00001
00002
00003
00004
00005
00006
00007
00008
00009
#ifndef __RSBAC_REQUEST_GROUPS_H
00010
#define __RSBAC_REQUEST_GROUPS_H
00011
00012 #define RSBAC_READ_REQUEST_VECTOR (\
00013
((rsbac_request_vector_t) 1 << R_CHDIR) | \
00014
((rsbac_request_vector_t) 1 << R_CLOSE) | \
00015
((rsbac_request_vector_t) 1 << R_GET_PERMISSIONS_DATA) | \
00016
((rsbac_request_vector_t) 1 << R_GET_STATUS_DATA) | \
00017
((rsbac_request_vector_t) 1 << R_READ) | \
00018
((rsbac_request_vector_t) 1 << R_READ_OPEN) | \
00019
((rsbac_request_vector_t) 1 << R_SEARCH) | \
00020
((rsbac_request_vector_t) 1 << R_TERMINATE) \
00021
)
00022
00023 #define RSBAC_WRITE_REQUEST_VECTOR (\
00024
((rsbac_request_vector_t) 1 << R_ALTER) | \
00025
((rsbac_request_vector_t) 1 << R_APPEND_OPEN) | \
00026
((rsbac_request_vector_t) 1 << R_CHANGE_GROUP) | \
00027
((rsbac_request_vector_t) 1 << R_CHANGE_OWNER) | \
00028
((rsbac_request_vector_t) 1 << R_CHANGE_DAC_EFF_OWNER) | \
00029
((rsbac_request_vector_t) 1 << R_CHANGE_DAC_FS_OWNER) | \
00030
((rsbac_request_vector_t) 1 << R_CLONE) | \
00031
((rsbac_request_vector_t) 1 << R_CREATE) | \
00032
((rsbac_request_vector_t) 1 << R_DELETE) | \
00033
((rsbac_request_vector_t) 1 << R_LINK_HARD) | \
00034
((rsbac_request_vector_t) 1 << R_MODIFY_ACCESS_DATA) | \
00035
((rsbac_request_vector_t) 1 << R_MODIFY_PERMISSIONS_DATA) | \
00036
((rsbac_request_vector_t) 1 << R_RENAME) | \
00037
((rsbac_request_vector_t) 1 << R_SEND_SIGNAL) | \
00038
((rsbac_request_vector_t) 1 << R_TRACE) | \
00039
((rsbac_request_vector_t) 1 << R_TRUNCATE) | \
00040
((rsbac_request_vector_t) 1 << R_WRITE) | \
00041
((rsbac_request_vector_t) 1 << R_WRITE_OPEN) \
00042
)
00043
00044 #define RSBAC_READ_WRITE_REQUEST_VECTOR (\
00045
RSBAC_READ_REQUEST_VECTOR | \
00046
((rsbac_request_vector_t) 1 << R_ALTER) | \
00047
((rsbac_request_vector_t) 1 << R_APPEND_OPEN) | \
00048
((rsbac_request_vector_t) 1 << R_CHANGE_GROUP) | \
00049
((rsbac_request_vector_t) 1 << R_CHANGE_OWNER) | \
00050
((rsbac_request_vector_t) 1 << R_CHANGE_DAC_EFF_OWNER) | \
00051
((rsbac_request_vector_t) 1 << R_CHANGE_DAC_FS_OWNER) | \
00052
((rsbac_request_vector_t) 1 << R_CLONE) | \
00053
((rsbac_request_vector_t) 1 << R_CREATE) | \
00054
((rsbac_request_vector_t) 1 << R_DELETE) | \
00055
((rsbac_request_vector_t) 1 << R_LINK_HARD) | \
00056
((rsbac_request_vector_t) 1 << R_MODIFY_ACCESS_DATA) | \
00057
((rsbac_request_vector_t) 1 << R_MODIFY_PERMISSIONS_DATA) | \
00058
((rsbac_request_vector_t) 1 << R_MODIFY_SYSTEM_DATA) | \
00059
((rsbac_request_vector_t) 1 << R_READ_WRITE_OPEN) | \
00060
((rsbac_request_vector_t) 1 << R_RENAME) | \
00061
((rsbac_request_vector_t) 1 << R_SEND_SIGNAL) | \
00062
((rsbac_request_vector_t) 1 << R_TRACE) | \
00063
((rsbac_request_vector_t) 1 << R_TRUNCATE) | \
00064
((rsbac_request_vector_t) 1 << R_WRITE) | \
00065
((rsbac_request_vector_t) 1 << R_WRITE_OPEN) | \
00066
((rsbac_request_vector_t) 1 << R_BIND) | \
00067
((rsbac_request_vector_t) 1 << R_LISTEN) | \
00068
((rsbac_request_vector_t) 1 << R_ACCEPT) | \
00069
((rsbac_request_vector_t) 1 << R_CONNECT) | \
00070
((rsbac_request_vector_t) 1 << R_SEND) | \
00071
((rsbac_request_vector_t) 1 << R_RECEIVE) | \
00072
((rsbac_request_vector_t) 1 << R_NET_SHUTDOWN) \
00073
)
00074
00075 #define RSBAC_READ_WRITE_OPEN_REQUEST_VECTOR (\
00076
((rsbac_request_vector_t) 1 << R_READ_WRITE_OPEN) \
00077
)
00078
00079 #define RSBAC_EXECUTE_REQUEST_VECTOR (\
00080
((rsbac_request_vector_t) 1 << R_EXECUTE) | \
00081
((rsbac_request_vector_t) 1 << R_MAP_EXEC) \
00082
)
00083
00084
00085 #define RSBAC_SYSTEM_REQUEST_VECTOR (\
00086
((rsbac_request_vector_t) 1 << R_ADD_TO_KERNEL) | \
00087
((rsbac_request_vector_t) 1 << R_MODIFY_SYSTEM_DATA) | \
00088
((rsbac_request_vector_t) 1 << R_MOUNT) | \
00089
((rsbac_request_vector_t) 1 << R_READ_ATTRIBUTE) | \
00090
((rsbac_request_vector_t) 1 << R_REMOVE_FROM_KERNEL) | \
00091
((rsbac_request_vector_t) 1 << R_SHUTDOWN) | \
00092
((rsbac_request_vector_t) 1 << R_UMOUNT) \
00093
)
00094
00095 #define RSBAC_SECURITY_REQUEST_VECTOR (\
00096
((rsbac_request_vector_t) 1 << R_MODIFY_ATTRIBUTE) | \
00097
((rsbac_request_vector_t) 1 << R_READ_ATTRIBUTE) | \
00098
((rsbac_request_vector_t) 1 << R_SWITCH_LOG) | \
00099
((rsbac_request_vector_t) 1 << R_SWITCH_MODULE) \
00100
)
00101
00102 #define RSBAC_FD_REQUEST_VECTOR (\
00103
((rsbac_request_vector_t) 1 << R_APPEND_OPEN) | \
00104
((rsbac_request_vector_t) 1 << R_CHANGE_OWNER) | \
00105
((rsbac_request_vector_t) 1 << R_CHDIR) | \
00106
((rsbac_request_vector_t) 1 << R_CLOSE) | \
00107
((rsbac_request_vector_t) 1 << R_CREATE) | \
00108
((rsbac_request_vector_t) 1 << R_DELETE) | \
00109
((rsbac_request_vector_t) 1 << R_EXECUTE) | \
00110
((rsbac_request_vector_t) 1 << R_GET_PERMISSIONS_DATA) | \
00111
((rsbac_request_vector_t) 1 << R_GET_STATUS_DATA) | \
00112
((rsbac_request_vector_t) 1 << R_LINK_HARD) | \
00113
((rsbac_request_vector_t) 1 << R_MODIFY_ACCESS_DATA) | \
00114
((rsbac_request_vector_t) 1 << R_MODIFY_ATTRIBUTE) | \
00115
((rsbac_request_vector_t) 1 << R_MODIFY_PERMISSIONS_DATA) | \
00116
((rsbac_request_vector_t) 1 << R_MOUNT) | \
00117
((rsbac_request_vector_t) 1 << R_READ) | \
00118
((rsbac_request_vector_t) 1 << R_READ_ATTRIBUTE) | \
00119
((rsbac_request_vector_t) 1 << R_READ_OPEN) | \
00120
((rsbac_request_vector_t) 1 << R_READ_WRITE_OPEN) | \
00121
((rsbac_request_vector_t) 1 << R_RENAME) | \
00122
((rsbac_request_vector_t) 1 << R_SEARCH) | \
00123
((rsbac_request_vector_t) 1 << R_TRUNCATE) | \
00124
((rsbac_request_vector_t) 1 << R_UMOUNT) | \
00125
((rsbac_request_vector_t) 1 << R_WRITE) | \
00126
((rsbac_request_vector_t) 1 << R_WRITE_OPEN) | \
00127
((rsbac_request_vector_t) 1 << R_MAP_EXEC) \
00128
)
00129
00130 #define RSBAC_DEV_REQUEST_VECTOR (\
00131
((rsbac_request_vector_t) 1 << R_APPEND_OPEN) | \
00132
((rsbac_request_vector_t) 1 << R_CLOSE) | \
00133
((rsbac_request_vector_t) 1 << R_GET_STATUS_DATA) | \
00134
((rsbac_request_vector_t) 1 << R_MODIFY_ATTRIBUTE) | \
00135
((rsbac_request_vector_t) 1 << R_MOUNT) | \
00136
((rsbac_request_vector_t) 1 << R_READ) | \
00137
((rsbac_request_vector_t) 1 << R_READ_ATTRIBUTE) | \
00138
((rsbac_request_vector_t) 1 << R_READ_OPEN) | \
00139
((rsbac_request_vector_t) 1 << R_READ_WRITE_OPEN) | \
00140
((rsbac_request_vector_t) 1 << R_UMOUNT) | \
00141
((rsbac_request_vector_t) 1 << R_WRITE) | \
00142
((rsbac_request_vector_t) 1 << R_WRITE_OPEN) \
00143
)
00144
00145 #define RSBAC_IPC_REQUEST_VECTOR (\
00146
((rsbac_request_vector_t) 1 << R_ALTER) | \
00147
((rsbac_request_vector_t) 1 << R_APPEND_OPEN) | \
00148
((rsbac_request_vector_t) 1 << R_CHANGE_GROUP) | \
00149
((rsbac_request_vector_t) 1 << R_CHANGE_OWNER) | \
00150
((rsbac_request_vector_t) 1 << R_CLOSE) | \
00151
((rsbac_request_vector_t) 1 << R_CREATE) | \
00152
((rsbac_request_vector_t) 1 << R_DELETE) | \
00153
((rsbac_request_vector_t) 1 << R_GET_PERMISSIONS_DATA) | \
00154
((rsbac_request_vector_t) 1 << R_GET_STATUS_DATA) | \
00155
((rsbac_request_vector_t) 1 << R_MODIFY_ATTRIBUTE) | \
00156
((rsbac_request_vector_t) 1 << R_MODIFY_PERMISSIONS_DATA) | \
00157
((rsbac_request_vector_t) 1 << R_READ) | \
00158
((rsbac_request_vector_t) 1 << R_READ_ATTRIBUTE) | \
00159
((rsbac_request_vector_t) 1 << R_READ_OPEN) | \
00160
((rsbac_request_vector_t) 1 << R_READ_WRITE_OPEN) | \
00161
((rsbac_request_vector_t) 1 << R_WRITE) | \
00162
((rsbac_request_vector_t) 1 << R_WRITE_OPEN) \
00163
)
00164
00165 #define RSBAC_SCD_REQUEST_VECTOR (\
00166
((rsbac_request_vector_t) 1 << R_GET_PERMISSIONS_DATA) | \
00167
((rsbac_request_vector_t) 1 << R_GET_STATUS_DATA) | \
00168
((rsbac_request_vector_t) 1 << R_MODIFY_ATTRIBUTE) | \
00169
((rsbac_request_vector_t) 1 << R_MODIFY_PERMISSIONS_DATA) | \
00170
((rsbac_request_vector_t) 1 << R_MODIFY_SYSTEM_DATA) | \
00171
((rsbac_request_vector_t) 1 << R_READ_ATTRIBUTE) | \
00172
((rsbac_request_vector_t) 1 << R_WRITE) \
00173
)
00174
00175 #define RSBAC_USER_REQUEST_VECTOR (\
00176
((rsbac_request_vector_t) 1 << R_MODIFY_ATTRIBUTE) | \
00177
((rsbac_request_vector_t) 1 << R_READ_ATTRIBUTE) \
00178
)
00179
00180 #define RSBAC_PROCESS_REQUEST_VECTOR (\
00181
((rsbac_request_vector_t) 1 << R_CHANGE_GROUP) | \
00182
((rsbac_request_vector_t) 1 << R_CHANGE_OWNER) | \
00183
((rsbac_request_vector_t) 1 << R_CHANGE_DAC_EFF_OWNER) | \
00184
((rsbac_request_vector_t) 1 << R_CHANGE_DAC_FS_OWNER) | \
00185
((rsbac_request_vector_t) 1 << R_CLONE) | \
00186
((rsbac_request_vector_t) 1 << R_CREATE) | \
00187
((rsbac_request_vector_t) 1 << R_GET_STATUS_DATA) | \
00188
((rsbac_request_vector_t) 1 << R_MODIFY_ATTRIBUTE) | \
00189
((rsbac_request_vector_t) 1 << R_MODIFY_SYSTEM_DATA) | \
00190
((rsbac_request_vector_t) 1 << R_READ_ATTRIBUTE) | \
00191
((rsbac_request_vector_t) 1 << R_SEND_SIGNAL) | \
00192
((rsbac_request_vector_t) 1 << R_TERMINATE) | \
00193
((rsbac_request_vector_t) 1 << R_TRACE) \
00194
)
00195
00196 #define RSBAC_NETDEV_REQUEST_VECTOR (\
00197
((rsbac_request_vector_t) 1 << R_GET_STATUS_DATA) | \
00198
((rsbac_request_vector_t) 1 << R_MODIFY_ATTRIBUTE) | \
00199
((rsbac_request_vector_t) 1 << R_MODIFY_SYSTEM_DATA) | \
00200
((rsbac_request_vector_t) 1 << R_READ_ATTRIBUTE) | \
00201
((rsbac_request_vector_t) 1 << R_BIND) \
00202
)
00203
00204 #define RSBAC_NETTEMP_REQUEST_VECTOR (\
00205
((rsbac_request_vector_t) 1 << R_CREATE) | \
00206
((rsbac_request_vector_t) 1 << R_DELETE) | \
00207
((rsbac_request_vector_t) 1 << R_MODIFY_ATTRIBUTE) | \
00208
((rsbac_request_vector_t) 1 << R_READ) | \
00209
((rsbac_request_vector_t) 1 << R_READ_ATTRIBUTE) | \
00210
((rsbac_request_vector_t) 1 << R_WRITE) \
00211
)
00212
00213 #define RSBAC_NETOBJ_REQUEST_VECTOR (\
00214
((rsbac_request_vector_t) 1 << R_CLOSE) | \
00215
((rsbac_request_vector_t) 1 << R_CREATE) | \
00216
((rsbac_request_vector_t) 1 << R_MODIFY_ATTRIBUTE) | \
00217
((rsbac_request_vector_t) 1 << R_READ) | \
00218
((rsbac_request_vector_t) 1 << R_READ_ATTRIBUTE) | \
00219
((rsbac_request_vector_t) 1 << R_NET_SHUTDOWN) | \
00220
((rsbac_request_vector_t) 1 << R_WRITE) | \
00221
((rsbac_request_vector_t) 1 << R_BIND) | \
00222
((rsbac_request_vector_t) 1 << R_LISTEN) | \
00223
((rsbac_request_vector_t) 1 << R_ACCEPT) | \
00224
((rsbac_request_vector_t) 1 << R_CONNECT) | \
00225
((rsbac_request_vector_t) 1 << R_SEND) | \
00226
((rsbac_request_vector_t) 1 << R_RECEIVE) \
00227
)
00228
00229 #define RSBAC_NONE_REQUEST_VECTOR (\
00230
((rsbac_request_vector_t) 1 << R_ADD_TO_KERNEL) | \
00231
((rsbac_request_vector_t) 1 << R_MODIFY_ATTRIBUTE) | \
00232
((rsbac_request_vector_t) 1 << R_MODIFY_PERMISSIONS_DATA) | \
00233
((rsbac_request_vector_t) 1 << R_READ_ATTRIBUTE) | \
00234
((rsbac_request_vector_t) 1 << R_REMOVE_FROM_KERNEL) | \
00235
((rsbac_request_vector_t) 1 << R_SHUTDOWN) | \
00236
((rsbac_request_vector_t) 1 << R_SWITCH_LOG) | \
00237
((rsbac_request_vector_t) 1 << R_SWITCH_MODULE) | \
00238
((rsbac_request_vector_t) 1 << R_MAP_EXEC) \
00239
)
00240
00241 #define RSBAC_ALL_REQUEST_VECTOR (\
00242
((rsbac_request_vector_t) 1 << R_ADD_TO_KERNEL) | \
00243
((rsbac_request_vector_t) 1 << R_ALTER) | \
00244
((rsbac_request_vector_t) 1 << R_APPEND_OPEN) | \
00245
((rsbac_request_vector_t) 1 << R_CHANGE_GROUP) | \
00246
((rsbac_request_vector_t) 1 << R_CHANGE_OWNER) | \
00247
((rsbac_request_vector_t) 1 << R_CHANGE_DAC_EFF_OWNER) | \
00248
((rsbac_request_vector_t) 1 << R_CHANGE_DAC_FS_OWNER) | \
00249
((rsbac_request_vector_t) 1 << R_CHDIR) | \
00250
((rsbac_request_vector_t) 1 << R_CLONE) | \
00251
((rsbac_request_vector_t) 1 << R_CLOSE) | \
00252
((rsbac_request_vector_t) 1 << R_CREATE) | \
00253
((rsbac_request_vector_t) 1 << R_DELETE) | \
00254
((rsbac_request_vector_t) 1 << R_EXECUTE) | \
00255
((rsbac_request_vector_t) 1 << R_GET_PERMISSIONS_DATA) | \
00256
((rsbac_request_vector_t) 1 << R_GET_STATUS_DATA) | \
00257
((rsbac_request_vector_t) 1 << R_LINK_HARD) | \
00258
((rsbac_request_vector_t) 1 << R_MODIFY_ACCESS_DATA) | \
00259
((rsbac_request_vector_t) 1 << R_MODIFY_ATTRIBUTE) | \
00260
((rsbac_request_vector_t) 1 << R_MODIFY_PERMISSIONS_DATA) | \
00261
((rsbac_request_vector_t) 1 << R_MODIFY_SYSTEM_DATA) | \
00262
((rsbac_request_vector_t) 1 << R_MOUNT) | \
00263
((rsbac_request_vector_t) 1 << R_READ) | \
00264
((rsbac_request_vector_t) 1 << R_READ_ATTRIBUTE) | \
00265
((rsbac_request_vector_t) 1 << R_READ_OPEN) | \
00266
((rsbac_request_vector_t) 1 << R_READ_WRITE_OPEN) | \
00267
((rsbac_request_vector_t) 1 << R_REMOVE_FROM_KERNEL) | \
00268
((rsbac_request_vector_t) 1 << R_RENAME) | \
00269
((rsbac_request_vector_t) 1 << R_SEARCH) | \
00270
((rsbac_request_vector_t) 1 << R_SEND_SIGNAL) | \
00271
((rsbac_request_vector_t) 1 << R_SHUTDOWN) | \
00272
((rsbac_request_vector_t) 1 << R_SWITCH_LOG) | \
00273
((rsbac_request_vector_t) 1 << R_SWITCH_MODULE) | \
00274
((rsbac_request_vector_t) 1 << R_TERMINATE) | \
00275
((rsbac_request_vector_t) 1 << R_TRACE) | \
00276
((rsbac_request_vector_t) 1 << R_TRUNCATE) | \
00277
((rsbac_request_vector_t) 1 << R_UMOUNT) | \
00278
((rsbac_request_vector_t) 1 << R_WRITE) | \
00279
((rsbac_request_vector_t) 1 << R_WRITE_OPEN) | \
00280
((rsbac_request_vector_t) 1 << R_MAP_EXEC) | \
00281
((rsbac_request_vector_t) 1 << R_BIND) | \
00282
((rsbac_request_vector_t) 1 << R_LISTEN) | \
00283
((rsbac_request_vector_t) 1 << R_ACCEPT) | \
00284
((rsbac_request_vector_t) 1 << R_CONNECT) | \
00285
((rsbac_request_vector_t) 1 << R_SEND) | \
00286
((rsbac_request_vector_t) 1 << R_RECEIVE) | \
00287
((rsbac_request_vector_t) 1 << R_NET_SHUTDOWN) \
00288
)
00289
00290
00291
00292
00293
00294 #define RSBAC_NWR_REQUEST_VECTOR (\
00295
((rsbac_request_vector_t) 1 << R_CLOSE) | \
00296
((rsbac_request_vector_t) 1 << R_EXECUTE) | \
00297
((rsbac_request_vector_t) 1 << R_READ_OPEN) \
00298
)
00299
00300 #define RSBAC_NWW_REQUEST_VECTOR (\
00301
((rsbac_request_vector_t) 1 << R_ALTER) | \
00302
((rsbac_request_vector_t) 1 << R_APPEND_OPEN) | \
00303
((rsbac_request_vector_t) 1 << R_CHANGE_GROUP) | \
00304
((rsbac_request_vector_t) 1 << R_CHANGE_OWNER) | \
00305
((rsbac_request_vector_t) 1 << R_CLOSE) | \
00306
((rsbac_request_vector_t) 1 << R_TRUNCATE) | \
00307
((rsbac_request_vector_t) 1 << R_WRITE) | \
00308
((rsbac_request_vector_t) 1 << R_WRITE_OPEN) \
00309
)
00310
00311 #define RSBAC_NWC_REQUEST_VECTOR (\
00312
((rsbac_request_vector_t) 1 << R_CLOSE) | \
00313
((rsbac_request_vector_t) 1 << R_CREATE) \
00314
)
00315
00316 #define RSBAC_NWE_REQUEST_VECTOR (\
00317
((rsbac_request_vector_t) 1 << R_DELETE) \
00318
)
00319
00320
00321
00322 #define RSBAC_NWF_REQUEST_VECTOR (\
00323
((rsbac_request_vector_t) 1 << R_CHDIR) | \
00324
((rsbac_request_vector_t) 1 << R_CLOSE) | \
00325
((rsbac_request_vector_t) 1 << R_GET_PERMISSIONS_DATA) | \
00326
((rsbac_request_vector_t) 1 << R_GET_STATUS_DATA) | \
00327
((rsbac_request_vector_t) 1 << R_READ) | \
00328
((rsbac_request_vector_t) 1 << R_SEARCH) \
00329
)
00330
00331 #define RSBAC_NWM_REQUEST_VECTOR (\
00332
((rsbac_request_vector_t) 1 << R_CHANGE_GROUP) | \
00333
((rsbac_request_vector_t) 1 << R_CHANGE_OWNER) | \
00334
((rsbac_request_vector_t) 1 << R_LINK_HARD) | \
00335
((rsbac_request_vector_t) 1 << R_MODIFY_ACCESS_DATA) | \
00336
((rsbac_request_vector_t) 1 << R_MODIFY_PERMISSIONS_DATA) | \
00337
((rsbac_request_vector_t) 1 << R_RENAME) \
00338
)
00339
00340
#endif