Release 4.7 include/uapi/linux/pfkeyv2.h

/* PF_KEY user interface, this is defined by rfc2367 so
 * do not make arbitrary modifications or else this header
 * file will not be compliant.
 */

#ifndef _LINUX_PFKEY2_H

#define _LINUX_PFKEY2_H

#include <linux/types.h>


#define PF_KEY_V2		2

#define PFKEYV2_REVISION	199806L


struct sadb_msg {
	
__u8		sadb_msg_version;
	
__u8		sadb_msg_type;
	
__u8		sadb_msg_errno;
	
__u8		sadb_msg_satype;
	
__u16	sadb_msg_len;
	
__u16	sadb_msg_reserved;
	
__u32	sadb_msg_seq;
	
__u32	sadb_msg_pid;
} __attribute__((packed));
/* sizeof(struct sadb_msg) == 16 */


struct sadb_ext {
	
__u16	sadb_ext_len;
	
__u16	sadb_ext_type;
} __attribute__((packed));
/* sizeof(struct sadb_ext) == 4 */


struct sadb_sa {
	
__u16	sadb_sa_len;
	
__u16	sadb_sa_exttype;
	
__be32		sadb_sa_spi;
	
__u8		sadb_sa_replay;
	
__u8		sadb_sa_state;
	
__u8		sadb_sa_auth;
	
__u8		sadb_sa_encrypt;
	
__u32	sadb_sa_flags;
} __attribute__((packed));
/* sizeof(struct sadb_sa) == 16 */


struct sadb_lifetime {
	
__u16	sadb_lifetime_len;
	
__u16	sadb_lifetime_exttype;
	
__u32	sadb_lifetime_allocations;
	
__u64	sadb_lifetime_bytes;
	
__u64	sadb_lifetime_addtime;
	
__u64	sadb_lifetime_usetime;
} __attribute__((packed));
/* sizeof(struct sadb_lifetime) == 32 */


struct sadb_address {
	
__u16	sadb_address_len;
	
__u16	sadb_address_exttype;
	
__u8		sadb_address_proto;
	
__u8		sadb_address_prefixlen;
	
__u16	sadb_address_reserved;
} __attribute__((packed));
/* sizeof(struct sadb_address) == 8 */


struct sadb_key {
	
__u16	sadb_key_len;
	
__u16	sadb_key_exttype;
	
__u16	sadb_key_bits;
	
__u16	sadb_key_reserved;
} __attribute__((packed));
/* sizeof(struct sadb_key) == 8 */


struct sadb_ident {
	
__u16	sadb_ident_len;
	
__u16	sadb_ident_exttype;
	
__u16	sadb_ident_type;
	
__u16	sadb_ident_reserved;
	
__u64	sadb_ident_id;
} __attribute__((packed));
/* sizeof(struct sadb_ident) == 16 */


struct sadb_sens {
	
__u16	sadb_sens_len;
	
__u16	sadb_sens_exttype;
	
__u32	sadb_sens_dpd;
	
__u8		sadb_sens_sens_level;
	
__u8		sadb_sens_sens_len;
	
__u8		sadb_sens_integ_level;
	
__u8		sadb_sens_integ_len;
	
__u32	sadb_sens_reserved;
} __attribute__((packed));
/* sizeof(struct sadb_sens) == 16 */

/* followed by:
        __u64   sadb_sens_bitmap[sens_len];
        __u64   sadb_integ_bitmap[integ_len];  */


struct sadb_prop {
	
__u16	sadb_prop_len;
	
__u16	sadb_prop_exttype;
	
__u8		sadb_prop_replay;
	
__u8		sadb_prop_reserved[3];
} __attribute__((packed));
/* sizeof(struct sadb_prop) == 8 */

/* followed by:
        struct sadb_comb sadb_combs[(sadb_prop_len +
                sizeof(__u64) - sizeof(struct sadb_prop)) /
                sizeof(struct sadb_comb)]; */


struct sadb_comb {
	
__u8		sadb_comb_auth;
	
__u8		sadb_comb_encrypt;
	
__u16	sadb_comb_flags;
	
__u16	sadb_comb_auth_minbits;
	
__u16	sadb_comb_auth_maxbits;
	
__u16	sadb_comb_encrypt_minbits;
	
__u16	sadb_comb_encrypt_maxbits;
	
__u32	sadb_comb_reserved;
	
__u32	sadb_comb_soft_allocations;
	
__u32	sadb_comb_hard_allocations;
	
__u64	sadb_comb_soft_bytes;
	
__u64	sadb_comb_hard_bytes;
	
__u64	sadb_comb_soft_addtime;
	
__u64	sadb_comb_hard_addtime;
	
__u64	sadb_comb_soft_usetime;
	
__u64	sadb_comb_hard_usetime;
} __attribute__((packed));
/* sizeof(struct sadb_comb) == 72 */


struct sadb_supported {
	
__u16	sadb_supported_len;
	
__u16	sadb_supported_exttype;
	
__u32	sadb_supported_reserved;
} __attribute__((packed));
/* sizeof(struct sadb_supported) == 8 */

/* followed by:
        struct sadb_alg sadb_algs[(sadb_supported_len +
                sizeof(__u64) - sizeof(struct sadb_supported)) /
                sizeof(struct sadb_alg)]; */


struct sadb_alg {
	
__u8		sadb_alg_id;
	
__u8		sadb_alg_ivlen;
	
__u16	sadb_alg_minbits;
	
__u16	sadb_alg_maxbits;
	
__u16	sadb_alg_reserved;
} __attribute__((packed));
/* sizeof(struct sadb_alg) == 8 */


struct sadb_spirange {
	
__u16	sadb_spirange_len;
	
__u16	sadb_spirange_exttype;
	
__u32	sadb_spirange_min;
	
__u32	sadb_spirange_max;
	
__u32	sadb_spirange_reserved;
} __attribute__((packed));
/* sizeof(struct sadb_spirange) == 16 */


struct sadb_x_kmprivate {
	
__u16	sadb_x_kmprivate_len;
	
__u16	sadb_x_kmprivate_exttype;
	
__u32	sadb_x_kmprivate_reserved;
} __attribute__((packed));
/* sizeof(struct sadb_x_kmprivate) == 8 */


struct sadb_x_sa2 {
	
__u16	sadb_x_sa2_len;
	
__u16	sadb_x_sa2_exttype;
	
__u8		sadb_x_sa2_mode;
	
__u8		sadb_x_sa2_reserved1;
	
__u16	sadb_x_sa2_reserved2;
	
__u32	sadb_x_sa2_sequence;
	
__u32	sadb_x_sa2_reqid;
} __attribute__((packed));
/* sizeof(struct sadb_x_sa2) == 16 */


struct sadb_x_policy {
	
__u16	sadb_x_policy_len;
	
__u16	sadb_x_policy_exttype;
	
__u16	sadb_x_policy_type;
	
__u8		sadb_x_policy_dir;
	
__u8		sadb_x_policy_reserved;
	
__u32	sadb_x_policy_id;
	
__u32	sadb_x_policy_priority;
} __attribute__((packed));
/* sizeof(struct sadb_x_policy) == 16 */


struct sadb_x_ipsecrequest {
	
__u16	sadb_x_ipsecrequest_len;
	
__u16	sadb_x_ipsecrequest_proto;
	
__u8		sadb_x_ipsecrequest_mode;
	
__u8		sadb_x_ipsecrequest_level;
	
__u16	sadb_x_ipsecrequest_reserved1;
	
__u32	sadb_x_ipsecrequest_reqid;
	
__u32	sadb_x_ipsecrequest_reserved2;
} __attribute__((packed));
/* sizeof(struct sadb_x_ipsecrequest) == 16 */

/* This defines the TYPE of Nat Traversal in use.  Currently only one
 * type of NAT-T is supported, draft-ietf-ipsec-udp-encaps-06
 */

struct sadb_x_nat_t_type {
	
__u16	sadb_x_nat_t_type_len;
	
__u16	sadb_x_nat_t_type_exttype;
	
__u8		sadb_x_nat_t_type_type;
	
__u8		sadb_x_nat_t_type_reserved[3];
} __attribute__((packed));
/* sizeof(struct sadb_x_nat_t_type) == 8 */

/* Pass a NAT Traversal port (Source or Dest port) */

struct sadb_x_nat_t_port {
	
__u16	sadb_x_nat_t_port_len;
	
__u16	sadb_x_nat_t_port_exttype;
	
__be16		sadb_x_nat_t_port_port;
	
__u16	sadb_x_nat_t_port_reserved;
} __attribute__((packed));
/* sizeof(struct sadb_x_nat_t_port) == 8 */

/* Generic LSM security context */

struct sadb_x_sec_ctx {
	
__u16	sadb_x_sec_len;
	
__u16	sadb_x_sec_exttype;
	
__u8		sadb_x_ctx_alg;  /* LSMs: e.g., selinux == 1 */
	
__u8		sadb_x_ctx_doi;
	
__u16	sadb_x_ctx_len;
} __attribute__((packed));
/* sizeof(struct sadb_sec_ctx) = 8 */

/* Used by MIGRATE to pass addresses IKE will use to perform
 * negotiation with the peer */

struct sadb_x_kmaddress {
	
__u16	sadb_x_kmaddress_len;
	
__u16	sadb_x_kmaddress_exttype;
	
__u32	sadb_x_kmaddress_reserved;
} __attribute__((packed));
/* sizeof(struct sadb_x_kmaddress) == 8 */

/* To specify the SA dump filter */

struct sadb_x_filter {
	
__u16	sadb_x_filter_len;
	
__u16	sadb_x_filter_exttype;
	
__u32	sadb_x_filter_saddr[4];
	
__u32	sadb_x_filter_daddr[4];
	
__u16	sadb_x_filter_family;
	
__u8	sadb_x_filter_splen;
	
__u8	sadb_x_filter_dplen;
} __attribute__((packed));
/* sizeof(struct sadb_x_filter) == 40 */

/* Message types */

#define SADB_RESERVED		0

#define SADB_GETSPI		1

#define SADB_UPDATE		2

#define SADB_ADD		3

#define SADB_DELETE		4

#define SADB_GET		5

#define SADB_ACQUIRE		6

#define SADB_REGISTER		7

#define SADB_EXPIRE		8

#define SADB_FLUSH		9

#define SADB_DUMP		10

#define SADB_X_PROMISC		11

#define SADB_X_PCHANGE		12

#define SADB_X_SPDUPDATE	13

#define SADB_X_SPDADD		14

#define SADB_X_SPDDELETE	15

#define SADB_X_SPDGET		16

#define SADB_X_SPDACQUIRE	17

#define SADB_X_SPDDUMP		18

#define SADB_X_SPDFLUSH		19

#define SADB_X_SPDSETIDX	20

#define SADB_X_SPDEXPIRE	21

#define SADB_X_SPDDELETE2	22

#define SADB_X_NAT_T_NEW_MAPPING	23

#define SADB_X_MIGRATE		24

#define SADB_MAX		24

/* Security Association flags */

#define SADB_SAFLAGS_PFS	1

#define SADB_SAFLAGS_NOPMTUDISC	0x20000000

#define SADB_SAFLAGS_DECAP_DSCP	0x40000000

#define SADB_SAFLAGS_NOECN	0x80000000

/* Security Association states */

#define SADB_SASTATE_LARVAL	0

#define SADB_SASTATE_MATURE	1

#define SADB_SASTATE_DYING	2

#define SADB_SASTATE_DEAD	3

#define SADB_SASTATE_MAX	3

/* Security Association types */

#define SADB_SATYPE_UNSPEC	0

#define SADB_SATYPE_AH		2

#define SADB_SATYPE_ESP		3

#define SADB_SATYPE_RSVP	5

#define SADB_SATYPE_OSPFV2	6

#define SADB_SATYPE_RIPV2	7

#define SADB_SATYPE_MIP		8

#define SADB_X_SATYPE_IPCOMP	9

#define SADB_SATYPE_MAX		9

/* Authentication algorithms */

#define SADB_AALG_NONE			0

#define SADB_AALG_MD5HMAC		2

#define SADB_AALG_SHA1HMAC		3

#define SADB_X_AALG_SHA2_256HMAC	5

#define SADB_X_AALG_SHA2_384HMAC	6

#define SADB_X_AALG_SHA2_512HMAC	7

#define SADB_X_AALG_RIPEMD160HMAC	8

#define SADB_X_AALG_AES_XCBC_MAC	9

#define SADB_X_AALG_NULL		251	
/* kame */

#define SADB_AALG_MAX			251

/* Encryption algorithms */

#define SADB_EALG_NONE			0

#define SADB_EALG_DESCBC		2

#define SADB_EALG_3DESCBC		3

#define SADB_X_EALG_CASTCBC		6

#define SADB_X_EALG_BLOWFISHCBC		7

#define SADB_EALG_NULL			11

#define SADB_X_EALG_AESCBC		12

#define SADB_X_EALG_AESCTR		13

#define SADB_X_EALG_AES_CCM_ICV8	14

#define SADB_X_EALG_AES_CCM_ICV12	15

#define SADB_X_EALG_AES_CCM_ICV16	16

#define SADB_X_EALG_AES_GCM_ICV8	18

#define SADB_X_EALG_AES_GCM_ICV12	19

#define SADB_X_EALG_AES_GCM_ICV16	20

#define SADB_X_EALG_CAMELLIACBC		22

#define SADB_X_EALG_NULL_AES_GMAC	23

#define SADB_EALG_MAX                   253 
/* last EALG */
/* private allocations should use 249-255 (RFC2407) */

#define SADB_X_EALG_SERPENTCBC  252     
/* draft-ietf-ipsec-ciph-aes-cbc-00 */

#define SADB_X_EALG_TWOFISHCBC  253     
/* draft-ietf-ipsec-ciph-aes-cbc-00 */

/* Compression algorithms */

#define SADB_X_CALG_NONE		0

#define SADB_X_CALG_OUI			1

#define SADB_X_CALG_DEFLATE		2

#define SADB_X_CALG_LZS			3

#define SADB_X_CALG_LZJH		4

#define SADB_X_CALG_MAX			4

/* Extension Header values */

#define SADB_EXT_RESERVED		0

#define SADB_EXT_SA			1

#define SADB_EXT_LIFETIME_CURRENT	2

#define SADB_EXT_LIFETIME_HARD		3

#define SADB_EXT_LIFETIME_SOFT		4

#define SADB_EXT_ADDRESS_SRC		5

#define SADB_EXT_ADDRESS_DST		6

#define SADB_EXT_ADDRESS_PROXY		7

#define SADB_EXT_KEY_AUTH		8

#define SADB_EXT_KEY_ENCRYPT		9

#define SADB_EXT_IDENTITY_SRC		10

#define SADB_EXT_IDENTITY_DST		11

#define SADB_EXT_SENSITIVITY		12

#define SADB_EXT_PROPOSAL		13

#define SADB_EXT_SUPPORTED_AUTH		14

#define SADB_EXT_SUPPORTED_ENCRYPT	15

#define SADB_EXT_SPIRANGE		16

#define SADB_X_EXT_KMPRIVATE		17

#define SADB_X_EXT_POLICY		18

#define SADB_X_EXT_SA2			19
/* The next four entries are for setting up NAT Traversal */

#define SADB_X_EXT_NAT_T_TYPE		20

#define SADB_X_EXT_NAT_T_SPORT		21

#define SADB_X_EXT_NAT_T_DPORT		22

#define SADB_X_EXT_NAT_T_OA		23

#define SADB_X_EXT_SEC_CTX		24
/* Used with MIGRATE to pass @ to IKE for negotiation */

#define SADB_X_EXT_KMADDRESS		25

#define SADB_X_EXT_FILTER		26

#define SADB_EXT_MAX			26

/* Identity Extension values */

#define SADB_IDENTTYPE_RESERVED	0

#define SADB_IDENTTYPE_PREFIX	1

#define SADB_IDENTTYPE_FQDN	2

#define SADB_IDENTTYPE_USERFQDN	3

#define SADB_IDENTTYPE_MAX	3

#endif /* !(_LINUX_PFKEY2_H) */
Overall Contributors
Person
Tokens
Prop
Commits
CommitProp
alexey kuznetsov
alexey kuznetsov
727
63.33%
2
8.70%
arnd bergmann
arnd bergmann
120
10.45%
1
4.35%
derek atkins
derek atkins
66
5.75%
1
4.35%
james morris
james morris
59
5.14%
2
8.70%
nicolas dichtel
nicolas dichtel
45
3.92%
1
4.35%
herbert xu
herbert xu
40
3.48%
5
21.74%
trent jaeger
trent jaeger
28
2.44%
1
4.35%
arnaud ebalard
arnaud ebalard
24
2.09%
1
4.35%
kyle mcmartin
kyle mcmartin
13
1.13%
1
4.35%
shinta sugimoto
shinta sugimoto
5
0.44%
1
4.35%
joy latten
joy latten
4
0.35%
1
4.35%
noriaki takamiya
noriaki takamiya
4
0.35%
1
4.35%
tobias brunner
tobias brunner
4
0.35%
1
4.35%
kazunori miyazawa
kazunori miyazawa
4
0.35%
1
4.35%
david s. miller
david s. miller
2
0.17%
1
4.35%
al viro
al viro
2
0.17%
1
4.35%
brian buesker
brian buesker
1
0.09%
1
4.35%
Total
1148
100.00%
23
100.00%
  
Directory: include/uapi/linux

Information contained on this website is for historical information purposes only and does not indicate or represent copyright ownership.