/usr/include/apol/policy-query.h is in libapol-dev 3.3.6.ds-7.2ubuntu4.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 | /**
* @file
*
* Routines to query parts of a policy. For each component and rule
* there is a query structure to specify the details of the query.
* Analyses are also included by this header file.
*
* @author Jeremy A. Mowery jmowery@tresys.com
* @author Jason Tang jtang@tresys.com
*
* Copyright (C) 2006-2007 Tresys Technology, LLC
*
* This library is free software; you can redistribute it and/or
* modify it under the terms of the GNU Lesser General Public
* License as published by the Free Software Foundation; either
* version 2.1 of the License, or (at your option) any later version.
*
* This library is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
* Lesser General Public License for more details.
*
* You should have received a copy of the GNU Lesser General Public
* License along with this library; if not, write to the Free Software
* Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
*/
#ifndef APOL_POLICY_QUERY_H
#define APOL_POLICY_QUERY_H
#ifdef __cplusplus
extern "C"
{
#endif
/* Many libapol queries act upon MLS contexts. Use these defines to
* specify set operations upon contexts.
*/
#define APOL_QUERY_SUB 0x02 /**< The range specified by the query is a subset of the target range */
#define APOL_QUERY_SUPER 0x04 /**< The range specified by the query is a superset of the target range */
#define APOL_QUERY_EXACT (APOL_QUERY_SUB|APOL_QUERY_SUPER) /**< The range specified by the query matches the target range exactly. */
#define APOL_QUERY_INTERSECT 0x08 /* query overlaps any part of rule range */
#define APOL_QUERY_FLAGS \
(APOL_QUERY_SUB | APOL_QUERY_SUPER | APOL_QUERY_EXACT | \
APOL_QUERY_INTERSECT)
/* The AV rule search and TE rule search use these flags when
* specifying what kind of symbol is being searched. Strings are
* normally interpreted either as a type or as an attribute; the behavior
* can be changed to use only types or only attributes.
*/
#define APOL_QUERY_SYMBOL_IS_TYPE 0x01
#define APOL_QUERY_SYMBOL_IS_ATTRIBUTE 0x02
#include <qpol/policy.h>
#include "type-query.h"
#include "class-perm-query.h"
#include "role-query.h"
#include "user-query.h"
#include "bool-query.h"
#include "isid-query.h"
#include "mls-query.h"
#include "netcon-query.h"
#include "fscon-query.h"
#include "context-query.h"
#include "permissive-query.h"
#include "polcap-query.h"
#include "avrule-query.h"
#include "terule-query.h"
#include "condrule-query.h"
#include "rbacrule-query.h"
#include "range_trans-query.h"
#include "constraint-query.h"
#include "domain-trans-analysis.h"
#include "infoflow-analysis.h"
#include "relabel-analysis.h"
#include "types-relation-analysis.h"
#ifdef __cplusplus
}
#endif
#endif
|