security/tomoyo/network.c

45  * @param: Pointer to "struct tomoyo_acl_param".
50 bool tomoyo_parse_ipaddr_union(struct tomoyo_acl_param *param,
55 	char *address = tomoyo_read_token(param);
276  * @param: Pointer to "struct tomoyo_acl_param".
282 int tomoyo_write_inet_network(struct tomoyo_acl_param *param)
287 	const char *protocol = tomoyo_read_token(param);
288 	const char *operation = tomoyo_read_token(param);
298 	if (param->data[0] == '@') {
299 		param->data++;
301 			tomoyo_get_group(param, TOMOYO_ADDRESS_GROUP);
305 		if (!tomoyo_parse_ipaddr_union(param, &e.address))
308 	if (!tomoyo_parse_number_union(param, &e.port) ||
311 	error = tomoyo_update_domain(&e.head, sizeof(e), param,
323  * @param: Pointer to "struct tomoyo_acl_param".
327 int tomoyo_write_unix_network(struct tomoyo_acl_param *param)
332 	const char *protocol = tomoyo_read_token(param);
333 	const char *operation = tomoyo_read_token(param);
343 	if (!tomoyo_parse_name_union(param, &e.name))
345 	error = tomoyo_update_domain(&e.head, sizeof(e), param,
383 	const __be32 *address = r->param.inet_network.address;
385 	if (r->param.inet_network.is_ipv6)
392 		 r->param.inet_network.port);
393 	return tomoyo_audit_net_log(r, "inet", r->param.inet_network.protocol,
394 				    r->param.inet_network.operation, buf);
406 	return tomoyo_audit_net_log(r, "unix", r->param.unix_network.protocol,
407 				    r->param.unix_network.operation,
408 				    r->param.unix_network.address->name);
424 	const u8 size = r->param.inet_network.is_ipv6 ? 16 : 4;
426 	if (!(acl->perm & (1 << r->param.inet_network.operation)) ||
427 	    !tomoyo_compare_number_union(r->param.inet_network.port,
432 			(r->param.inet_network.is_ipv6,
433 			 r->param.inet_network.address, acl->address.group);
434 	return acl->address.is_ipv6 == r->param.inet_network.is_ipv6 &&
436 		       r->param.inet_network.address, size) <= 0 &&
437 		memcmp(r->param.inet_network.address,
455 	return (acl->perm & (1 << r->param.unix_network.operation)) &&
456 		tomoyo_compare_name_union(r->param.unix_network.address,
477 		r.param.inet_network.protocol = address->protocol;
478 		r.param.inet_network.operation = address->operation;
479 		r.param.inet_network.is_ipv6 = address->inet.is_ipv6;
480 		r.param.inet_network.address = address->inet.address;
481 		r.param.inet_network.port = ntohs(address->inet.port);
569 			r.param.unix_network.protocol = address->protocol;
570 			r.param.unix_network.operation = address->operation;
571 			r.param.unix_network.address = &addr;