FM / dns

/usr/include/dns

Name	Size	Mode	Actions
acl.h	6432	0644	edit dl rm
adb.h	18372	0644	edit dl rm
byaddr.h	4513	0644	edit dl rm
cache.h	7591	0644	edit dl rm
callbacks.h	2240	0644	edit dl rm
cert.h	1987	0644	edit dl rm
compress.h	6224	0644	edit dl rm
db.h	41302	0644	edit dl rm
dbiterator.h	7871	0644	edit dl rm
dbtable.h	3691	0644	edit dl rm
diff.h	7628	0644	edit dl rm
dispatch.h	13566	0644	edit dl rm
dlz.h	11152	0644	edit dl rm
dnssec.h	11101	0644	edit dl rm
ds.h	1912	0644	edit dl rm
dynamic_db.h	1892	0644	edit dl rm
enumclass.h	1787	0644	edit dl rm
enumtype.h	6729	0644	edit dl rm
events.h	3959	0644	edit dl rm
fixedname.h	2237	0644	edit dl rm
forward.h	3605	0644	edit dl rm
iptable.h	1922	0644	edit dl rm
journal.h	8473	0644	edit dl rm
keyflags.h	1803	0644	edit dl rm
keytable.h	10212	0644	edit dl rm
keyvalues.h	4318	0644	edit dl rm
lib.h	1718	0644	edit dl rm
log.h	4143	0644	edit dl rm
master.h	9396	0644	edit dl rm
masterdump.h	9657	0644	edit dl rm
message.h	37972	0644	edit dl rm
name.h	35862	0644	edit dl rm
ncache.h	5184	0644	edit dl rm
nsec.h	2328	0644	edit dl rm
peer.h	5437	0644	edit dl rm
portlist.h	2539	0644	edit dl rm
private.h	1912	0644	edit dl rm
rbt.h	34526	0644	edit dl rm
rcode.h	3003	0644	edit dl rm
rdata.h	21333	0644	edit dl rm
rdataclass.h	2317	0644	edit dl rm
rdatalist.h	2895	0644	edit dl rm
rdataset.h	19824	0644	edit dl rm
rdatasetiter.h	4455	0644	edit dl rm
rdataslab.h	4679	0644	edit dl rm
rdatastruct.h	77858	0644	edit dl rm
rdatatype.h	2371	0644	edit dl rm
request.h	10448	0644	edit dl rm
resolver.h	16248	0644	edit dl rm
result.h	8493	0644	edit dl rm
rootns.h	1429	0644	edit dl rm
rpz.h	5438	0644	edit dl rm
rrl.h	6995	0644	edit dl rm
sdb.h	7341	0644	edit dl rm
sdlz.h	14440	0644	edit dl rm
secalg.h	2235	0644	edit dl rm
secproto.h	2082	0644	edit dl rm
soa.h	2750	0644	edit dl rm
ssu.h	6773	0644	edit dl rm
tcpmsg.h	3649	0644	edit dl rm
time.h	2093	0644	edit dl rm
tkey.h	8145	0644	edit dl rm
tsig.h	8727	0644	edit dl rm
ttl.h	2126	0644	edit dl rm
types.h	12295	0644	edit dl rm
validator.h	7524	0644	edit dl rm
version.h	1207	0644	edit dl rm
view.h	29037	0644	edit dl rm
xfrin.h	3130	0644	edit dl rm
zone.h	46200	0644	edit dl rm
zonekey.h	1283	0644	edit dl rm
zt.h	4644	0644	edit dl rm

Edit: /usr/include/dns/ssu.h (6773B)

/*
 * Copyright (C) 2004-2008, 2010, 2011  Internet Systems Consortium, Inc. ("ISC")
 * Copyright (C) 2000, 2001, 2003  Internet Software Consortium.
 *
 * Permission to use, copy, modify, and/or distribute this software for any
 * purpose with or without fee is hereby granted, provided that the above
 * copyright notice and this permission notice appear in all copies.
 *
 * THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
 * REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
 * AND FITNESS.  IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
 * INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
 * LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
 * OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
 * PERFORMANCE OF THIS SOFTWARE.
 */

/* $Id: ssu.h,v 1.28 2011-01-06 23:47:00 tbox Exp $ */

#ifndef DNS_SSU_H
#define DNS_SSU_H 1

/*! \file dns/ssu.h */

#include <isc/lang.h>

#include <dns/types.h>
#include <dst/dst.h>

ISC_LANG_BEGINDECLS

#define DNS_SSUMATCHTYPE_NAME		0
#define DNS_SSUMATCHTYPE_SUBDOMAIN	1
#define DNS_SSUMATCHTYPE_WILDCARD	2
#define DNS_SSUMATCHTYPE_SELF		3
#define DNS_SSUMATCHTYPE_SELFSUB	4
#define DNS_SSUMATCHTYPE_SELFWILD	5
#define DNS_SSUMATCHTYPE_SELFKRB5	6
#define DNS_SSUMATCHTYPE_SELFMS		7
#define DNS_SSUMATCHTYPE_SUBDOMAINMS	8
#define DNS_SSUMATCHTYPE_SUBDOMAINKRB5	9
#define DNS_SSUMATCHTYPE_TCPSELF	10
#define DNS_SSUMATCHTYPE_6TO4SELF	11
#define DNS_SSUMATCHTYPE_EXTERNAL	12
#define DNS_SSUMATCHTYPE_DLZ		13
#define DNS_SSUMATCHTYPE_MAX 		12  /* max value */

isc_result_t
dns_ssutable_create(isc_mem_t *mctx, dns_ssutable_t **table);
/*%<
 *	Creates a table that will be used to store simple-secure-update rules.
 *	Note: all locking must be provided by the client.
 *
 *	Requires:
 *\li		'mctx' is a valid memory context
 *\li		'table' is not NULL, and '*table' is NULL
 *
 *	Returns:
 *\li		ISC_R_SUCCESS
 *\li		ISC_R_NOMEMORY
 */

isc_result_t
dns_ssutable_createdlz(isc_mem_t *mctx, dns_ssutable_t **tablep,
		       dns_dlzdb_t *dlzdatabase);
/*%<
 * Create an SSU table that contains a dlzdatabase pointer, and a
 * single rule with matchtype DNS_SSUMATCHTYPE_DLZ. This type of SSU
 * table is used by writeable DLZ drivers to offload authorization for
 * updates to the driver.
 */

void
dns_ssutable_attach(dns_ssutable_t *source, dns_ssutable_t **targetp);
/*%<
 *	Attach '*targetp' to 'source'.
 *
 *	Requires:
 *\li		'source' is a valid SSU table
 *\li		'targetp' points to a NULL dns_ssutable_t *.
 *
 *	Ensures:
 *\li		*targetp is attached to source.
 */

void
dns_ssutable_detach(dns_ssutable_t **tablep);
/*%<
 *	Detach '*tablep' from its simple-secure-update rule table.
 *
 *	Requires:
 *\li		'tablep' points to a valid dns_ssutable_t
 *
 *	Ensures:
 *\li		*tablep is NULL
 *\li		If '*tablep' is the last reference to the SSU table, all
 *			resources used by the table will be freed.
 */

isc_result_t
dns_ssutable_addrule(dns_ssutable_t *table, isc_boolean_t grant,
		     dns_name_t *identity, unsigned int matchtype,
		     dns_name_t *name, unsigned int ntypes,
		     dns_rdatatype_t *types);
/*%<
 *	Adds a new rule to a simple-secure-update rule table.  The rule
 *	either grants or denies update privileges of an identity (or set of
 *	identities) to modify a name (or set of names) or certain types present
 *	at that name.
 *
 *	Notes:
 *\li		If 'matchtype' is of SELF type, this rule only matches if the
 *              name to be updated matches the signing identity.
 *
 *\li		If 'ntypes' is 0, this rule applies to all types except
 *		NS, SOA, RRSIG, and NSEC.
 *
 *\li		If 'types' includes ANY, this rule applies to all types
 *		except NSEC.
 *
 *	Requires:
 *\li		'table' is a valid SSU table
 *\li		'identity' is a valid absolute name
 *\li		'matchtype' must be one of the defined constants.
 *\li		'name' is a valid absolute name
 *\li		If 'ntypes' > 0, 'types' must not be NULL
 *
 *	Returns:
 *\li		ISC_R_SUCCESS
 *\li		ISC_R_NOMEMORY
 */

isc_boolean_t
dns_ssutable_checkrules(dns_ssutable_t *table, dns_name_t *signer,
			dns_name_t *name, isc_netaddr_t *tcpaddr,
			dns_rdatatype_t type, const dst_key_t *key);
/*%<
 *	Checks that the attempted update of (name, type) is allowed according
 *	to the rules specified in the simple-secure-update rule table.  If
 *	no rules are matched, access is denied.
 *
 *	Notes:
 *		'tcpaddr' should only be set if the request received
 *		via TCP.  This provides a weak assurance that the
 *		request was not spoofed.  'tcpaddr' is to to validate
 *		DNS_SSUMATCHTYPE_TCPSELF and DNS_SSUMATCHTYPE_6TO4SELF
 *		rules.
 *
 *		For DNS_SSUMATCHTYPE_TCPSELF the addresses are mapped to
 *		the standard reverse names under IN-ADDR.ARPA and IP6.ARPA.
 *		RFC 1035, Section 3.5, "IN-ADDR.ARPA domain" and RFC 3596,
 *		Section 2.5, "IP6.ARPA Domain".
 *
 *		For DNS_SSUMATCHTYPE_6TO4SELF, IPv4 address are converted
 *		to a 6to4 prefix (48 bits) per the rules in RFC 3056.  Only
 *		the top	48 bits of the IPv6 address are mapped to the reverse
 *		name. This is independent of whether the most significant 16
 *		bits match 2002::/16, assigned for 6to4 prefixes, or not.
 *
 *	Requires:
 *\li		'table' is a valid SSU table
 *\li		'signer' is NULL or a valid absolute name
 *\li		'tcpaddr' is NULL or a valid network address.
 *\li		'name' is a valid absolute name
 */

/*% Accessor functions to extract rule components */
isc_boolean_t	dns_ssurule_isgrant(const dns_ssurule_t *rule);
/*% Accessor functions to extract rule components */
dns_name_t *	dns_ssurule_identity(const dns_ssurule_t *rule);
/*% Accessor functions to extract rule components */
unsigned int	dns_ssurule_matchtype(const dns_ssurule_t *rule);
/*% Accessor functions to extract rule components */
dns_name_t *	dns_ssurule_name(const dns_ssurule_t *rule);
/*% Accessor functions to extract rule components */
unsigned int	dns_ssurule_types(const dns_ssurule_t *rule,
				  dns_rdatatype_t **types);

isc_result_t	dns_ssutable_firstrule(const dns_ssutable_t *table,
				       dns_ssurule_t **rule);
/*%<
 * Initiates a rule iterator.  There is no need to maintain any state.
 *
 * Returns:
 *\li	#ISC_R_SUCCESS
 *\li	#ISC_R_NOMORE
 */

isc_result_t	dns_ssutable_nextrule(dns_ssurule_t *rule,
				      dns_ssurule_t **nextrule);
/*%<
 * Returns the next rule in the table.
 *
 * Returns:
 *\li	#ISC_R_SUCCESS
 *\li	#ISC_R_NOMORE
 */

/*%<
 * Check a policy rule via an external application
 */
isc_boolean_t
dns_ssu_external_match(dns_name_t *identity, dns_name_t *signer,
		       dns_name_t *name, isc_netaddr_t *tcpaddr,
		       dns_rdatatype_t type, const dst_key_t *key,
		       isc_mem_t *mctx);

ISC_LANG_ENDDECLS

#endif /* DNS_SSU_H */

cmd: