1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
|
/*
* Copyright (c) 2020-2024 The strace developers.
* All rights reserved.
*
* SPDX-License-Identifier: GPL-2.0-or-later
*/
#include "tests.h"
#include "xmalloc.h"
#include <errno.h>
#include <unistd.h>
char *secontext_full_fd(int) ATTRIBUTE_MALLOC;
char *secontext_full_file(const char *, bool) ATTRIBUTE_MALLOC;
char *secontext_full_pid(pid_t) ATTRIBUTE_MALLOC;
char *secontext_short_fd(int) ATTRIBUTE_MALLOC;
char *secontext_short_file(const char *, bool) ATTRIBUTE_MALLOC;
char *secontext_short_pid(pid_t) ATTRIBUTE_MALLOC;
enum secontext_field {
SECONTEXT_USER,
SECONTEXT_ROLE,
SECONTEXT_TYPE
};
#if defined TEST_SECONTEXT && defined HAVE_SELINUX_RUNTIME
/**
* Parse a SELinux context string and return a specified field, duplicated
* in a separate string. The caller is responsible for freeing the memory
* pointed by the returned value.
*/
char *get_secontext_field(const char *full_context, enum secontext_field field);
char *get_secontext_field_fd(int fd, enum secontext_field field);
char *get_secontext_field_file(const char *file, enum secontext_field field);
int reset_secontext_file(const char *file);
int update_secontext_field(const char *file, enum secontext_field field,
const char *newvalue);
# ifdef PRINT_SECONTEXT_FULL
# ifdef PRINT_SECONTEXT_MISMATCH
# define SECONTEXT_FILE(filename) secontext_full_file(filename, true)
# else
# define SECONTEXT_FILE(filename) secontext_full_file(filename, false)
# endif
# define SECONTEXT_FD(fd) secontext_full_fd(fd)
# define SECONTEXT_PID(pid) secontext_full_pid(pid)
# else
# ifdef PRINT_SECONTEXT_MISMATCH
# define SECONTEXT_FILE(filename) secontext_short_file(filename, true)
# else
# define SECONTEXT_FILE(filename) secontext_short_file(filename, false)
# endif
# define SECONTEXT_FD(fd) secontext_short_fd(fd)
# define SECONTEXT_PID(pid) secontext_short_pid(pid)
# endif
#else
static inline char *
get_secontext_field(const char *ctx, enum secontext_field field)
{
return NULL;
}
static inline char *
get_secontext_field_fd(int fd, enum secontext_field field)
{
return NULL;
}
static inline char *
get_secontext_field_file(const char *file, enum secontext_field field)
{
return NULL;
}
static inline int
reset_secontext_file(const char *file)
{
return -ENOSYS;
}
static inline int
update_secontext_field(const char *file, enum secontext_field field,
const char *newvalue)
{
return -ENOSYS;
}
# define SECONTEXT_FD(fd) xstrdup("")
# define SECONTEXT_FILE(filename) xstrdup("")
# define SECONTEXT_PID(pid) xstrdup("")
#endif
#define SECONTEXT_PID_MY() SECONTEXT_PID(getpid())
|
