/** * @file * Defines the public interface for searching and iterating over default objects. * * @author Richard Haines richard_c_haines@btinternet.com * * Copyright (C) 2006-2007 Tresys Technology, LLC * * This library is free software; you can redistribute it and/or * modify it under the terms of the GNU Lesser General Public * License as published by the Free Software Foundation; either * version 2.1 of the License, or (at your option) any later version. * * This library is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU * Lesser General Public License for more details. * * You should have received a copy of the GNU Lesser General Public * License along with this library; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA */ #include #include #include #include #include #include #include #include "qpol_internal.h" #include "iterator_internal.h" int qpol_default_object_get_class(const qpol_policy_t *policy, const qpol_default_object_t * datum, const qpol_class_t **cls) { class_datum_t *internal_datum = NULL; if (policy == NULL || datum == NULL || cls == NULL) { if (cls != NULL) *cls = NULL; ERR(policy, "%s", strerror(EINVAL)); errno = EINVAL; return STATUS_ERR; } *cls = NULL; internal_datum = (class_datum_t *)datum; /* These will be zero if no default_objects set */ if (internal_datum->default_user || internal_datum->default_role || internal_datum->default_type || internal_datum->default_range) { *cls = (const qpol_class_t *) datum; } return STATUS_SUCCESS; } int qpol_default_object_get_user_default(const qpol_policy_t *policy, const qpol_default_object_t * datum, const char **value) { class_datum_t *internal_datum = NULL; if (policy == NULL || datum == NULL || value == NULL) { if (value != NULL) *value = NULL; ERR(policy, "%s", strerror(EINVAL)); errno = EINVAL; return STATUS_ERR; } *value = NULL; /* The user default started in ver 27 */ if (!qpol_policy_has_capability(policy, QPOL_CAP_DEFAULT_OBJECTS)) return STATUS_SUCCESS; internal_datum = (class_datum_t *)datum; if (internal_datum->default_user == DEFAULT_SOURCE) { *value = "source"; } else if (internal_datum->default_user == DEFAULT_TARGET) { *value = "target"; } return STATUS_SUCCESS; } int qpol_default_object_get_role_default(const qpol_policy_t *policy, const qpol_default_object_t * datum, const char **value) { class_datum_t *internal_datum = NULL; if (policy == NULL || datum == NULL || value == NULL) { if (value != NULL) *value = NULL; ERR(policy, "%s", strerror(EINVAL)); errno = EINVAL; return STATUS_ERR; } *value = NULL; /* The role default started in ver 27 */ if (!qpol_policy_has_capability(policy, QPOL_CAP_DEFAULT_OBJECTS)) return STATUS_SUCCESS; internal_datum = (class_datum_t *)datum; if (internal_datum->default_role == DEFAULT_SOURCE) { *value = "source"; } else if (internal_datum->default_role == DEFAULT_TARGET) { *value = "target"; } return STATUS_SUCCESS; } int qpol_default_object_get_type_default(const qpol_policy_t *policy, const qpol_default_object_t * datum, const char **value) { class_datum_t *internal_datum = NULL; if (policy == NULL || datum == NULL || value == NULL) { if (value != NULL) *value = NULL; ERR(policy, "%s", strerror(EINVAL)); errno = EINVAL; return STATUS_ERR; } *value = NULL; /* The type default started in ver 28 */ if (!qpol_policy_has_capability(policy, QPOL_CAP_DEFAULT_TYPE)) return STATUS_SUCCESS; internal_datum = (class_datum_t *)datum; if (internal_datum->default_type == DEFAULT_SOURCE) { *value = "source"; } else if (internal_datum->default_type == DEFAULT_TARGET) { *value = "target"; } return STATUS_SUCCESS; } int qpol_default_object_get_range_default(const qpol_policy_t *policy, const qpol_default_object_t * datum, const char **value) { class_datum_t *internal_datum = NULL; if (policy == NULL || datum == NULL || value == NULL) { if (value != NULL) *value = NULL; ERR(policy, "%s", strerror(EINVAL)); errno = EINVAL; return STATUS_ERR; } *value = NULL; /* The range default started in ver 27 */ if (!qpol_policy_has_capability(policy, QPOL_CAP_DEFAULT_OBJECTS)) return STATUS_SUCCESS; internal_datum = (class_datum_t *)datum; switch (internal_datum->default_range) { case DEFAULT_SOURCE_LOW: *value = "source low"; break; case DEFAULT_SOURCE_HIGH: *value = "source high"; break; case DEFAULT_SOURCE_LOW_HIGH: *value = "source low_high"; break; case DEFAULT_TARGET_LOW: *value = "target low"; break; case DEFAULT_TARGET_HIGH: *value = "target high"; break; case DEFAULT_TARGET_LOW_HIGH: *value = "target low_high"; break; default: break; } return STATUS_SUCCESS; } /* As default objects are in classes use these, however will need to calc number of default objects manually in top.tcl*/ int qpol_policy_get_default_object_iter(const qpol_policy_t *policy, qpol_iterator_t **iter) { policydb_t *db; int error = 0; hash_state_t *hs = NULL; if (policy == NULL || iter == NULL) { if (iter != NULL) *iter = NULL; ERR(policy, "%s", strerror(EINVAL)); errno = EINVAL; return STATUS_ERR; } db = &policy->p->p; /* class_datum_t *cladatum; sepol_security_class_t tclass; char *class; for (tclass = 1; tclass <= db->p_classes.nprim; tclass++) { cladatum = db->class_val_to_struct[tclass - 1]; class = db->p_class_val_to_name[tclass - 1]; if (cladatum->default_user == DEFAULT_SOURCE) { printf("default_user %s source;\n", class); } else if (cladatum->default_user == DEFAULT_TARGET) { printf("default_user %s target;\n", class); } if (cladatum->default_role == DEFAULT_SOURCE) { printf("default_role %s source;\n", class); } else if (cladatum->default_role == DEFAULT_TARGET) { printf("default_role %s target;\n", class); } if (cladatum->default_type == DEFAULT_SOURCE) { printf("default_type %s source;\n", class); } else if (cladatum->default_type == DEFAULT_TARGET) { printf("default_type %s target;\n", class); } switch (cladatum->default_range) { case DEFAULT_SOURCE_LOW: printf("default_range %s source low;\n", class); break; case DEFAULT_SOURCE_HIGH: printf("default_range %s source high;\n", class); break; case DEFAULT_SOURCE_LOW_HIGH: printf("default_range %s source low_high;\n", class); break; case DEFAULT_TARGET_LOW: printf("default_range %s target low;\n", class); break; case DEFAULT_TARGET_HIGH: printf("default_range %s target high;\n", class); break; case DEFAULT_TARGET_LOW_HIGH: printf("default_range %s target low_high;\n", class); break; default: break; } } */ hs = calloc(1, sizeof(hash_state_t)); if (hs == NULL) { error = errno; ERR(policy, "%s", strerror(ENOMEM)); errno = error; return STATUS_ERR; } hs->table = &db->p_classes.table; hs->node = (*(hs->table))->htable[0]; if (qpol_iterator_create(policy, (void *)hs, hash_state_get_cur, hash_state_next, hash_state_end, hash_state_size, free, iter)) { free(hs); return STATUS_ERR; } if (hs->node == NULL) hash_state_next(*iter); return STATUS_SUCCESS; }