source: libabac/abac.h @ 0779c99

abac0-leakabac0-meicompt_changesgec13mei-idmei-rt0-nmei_rt0mei_rt2mei_rt2_fix_1meiyap-rt1meiyap1rt2tvf-new-xml
Last change on this file since 0779c99 was 0779c99, checked in by Mike Ryan <mikeryan@…>, 14 years ago

return meaningful error codes when loading certificates

  • Property mode set to 100644
File size: 2.8 KB
Line 
1#ifndef __ABAC_H__
2#define __ABAC_H__
3
4typedef struct _abac_context_t abac_context_t;
5typedef struct _abac_credential_t abac_credential_t;
6typedef struct _abac_role_t abac_role_t;
7
8typedef struct _abac_chunk_t {
9    unsigned char *ptr;
10    int len;
11} abac_chunk_t;
12
13/*
14 * Init/deinit the library.
15 */
16void libabac_init(void);
17void libabac_deinit(void);
18
19/*
20 * ABAC functions, operating on an ABAC context.
21 */
22abac_context_t *abac_context_new(void);
23abac_context_t *abac_context_dup(abac_context_t *ctx);
24void abac_context_free(abac_context_t *ctx);
25
26/* see the bottom of the file for possible return codes */
27int abac_context_load_id_file(abac_context_t *ctx, char *filename);
28int abac_context_load_id_chunk(abac_context_t *ctx, abac_chunk_t cert);
29int abac_context_load_attribute_file(abac_context_t *ctx, char *filename);
30int abac_context_load_attribute_chunk(abac_context_t *ctx, abac_chunk_t cert);
31
32/* load an entire directory full of certs */
33void abac_context_load_directory(abac_context_t *ctx, char *path);
34
35/* abac query, returns a NULL-terminated array of credentials on success, NULL on fail */
36abac_credential_t **abac_context_query(abac_context_t *ctx, char *role, char *principal, int *success);
37void abac_context_query_free(abac_credential_t **credentials);
38
39/*
40 * Operations on credentials
41 */
42abac_role_t *abac_credential_head(abac_credential_t *cred);
43abac_role_t *abac_credential_tail(abac_credential_t *cred);
44abac_chunk_t abac_credential_attribute_cert(abac_credential_t *cred);
45abac_chunk_t abac_credential_issuer_cert(abac_credential_t *cred);
46
47abac_credential_t *abac_credential_dup(abac_credential_t *cred);
48void abac_credential_free(abac_credential_t *cred);
49
50/*
51 * Operations on roles.
52 */
53abac_role_t *abac_role_principal_new(char *principal);
54abac_role_t *abac_role_role_new(char *principal, char *abac_role_name);
55abac_role_t *abac_role_linking_new(char *principal, char *linked_role, char *abac_role_name);
56
57void abac_role_free(abac_role_t *role);
58
59abac_role_t *abac_role_from_string(char *string);
60abac_role_t *abac_role_dup(abac_role_t *role);
61
62int abac_role_is_principal(abac_role_t *role);
63int abac_role_is_role(abac_role_t *role);
64int abac_role_is_linking(abac_role_t *role);
65
66char *abac_role_string(abac_role_t *role);
67char *abac_role_linked_role(abac_role_t *role);
68char *abac_role_role_name(abac_role_t *role);
69char *abac_role_principal(abac_role_t *role);
70
71char *abac_role_attr_key(abac_role_t *head_role, abac_role_t *tail_role);
72
73/*
74 * Error codes for loading certificates.
75 */
76#define ABAC_CERT_SUCCESS           0   // certificate loaded, all is well
77#define ABAC_CERT_INVALID           -1  // invalid format; also file not found
78#define ABAC_CERT_BAD_SIG           -2  // invalid signature
79#define ABAC_CERT_MISSING_ISSUER    -3  // missing ID cert that issued the attribute cert
80
81#endif /* __ABAC_H__ */
Note: See TracBrowser for help on using the repository browser.