1/*
2 * Copyright (c) 1999-2013 Apple Inc. All rights reserved.
3 *
4 * @APPLE_OSREFERENCE_LICENSE_HEADER_START@
5 *
6 * This file contains Original Code and/or Modifications of Original Code
7 * as defined in and that are subject to the Apple Public Source License
8 * Version 2.0 (the 'License'). You may not use this file except in
9 * compliance with the License. The rights granted to you under the License
10 * may not be used to create, or enable the creation or redistribution of,
11 * unlawful or unlicensed copies of an Apple operating system, or to
12 * circumvent, violate, or enable the circumvention or violation of, any
13 * terms of an Apple operating system software license agreement.
14 *
15 * Please obtain a copy of the License at
16 * http://www.opensource.apple.com/apsl/ and read it before using this file.
17 *
18 * The Original Code and all software distributed under the License are
19 * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
20 * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
21 * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
22 * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
23 * Please see the License for the specific language governing rights and
24 * limitations under the License.
25 *
26 * @APPLE_OSREFERENCE_LICENSE_HEADER_END@
27 */
28
29/*
30 * Support for socket filter kernel extensions
31 */
32
33#ifndef NET_KEXT_NET_H
34#define NET_KEXT_NET_H
35
36#include <sys/appleapiopts.h>
37
38#include <sys/queue.h>
39#include <sys/cdefs.h>
40#include <sys/types.h>
41
42#ifdef BSD_KERNEL_PRIVATE
43/*
44 * Internal implementation bits
45 */
46#include <sys/kpi_socketfilter.h>
47
48struct socket;
49struct sockopt;
50struct inpcb;
51
52/* Private, internal implementation functions */
53extern int sflt_permission_check(struct inpcb *inp);
54extern void sflt_initsock(struct socket *so);
55extern void sflt_termsock(struct socket *so);
56extern errno_t sflt_attach_internal(struct socket *so, sflt_handle handle);
57extern void sflt_notify(struct socket *so, sflt_event_t event, void *param);
58extern int sflt_ioctl(struct socket *so, u_long cmd, caddr_t data);
59extern int sflt_bind(struct socket *so, const struct sockaddr *nam);
60extern int sflt_listen(struct socket *so);
61extern int sflt_accept(struct socket *head, struct socket *so,
62 const struct sockaddr *local,
63 const struct sockaddr *remote);
64extern int sflt_getsockname(struct socket *so, struct sockaddr **local);
65extern int sflt_getpeername(struct socket *so, struct sockaddr **remote);
66extern int sflt_connectin(struct socket *head,
67 const struct sockaddr *remote);
68extern int sflt_connectout(struct socket *so, const struct sockaddr *nam);
69extern int sflt_setsockopt(struct socket *so, struct sockopt *sopt);
70extern int sflt_getsockopt(struct socket *so, struct sockopt *sopt);
71extern int sflt_data_out(struct socket *so, const struct sockaddr *to,
72 mbuf_t *data, mbuf_t *control, sflt_data_flag_t flags);
73extern int sflt_data_in(struct socket *so, const struct sockaddr *from,
74 mbuf_t *data, mbuf_t *control, sflt_data_flag_t flags);
75
76#endif /* BSD_KERNEL_PRIVATE */
77
78#define NFF_BEFORE 0x01
79#define NFF_AFTER 0x02
80
81#define NKE_OK 0
82#define NKE_REMOVE (-1)
83
84/*
85 * Interface structure for inserting an installed socket NKE into an
86 * existing socket.
87 * 'handle' is the NKE to be inserted, 'where' is an insertion point,
88 * and flags dictate the position of the to-be-inserted NKE relative to
89 * the 'where' NKE. If the latter is NULL, the flags indicate "first"
90 * or "last"
91 */
92#pragma pack(4)
93
94struct so_nke {
95 unsigned int nke_handle;
96 unsigned int nke_where;
97 int nke_flags; /* NFF_BEFORE, NFF_AFTER: net/kext_net.h */
98 u_int32_t reserved[4]; /* for future use */
99};
100
101#pragma pack()
102#endif /* NET_KEXT_NET_H */
103