Daan De Meyer
a452c807a4
By default, label_ops is initialized with a NULL pointer which translates to noop labelling operations. In mac_selinux_init() and the new mac_smack_init(), we initialize label_ops with a MAC specific LabelOps pointer. We also introduce mac_init() to initialize any configured MACs and replace all usages of mac_selinux_init() with mac_init().
54 lines
1.8 KiB
C
54 lines
1.8 KiB
C
/* SPDX-License-Identifier: LGPL-2.1-or-later */
|
|
#pragma once
|
|
|
|
/***
|
|
Copyright © 2013 Intel Corporation
|
|
|
|
Author: Auke Kok <auke-jan.h.kok@intel.com>
|
|
***/
|
|
|
|
#include <stdbool.h>
|
|
#include <sys/types.h>
|
|
|
|
#include "label-util.h"
|
|
#include "macro.h"
|
|
|
|
#define SMACK_FLOOR_LABEL "_"
|
|
#define SMACK_STAR_LABEL "*"
|
|
|
|
typedef enum SmackAttr {
|
|
SMACK_ATTR_ACCESS,
|
|
SMACK_ATTR_EXEC,
|
|
SMACK_ATTR_MMAP,
|
|
SMACK_ATTR_TRANSMUTE,
|
|
SMACK_ATTR_IPIN,
|
|
SMACK_ATTR_IPOUT,
|
|
_SMACK_ATTR_MAX,
|
|
_SMACK_ATTR_INVALID = -EINVAL,
|
|
} SmackAttr;
|
|
|
|
bool mac_smack_use(void);
|
|
int mac_smack_init(void);
|
|
|
|
int mac_smack_fix_full(int atfd, const char *inode_path, const char *label_path, LabelFixFlags flags);
|
|
static inline int mac_smack_fix(const char *path, LabelFixFlags flags) {
|
|
return mac_smack_fix_full(AT_FDCWD, path, path, flags);
|
|
}
|
|
|
|
const char* smack_attr_to_string(SmackAttr i) _const_;
|
|
SmackAttr smack_attr_from_string(const char *s) _pure_;
|
|
int mac_smack_read(const char *path, SmackAttr attr, char **label);
|
|
int mac_smack_read_fd(int fd, SmackAttr attr, char **label);
|
|
int mac_smack_apply_at(int dir_fd, const char *path, SmackAttr attr, const char *label);
|
|
static inline int mac_smack_apply(const char *path, SmackAttr attr, const char *label) {
|
|
return mac_smack_apply_at(AT_FDCWD, path, attr, label);
|
|
}
|
|
int mac_smack_apply_fd(int fd, SmackAttr attr, const char *label);
|
|
int mac_smack_apply_pid(pid_t pid, const char *label);
|
|
int mac_smack_copy(const char *dest, const char *src);
|
|
|
|
int renameat_and_apply_smack_floor_label(int fdf, const char *from, int fdt, const char *to);
|
|
static inline int rename_and_apply_smack_floor_label(const char *from, const char *to) {
|
|
return renameat_and_apply_smack_floor_label(AT_FDCWD, from, AT_FDCWD, to);
|
|
}
|