netlabel: Add support for removing a CALIPSO DOI.
RFC PATCH v3 7/19 netlabel: Add support for removing a CALIPSO DOI.
Remove a specified DOI through the NLBL_CALIPSO_C_REMOVE command. It requires the attribute:
NLBL_CALIPSO_A_DOI.
Signed-off-by Huw Davies <[email protected]>
--- include/net/netlabel.h | 1 + net/ipv6/calipso.c | 48 +++++++++++++++++++++ net/netlabel/netlabel_calipso.c | 92 +++++++++++++++++++++++++++++++++++++++++ net/netlabel/netlabel_calipso.h | 9 ++++ 4 files changed, 150 insertions(+)
include/net/netlabel.h +1 -0
@@ -237,6 +237,7 @@ struct netlbl_calipso_ops {int (*doi_add)(struct calipso_doi *doi_def,struct netlbl_audit *audit_info);void (*doi_free)(struct calipso_doi *doi_def); +int (*doi_remove)(u32 doi,struct netlbl_audit *audit_info);struct calipso_doi *(*doi_getdef)(u32 doi);void (*doi_putdef)(struct calipso_doi *doi_def); int (*doi_walk)(u32 *skip_cnt,
net/ipv6/calipso.c +48 -0
60 lines not on this page · raw message
net/netlabel/netlabel_calipso.c +92 -0
116 lines not on this page · raw message
net/netlabel/netlabel_calipso.h +9 -0
@@ -46,6 +46,14 @@* * If using CALIPSO_MAP_PASS no additional attributes are required. * +* o REMOVE: +* Sent by an application to remove a specific DOI mapping table from the +* CALIPSO system. +* +* Required attributes: +* +* NLBL_CALIPSO_A_DOI +* * o LIST: * Sent by an application to list the details of a DOI definition. On * success the kernel should send a response using the following format.
@@ -114,6 +122,7 @@ static inline int netlbl_calipso_genl_init(void)int calipso_doi_add (struct calipso_doi *doi_def,struct netlbl_audit *audit_info);void calipso_doi_free (struct calipso_doi *doi_def); +int calipso_doi_remove (u32 doi,struct netlbl_audit *audit_info);struct calipso_doi *calipso_doi_getdef (u32 doi);void calipso_doi_putdef (struct calipso_doi *doi_def); int calipso_doi_walk(u32 *skip_cnt,
Signature · 1 line
2.7.0