1d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore/* 2d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore * NetLabel NETLINK Interface 3d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore * 4d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore * This file defines the NETLINK interface for the NetLabel system. The 5d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore * NetLabel system manages static and dynamic label mappings for network 6d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore * protocols such as CIPSO and RIPSO. 7d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore * 882c21bfab41a77bc01affe21bea9727d776774a7Paul Moore * Author: Paul Moore <paul@paul-moore.com> 9d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore * 10d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore */ 11d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore 12d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore/* 13d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore * (c) Copyright Hewlett-Packard Development Company, L.P., 2006 14d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore * 15d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore * This program is free software; you can redistribute it and/or modify 16d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore * it under the terms of the GNU General Public License as published by 17d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore * the Free Software Foundation; either version 2 of the License, or 18d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore * (at your option) any later version. 19d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore * 20d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore * This program is distributed in the hope that it will be useful, 21d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore * but WITHOUT ANY WARRANTY; without even the implied warranty of 22d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See 23d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore * the GNU General Public License for more details. 24d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore * 25d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore * You should have received a copy of the GNU General Public License 26d484ff154c7a9623ecfe4a5ceb91c981fa227476Jeff Kirsher * along with this program; if not, see <http://www.gnu.org/licenses/>. 27d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore * 28d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore */ 29d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore 30d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore#include <linux/init.h> 31d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore#include <linux/types.h> 32d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore#include <linux/list.h> 33d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore#include <linux/socket.h> 3432f50cdee666333168b5203c7864bede159f789ePaul Moore#include <linux/audit.h> 3532f50cdee666333168b5203c7864bede159f789ePaul Moore#include <linux/tty.h> 3632f50cdee666333168b5203c7864bede159f789ePaul Moore#include <linux/security.h> 375a0e3ad6af8660be21ca98a971cd00f331318c05Tejun Heo#include <linux/gfp.h> 38d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore#include <net/sock.h> 39d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore#include <net/netlink.h> 40d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore#include <net/genetlink.h> 41d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore#include <net/netlabel.h> 42d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore#include <asm/bug.h> 43d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore 44d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore#include "netlabel_mgmt.h" 45d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore#include "netlabel_unlabeled.h" 46d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore#include "netlabel_cipso_v4.h" 47d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore#include "netlabel_user.h" 48d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore 49d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore/* 50d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore * NetLabel NETLINK Setup Functions 51d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore */ 52d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore 53d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore/** 54d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore * netlbl_netlink_init - Initialize the NETLINK communication channel 55d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore * 56d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore * Description: 57d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore * Call out to the NetLabel components so they can register their families and 58d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore * commands with the Generic NETLINK mechanism. Returns zero on success and 59d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore * non-zero on failure. 60d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore * 61d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore */ 6205705e4e1158ad2c1a22817f27d91ff0758fd0a9Pavel Emelyanovint __init netlbl_netlink_init(void) 63d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore{ 64d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore int ret_val; 65d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore 66d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore ret_val = netlbl_mgmt_genl_init(); 67d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore if (ret_val != 0) 68d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore return ret_val; 69d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore 70d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore ret_val = netlbl_cipsov4_genl_init(); 71d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore if (ret_val != 0) 72d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore return ret_val; 73d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore 7416b99a4f6644d58c94acb4b4253e84049de588c5Fabian Frederick return netlbl_unlabel_genl_init(); 75d15c345fe3b8dfda0fa5a1d2143a35fffa746a43Paul Moore} 7632f50cdee666333168b5203c7864bede159f789ePaul Moore 7732f50cdee666333168b5203c7864bede159f789ePaul Moore/* 7832f50cdee666333168b5203c7864bede159f789ePaul Moore * NetLabel Audit Functions 7932f50cdee666333168b5203c7864bede159f789ePaul Moore */ 8032f50cdee666333168b5203c7864bede159f789ePaul Moore 8132f50cdee666333168b5203c7864bede159f789ePaul Moore/** 8232f50cdee666333168b5203c7864bede159f789ePaul Moore * netlbl_audit_start_common - Start an audit message 8332f50cdee666333168b5203c7864bede159f789ePaul Moore * @type: audit message type 8495d4e6be25a68cd9fbe8c0d356b585504d8db1c7Paul Moore * @audit_info: NetLabel audit information 8532f50cdee666333168b5203c7864bede159f789ePaul Moore * 8632f50cdee666333168b5203c7864bede159f789ePaul Moore * Description: 8732f50cdee666333168b5203c7864bede159f789ePaul Moore * Start an audit message using the type specified in @type and fill the audit 8832f50cdee666333168b5203c7864bede159f789ePaul Moore * message with some fields common to all NetLabel audit messages. Returns 8932f50cdee666333168b5203c7864bede159f789ePaul Moore * a pointer to the audit buffer on success, NULL on failure. 9032f50cdee666333168b5203c7864bede159f789ePaul Moore * 9132f50cdee666333168b5203c7864bede159f789ePaul Moore */ 9295d4e6be25a68cd9fbe8c0d356b585504d8db1c7Paul Moorestruct audit_buffer *netlbl_audit_start_common(int type, 9395d4e6be25a68cd9fbe8c0d356b585504d8db1c7Paul Moore struct netlbl_audit *audit_info) 9432f50cdee666333168b5203c7864bede159f789ePaul Moore{ 9532f50cdee666333168b5203c7864bede159f789ePaul Moore struct audit_buffer *audit_buf; 9632f50cdee666333168b5203c7864bede159f789ePaul Moore char *secctx; 9732f50cdee666333168b5203c7864bede159f789ePaul Moore u32 secctx_len; 9832f50cdee666333168b5203c7864bede159f789ePaul Moore 99de64688ffb952a65ddbc5295ccd235d35f292593Paul Moore if (audit_enabled == 0) 100de64688ffb952a65ddbc5295ccd235d35f292593Paul Moore return NULL; 101de64688ffb952a65ddbc5295ccd235d35f292593Paul Moore 10294de7feb2dee6d0039ecbe98ae8b63bbb63808b6Pavel Emelyanov audit_buf = audit_log_start(current->audit_context, GFP_ATOMIC, type); 10332f50cdee666333168b5203c7864bede159f789ePaul Moore if (audit_buf == NULL) 10432f50cdee666333168b5203c7864bede159f789ePaul Moore return NULL; 10532f50cdee666333168b5203c7864bede159f789ePaul Moore 1062532386f480eefbdd67b48be55fb4fb3e5a6081cEric Paris audit_log_format(audit_buf, "netlabel: auid=%u ses=%u", 107e1760bd5ffae8cb98cffb030ee8e631eba28f3d8Eric W. Biederman from_kuid(&init_user_ns, audit_info->loginuid), 1082532386f480eefbdd67b48be55fb4fb3e5a6081cEric Paris audit_info->sessionid); 10932f50cdee666333168b5203c7864bede159f789ePaul Moore 11095d4e6be25a68cd9fbe8c0d356b585504d8db1c7Paul Moore if (audit_info->secid != 0 && 11195d4e6be25a68cd9fbe8c0d356b585504d8db1c7Paul Moore security_secid_to_secctx(audit_info->secid, 11295d4e6be25a68cd9fbe8c0d356b585504d8db1c7Paul Moore &secctx, 113e6e0871cce2ae04f5790543ad2f4ec36b23260baPaul Moore &secctx_len) == 0) { 11432f50cdee666333168b5203c7864bede159f789ePaul Moore audit_log_format(audit_buf, " subj=%s", secctx); 115e6e0871cce2ae04f5790543ad2f4ec36b23260baPaul Moore security_release_secctx(secctx, secctx_len); 116e6e0871cce2ae04f5790543ad2f4ec36b23260baPaul Moore } 11732f50cdee666333168b5203c7864bede159f789ePaul Moore 11832f50cdee666333168b5203c7864bede159f789ePaul Moore return audit_buf; 11932f50cdee666333168b5203c7864bede159f789ePaul Moore} 120