1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
|
/*
* CDDL HEADER START
*
* The contents of this file are subject to the terms of the
* Common Development and Distribution License (the "License").
* You may not use this file except in compliance with the License.
*
* You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
* or http://www.opensolaris.org/os/licensing.
* See the License for the specific language governing permissions
* and limitations under the License.
*
* When distributing Covered Code, include this CDDL HEADER in each
* file and include the License file at usr/src/OPENSOLARIS.LICENSE.
* If applicable, add the following below this CDDL HEADER, with the
* fields enclosed by brackets "[]" replaced with your own identifying
* information: Portions Copyright [yyyy] [name of copyright owner]
*
* CDDL HEADER END
*/
/*
* Copyright 2006 Sun Microsystems, Inc. All rights reserved.
* Use is subject to license terms.
*/
#ifndef _SYS_TSOL_PRIV_H
#define _SYS_TSOL_PRIV_H
#include <sys/priv.h>
#ifdef __cplusplus
extern "C" {
#endif
typedef enum priv_ftype {
PRIV_ALLOWED,
PRIV_FORCED
} priv_ftype_t;
/*
* Privilege macros.
*/
/*
* PRIV_ASSERT(a, b) setst.privilege "b" in privilege set "a".
*/
#define PRIV_ASSERT(a, b) (priv_addset(a, b))
/*
* PRIV_CLEAR(a,b) clearst.privilege "b" in privilege set "a".
*/
#define PRIV_CLEAR(a, b) (priv_delset(a, b))
/*
* PRIV_EQUAL(set_a, set_b) is true if set_a and set_b are identical.
*/
#define PRIV_EQUAL(a, b) (priv_isequalset(a, b))
#define PRIV_EMPTY(a) (priv_emptyset(a))
#define PRIV_FILL(a) (priv_fillset(a))
/*
* PRIV_ISASSERT tests if privilege 'b' is asserted in privilege set 'a'.
*/
#define PRIV_ISASSERT(a, b) (priv_ismember(a, b))
#define PRIV_ISEMPTY(a) (priv_isemptyset(a))
#define PRIV_ISFULL(a) (priv_isfullset(a))
/*
* This macro returns 1 if all privileges asserted in privilege set "a"
* are also asserted in privilege set "b" (i.e. if a is a subset of b)
*/
#define PRIV_ISSUBSET(a, b) (priv_issubset(a, b))
/*
* Takes intersection of "a" and "b" and stores in "b".
*/
#define PRIV_INTERSECT(a, b) (priv_intersect(a, b))
/*
* Replaces "a" with inverse of "a".
*/
#define PRIV_INVERSE(a) (priv_inverse(a))
/*
* Takes union of "a" and "b" and stores in "b".
*/
#define PRIV_UNION(a, b) (priv_union(a, b))
#define PRIV_FILE_UPGRADE_SL ((const char *)"file_upgrade_sl")
#define PRIV_FILE_DOWNGRADE_SL ((const char *)"file_downgrade_sl")
#
#define PRIV_PROC_AUDIT_TCB ((const char *)"proc_audit")
#define PRIV_PROC_AUDIT_APPL ((const char *)"proc_audit")
#
#define PRIV_SYS_TRANS_LABEL ((const char *)"sys_trans_label")
#define PRIV_WIN_COLORMAP ((const char *)"win_colormap")
#define PRIV_WIN_CONFIG ((const char *)"win_config")
#define PRIV_WIN_DAC_READ ((const char *)"win_dac_read")
#define PRIV_WIN_DAC_WRITE ((const char *)"win_dac_write")
#define PRIV_WIN_DGA ((const char *)"win_dga")
#define PRIV_WIN_DEVICES ((const char *)"win_devices")
#define PRIV_WIN_DOWNGRADE_SL ((const char *)"win_downgrade_sl")
#define PRIV_WIN_FONTPATH ((const char *)"win_fontpath")
#define PRIV_WIN_MAC_READ ((const char *)"win_mac_read")
#define PRIV_WIN_MAC_WRITE ((const char *)"win_mac_write")
#define PRIV_WIN_SELECTION ((const char *)"win_selection")
#define PRIV_WIN_UPGRADE_SL ((const char *)"win_upgrade_sl")
#ifdef __cplusplus
}
#endif
#endif /* _SYS_TSOL_PRIV_H */
|