users.h revision 255e72915d4cbddceb435e13d81601755714e9f3 
1#ifndef _SEPOL_USERS_H_
2#define _SEPOL_USERS_H_
3
4#include <sepol/policydb.h>
5#include <sepol/user_record.h>
6#include <sepol/handle.h>
7#include <stddef.h>
8
9/*---------compatibility------------*/
10
11/* Given an existing binary policy (starting at 'data with length 'len')
12   and user configurations living in 'usersdir', generate a new binary
13   policy for the new user configurations.  Sets '*newdata' and '*newlen'
14   to refer to the new binary policy image. */
15extern int sepol_genusers(void *data, size_t len,
16			  const char *usersdir,
17			  void **newdata, size_t * newlen);
18
19/* Enable or disable deletion of users by sepol_genusers(3) when
20   a user in original binary policy image is not defined by the
21   new user configurations.  Defaults to disabled. */
22extern void sepol_set_delusers(int on);
23
24/*--------end compatibility----------*/
25
26/* Modify the user, or add it, if the key is not found */
27extern int sepol_user_modify(sepol_handle_t * handle,
28			     sepol_policydb_t * policydb,
29			     const sepol_user_key_t * key,
30			     const sepol_user_t * data);
31
32/* Return the number of users */
33extern int sepol_user_count(sepol_handle_t * handle,
34			    const sepol_policydb_t * p, unsigned int *response);
35
36/* Check if the specified user exists */
37extern int sepol_user_exists(sepol_handle_t * handle,
38			     const sepol_policydb_t * policydb,
39			     const sepol_user_key_t * key, int *response);
40
41/* Query a user - returns the user or NULL if not found */
42extern int sepol_user_query(sepol_handle_t * handle,
43			    const sepol_policydb_t * p,
44			    const sepol_user_key_t * key,
45			    sepol_user_t ** response);
46
47/* Iterate the users
48 * The handler may return:
49 * -1 to signal an error condition,
50 * 1 to signal successful exit
51 * 0 to signal continue */
52extern int sepol_user_iterate(sepol_handle_t * handle,
53			      const sepol_policydb_t * policydb,
54			      int (*fn) (const sepol_user_t * user,
55					 void *fn_arg), void *arg);
56
57#endif
58