mirror of
https://github.com/Qortal/Brooklyn.git
synced 2025-02-07 23:03:06 +00:00
2a709f28fa
* 0day explit mitigation * Memory corruption prevention * Privilege escalation prevention * Buffer over flow prevention * File System corruption defense * Thread escape prevention This may very well be the most intensive inclusion to BrooklynR. This will not be part of an x86 suite nor it will be released as tool kit. The security core toolkit will remain part of kernel base.
41 lines
783 B
C
41 lines
783 B
C
#ifndef __UAPI_TC_IFE_H
|
|
#define __UAPI_TC_IFE_H
|
|
|
|
#include <linux/types.h>
|
|
#include <linux/pkt_cls.h>
|
|
|
|
#define TCA_ACT_IFE 25
|
|
/* Flag bits for now just encoding/decoding; mutually exclusive */
|
|
#define IFE_ENCODE 1
|
|
#define IFE_DECODE 0
|
|
|
|
struct tc_ife {
|
|
tc_gen;
|
|
__u16 flags;
|
|
};
|
|
|
|
/*XXX: We need to encode the total number of bytes consumed */
|
|
enum {
|
|
TCA_IFE_UNSPEC,
|
|
TCA_IFE_PARMS,
|
|
TCA_IFE_TM,
|
|
TCA_IFE_DMAC,
|
|
TCA_IFE_SMAC,
|
|
TCA_IFE_TYPE,
|
|
TCA_IFE_METALST,
|
|
TCA_IFE_PAD,
|
|
__TCA_IFE_MAX
|
|
};
|
|
#define TCA_IFE_MAX (__TCA_IFE_MAX - 1)
|
|
|
|
#define IFE_META_SKBMARK 1
|
|
#define IFE_META_HASHID 2
|
|
#define IFE_META_PRIO 3
|
|
#define IFE_META_QMAP 4
|
|
#define IFE_META_TCINDEX 5
|
|
/*Can be overridden at runtime by module option*/
|
|
#define __IFE_META_MAX 6
|
|
#define IFE_META_MAX (__IFE_META_MAX - 1)
|
|
|
|
#endif
|