| /* |
| * This file describes the class and permission mappings used to |
| * hide the kernel numbers from userspace by allowing userspace object |
| * managers to specify a list of classes and permissions. |
| */ |
| #ifndef _SELINUX_MAPPING_H_ |
| #define _SELINUX_MAPPING_H_ |
| |
| #include <selinux/selinux.h> |
| |
| /* |
| * Get real, kernel values from mapped values |
| */ |
| |
| extern security_class_t |
| unmap_class(security_class_t tclass); |
| |
| extern access_vector_t |
| unmap_perm(security_class_t tclass, access_vector_t tperm); |
| |
| /* |
| * Get mapped values from real, kernel values |
| */ |
| |
| extern security_class_t |
| map_class(security_class_t kclass); |
| |
| extern access_vector_t |
| map_perm(security_class_t tclass, access_vector_t kperm); |
| |
| extern void |
| map_decision(security_class_t tclass, struct av_decision *avd); |
| |
| /*mapping is not used for embedded build*/ |
| #ifdef DISABLE_AVC |
| #define unmap_perm(x,y) y |
| #define unmap_class(x) x |
| #define map_decision(x,y) |
| #endif |
| |
| #endif /* _SELINUX_MAPPING_H_ */ |
