mirror of
git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
synced 2025-09-04 20:19:47 +08:00
8af43b61c1
Add support for wildcard matching of network interface names. This is useful for auto-generated interfaces, for example podman creates network interfaces for containers with the naming scheme podman0, podman1, podman2, ... To maintain backward compatibility guard this feature with a new policy capability 'netif_wildcard'. Netifcon definitions are compared against in the order given by the policy, so userspace tools should sort them in a reasonable order. Signed-off-by: Christian Göttsche <cgzones@googlemail.com> Signed-off-by: Paul Moore <paul@paul-moore.com>
26 lines
658 B
C
26 lines
658 B
C
/* SPDX-License-Identifier: GPL-2.0 */
|
|
|
|
#ifndef _SELINUX_POLICYCAP_H_
|
|
#define _SELINUX_POLICYCAP_H_
|
|
|
|
/* Policy capabilities */
|
|
enum {
|
|
POLICYDB_CAP_NETPEER,
|
|
POLICYDB_CAP_OPENPERM,
|
|
POLICYDB_CAP_EXTSOCKCLASS,
|
|
POLICYDB_CAP_ALWAYSNETWORK,
|
|
POLICYDB_CAP_CGROUPSECLABEL,
|
|
POLICYDB_CAP_NNP_NOSUID_TRANSITION,
|
|
POLICYDB_CAP_GENFS_SECLABEL_SYMLINKS,
|
|
POLICYDB_CAP_IOCTL_SKIP_CLOEXEC,
|
|
POLICYDB_CAP_USERSPACE_INITIAL_CONTEXT,
|
|
POLICYDB_CAP_NETLINK_XPERM,
|
|
POLICYDB_CAP_NETIF_WILDCARD,
|
|
__POLICYDB_CAP_MAX
|
|
};
|
|
#define POLICYDB_CAP_MAX (__POLICYDB_CAP_MAX - 1)
|
|
|
|
extern const char *const selinux_policycap_names[__POLICYDB_CAP_MAX];
|
|
|
|
#endif /* _SELINUX_POLICYCAP_H_ */
|