linux/net/netfilter/xt_SECMARK.c

// SPDX-License-Identifier: GPL-2.0-only
/*
 * Module for modifying the secmark field of the skb, for use by
 * security subsystems.
 *
 * Based on the nfmark match by:
 * (C) 1999-2001 Marc Boucher <[email protected]>
 *
 * (C) 2006,2008 Red Hat, Inc., James Morris <[email protected]>
 */
#define pr_fmt(fmt) …
#include <linux/module.h>
#include <linux/security.h>
#include <linux/skbuff.h>
#include <linux/netfilter/x_tables.h>
#include <linux/netfilter/xt_SECMARK.h>

MODULE_LICENSE(…) …;
MODULE_AUTHOR(…) …;
MODULE_DESCRIPTION(…) …;
MODULE_ALIAS(…) …;
MODULE_ALIAS(…) …;

static u8 mode;

static unsigned int
secmark_tg(struct sk_buff *skb, const struct xt_secmark_target_info_v1 *info)
{ … }

static int checkentry_lsm(struct xt_secmark_target_info_v1 *info)
{ … }

static int
secmark_tg_check(const char *table, struct xt_secmark_target_info_v1 *info)
{ … }

static void secmark_tg_destroy(const struct xt_tgdtor_param *par)
{ … }

static int secmark_tg_check_v0(const struct xt_tgchk_param *par)
{ … }

static unsigned int
secmark_tg_v0(struct sk_buff *skb, const struct xt_action_param *par)
{ … }

static int secmark_tg_check_v1(const struct xt_tgchk_param *par)
{ … }

static unsigned int
secmark_tg_v1(struct sk_buff *skb, const struct xt_action_param *par)
{ … }

static struct xt_target secmark_tg_reg[] __read_mostly = …;

static int __init secmark_tg_init(void)
{ … }

static void __exit secmark_tg_exit(void)
{ … }

module_init(…) …;
module_exit(secmark_tg_exit);