Zbigniew Jędrzejewski-Szmek
b25a930f0e
The goal is to move everything that requires selinux or smack away from src/basic/. This means that src/basic/label.[ch] must move, which implies btrfs-util.[ch], copy.[ch], and a bunch of other files which form a cluster of internal use. This is just moving text around, so there should be no functional difference. test-blockdev-util is new, because path_is_encrypted() is moved to blockdev-util.c, and so far we didn't have any tests for code there.
47 lines
1.4 KiB
C
47 lines
1.4 KiB
C
/* SPDX-License-Identifier: LGPL-2.1-or-later */
|
|
#pragma once
|
|
|
|
/***
|
|
Copyright © 2013 Intel Corporation
|
|
|
|
Author: Auke Kok <auke-jan.h.kok@intel.com>
|
|
***/
|
|
|
|
#include <stdbool.h>
|
|
#include <sys/types.h>
|
|
|
|
#include "label.h"
|
|
#include "macro.h"
|
|
|
|
#define SMACK_FLOOR_LABEL "_"
|
|
#define SMACK_STAR_LABEL "*"
|
|
|
|
typedef enum SmackAttr {
|
|
SMACK_ATTR_ACCESS,
|
|
SMACK_ATTR_EXEC,
|
|
SMACK_ATTR_MMAP,
|
|
SMACK_ATTR_TRANSMUTE,
|
|
SMACK_ATTR_IPIN,
|
|
SMACK_ATTR_IPOUT,
|
|
_SMACK_ATTR_MAX,
|
|
_SMACK_ATTR_INVALID = -EINVAL,
|
|
} SmackAttr;
|
|
|
|
bool mac_smack_use(void);
|
|
|
|
int mac_smack_fix_container(const char *path, const char *inside_path, LabelFixFlags flags);
|
|
static inline int mac_smack_fix(const char *path, LabelFixFlags flags) {
|
|
return mac_smack_fix_container(path, path, flags);
|
|
}
|
|
|
|
int mac_smack_fix_at(int dirfd, const char *path, LabelFixFlags flags);
|
|
|
|
const char* smack_attr_to_string(SmackAttr i) _const_;
|
|
SmackAttr smack_attr_from_string(const char *s) _pure_;
|
|
int mac_smack_read(const char *path, SmackAttr attr, char **label);
|
|
int mac_smack_read_fd(int fd, SmackAttr attr, char **label);
|
|
int mac_smack_apply(const char *path, SmackAttr attr, const char *label);
|
|
int mac_smack_apply_fd(int fd, SmackAttr attr, const char *label);
|
|
int mac_smack_apply_pid(pid_t pid, const char *label);
|
|
int mac_smack_copy(const char *dest, const char *src);
|