Geforce File Manager

NAME	SIZE	ACTIONS
📄 acache.h	14,232 B	[ EDIT ] \| [ DEL ]
📄 acl.h	7,242 B	[ EDIT ] \| [ DEL ]
📄 adb.h	22,595 B	[ EDIT ] \| [ DEL ]
📄 badcache.h	3,369 B	[ EDIT ] \| [ DEL ]
📄 bit.h	807 B	[ EDIT ] \| [ DEL ]
📄 byaddr.h	4,002 B	[ EDIT ] \| [ DEL ]
📄 cache.h	8,643 B	[ EDIT ] \| [ DEL ]
📄 callbacks.h	2,271 B	[ EDIT ] \| [ DEL ]
📄 catz.h	11,833 B	[ EDIT ] \| [ DEL ]
📄 cert.h	1,466 B	[ EDIT ] \| [ DEL ]
📄 client.h	22,042 B	[ EDIT ] \| [ DEL ]
📄 clientinfo.h	2,006 B	[ EDIT ] \| [ DEL ]
📄 compress.h	6,646 B	[ EDIT ] \| [ DEL ]
📄 db.h	47,061 B	[ EDIT ] \| [ DEL ]
📄 dbiterator.h	7,422 B	[ EDIT ] \| [ DEL ]
📄 dbtable.h	3,165 B	[ EDIT ] \| [ DEL ]
📄 diff.h	6,980 B	[ EDIT ] \| [ DEL ]
📄 dispatch.h	16,427 B	[ EDIT ] \| [ DEL ]
📄 dlz.h	10,618 B	[ EDIT ] \| [ DEL ]
📄 dlz_dlopen.h	4,677 B	[ EDIT ] \| [ DEL ]
📄 dns64.h	5,635 B	[ EDIT ] \| [ DEL ]
📄 dnssec.h	12,115 B	[ EDIT ] \| [ DEL ]
📄 dnstap.h	9,364 B	[ EDIT ] \| [ DEL ]
📄 ds.h	1,225 B	[ EDIT ] \| [ DEL ]
📄 dsdigest.h	1,722 B	[ EDIT ] \| [ DEL ]
📄 dyndb.h	4,835 B	[ EDIT ] \| [ DEL ]
📄 ecdb.h	809 B	[ EDIT ] \| [ DEL ]
📄 edns.h	722 B	[ EDIT ] \| [ DEL ]
📄 enumclass.h	1,220 B	[ EDIT ] \| [ DEL ]
📄 enumtype.h	8,300 B	[ EDIT ] \| [ DEL ]
📄 events.h	4,059 B	[ EDIT ] \| [ DEL ]
📄 fixedname.h	1,663 B	[ EDIT ] \| [ DEL ]
📄 forward.h	3,452 B	[ EDIT ] \| [ DEL ]
📄 geoip.h	2,792 B	[ EDIT ] \| [ DEL ]
📄 ipkeylist.h	2,186 B	[ EDIT ] \| [ DEL ]
📄 iptable.h	1,621 B	[ EDIT ] \| [ DEL ]
📄 journal.h	8,227 B	[ EDIT ] \| [ DEL ]
📄 keydata.h	1,059 B	[ EDIT ] \| [ DEL ]
📄 keyflags.h	1,278 B	[ EDIT ] \| [ DEL ]
📄 keytable.h	9,462 B	[ EDIT ] \| [ DEL ]
📄 keyvalues.h	4,159 B	[ EDIT ] \| [ DEL ]
📄 lib.h	1,192 B	[ EDIT ] \| [ DEL ]
📄 log.h	3,964 B	[ EDIT ] \| [ DEL ]
📄 lookup.h	2,924 B	[ EDIT ] \| [ DEL ]
📄 master.h	11,289 B	[ EDIT ] \| [ DEL ]
📄 masterdump.h	12,647 B	[ EDIT ] \| [ DEL ]
📄 message.h	39,023 B	[ EDIT ] \| [ DEL ]
📄 name.h	37,115 B	[ EDIT ] \| [ DEL ]
📄 ncache.h	4,929 B	[ EDIT ] \| [ DEL ]
📄 nsec.h	2,928 B	[ EDIT ] \| [ DEL ]
📄 nsec3.h	8,032 B	[ EDIT ] \| [ DEL ]
📄 nta.h	4,548 B	[ EDIT ] \| [ DEL ]
📄 opcode.h	1,007 B	[ EDIT ] \| [ DEL ]
📄 order.h	1,999 B	[ EDIT ] \| [ DEL ]
📄 peer.h	5,966 B	[ EDIT ] \| [ DEL ]
📄 portlist.h	2,101 B	[ EDIT ] \| [ DEL ]
📄 private.h	1,935 B	[ EDIT ] \| [ DEL ]
📄 rbt.h	40,618 B	[ EDIT ] \| [ DEL ]
📄 rcode.h	2,481 B	[ EDIT ] \| [ DEL ]
📄 rdata.h	21,613 B	[ EDIT ] \| [ DEL ]
📄 rdataclass.h	2,257 B	[ EDIT ] \| [ DEL ]
📄 rdatalist.h	2,569 B	[ EDIT ] \| [ DEL ]
📄 rdataset.h	21,536 B	[ EDIT ] \| [ DEL ]
📄 rdatasetiter.h	3,926 B	[ EDIT ] \| [ DEL ]
📄 rdataslab.h	4,502 B	[ EDIT ] \| [ DEL ]
📄 rdatastruct.h	61,584 B	[ EDIT ] \| [ DEL ]
📄 rdatatype.h	2,298 B	[ EDIT ] \| [ DEL ]
📄 request.h	11,156 B	[ EDIT ] \| [ DEL ]
📄 resolver.h	20,227 B	[ EDIT ] \| [ DEL ]
📄 result.h	9,284 B	[ EDIT ] \| [ DEL ]
📄 rootns.h	892 B	[ EDIT ] \| [ DEL ]
📄 rpz.h	10,335 B	[ EDIT ] \| [ DEL ]
📄 rriterator.h	4,230 B	[ EDIT ] \| [ DEL ]
📄 rrl.h	6,640 B	[ EDIT ] \| [ DEL ]
📄 sdb.h	7,224 B	[ EDIT ] \| [ DEL ]
📄 sdlz.h	14,214 B	[ EDIT ] \| [ DEL ]
📄 secalg.h	1,706 B	[ EDIT ] \| [ DEL ]
📄 secproto.h	1,557 B	[ EDIT ] \| [ DEL ]
📄 soa.h	2,186 B	[ EDIT ] \| [ DEL ]
📄 ssu.h	8,308 B	[ EDIT ] \| [ DEL ]
📄 stats.h	13,451 B	[ EDIT ] \| [ DEL ]
📄 tcpmsg.h	3,145 B	[ EDIT ] \| [ DEL ]
📄 time.h	1,695 B	[ EDIT ] \| [ DEL ]
📄 timer.h	1,051 B	[ EDIT ] \| [ DEL ]
📄 tkey.h	7,631 B	[ EDIT ] \| [ DEL ]
📄 tsec.h	2,949 B	[ EDIT ] \| [ DEL ]
📄 tsig.h	8,384 B	[ EDIT ] \| [ DEL ]
📄 ttl.h	1,945 B	[ EDIT ] \| [ DEL ]
📄 types.h	14,158 B	[ EDIT ] \| [ DEL ]
📄 update.h	1,653 B	[ EDIT ] \| [ DEL ]
📄 validator.h	7,161 B	[ EDIT ] \| [ DEL ]
📄 version.h	868 B	[ EDIT ] \| [ DEL ]
📄 view.h	35,274 B	[ EDIT ] \| [ DEL ]
📄 xfrin.h	2,924 B	[ EDIT ] \| [ DEL ]
📄 zone.h	60,864 B	[ EDIT ] \| [ DEL ]
📄 zonekey.h	777 B	[ EDIT ] \| [ DEL ]
📄 zt.h	5,562 B	[ EDIT ] \| [ DEL ]

[ CLOSE ]

EDIT: ssu.h

/*
 * Copyright (C) Internet Systems Consortium, Inc. ("ISC")
 *
 * This Source Code Form is subject to the terms of the Mozilla Public
 * License, v. 2.0. If a copy of the MPL was not distributed with this
 * file, you can obtain one at https://mozilla.org/MPL/2.0/.
 *
 * See the COPYRIGHT file distributed with this work for additional
 * information regarding copyright ownership.
 */

#ifndef DNS_SSU_H
#define DNS_SSU_H 1

/*! \file dns/ssu.h */

#include <stdbool.h>

#include <isc/lang.h>

#include <dns/acl.h>
#include <dns/types.h>
#include <dst/dst.h>

ISC_LANG_BEGINDECLS

typedef enum {
	dns_ssumatchtype_name = 0,
	dns_ssumatchtype_subdomain = 1,
	dns_ssumatchtype_wildcard = 2,
	dns_ssumatchtype_self    = 3,
	dns_ssumatchtype_selfsub = 4,
	dns_ssumatchtype_selfwild = 5,
	dns_ssumatchtype_selfkrb5 = 6,
	dns_ssumatchtype_selfms  = 7,
	dns_ssumatchtype_subdomainms = 8,
	dns_ssumatchtype_subdomainkrb5 = 9,
	dns_ssumatchtype_tcpself = 10,
	dns_ssumatchtype_6to4self = 11,
	dns_ssumatchtype_external = 12,
	dns_ssumatchtype_local = 13,
	dns_ssumatchtype_selfsubms = 14,
	dns_ssumatchtype_selfsubkrb5 = 15,
	dns_ssumatchtype_max = 15,	/* max value */

dns_ssumatchtype_dlz = 16	/* intentionally higher than _max */
} dns_ssumatchtype_t;

#define DNS_SSUMATCHTYPE_NAME		dns_ssumatchtype_name
#define DNS_SSUMATCHTYPE_SUBDOMAIN	dns_ssumatchtype_subdomain
#define DNS_SSUMATCHTYPE_WILDCARD	dns_ssumatchtype_wildcard
#define DNS_SSUMATCHTYPE_SELF		dns_ssumatchtype_self
#define DNS_SSUMATCHTYPE_SELFSUB	dns_ssumatchtype_selfsub
#define DNS_SSUMATCHTYPE_SELFWILD	dns_ssumatchtype_selfwild
#define DNS_SSUMATCHTYPE_SELFKRB5	dns_ssumatchtype_selfkrb5
#define DNS_SSUMATCHTYPE_SELFMS		dns_ssumatchtype_selfms
#define DNS_SSUMATCHTYPE_SUBDOMAINMS	dns_ssumatchtype_subdomainms
#define DNS_SSUMATCHTYPE_SUBDOMAINKRB5	dns_ssumatchtype_subdomainkrb5
#define DNS_SSUMATCHTYPE_TCPSELF	dns_ssumatchtype_tcpself
#define DNS_SSUMATCHTYPE_6TO4SELF	dns_ssumatchtype_6to4self
#define DNS_SSUMATCHTYPE_EXTERNAL	dns_ssumatchtype_external
#define DNS_SSUMATCHTYPE_LOCAL		dns_ssumatchtype_local
#define DNS_SSUMATCHTYPE_MAX 		dns_ssumatchtype_max  /* max value */

#define DNS_SSUMATCHTYPE_DLZ		dns_ssumatchtype_dlz  /* intentionally higher than _MAX */

isc_result_t
dns_ssutable_create(isc_mem_t *mctx, dns_ssutable_t **table);
/*%<
 *	Creates a table that will be used to store simple-secure-update rules.
 *	Note: all locking must be provided by the client.
 *
 *	Requires:
 *\li		'mctx' is a valid memory context
 *\li		'table' is not NULL, and '*table' is NULL
 *
 *	Returns:
 *\li		ISC_R_SUCCESS
 *\li		ISC_R_NOMEMORY
 */

isc_result_t
dns_ssutable_createdlz(isc_mem_t *mctx, dns_ssutable_t **tablep,
		       dns_dlzdb_t *dlzdatabase);
/*%<
 * Create an SSU table that contains a dlzdatabase pointer, and a
 * single rule with matchtype DNS_SSUMATCHTYPE_DLZ. This type of SSU
 * table is used by writeable DLZ drivers to offload authorization for
 * updates to the driver.
 */

void
dns_ssutable_attach(dns_ssutable_t *source, dns_ssutable_t **targetp);
/*%<
 *	Attach '*targetp' to 'source'.
 *
 *	Requires:
 *\li		'source' is a valid SSU table
 *\li		'targetp' points to a NULL dns_ssutable_t *.
 *
 *	Ensures:
 *\li		*targetp is attached to source.
 */

void
dns_ssutable_detach(dns_ssutable_t **tablep);
/*%<
 *	Detach '*tablep' from its simple-secure-update rule table.
 *
 *	Requires:
 *\li		'tablep' points to a valid dns_ssutable_t
 *
 *	Ensures:
 *\li		*tablep is NULL
 *\li		If '*tablep' is the last reference to the SSU table, all
 *			resources used by the table will be freed.
 */

isc_result_t
dns_ssutable_addrule(dns_ssutable_t *table, bool grant,
		     dns_name_t *identity, unsigned int matchtype,
		     dns_name_t *name, unsigned int ntypes,
		     dns_rdatatype_t *types);
/*%<
 *	Adds a new rule to a simple-secure-update rule table.  The rule
 *	either grants or denies update privileges of an identity (or set of
 *	identities) to modify a name (or set of names) or certain types present
 *	at that name.
 *
 *	Notes:
 *\li		If 'matchtype' is of SELF type, this rule only matches if the
 *              name to be updated matches the signing identity.
 *
 *\li		If 'ntypes' is 0, this rule applies to all types except
 *		NS, SOA, RRSIG, and NSEC.
 *
 *\li		If 'types' includes ANY, this rule applies to all types
 *		except NSEC.
 *
 *	Requires:
 *\li		'table' is a valid SSU table
 *\li		'identity' is a valid absolute name
 *\li		'matchtype' must be one of the defined constants.
 *\li		'name' is a valid absolute name
 *\li		If 'ntypes' > 0, 'types' must not be NULL
 *
 *	Returns:
 *\li		ISC_R_SUCCESS
 *\li		ISC_R_NOMEMORY
 */

bool
dns_ssutable_checkrules(dns_ssutable_t *table, dns_name_t *signer,
			dns_name_t *name, isc_netaddr_t *addr,
			dns_rdatatype_t type, const dst_key_t *key);
bool
dns_ssutable_checkrules2(dns_ssutable_t *table, dns_name_t *signer,
			dns_name_t *name, isc_netaddr_t *addr,
			bool tcp, const dns_aclenv_t *env,
			dns_rdatatype_t type, const dst_key_t *key);
/*%<
 *	Checks that the attempted update of (name, type) is allowed according
 *	to the rules specified in the simple-secure-update rule table.  If
 *	no rules are matched, access is denied.
 *
 *	Notes:
 *		In dns_ssutable_checkrules(), 'addr' should only be
 *		set if the request received via TCP.  This provides a
 *		weak assurance that the request was not spoofed.
 *		'addr' is to to validate DNS_SSUMATCHTYPE_TCPSELF
 *		and DNS_SSUMATCHTYPE_6TO4SELF rules.
 *
 *		In dns_ssutable_checkrules2(), 'addr' can also be passed for
 *		UDP requests and TCP is specified via the 'tcp' parameter.
 *		In addition to DNS_SSUMATCHTYPE_TCPSELF and
 *		tcp_ssumatchtype_6to4self  rules, the address
 *		also be used to check DNS_SSUMATCHTYPE_LOCAL rules.
 *		If 'addr' is set then 'env' must also be set so that
 *		requests from non-localhost addresses can be rejected.
 *
 *		For DNS_SSUMATCHTYPE_TCPSELF the addresses are mapped to
 *		the standard reverse names under IN-ADDR.ARPA and IP6.ARPA.
 *		RFC 1035, Section 3.5, "IN-ADDR.ARPA domain" and RFC 3596,
 *		Section 2.5, "IP6.ARPA Domain".
 *
 *		For DNS_SSUMATCHTYPE_6TO4SELF, IPv4 address are converted
 *		to a 6to4 prefix (48 bits) per the rules in RFC 3056.  Only
 *		the top	48 bits of the IPv6 address are mapped to the reverse
 *		name. This is independent of whether the most significant 16
 *		bits match 2002::/16, assigned for 6to4 prefixes, or not.
 *
 *	Requires:
 *\li		'table' is a valid SSU table
 *\li		'signer' is NULL or a valid absolute name
 *\li		'addr' is NULL or a valid network address.
 *\li		'aclenv' is NULL or a valid ACL environment.
 *\li		'name' is a valid absolute name
 *\li		if 'addr' is not NULL, 'env' is not NULL.
 */

/*% Accessor functions to extract rule components */
bool	dns_ssurule_isgrant(const dns_ssurule_t *rule);
/*% Accessor functions to extract rule components */
dns_name_t *	dns_ssurule_identity(const dns_ssurule_t *rule);
/*% Accessor functions to extract rule components */
unsigned int	dns_ssurule_matchtype(const dns_ssurule_t *rule);
/*% Accessor functions to extract rule components */
dns_name_t *	dns_ssurule_name(const dns_ssurule_t *rule);
/*% Accessor functions to extract rule components */
unsigned int	dns_ssurule_types(const dns_ssurule_t *rule,
				  dns_rdatatype_t **types);

isc_result_t	dns_ssutable_firstrule(const dns_ssutable_t *table,
				       dns_ssurule_t **rule);
/*%<
 * Initiates a rule iterator.  There is no need to maintain any state.
 *
 * Returns:
 *\li	#ISC_R_SUCCESS
 *\li	#ISC_R_NOMORE
 */

isc_result_t	dns_ssutable_nextrule(dns_ssurule_t *rule,
				      dns_ssurule_t **nextrule);
/*%<
 * Returns the next rule in the table.
 *
 * Returns:
 *\li	#ISC_R_SUCCESS
 *\li	#ISC_R_NOMORE
 */

bool
dns_ssu_external_match(dns_name_t *identity, dns_name_t *signer,
		       dns_name_t *name, isc_netaddr_t *tcpaddr,
		       dns_rdatatype_t type, const dst_key_t *key,
		       isc_mem_t *mctx);
/*%<
 * Check a policy rule via an external application
 */

isc_result_t
dns_ssu_mtypefromstring(const char *str, dns_ssumatchtype_t *mtype);
/*%<
 * Set 'mtype' from 'str'
 *
 * Requires:
 *\li		'str' is not NULL.
 *\li		'mtype' is not NULL,
 *
 * Returns:
 *\li	#ISC_R_SUCCESS
 *\li	#ISC_R_NOTFOUND
 */

ISC_LANG_ENDDECLS

#endif /* DNS_SSU_H */