linux/net/ipv4/netfilter/iptable_security.c

// SPDX-License-Identifier: GPL-2.0-only
/*
 * "security" table
 *
 * This is for use by Mandatory Access Control (MAC) security models,
 * which need to be able to manage security policy in separate context
 * to DAC.
 *
 * Based on iptable_mangle.c
 *
 * Copyright (C) 1999 Paul `Rusty' Russell & Michael J. Neuling
 * Copyright (C) 2000-2004 Netfilter Core Team <coreteam <at> netfilter.org>
 * Copyright (C) 2008 Red Hat, Inc., James Morris <jmorris <at> redhat.com>
 */
#include <linux/module.h>
#include <linux/netfilter_ipv4/ip_tables.h>
#include <linux/slab.h>
#include <net/ip.h>

MODULE_LICENSE(…) …;
MODULE_AUTHOR(…) …;
MODULE_DESCRIPTION(…) …;

#define SECURITY_VALID_HOOKS …

static const struct xt_table security_table = …;

static struct nf_hook_ops *sectbl_ops __read_mostly;

static int iptable_security_table_init(struct net *net)
{ … }

static void __net_exit iptable_security_net_pre_exit(struct net *net)
{ … }

static void __net_exit iptable_security_net_exit(struct net *net)
{ … }

static struct pernet_operations iptable_security_net_ops = …;

static int __init iptable_security_init(void)
{ … }

static void __exit iptable_security_fini(void)
{ … }

module_init(…) …;
module_exit(iptable_security_fini);