1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
|
/* Copyright (C) 2001-2003, Tresys Technology, LLC
* see file 'COPYING' for use and warranty information */
/*
* Author: mayerf@tresys.com
*/
/* util.h */
/* Utility functions */
#ifndef _APOLICY_UTIL_H_
#define _APOLICY_UTIL_H_
#include <stdlib.h>
#include <stdio.h>
#include <regex.h>
#include <stdint.h>
/* The following should be defined in the make environment */
#ifndef LIBAPOL_VERSION_STRING
#define LIBAPOL_VERSION_STRING "UNKNOWN"
#endif
#ifndef APOL_INSTALL_DIR
#define APOL_INSTALL_DIR "/usr/share/setools"
#endif
/* use 8k line size */
#define LINE_SZ 8192
#define BUF_SZ 240
/* HACK! checkpolicy doesn't appear to enforce a string size limit; but for simplicity
* we're going to fail for any single string over APOL_STR_SZ. We primarily need this
* to simplify the string-intensive apol TCL commands.
*/
#define APOL_STR_SZ 128
#define is_valid_str_sz(str) (strlen(str) < APOL_STR_SZ)
#define APOL_ENVIRON_VAR_NAME "APOL_INSTALL_DIR"
/* structs defined in policy.h */
struct policy;
struct ta_item;
#undef FALSE
#define FALSE 0
#undef TRUE
#define TRUE 1
typedef unsigned char bool_t;
/* generic link list structures */
typedef struct llist_node {
void *data; /* data of any type or structure */
struct llist_node *prev;
struct llist_node *next;
} llist_node_t;
typedef struct llist {
int num;
llist_node_t *head;
llist_node_t *tail;
} llist_t;
/* structure used internally for passing TE rule match booleans */
typedef struct rules_bool {
bool_t *access; /* AV access rules */
bool_t *audit; /* AV audit rules; can be optional */
bool_t *ttrules; /* Type transition rules */
bool_t *clone; /* clone rules */
int ac_cnt;
int au_cnt;
int tt_cnt;
int cln_cnt;
} rules_bool_t;
/* structure used internally for matching RBAC rules */
typedef struct rbac_bool {
bool_t *allow; /* RBAC allow */
bool_t *trans; /* RBAC role_transition */
int a_cnt;
int t_cnt;
} rbac_bool_t;
/* prototypes */
const char* libapol_get_version(void);
char* find_file(const char *file_name);
char* find_user_config_file(const char *file_name);
bool_t getbool(const char *str);
int trim_string(char **str);
int trim_leading_whitespace(char **str);
void trim_trailing_whitespace(char **str);
llist_t *ll_new(void);
void ll_free(llist_t *ll, void(*free_data)(void *));
llist_node_t *ll_node_free(llist_node_t *n, void(*free_data)(void *));
int ll_unlink_node(llist_t *ll, llist_node_t *n);
int ll_insert_data(llist_t *ll, llist_node_t *n, void *data);
int ll_append_data(llist_t *ll, void *data) ;
int init_rules_bool(bool_t include_audit, rules_bool_t *rules_b, struct policy *policy);
int init_rbac_bool(rbac_bool_t *b, struct policy *policy, bool_t roles);
int all_true_rules_bool(rules_bool_t *rules_b, struct policy *policy);
int all_false_rules_bool(rules_bool_t *rules_b, struct policy *policy);
int all_true_rbac_bool(rbac_bool_t *b, struct policy *policy);
int free_rules_bool(rules_bool_t *rules_b);
int free_rbac_bool(rbac_bool_t *b);
char* uppercase(const char *instr, char *outstr);
int add_i_to_a(int i, int *cnt, int **a);
int add_uint_to_a(uint32_t i, uint32_t *cnt, uint32_t **a);
int find_int_in_array(int i, const int *a, int a_sz);
int add_int_to_array(int i, int *a, int num, int a_sz);
int copy_int_array(int **dest, int *src, int len);
int int_compare(const void *aptr, const void *bptr);
bool_t is_name_in_list(const char *name, struct ta_item *list, struct policy *policy);
unsigned char str_is_only_white_space(const char *str);
int get_type_idxs_by_regex(int **types, int *num, regex_t *preg, bool_t include_self, struct policy *policy);
char *get_config_var(const char *var, FILE *fp);
char **get_config_var_list(const char *var, FILE *file, int *list_sz);
char *config_var_list_to_string(const char **list, int size);
unsigned char str_token_is_not_valid(const char *str);
int append_str(char **tgt, int *tgt_sz, const char *str);
int read_file_to_buffer(const char *fname, char **buf, int *len);
#endif /*_APOLICY_UTIL_H_*/
|
