mirror of
https://github.com/SELinuxProject/selinux
synced 2025-01-06 21:49:55 +00:00
c3f9492d7f
Remove legacy local boolean and user code, and to preserve API/ABI compatibility the following functions int values should be set to '0' as they are no longer used: selinux_mkload_policy(int preservebools) security_set_boolean_list(.... int permanent) and the following are now no-op and return '-1': security_load_booleans() sepol_genusers() sepol_set_delusers() sepol_genbools() sepol_genbools_array() and these still return their paths for compatibility, however they are marked as deprecated: selinux_booleans_path() selinux_users_path() These have been removed as they are local functions only: sepol_genusers_policydb() sepol_genbools_policydb() Also "SETLOCALDEFS" removed from SELinux config file and code. Signed-off-by: Richard Haines <richard_c_haines@btinternet.com>
55 lines
1.5 KiB
C
55 lines
1.5 KiB
C
#ifndef _SEPOL_USERS_H_
|
|
#define _SEPOL_USERS_H_
|
|
|
|
#include <sepol/policydb.h>
|
|
#include <sepol/user_record.h>
|
|
#include <sepol/handle.h>
|
|
#include <stddef.h>
|
|
|
|
#ifdef __cplusplus
|
|
extern "C" {
|
|
#endif
|
|
|
|
/* These two functions are deprecated. See src/deprecated_funcs.c */
|
|
extern int sepol_genusers(void *data, size_t len,
|
|
const char *usersdir,
|
|
void **newdata, size_t * newlen);
|
|
extern void sepol_set_delusers(int on);
|
|
|
|
/* Modify the user, or add it, if the key is not found */
|
|
extern int sepol_user_modify(sepol_handle_t * handle,
|
|
sepol_policydb_t * policydb,
|
|
const sepol_user_key_t * key,
|
|
const sepol_user_t * data);
|
|
|
|
/* Return the number of users */
|
|
extern int sepol_user_count(sepol_handle_t * handle,
|
|
const sepol_policydb_t * p, unsigned int *response);
|
|
|
|
/* Check if the specified user exists */
|
|
extern int sepol_user_exists(sepol_handle_t * handle,
|
|
const sepol_policydb_t * policydb,
|
|
const sepol_user_key_t * key, int *response);
|
|
|
|
/* Query a user - returns the user or NULL if not found */
|
|
extern int sepol_user_query(sepol_handle_t * handle,
|
|
const sepol_policydb_t * p,
|
|
const sepol_user_key_t * key,
|
|
sepol_user_t ** response);
|
|
|
|
/* Iterate the users
|
|
* The handler may return:
|
|
* -1 to signal an error condition,
|
|
* 1 to signal successful exit
|
|
* 0 to signal continue */
|
|
extern int sepol_user_iterate(sepol_handle_t * handle,
|
|
const sepol_policydb_t * policydb,
|
|
int (*fn) (const sepol_user_t * user,
|
|
void *fn_arg), void *arg);
|
|
|
|
#ifdef __cplusplus
|
|
}
|
|
#endif
|
|
|
|
#endif
|