vserver 2.0 rc7

[linux-2.6.git] / security / selinux / ss / constraint.h

diff --git a/security/selinux/ss/constraint.h b/security/selinux/ss/constraint.h
index e394fc9..149dda7 100644 (file)
--- a/security/selinux/ss/constraint.h
+++ b/security/selinux/ss/constraint.h
@@ -31,6 +31,13 @@ struct constraint_expr {
 #define CEXPR_ROLE 2           /* role */
 #define CEXPR_TYPE 4           /* type */
 #define CEXPR_TARGET 8         /* target if set, source otherwise */
+#define CEXPR_XTARGET 16       /* special 3rd target for validatetrans rule */
+#define CEXPR_L1L2 32          /* low level 1 vs. low level 2 */
+#define CEXPR_L1H2 64          /* low level 1 vs. high level 2 */
+#define CEXPR_H1L2 128         /* high level 1 vs. low level 2 */
+#define CEXPR_H1H2 256         /* high level 1 vs. high level 2 */
+#define CEXPR_L1H1 512         /* low level 1 vs. high level 1 */
+#define CEXPR_L2H2 1024                /* low level 2 vs. high level 2 */
        u32 attr;               /* attribute */
 
 #define CEXPR_EQ     1         /* == or eq */