Orange Pi5 kernel

^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300   1) /* SPDX-License-Identifier: GPL-2.0 */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300   2) #include <linux/capability.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300   3) #include <linux/socket.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300   4) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300   5) #define COMMON_FILE_SOCK_PERMS "ioctl", "read", "write", "create", \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300   6)     "getattr", "setattr", "lock", "relabelfrom", "relabelto", "append", "map"
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300   7) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300   8) #define COMMON_FILE_PERMS COMMON_FILE_SOCK_PERMS, "unlink", "link", \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300   9)     "rename", "execute", "quotaon", "mounton", "audit_access", \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  10) 	"open", "execmod", "watch", "watch_mount", "watch_sb", \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  11) 	"watch_with_perm", "watch_reads"
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  12) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  13) #define COMMON_SOCK_PERMS COMMON_FILE_SOCK_PERMS, "bind", "connect", \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  14)     "listen", "accept", "getopt", "setopt", "shutdown", "recvfrom",  \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  15)     "sendto", "name_bind"
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  16) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  17) #define COMMON_IPC_PERMS "create", "destroy", "getattr", "setattr", "read", \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  18) 	    "write", "associate", "unix_read", "unix_write"
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  19) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  20) #define COMMON_CAP_PERMS  "chown", "dac_override", "dac_read_search", \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  21) 	    "fowner", "fsetid", "kill", "setgid", "setuid", "setpcap", \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  22) 	    "linux_immutable", "net_bind_service", "net_broadcast", \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  23) 	    "net_admin", "net_raw", "ipc_lock", "ipc_owner", "sys_module", \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  24) 	    "sys_rawio", "sys_chroot", "sys_ptrace", "sys_pacct", "sys_admin", \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  25) 	    "sys_boot", "sys_nice", "sys_resource", "sys_time", \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  26) 	    "sys_tty_config", "mknod", "lease", "audit_write", \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  27) 	    "audit_control", "setfcap"
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  28) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  29) #define COMMON_CAP2_PERMS  "mac_override", "mac_admin", "syslog", \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  30) 		"wake_alarm", "block_suspend", "audit_read", "perfmon", "bpf", \
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  31) 		"checkpoint_restore"
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  32) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  33) #if CAP_LAST_CAP > CAP_CHECKPOINT_RESTORE
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  34) #error New capability defined, please update COMMON_CAP2_PERMS.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  35) #endif
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  36) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  37) /*
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  38)  * Note: The name for any socket class should be suffixed by "socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  39)  *	 and doesn't contain more than one substr of "socket".
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  40)  */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  41) struct security_class_mapping secclass_map[] = {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  42) 	{ "security",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  43) 	  { "compute_av", "compute_create", "compute_member",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  44) 	    "check_context", "load_policy", "compute_relabel",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  45) 	    "compute_user", "setenforce", "setbool", "setsecparam",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  46) 	    "setcheckreqprot", "read_policy", "validate_trans", NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  47) 	{ "process",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  48) 	  { "fork", "transition", "sigchld", "sigkill",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  49) 	    "sigstop", "signull", "signal", "ptrace", "getsched", "setsched",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  50) 	    "getsession", "getpgid", "setpgid", "getcap", "setcap", "share",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  51) 	    "getattr", "setexec", "setfscreate", "noatsecure", "siginh",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  52) 	    "setrlimit", "rlimitinh", "dyntransition", "setcurrent",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  53) 	    "execmem", "execstack", "execheap", "setkeycreate",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  54) 	    "setsockcreate", "getrlimit", NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  55) 	{ "process2",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  56) 	  { "nnp_transition", "nosuid_transition", NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  57) 	{ "system",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  58) 	  { "ipc_info", "syslog_read", "syslog_mod",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  59) 	    "syslog_console", "module_request", "module_load", NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  60) 	{ "capability",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  61) 	  { COMMON_CAP_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  62) 	{ "filesystem",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  63) 	  { "mount", "remount", "unmount", "getattr",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  64) 	    "relabelfrom", "relabelto", "associate", "quotamod",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  65) 	    "quotaget", "watch", NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  66) 	{ "file",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  67) 	  { COMMON_FILE_PERMS,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  68) 	    "execute_no_trans", "entrypoint", NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  69) 	{ "dir",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  70) 	  { COMMON_FILE_PERMS, "add_name", "remove_name",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  71) 	    "reparent", "search", "rmdir", NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  72) 	{ "fd", { "use", NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  73) 	{ "lnk_file",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  74) 	  { COMMON_FILE_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  75) 	{ "chr_file",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  76) 	  { COMMON_FILE_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  77) 	{ "blk_file",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  78) 	  { COMMON_FILE_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  79) 	{ "sock_file",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  80) 	  { COMMON_FILE_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  81) 	{ "fifo_file",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  82) 	  { COMMON_FILE_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  83) 	{ "socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  84) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  85) 	{ "tcp_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  86) 	  { COMMON_SOCK_PERMS,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  87) 	    "node_bind", "name_connect",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  88) 	    NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  89) 	{ "udp_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  90) 	  { COMMON_SOCK_PERMS,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  91) 	    "node_bind", NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  92) 	{ "rawip_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  93) 	  { COMMON_SOCK_PERMS,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  94) 	    "node_bind", NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  95) 	{ "node",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  96) 	  { "recvfrom", "sendto", NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  97) 	{ "netif",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  98) 	  { "ingress", "egress", NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300  99) 	{ "netlink_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 100) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 101) 	{ "packet_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 102) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 103) 	{ "key_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 104) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 105) 	{ "unix_stream_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 106) 	  { COMMON_SOCK_PERMS, "connectto", NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 107) 	{ "unix_dgram_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 108) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 109) 	{ "sem",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 110) 	  { COMMON_IPC_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 111) 	{ "msg", { "send", "receive", NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 112) 	{ "msgq",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 113) 	  { COMMON_IPC_PERMS, "enqueue", NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 114) 	{ "shm",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 115) 	  { COMMON_IPC_PERMS, "lock", NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 116) 	{ "ipc",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 117) 	  { COMMON_IPC_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 118) 	{ "netlink_route_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 119) 	  { COMMON_SOCK_PERMS,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 120) 	    "nlmsg_read", "nlmsg_write", "nlmsg_readpriv", "nlmsg_getneigh",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 121) 	    NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 122) 	{ "netlink_tcpdiag_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 123) 	  { COMMON_SOCK_PERMS,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 124) 	    "nlmsg_read", "nlmsg_write", NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 125) 	{ "netlink_nflog_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 126) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 127) 	{ "netlink_xfrm_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 128) 	  { COMMON_SOCK_PERMS,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 129) 	    "nlmsg_read", "nlmsg_write", NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 130) 	{ "netlink_selinux_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 131) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 132) 	{ "netlink_iscsi_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 133) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 134) 	{ "netlink_audit_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 135) 	  { COMMON_SOCK_PERMS,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 136) 	    "nlmsg_read", "nlmsg_write", "nlmsg_relay", "nlmsg_readpriv",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 137) 	    "nlmsg_tty_audit", NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 138) 	{ "netlink_fib_lookup_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 139) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 140) 	{ "netlink_connector_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 141) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 142) 	{ "netlink_netfilter_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 143) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 144) 	{ "netlink_dnrt_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 145) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 146) 	{ "association",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 147) 	  { "sendto", "recvfrom", "setcontext", "polmatch", NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 148) 	{ "netlink_kobject_uevent_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 149) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 150) 	{ "netlink_generic_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 151) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 152) 	{ "netlink_scsitransport_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 153) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 154) 	{ "netlink_rdma_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 155) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 156) 	{ "netlink_crypto_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 157) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 158) 	{ "appletalk_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 159) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 160) 	{ "packet",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 161) 	  { "send", "recv", "relabelto", "forward_in", "forward_out", NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 162) 	{ "key",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 163) 	  { "view", "read", "write", "search", "link", "setattr", "create",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 164) 	    NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 165) 	{ "dccp_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 166) 	  { COMMON_SOCK_PERMS,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 167) 	    "node_bind", "name_connect", NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 168) 	{ "memprotect", { "mmap_zero", NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 169) 	{ "peer", { "recv", NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 170) 	{ "capability2",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 171) 	  { COMMON_CAP2_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 172) 	{ "kernel_service", { "use_as_override", "create_files_as", NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 173) 	{ "tun_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 174) 	  { COMMON_SOCK_PERMS, "attach_queue", NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 175) 	{ "binder", { "impersonate", "call", "set_context_mgr", "transfer",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 176) 		      NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 177) 	{ "cap_userns",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 178) 	  { COMMON_CAP_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 179) 	{ "cap2_userns",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 180) 	  { COMMON_CAP2_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 181) 	{ "sctp_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 182) 	  { COMMON_SOCK_PERMS,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 183) 	    "node_bind", "name_connect", "association", NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 184) 	{ "icmp_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 185) 	  { COMMON_SOCK_PERMS,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 186) 	    "node_bind", NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 187) 	{ "ax25_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 188) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 189) 	{ "ipx_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 190) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 191) 	{ "netrom_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 192) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 193) 	{ "atmpvc_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 194) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 195) 	{ "x25_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 196) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 197) 	{ "rose_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 198) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 199) 	{ "decnet_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 200) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 201) 	{ "atmsvc_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 202) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 203) 	{ "rds_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 204) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 205) 	{ "irda_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 206) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 207) 	{ "pppox_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 208) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 209) 	{ "llc_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 210) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 211) 	{ "can_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 212) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 213) 	{ "tipc_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 214) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 215) 	{ "bluetooth_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 216) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 217) 	{ "iucv_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 218) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 219) 	{ "rxrpc_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 220) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 221) 	{ "isdn_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 222) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 223) 	{ "phonet_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 224) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 225) 	{ "ieee802154_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 226) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 227) 	{ "caif_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 228) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 229) 	{ "alg_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 230) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 231) 	{ "nfc_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 232) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 233) 	{ "vsock_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 234) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 235) 	{ "kcm_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 236) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 237) 	{ "qipcrtr_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 238) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 239) 	{ "smc_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 240) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 241) 	{ "infiniband_pkey",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 242) 	  { "access", NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 243) 	{ "infiniband_endport",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 244) 	  { "manage_subnet", NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 245) 	{ "bpf",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 246) 	  { "map_create", "map_read", "map_write", "prog_load", "prog_run",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 247) 	    NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 248) 	{ "xdp_socket",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 249) 	  { COMMON_SOCK_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 250) 	{ "perf_event",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 251) 	  { "open", "cpu", "kernel", "tracepoint", "read", "write", NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 252) 	{ "anon_inode",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 253) 	  { COMMON_FILE_PERMS, NULL } },
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 254) 	{ NULL }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 255)   };
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 256) 
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 257) #if PF_MAX > 45
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 258) #error New address family defined, please update secclass_map.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 259) #endif