1 /* Copyright (C) 2005 Red Hat, Inc. */
2
3 struct semanage_fcontext;
4 struct semanage_fcontext_key;
5 typedef struct semanage_fcontext_key record_key_t;
6 typedef struct semanage_fcontext record_t;
7 #define DBASE_RECORD_DEFINED
8
9 #include <stdlib.h>
10 #include <sepol/policydb.h>
11 #include <sepol/context.h>
12 #include "fcontext_internal.h"
13 #include "context_internal.h"
14 #include "debug.h"
15 #include "handle.h"
16 #include "database.h"
17
semanage_fcontext_modify_local(semanage_handle_t * handle,const semanage_fcontext_key_t * key,const semanage_fcontext_t * data)18 int semanage_fcontext_modify_local(semanage_handle_t * handle,
19 const semanage_fcontext_key_t * key,
20 const semanage_fcontext_t * data)
21 {
22
23 dbase_config_t *dconfig = semanage_fcontext_dbase_local(handle);
24 return dbase_modify(handle, dconfig, key, data);
25 }
26
semanage_fcontext_del_local(semanage_handle_t * handle,const semanage_fcontext_key_t * key)27 int semanage_fcontext_del_local(semanage_handle_t * handle,
28 const semanage_fcontext_key_t * key)
29 {
30
31 dbase_config_t *dconfig = semanage_fcontext_dbase_local(handle);
32 return dbase_del(handle, dconfig, key);
33 }
34
semanage_fcontext_query_local(semanage_handle_t * handle,const semanage_fcontext_key_t * key,semanage_fcontext_t ** response)35 int semanage_fcontext_query_local(semanage_handle_t * handle,
36 const semanage_fcontext_key_t * key,
37 semanage_fcontext_t ** response)
38 {
39
40 dbase_config_t *dconfig = semanage_fcontext_dbase_local(handle);
41 return dbase_query(handle, dconfig, key, response);
42 }
43
semanage_fcontext_exists_local(semanage_handle_t * handle,const semanage_fcontext_key_t * key,int * response)44 int semanage_fcontext_exists_local(semanage_handle_t * handle,
45 const semanage_fcontext_key_t * key,
46 int *response)
47 {
48
49 dbase_config_t *dconfig = semanage_fcontext_dbase_local(handle);
50 return dbase_exists(handle, dconfig, key, response);
51 }
52
semanage_fcontext_count_local(semanage_handle_t * handle,unsigned int * response)53 int semanage_fcontext_count_local(semanage_handle_t * handle,
54 unsigned int *response)
55 {
56
57 dbase_config_t *dconfig = semanage_fcontext_dbase_local(handle);
58 return dbase_count(handle, dconfig, response);
59 }
60
semanage_fcontext_iterate_local(semanage_handle_t * handle,int (* handler)(const semanage_fcontext_t * record,void * varg),void * handler_arg)61 int semanage_fcontext_iterate_local(semanage_handle_t * handle,
62 int (*handler) (const semanage_fcontext_t *
63 record, void *varg),
64 void *handler_arg)
65 {
66
67 dbase_config_t *dconfig = semanage_fcontext_dbase_local(handle);
68 return dbase_iterate(handle, dconfig, handler, handler_arg);
69 }
70
hidden_def(semanage_fcontext_iterate_local)71 hidden_def(semanage_fcontext_iterate_local)
72
73 int semanage_fcontext_list_local(semanage_handle_t * handle,
74 semanage_fcontext_t *** records,
75 unsigned int *count)
76 {
77
78 dbase_config_t *dconfig = semanage_fcontext_dbase_local(handle);
79 return dbase_list(handle, dconfig, records, count);
80 }
81
82 struct validate_handler_arg {
83 semanage_handle_t *handle;
84 const sepol_policydb_t *policydb;
85 };
86
validate_handler(const semanage_fcontext_t * fcon,void * varg)87 static int validate_handler(const semanage_fcontext_t * fcon, void *varg)
88 {
89
90 char *str;
91
92 /* Unpack varg */
93 struct validate_handler_arg *arg = (struct validate_handler_arg *)varg;
94 semanage_handle_t *handle = arg->handle;
95 const sepol_policydb_t *policydb = arg->policydb;
96
97 /* Unpack fcontext */
98 const char *expr = semanage_fcontext_get_expr(fcon);
99 int type = semanage_fcontext_get_type(fcon);
100 const char *type_str = semanage_fcontext_get_type_str(type);
101 semanage_context_t *con = semanage_fcontext_get_con(fcon);
102
103 if (con
104 && sepol_context_check(handle->sepolh, policydb,
105 (sepol_context_t *) con) < 0)
106 goto invalid;
107
108 return 0;
109
110 invalid:
111 if (semanage_context_to_string(handle, con, &str) >= 0) {
112 ERR(handle, "invalid context %s specified for %s [%s]",
113 str, expr, type_str);
114 free(str);
115 } else
116 ERR(handle, "invalid context specified for %s [%s]",
117 expr, type_str);
118 return -1;
119 }
120
semanage_fcontext_validate_local(semanage_handle_t * handle,const sepol_policydb_t * policydb)121 int hidden semanage_fcontext_validate_local(semanage_handle_t * handle,
122 const sepol_policydb_t * policydb)
123 {
124
125 struct validate_handler_arg arg;
126 arg.handle = handle;
127 arg.policydb = policydb;
128 return semanage_fcontext_iterate_local(handle, validate_handler, &arg);
129 }
130