1 /*
2  * Copyright (C) 2017 The Android Open Source Project
3  *
4  * Licensed under the Apache License, Version 2.0 (the "License");
5  * you may not use this file except in compliance with the License.
6  * You may obtain a copy of the License at
7  *
8  *      http://www.apache.org/licenses/LICENSE-2.0
9  *
10  * Unless required by applicable law or agreed to in writing, software
11  * distributed under the License is distributed on an "AS IS" BASIS,
12  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13  * See the License for the specific language governing permissions and
14  * limitations under the License.
15  */
16 
17 #pragma once
18 
19 #include <string>
20 
21 #include <selinux/android.h>
22 #include <selinux/avc.h>
23 
24 namespace android {
25 
26 class AccessControl {
27 public:
28     AccessControl();
29 
30     struct CallingContext {
31         bool sidPresent;
32         std::string sid;
33         pid_t pid;
34     };
35     static CallingContext getCallingContext(pid_t sourcePid);
36 
37     bool canAdd(const std::string& fqName, const CallingContext& callingContext);
38     bool canGet(const std::string& fqName, const CallingContext& callingContext);
39     bool canList(const CallingContext& callingContext);
40 
41 private:
42 
43     bool checkPermission(const CallingContext& source, const char *targetContext, const char *perm, const char *interface);
44     bool checkPermission(const CallingContext& source, const char *perm, const char *interface);
45 
46     static int auditCallback(void *data, security_class_t cls, char *buf, size_t len);
47 
48     char*                  mSeContext;
49     struct selabel_handle* mSeHandle;
50     union selinux_callback mSeCallbacks;
51 };
52 
53 } // namespace android
54