mirror of
https://github.com/xen-project/xen.git
synced 2026-10-28 18:21:39 +01:00
smh22@firebug.cl.cam.ac.uk
bd471dc416
and security policy-versioning and data structures in the xen subtree
(ACM):
* the very generic tools directory name "policy" is changed to
"security" and the included "policy_tool" to "secpol_tool"
* the single constant POLICY_INTERFACE_VERSION is replaced
by ACM_INTERFACE_VERSION; the security policy headers are
versioned independently since the policy can be supplied
at boot time instead of through the hypervisor interface
Signed-off-by: Reiner Sailer <sailer@watson.ibm.com>
Signed-off-by: Steven Hand <steven@xensource.com>
139 lines
3.2 KiB
Java
139 lines
3.2 KiB
Java
/**
|
|
* (C) Copyright IBM Corp. 2005
|
|
*
|
|
* $Id: XmlToBinInterface.java,v 1.3 2005/06/20 21:07:37 rvaldez Exp $
|
|
*
|
|
* Author: Ray Valdez
|
|
*
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU General Public License as
|
|
* published by the Free Software Foundation, version 2 of the
|
|
* License.
|
|
*
|
|
* XmlToBinInterface Class.
|
|
* <p>
|
|
*
|
|
* Defines constants used by XmToBin.
|
|
*
|
|
* <p>
|
|
*
|
|
* policy binary structures
|
|
*
|
|
* struct acm_policy_buffer {
|
|
* u32 policy_version; * ACM_POLICY_VERSION *
|
|
* u32 magic;
|
|
* u32 len;
|
|
* u32 primary_policy_code;
|
|
* u32 primary_buffer_offset;
|
|
* u32 secondary_policy_code;
|
|
* u32 secondary_buffer_offset;
|
|
* +u32 resource offset (not used yet in Xen)
|
|
* };
|
|
*
|
|
*
|
|
* struct acm_ste_policy_buffer {
|
|
* u32 policy_version; * ACM_STE_VERSION *
|
|
* u32 policy_code;
|
|
* u32 ste_max_types;
|
|
* u32 ste_max_ssidrefs;
|
|
* u32 ste_ssid_offset;
|
|
* };
|
|
*
|
|
* struct acm_chwall_policy_buffer {
|
|
* u32 policy_version; * ACM_CHWALL_VERSION *
|
|
* u32 policy_code;
|
|
* u32 chwall_max_types;
|
|
* u32 chwall_max_ssidrefs;
|
|
* u32 chwall_max_conflictsets;
|
|
* u32 chwall_ssid_offset;
|
|
* u32 chwall_conflict_sets_offset;
|
|
* u32 chwall_running_types_offset;
|
|
* u32 chwall_conflict_aggregate_offset;
|
|
* };
|
|
*
|
|
* typedef struct {
|
|
* u16 partition_max;
|
|
* u16 partition_offset;
|
|
* u16 vlan_max;
|
|
* u16 vlan_offset;
|
|
* u16 slot_max;
|
|
* u16 slot_offset;
|
|
* } acm_resource_buffer_t;
|
|
*
|
|
* typedef struct {
|
|
* u16 id;
|
|
* u16 ssid_ste;
|
|
* u16 ssid_chwall;
|
|
* } acm_partition_entry_t;
|
|
*
|
|
* typedef struct {
|
|
* u16 vlan;
|
|
* u16 ssid_ste;
|
|
* } acm_vlan_entry_t;
|
|
*
|
|
* typedef struct {
|
|
* u16 bus;
|
|
* u16 slot;
|
|
* u16 ssid_ste;
|
|
* } acm_slot_entry_t;
|
|
*
|
|
*
|
|
*
|
|
*/
|
|
public interface XmlToBinInterface
|
|
{
|
|
/* policy code (uint16) */
|
|
final int policyCodeSize = 2;
|
|
|
|
/* max_types (uint16) */
|
|
final int maxTypesSize = 2;
|
|
|
|
/* max_ssidrefs (uint16) */
|
|
final int maxSsidrefSize = 2;
|
|
|
|
/* ssid_offset (uint32) */
|
|
final int ssidOffsetSize = 2;
|
|
|
|
final short markSymbol = 0x0001;
|
|
|
|
final int u32Size = 4;
|
|
final int u16Size = 2;
|
|
|
|
/* num of bytes for acm_ste_policy_buffer_t */
|
|
final int steHeaderSize = (5 * u32Size);
|
|
|
|
/* byte for acm_chinese_wall_policy_buffer_t */
|
|
final int chwHeaderSize = (9 * u32Size);
|
|
|
|
final int primaryPolicyCodeSize = u32Size;
|
|
final int primaryBufferOffsetSize = u32Size ;
|
|
|
|
final int secondaryPolicyCodeSz = u32Size;
|
|
final int secondaryBufferOffsetSz = u32Size;
|
|
final int resourceOffsetSz = u32Size;
|
|
|
|
final short partitionBufferSz = (2 * u16Size);
|
|
final short partitionEntrySz = (3 * u16Size);
|
|
|
|
final short slotBufferSz = (2 * u16Size);
|
|
final short slotEntrySz = (3 * u16Size);
|
|
|
|
final short vlanBufferSz = (2 * u16Size);
|
|
final short vlanEntrySz = (2 * u16Size);
|
|
|
|
final int binaryBufferHeaderSz = (8 * u32Size); /* 8th not used in Xen */
|
|
|
|
/* copied directly from acm.h */
|
|
final int ACM_MAGIC = 0x0001debc;
|
|
final int ACM_NULL_POLICY = 0;
|
|
final int ACM_CHINESE_WALL_POLICY = 1;
|
|
final int ACM_SIMPLE_TYPE_ENFORCEMENT_POLICY = 2;
|
|
final int ACM_CHINESE_WALL_AND_SIMPLE_TYPE_ENFORCEMENT_POLICY = 3;
|
|
final int ACM_EMPTY_POLICY = 4;
|
|
|
|
/* version for compatibility check */
|
|
final int ACM_POLICY_VERSION = 1;
|
|
final int ACM_STE_VERSION = 1;
|
|
final int ACM_CHWALL_VERSION = 1;
|
|
}
|