/* SPDX-License-Identifier: GPL-2.0-only *//* * AppArmor security module * * Code to provide backwards compatibility with older policy versions, * by converting/mapping older policy formats into the newer internal * formats. * * Copyright 2022 Canonical Ltd. */ #ifndef __POLICY_COMPAT_H#define __POLICY_COMPAT_H #include "policy.h" #define K_ABI_MASK 0x3ff#define FORCE_COMPLAIN_FLAG 0x800#define VERSION_LT(X, Y) (((X) & K_ABI_MASK) < ((Y) & K_ABI_MASK))#define VERSION_LE(X, Y) (((X) & K_ABI_MASK) <= ((Y) & K_ABI_MASK))#define VERSION_GT(X, Y) (((X) & K_ABI_MASK) > ((Y) & K_ABI_MASK)) #define v5	5	/* base version */#define v6	6	/* per entry policydb mediation check */#define v7	7#define v8	8	/* full network masking */#define v9	9	/* xbits are used as permission bits in policydb */ int aa_compat_map_xmatch(struct aa_policydb *policy);int aa_compat_map_policy(struct aa_policydb *policy, u32 version);int aa_compat_map_file(struct aa_policydb *policy); #endif /* __POLICY_COMPAT_H */