tests/secontext.h - master - githubmirror/strace

tests/secontext.h
105 строк3 KB
Dmitry V. Levin
Update copyright headers
15 сен 2024, 11:00
15 сен 2024, 11:0074e91ba
/*
 * Copyright (c) 2020-2024 The strace developers.
 * All rights reserved.
 *
 * SPDX-License-Identifier: GPL-2.0-or-later
 */

#include "tests.h"
#include "xmalloc.h"

#include <errno.h>
#include <unistd.h>

char *secontext_full_fd(int) ATTRIBUTE_MALLOC;
char *secontext_full_file(const char *, bool) ATTRIBUTE_MALLOC;
char *secontext_full_pid(pid_t) ATTRIBUTE_MALLOC;

char *secontext_short_fd(int) ATTRIBUTE_MALLOC;
char *secontext_short_file(const char *, bool) ATTRIBUTE_MALLOC;
char *secontext_short_pid(pid_t) ATTRIBUTE_MALLOC;

enum secontext_field {
	SECONTEXT_USER,
	SECONTEXT_ROLE,
	SECONTEXT_TYPE
};

#if defined TEST_SECONTEXT && defined HAVE_SELINUX_RUNTIME

/**
 * Parse a SELinux context string and return a specified field, duplicated
 * in a separate string.  The caller is responsible for freeing the memory
 * pointed by the returned value.
 */
char *get_secontext_field(const char *full_context, enum secontext_field field);

char *get_secontext_field_fd(int fd, enum secontext_field field);
char *get_secontext_field_file(const char *file, enum secontext_field field);

int reset_secontext_file(const char *file);

int update_secontext_field(const char *file, enum secontext_field field,
			   const char *newvalue);

# ifdef PRINT_SECONTEXT_FULL

#  ifdef PRINT_SECONTEXT_MISMATCH
#   define SECONTEXT_FILE(filename)	secontext_full_file(filename, true)
#  else
#   define SECONTEXT_FILE(filename)	secontext_full_file(filename, false)
#  endif
#  define SECONTEXT_FD(fd)		secontext_full_fd(fd)
#  define SECONTEXT_PID(pid)		secontext_full_pid(pid)

# else

#  ifdef PRINT_SECONTEXT_MISMATCH
#   define SECONTEXT_FILE(filename)	secontext_short_file(filename, true)
#  else
#   define SECONTEXT_FILE(filename)	secontext_short_file(filename, false)
#  endif
#  define SECONTEXT_FD(fd)		secontext_short_fd(fd)
#  define SECONTEXT_PID(pid)		secontext_short_pid(pid)

# endif

#else

static inline char *
get_secontext_field(const char *ctx, enum secontext_field field)
{
	return NULL;
}
static inline char *
get_secontext_field_fd(int fd, enum secontext_field field)
{
	return NULL;
}

static inline char *
get_secontext_field_file(const char *file, enum secontext_field field)
{
	return NULL;
}

static inline int
reset_secontext_file(const char *file)
{
	return -ENOSYS;
}

static inline int
update_secontext_field(const char *file, enum secontext_field field,
		       const char *newvalue)
{
	return -ENOSYS;
}

# define SECONTEXT_FD(fd)			xstrdup("")
# define SECONTEXT_FILE(filename)		xstrdup("")
# define SECONTEXT_PID(pid)			xstrdup("")

#endif

#define SECONTEXT_PID_MY()		SECONTEXT_PID(getpid())