1/*
2 * A security identifier table (sidtab) is a hash table
3 * of security context structures indexed by SID value.
4 *
5 * Author : Stephen Smalley, <sds@epoch.ncsc.mil>
6 */
7#ifndef _SS_SIDTAB_H_
8#define _SS_SIDTAB_H_
9
10#include "context.h"
11
12struct sidtab_node {
13	u32 sid;		/* security identifier */
14	struct context context;	/* security context structure */
15	struct sidtab_node *next;
16};
17
18#define SIDTAB_HASH_BITS 7
19#define SIDTAB_HASH_BUCKETS (1 << SIDTAB_HASH_BITS)
20#define SIDTAB_HASH_MASK (SIDTAB_HASH_BUCKETS-1)
21
22#define SIDTAB_SIZE SIDTAB_HASH_BUCKETS
23
24struct sidtab {
25	struct sidtab_node **htable;
26	unsigned int nel;	/* number of elements */
27	unsigned int next_sid;	/* next SID to allocate */
28	unsigned char shutdown;
29	spinlock_t lock;
30};
31
32int sidtab_init(struct sidtab *s);
33int sidtab_insert(struct sidtab *s, u32 sid, struct context *context);
34struct context *sidtab_search(struct sidtab *s, u32 sid);
35
36int sidtab_map(struct sidtab *s,
37	       int (*apply) (u32 sid,
38			     struct context *context,
39			     void *args),
40	       void *args);
41
42void sidtab_map_remove_on_error(struct sidtab *s,
43				int (*apply) (u32 sid,
44					      struct context *context,
45					      void *args),
46				void *args);
47
48int sidtab_context_to_sid(struct sidtab *s,
49			  struct context *context,
50			  u32 *sid);
51
52void sidtab_hash_eval(struct sidtab *h, char *tag);
53void sidtab_destroy(struct sidtab *s);
54void sidtab_set(struct sidtab *dst, struct sidtab *src);
55void sidtab_shutdown(struct sidtab *s);
56
57#endif	/* _SS_SIDTAB_H_ */
58