

#if IS_ENABLED(CONFIG_IPV6)

#define __af6list_entry(ptr) container_of(ptr, struct netlbl_af6list, list)

static inline struct netlbl_af6list *__af6list_valid(struct list_head *s,
						     struct list_head *h)
{
	struct list_head *i = s;
	struct netlbl_af6list *n = __af6list_entry(s);
	while (i != h && !n->valid) {
		i = i->next;
		n = __af6list_entry(i);
	}
	return n;
}

static inline struct netlbl_af6list *__af6list_valid_rcu(struct list_head *s,
							 struct list_head *h)
{
	struct list_head *i = s;
	struct netlbl_af6list *n = __af6list_entry(s);
	while (i != h && !n->valid) {
		i = rcu_dereference(i->next);
		n = __af6list_entry(i);
	}
	return n;
}

#define netlbl_af6list_foreach(iter, head)				\
	for (iter = __af6list_valid((head)->next, head);		\
	     &iter->list != (head);					\
	     iter = __af6list_valid(iter->list.next, head))

#define netlbl_af6list_foreach_rcu(iter, head)				\
	for (iter = __af6list_valid_rcu((head)->next, head);		\
	     &iter->list != (head);					\
	     iter = __af6list_valid_rcu(iter->list.next, head))

#define netlbl_af6list_foreach_safe(iter, tmp, head)			\
	for (iter = __af6list_valid((head)->next, head),		\
		     tmp = __af6list_valid(iter->list.next, head);	\
	     &iter->list != (head);					\
	     iter = tmp, tmp = __af6list_valid(iter->list.next, head))

int netlbl_af6list_add(struct netlbl_af6list *entry,
		       struct list_head *head);
struct netlbl_af6list *netlbl_af6list_remove(const struct in6_addr *addr,
					     const struct in6_addr *mask,
					     struct list_head *head);
void netlbl_af6list_remove_entry(struct netlbl_af6list *entry);
struct netlbl_af6list *netlbl_af6list_search(const struct in6_addr *addr,
					     struct list_head *head);
struct netlbl_af6list *netlbl_af6list_search_exact(const struct in6_addr *addr,
						   const struct in6_addr *mask,
						   struct list_head *head);

#ifdef CONFIG_AUDIT
void netlbl_af6list_audit_addr(struct audit_buffer *audit_buf,
			       int src,
			       const char *dev,
			       const struct in6_addr *addr,
			       const struct in6_addr *mask);
#else
static inline void netlbl_af6list_audit_addr(struct audit_buffer *audit_buf,
					     int src,
					     const char *dev,
					     const struct in6_addr *addr,
					     const struct in6_addr *mask)
{
}
#endif
#endif /* IPV6 */

#endif
Commit	Line	Data
61e10682 PM	1	/*
	2	* NetLabel Network Address Lists
	3	*
	4	* This file contains network address list functions used to manage ordered
	5	* lists of network addresses for use by the NetLabel subsystem. The NetLabel
	6	* system manages static and dynamic label mappings for network protocols such
	7	* as CIPSO and RIPSO.
	8	*
82c21bfa	9	* Author: Paul Moore <[email protected]>
61e10682 PM	10	*
	11	*/
	12
	13	/*
	14	* (c) Copyright Hewlett-Packard Development Company, L.P., 2008
	15	*
	16	* This program is free software; you can redistribute it and/or modify
	17	* it under the terms of the GNU General Public License as published by
	18	* the Free Software Foundation; either version 2 of the License, or
	19	* (at your option) any later version.
	20	*
	21	* This program is distributed in the hope that it will be useful,
	22	* but WITHOUT ANY WARRANTY; without even the implied warranty of
	23	* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See
	24	* the GNU General Public License for more details.
	25	*
	26	* You should have received a copy of the GNU General Public License
	27	* along with this program; if not, write to the Free Software
	28	* Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
	29	*
	30	*/
	31
	32	#ifndef _NETLABEL_ADDRLIST_H
	33	#define _NETLABEL_ADDRLIST_H
	34
	35	#include <linux/types.h>
	36	#include <linux/rcupdate.h>
	37	#include <linux/list.h>
	38	#include <linux/in6.h>
63c41688	39	#include <linux/audit.h>
61e10682 PM	40
	41	/**
	42	* struct netlbl_af4list - NetLabel IPv4 address list
	43	* @addr: IPv4 address
	44	* @mask: IPv4 address mask
	45	* @valid: valid flag
	46	* @list: list structure, used internally
	47	*/
	48	struct netlbl_af4list {
	49	__be32 addr;
	50	__be32 mask;
	51
	52	u32 valid;
	53	struct list_head list;
	54	};
	55
	56	/**
	57	* struct netlbl_af6list - NetLabel IPv6 address list
	58	* @addr: IPv6 address
	59	* @mask: IPv6 address mask
	60	* @valid: valid flag
	61	* @list: list structure, used internally
	62	*/
	63	struct netlbl_af6list {
	64	struct in6_addr addr;
	65	struct in6_addr mask;
	66
	67	u32 valid;
	68	struct list_head list;
	69	};
	70
	71	#define __af4list_entry(ptr) container_of(ptr, struct netlbl_af4list, list)
	72
	73	static inline struct netlbl_af4list __af4list_valid(struct list_head s,
	74	struct list_head *h)
	75	{
	76	struct list_head *i = s;
	77	struct netlbl_af4list *n = __af4list_entry(s);
	78	while (i != h && !n->valid) {
	79	i = i->next;
	80	n = __af4list_entry(i);
	81	}
	82	return n;
	83	}
	84
	85	static inline struct netlbl_af4list __af4list_valid_rcu(struct list_head s,
	86	struct list_head *h)
	87	{
	88	struct list_head *i = s;
	89	struct netlbl_af4list *n = __af4list_entry(s);
	90	while (i != h && !n->valid) {
	91	i = rcu_dereference(i->next);
	92	n = __af4list_entry(i);
	93	}
	94	return n;
	95	}
	96
	97	#define netlbl_af4list_foreach(iter, head) \
	98	for (iter = __af4list_valid((head)->next, head); \
a1e4891f	99	&iter->list != (head); \
61e10682 PM	100	iter = __af4list_valid(iter->list.next, head))
	101
	102	#define netlbl_af4list_foreach_rcu(iter, head) \
	103	for (iter = __af4list_valid_rcu((head)->next, head); \
a1e4891f	104	&iter->list != (head); \
61e10682 PM	105	iter = __af4list_valid_rcu(iter->list.next, head))
	106
	107	#define netlbl_af4list_foreach_safe(iter, tmp, head) \
	108	for (iter = __af4list_valid((head)->next, head), \
	109	tmp = __af4list_valid(iter->list.next, head); \
	110	&iter->list != (head); \
	111	iter = tmp, tmp = __af4list_valid(iter->list.next, head))
	112
	113	int netlbl_af4list_add(struct netlbl_af4list *entry,
	114	struct list_head *head);
	115	struct netlbl_af4list *netlbl_af4list_remove(__be32 addr, __be32 mask,
	116	struct list_head *head);
	117	void netlbl_af4list_remove_entry(struct netlbl_af4list *entry);
	118	struct netlbl_af4list *netlbl_af4list_search(__be32 addr,
	119	struct list_head *head);
63c41688 PM	120	struct netlbl_af4list *netlbl_af4list_search_exact(__be32 addr,
	121	__be32 mask,
	122	struct list_head *head);
47b676c0 MK	123
47b676c0 MK	124	#ifdef CONFIG_AUDIT
63c41688 PM	125	void netlbl_af4list_audit_addr(struct audit_buffer *audit_buf,
	126	int src, const char *dev,
	127	__be32 addr, __be32 mask);
47b676c0 MK	128	#else
	129	static inline void netlbl_af4list_audit_addr(struct audit_buffer *audit_buf,
	130	int src, const char *dev,
	131	__be32 addr, __be32 mask)
	132	{
47b676c0 MK	133	}
47b676c0 MK	134	#endif
61e10682	135
dfd56b8b	136	#if IS_ENABLED(CONFIG_IPV6)
61e10682 PM	137
	138	#define __af6list_entry(ptr) container_of(ptr, struct netlbl_af6list, list)
	139
	140	static inline struct netlbl_af6list __af6list_valid(struct list_head s,
	141	struct list_head *h)
	142	{
	143	struct list_head *i = s;
	144	struct netlbl_af6list *n = __af6list_entry(s);
	145	while (i != h && !n->valid) {
	146	i = i->next;
	147	n = __af6list_entry(i);
	148	}
	149	return n;
	150	}
	151
	152	static inline struct netlbl_af6list __af6list_valid_rcu(struct list_head s,
	153	struct list_head *h)
	154	{
	155	struct list_head *i = s;
	156	struct netlbl_af6list *n = __af6list_entry(s);
	157	while (i != h && !n->valid) {
	158	i = rcu_dereference(i->next);
	159	n = __af6list_entry(i);
	160	}
	161	return n;
	162	}
	163
	164	#define netlbl_af6list_foreach(iter, head) \
	165	for (iter = __af6list_valid((head)->next, head); \
a1e4891f	166	&iter->list != (head); \
61e10682 PM	167	iter = __af6list_valid(iter->list.next, head))
	168
	169	#define netlbl_af6list_foreach_rcu(iter, head) \
	170	for (iter = __af6list_valid_rcu((head)->next, head); \
a1e4891f	171	&iter->list != (head); \
61e10682 PM	172	iter = __af6list_valid_rcu(iter->list.next, head))
	173
	174	#define netlbl_af6list_foreach_safe(iter, tmp, head) \
	175	for (iter = __af6list_valid((head)->next, head), \
	176	tmp = __af6list_valid(iter->list.next, head); \
	177	&iter->list != (head); \
	178	iter = tmp, tmp = __af6list_valid(iter->list.next, head))
	179
	180	int netlbl_af6list_add(struct netlbl_af6list *entry,
	181	struct list_head *head);
	182	struct netlbl_af6list netlbl_af6list_remove(const struct in6_addr addr,
	183	const struct in6_addr *mask,
	184	struct list_head *head);
	185	void netlbl_af6list_remove_entry(struct netlbl_af6list *entry);
	186	struct netlbl_af6list netlbl_af6list_search(const struct in6_addr addr,
	187	struct list_head *head);
63c41688 PM	188	struct netlbl_af6list netlbl_af6list_search_exact(const struct in6_addr addr,
	189	const struct in6_addr *mask,
	190	struct list_head *head);
47b676c0 MK	191
47b676c0 MK	192	#ifdef CONFIG_AUDIT
63c41688 PM	193	void netlbl_af6list_audit_addr(struct audit_buffer *audit_buf,
	194	int src,
	195	const char *dev,
	196	const struct in6_addr *addr,
	197	const struct in6_addr *mask);
47b676c0 MK	198	#else
	199	static inline void netlbl_af6list_audit_addr(struct audit_buffer *audit_buf,
	200	int src,
	201	const char *dev,
	202	const struct in6_addr *addr,
	203	const struct in6_addr *mask)
	204	{
47b676c0 MK	205	}
47b676c0 MK	206	#endif
61e10682 PM	207	#endif /* IPV6 */
	208
	209	#endif