]>
Commit | Line | Data |
---|---|---|
1 | /* | |
2 | * Copyright (c) 1999-2006 Apple Computer, Inc. All rights reserved. | |
3 | * | |
4 | * @APPLE_OSREFERENCE_LICENSE_HEADER_START@ | |
5 | * | |
6 | * This file contains Original Code and/or Modifications of Original Code | |
7 | * as defined in and that are subject to the Apple Public Source License | |
8 | * Version 2.0 (the 'License'). You may not use this file except in | |
9 | * compliance with the License. The rights granted to you under the License | |
10 | * may not be used to create, or enable the creation or redistribution of, | |
11 | * unlawful or unlicensed copies of an Apple operating system, or to | |
12 | * circumvent, violate, or enable the circumvention or violation of, any | |
13 | * terms of an Apple operating system software license agreement. | |
14 | * | |
15 | * Please obtain a copy of the License at | |
16 | * http://www.opensource.apple.com/apsl/ and read it before using this file. | |
17 | * | |
18 | * The Original Code and all software distributed under the License are | |
19 | * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER | |
20 | * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES, | |
21 | * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY, | |
22 | * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT. | |
23 | * Please see the License for the specific language governing rights and | |
24 | * limitations under the License. | |
25 | * | |
26 | * @APPLE_OSREFERENCE_LICENSE_HEADER_END@ | |
27 | */ | |
28 | ||
29 | /* | |
30 | * Support for socket filter kernel extensions | |
31 | */ | |
32 | ||
33 | #ifndef NET_KEXT_NET_H | |
34 | #define NET_KEXT_NET_H | |
35 | ||
36 | #include <sys/appleapiopts.h> | |
37 | ||
38 | #include <sys/queue.h> | |
39 | #include <sys/cdefs.h> | |
40 | ||
41 | #ifdef BSD_KERNEL_PRIVATE | |
42 | ||
43 | #include <sys/kpi_socketfilter.h> | |
44 | ||
45 | /* | |
46 | * Internal implementation bits | |
47 | */ | |
48 | ||
49 | struct socket_filter; | |
50 | ||
51 | #define SFEF_DETACHUSEZERO 0x1 /* Detach when use reaches zero */ | |
52 | #define SFEF_UNREGISTERING 0x2 /* Remove due to unregister */ | |
53 | #define SFEF_DETACHXREF 0x4 /* Extra reference held for detach */ | |
54 | ||
55 | struct socket_filter_entry { | |
56 | struct socket_filter_entry *sfe_next_onsocket; | |
57 | struct socket_filter_entry *sfe_next_onfilter; | |
58 | ||
59 | struct socket_filter *sfe_filter; | |
60 | struct socket *sfe_socket; | |
61 | void *sfe_cookie; | |
62 | ||
63 | u_int32_t sfe_flags; | |
64 | }; | |
65 | ||
66 | #define SFF_DETACHING 0x1 | |
67 | ||
68 | struct socket_filter { | |
69 | TAILQ_ENTRY(socket_filter) sf_protosw_next; | |
70 | TAILQ_ENTRY(socket_filter) sf_global_next; | |
71 | struct socket_filter_entry *sf_entry_head; | |
72 | ||
73 | struct protosw *sf_proto; | |
74 | struct sflt_filter sf_filter; | |
75 | u_int32_t sf_flags; | |
76 | u_int32_t sf_usecount; | |
77 | }; | |
78 | ||
79 | TAILQ_HEAD(socket_filter_list, socket_filter); | |
80 | ||
81 | /* Private, internal implementation functions */ | |
82 | void sflt_init(void) __attribute__((section("__TEXT, initcode"))); | |
83 | void sflt_initsock(struct socket *so); | |
84 | void sflt_termsock(struct socket *so); | |
85 | void sflt_use(struct socket *so); | |
86 | void sflt_unuse(struct socket *so); | |
87 | void sflt_notify(struct socket *so, sflt_event_t event, void *param); | |
88 | int sflt_data_in(struct socket *so, const struct sockaddr *from, mbuf_t *data, | |
89 | mbuf_t *control, sflt_data_flag_t flags, int *filtered); | |
90 | int sflt_attach_private(struct socket *so, struct socket_filter *filter, sflt_handle handle, int locked); | |
91 | ||
92 | #endif /* BSD_KERNEL_PRIVATE */ | |
93 | ||
94 | #define NFF_BEFORE 0x01 | |
95 | #define NFF_AFTER 0x02 | |
96 | ||
97 | #define NKE_OK 0 | |
98 | #define NKE_REMOVE -1 | |
99 | ||
100 | /* | |
101 | * Interface structure for inserting an installed socket NKE into an | |
102 | * existing socket. | |
103 | * 'handle' is the NKE to be inserted, 'where' is an insertion point, | |
104 | * and flags dictate the position of the to-be-inserted NKE relative to | |
105 | * the 'where' NKE. If the latter is NULL, the flags indicate "first" | |
106 | * or "last" | |
107 | */ | |
108 | #pragma pack(4) | |
109 | ||
110 | struct so_nke | |
111 | { unsigned int nke_handle; | |
112 | unsigned int nke_where; | |
113 | int nke_flags; /* NFF_BEFORE, NFF_AFTER: net/kext_net.h */ | |
114 | u_int32_t reserved[4]; /* for future use */ | |
115 | }; | |
116 | ||
117 | #pragma pack() | |
118 | ||
119 | #endif /* NET_KEXT_NET_H */ | |
120 |