mirror of
https://gitlab.com/libvirt/libvirt.git
synced 2025-02-15 08:01:31 +00:00
4dce6eee5c
Although the next commit will eliminate the one current use of virFirewallRuleToString(), a future commit will once again have a use for it, but in a different source file so it will need to be a global function rather than static. Make that change now so that we don't get a compile error from having an unused static function in the next commit. (The arg list is also changed to include the name of the command as a separate argument rather than just assuming that it can be derived from the rule's layer (which is correct for iptables, but won't be correct for nftables)). Signed-off-by: Laine Stump <laine@redhat.com> Reviewed-by: Ján Tomko <jtomko@redhat.com>
116 lines
3.8 KiB
C
116 lines
3.8 KiB
C
/*
|
|
* virfirewall.h: integration with firewalls
|
|
*
|
|
* Copyright (C) 2014 Red Hat, Inc.
|
|
*
|
|
* This library is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU Lesser General Public
|
|
* License as published by the Free Software Foundation; either
|
|
* version 2.1 of the License, or (at your option) any later version.
|
|
*
|
|
* This library is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
* Lesser General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Lesser General Public
|
|
* License along with this library. If not, see
|
|
* <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
#pragma once
|
|
|
|
#include "internal.h"
|
|
|
|
typedef struct _virFirewall virFirewall;
|
|
|
|
typedef struct _virFirewallRule virFirewallRule;
|
|
|
|
typedef enum {
|
|
VIR_FIREWALL_LAYER_ETHERNET,
|
|
VIR_FIREWALL_LAYER_IPV4,
|
|
VIR_FIREWALL_LAYER_IPV6,
|
|
|
|
VIR_FIREWALL_LAYER_LAST,
|
|
} virFirewallLayer;
|
|
|
|
virFirewall *virFirewallNew(void);
|
|
|
|
void virFirewallFree(virFirewall *firewall);
|
|
|
|
/**
|
|
* virFirewallAddRule:
|
|
* @firewall: firewall ruleset to add to
|
|
* @layer: the firewall layer to change
|
|
* @...: NULL terminated list of strings for the rule
|
|
*
|
|
* Add any type of rule to the firewall ruleset.
|
|
*
|
|
* Returns the new rule
|
|
*/
|
|
#define virFirewallAddRule(firewall, layer, ...) \
|
|
virFirewallAddRuleFull(firewall, layer, false, NULL, NULL, __VA_ARGS__)
|
|
|
|
typedef int (*virFirewallQueryCallback)(virFirewall *firewall,
|
|
virFirewallLayer layer,
|
|
const char *const *lines,
|
|
void *opaque);
|
|
|
|
virFirewallRule *virFirewallAddRuleFull(virFirewall *firewall,
|
|
virFirewallLayer layer,
|
|
bool ignoreErrors,
|
|
virFirewallQueryCallback cb,
|
|
void *opaque,
|
|
...)
|
|
G_GNUC_NULL_TERMINATED;
|
|
|
|
void virFirewallRemoveRule(virFirewall *firewall,
|
|
virFirewallRule *rule);
|
|
|
|
void virFirewallRuleAddArg(virFirewall *firewall,
|
|
virFirewallRule *rule,
|
|
const char *arg)
|
|
ATTRIBUTE_NONNULL(3);
|
|
|
|
void virFirewallRuleAddArgFormat(virFirewall *firewall,
|
|
virFirewallRule *rule,
|
|
const char *fmt, ...)
|
|
ATTRIBUTE_NONNULL(3) G_GNUC_PRINTF(3, 4);
|
|
|
|
void virFirewallRuleAddArgSet(virFirewall *firewall,
|
|
virFirewallRule *rule,
|
|
const char *const *args)
|
|
ATTRIBUTE_NONNULL(3);
|
|
|
|
void virFirewallRuleAddArgList(virFirewall *firewall,
|
|
virFirewallRule *rule,
|
|
...)
|
|
G_GNUC_NULL_TERMINATED;
|
|
|
|
size_t virFirewallRuleGetArgCount(virFirewallRule *rule);
|
|
|
|
char *virFirewallRuleToString(const char *cmd,
|
|
virFirewallRule *rule);
|
|
|
|
typedef enum {
|
|
/* Ignore all errors when applying rules, so no
|
|
* rollback block will be required */
|
|
VIR_FIREWALL_TRANSACTION_IGNORE_ERRORS = (1 << 0),
|
|
} virFirewallTransactionFlags;
|
|
|
|
void virFirewallStartTransaction(virFirewall *firewall,
|
|
unsigned int flags);
|
|
|
|
typedef enum {
|
|
/* Execute previous rollback block before this
|
|
* one, to chain cleanup */
|
|
VIR_FIREWALL_ROLLBACK_INHERIT_PREVIOUS = (1 << 0),
|
|
} virFirewallRollbackFlags;
|
|
|
|
void virFirewallStartRollback(virFirewall *firewall,
|
|
unsigned int flags);
|
|
|
|
int virFirewallApply(virFirewall *firewall);
|
|
|
|
G_DEFINE_AUTOPTR_CLEANUP_FUNC(virFirewall, virFirewallFree);
|