Xen XSM FLASK

Load Xen security policy, manage FLASK enforcing mode, convert context to SID, manage ocontexts and other FLASK-related tasks. More...

Files
file	flask.h
	Xen XSM FLASK operations.

Functions
int	flask_context_to_sid (char *buf, uint32_t size, uint32_t *sid)
	convert context string to numerical SID
int	flask_getenforce (void)
	get current FLASK enforcing mode

Detailed Description

Load Xen security policy, manage FLASK enforcing mode, convert context to SID, manage ocontexts and other FLASK-related tasks.

Function Documentation

flask_context_to_sid()

int flask_context_to_sid	(	char *	buf,
		uint32_t	size,
		uint32_t *	sid )

#include <flask.h>

convert context string to numerical SID

This function issues the FLASK_CONTEXT_TO_SID hypercall to obtain Security ID that corresponds to given security context in loaded policy.

Attention

Available only when the following Kconfig option is enabled:

CONFIG_XEN_FLASK 

.

Parameters

buf	context string
size	length of context string
sid	output pointer to receive corresponding SID.

Return values

0	On success
-errno	Negative errno code on failure.

flask_getenforce()

int flask_getenforce

(

void

)

#include <flask.h>

get current FLASK enforcing mode

This function issues the FLASK_GETENFORCE hypercall to obtain current enforcing mode.

Attention

Available only when the following Kconfig option is enabled:

CONFIG_XEN_FLASK 

.

Return values

0	Permissive Mode
1	Enforcing Mode
-errno	Negative errno code on failure.