apparmor.h 1.7 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768
  1. /* SPDX-License-Identifier: GPL-2.0-only */
  2. /*
  3. * AppArmor security module
  4. *
  5. * This file contains AppArmor basic global
  6. *
  7. * Copyright (C) 1998-2008 Novell/SUSE
  8. * Copyright 2009-2017 Canonical Ltd.
  9. */
  10. #ifndef __APPARMOR_H
  11. #define __APPARMOR_H
  12. #include <linux/types.h>
  13. /*
  14. * Class of mediation types in the AppArmor policy db
  15. */
  16. #define AA_CLASS_NONE 0
  17. #define AA_CLASS_UNKNOWN 1
  18. #define AA_CLASS_FILE 2
  19. #define AA_CLASS_CAP 3
  20. #define AA_CLASS_DEPRECATED 4
  21. #define AA_CLASS_RLIMITS 5
  22. #define AA_CLASS_DOMAIN 6
  23. #define AA_CLASS_MOUNT 7
  24. #define AA_CLASS_PTRACE 9
  25. #define AA_CLASS_SIGNAL 10
  26. #define AA_CLASS_XMATCH 11
  27. #define AA_CLASS_NET 14
  28. #define AA_CLASS_NETV9 15
  29. #define AA_CLASS_LABEL 16
  30. #define AA_CLASS_POSIX_MQUEUE 17
  31. #define AA_CLASS_MODULE 19
  32. #define AA_CLASS_DISPLAY_LSM 20
  33. #define AA_CLASS_NS 21
  34. #define AA_CLASS_IO_URING 22
  35. #define AA_CLASS_X 31
  36. #define AA_CLASS_DBUS 32
  37. /* NOTE: if AA_CLASS_LAST > 63 need to update label->mediates */
  38. #define AA_CLASS_LAST AA_CLASS_DBUS
  39. /* Control parameters settable through module/boot flags */
  40. extern enum audit_mode aa_g_audit;
  41. extern bool aa_g_audit_header;
  42. extern int aa_g_debug;
  43. extern bool aa_g_hash_policy;
  44. extern bool aa_g_export_binary;
  45. extern int aa_g_rawdata_compression_level;
  46. extern bool aa_g_lock_policy;
  47. extern bool aa_g_logsyscall;
  48. extern bool aa_g_paranoid_load;
  49. extern unsigned int aa_g_path_max;
  50. #ifdef CONFIG_SECURITY_APPARMOR_EXPORT_BINARY
  51. #define AA_MIN_CLEVEL zstd_min_clevel()
  52. #define AA_MAX_CLEVEL zstd_max_clevel()
  53. #define AA_DEFAULT_CLEVEL ZSTD_CLEVEL_DEFAULT
  54. #else
  55. #define AA_MIN_CLEVEL 0
  56. #define AA_MAX_CLEVEL 0
  57. #define AA_DEFAULT_CLEVEL 0
  58. #endif /* CONFIG_SECURITY_APPARMOR_EXPORT_BINARY */
  59. #endif /* __APPARMOR_H */