1/* Copyright (C) 2005 Red Hat, Inc. */ 2 3struct semanage_fcontext; 4struct semanage_fcontext_key; 5typedef struct semanage_fcontext_key record_key_t; 6typedef struct semanage_fcontext record_t; 7#define DBASE_RECORD_DEFINED 8 9#include <stdlib.h> 10#include <sepol/policydb.h> 11#include <sepol/context.h> 12#include "fcontext_internal.h" 13#include "context_internal.h" 14#include "debug.h" 15#include "handle.h" 16#include "database.h" 17 18int semanage_fcontext_modify_local(semanage_handle_t * handle, 19 const semanage_fcontext_key_t * key, 20 const semanage_fcontext_t * data) 21{ 22 23 dbase_config_t *dconfig = semanage_fcontext_dbase_local(handle); 24 return dbase_modify(handle, dconfig, key, data); 25} 26 27int semanage_fcontext_del_local(semanage_handle_t * handle, 28 const semanage_fcontext_key_t * key) 29{ 30 31 dbase_config_t *dconfig = semanage_fcontext_dbase_local(handle); 32 return dbase_del(handle, dconfig, key); 33} 34 35int semanage_fcontext_query_local(semanage_handle_t * handle, 36 const semanage_fcontext_key_t * key, 37 semanage_fcontext_t ** response) 38{ 39 40 dbase_config_t *dconfig = semanage_fcontext_dbase_local(handle); 41 return dbase_query(handle, dconfig, key, response); 42} 43 44int semanage_fcontext_exists_local(semanage_handle_t * handle, 45 const semanage_fcontext_key_t * key, 46 int *response) 47{ 48 49 dbase_config_t *dconfig = semanage_fcontext_dbase_local(handle); 50 return dbase_exists(handle, dconfig, key, response); 51} 52 53int semanage_fcontext_count_local(semanage_handle_t * handle, 54 unsigned int *response) 55{ 56 57 dbase_config_t *dconfig = semanage_fcontext_dbase_local(handle); 58 return dbase_count(handle, dconfig, response); 59} 60 61int semanage_fcontext_iterate_local(semanage_handle_t * handle, 62 int (*handler) (const semanage_fcontext_t * 63 record, void *varg), 64 void *handler_arg) 65{ 66 67 dbase_config_t *dconfig = semanage_fcontext_dbase_local(handle); 68 return dbase_iterate(handle, dconfig, handler, handler_arg); 69} 70 71hidden_def(semanage_fcontext_iterate_local) 72 73int semanage_fcontext_list_local(semanage_handle_t * handle, 74 semanage_fcontext_t *** records, 75 unsigned int *count) 76{ 77 78 dbase_config_t *dconfig = semanage_fcontext_dbase_local(handle); 79 return dbase_list(handle, dconfig, records, count); 80} 81 82struct validate_handler_arg { 83 semanage_handle_t *handle; 84 const sepol_policydb_t *policydb; 85}; 86 87static int validate_handler(const semanage_fcontext_t * fcon, void *varg) 88{ 89 90 char *str; 91 92 /* Unpack varg */ 93 struct validate_handler_arg *arg = (struct validate_handler_arg *)varg; 94 semanage_handle_t *handle = arg->handle; 95 const sepol_policydb_t *policydb = arg->policydb; 96 97 /* Unpack fcontext */ 98 const char *expr = semanage_fcontext_get_expr(fcon); 99 int type = semanage_fcontext_get_type(fcon); 100 const char *type_str = semanage_fcontext_get_type_str(type); 101 semanage_context_t *con = semanage_fcontext_get_con(fcon); 102 103 if (con 104 && sepol_context_check(handle->sepolh, policydb, 105 (sepol_context_t *) con) < 0) 106 goto invalid; 107 108 return 0; 109 110 invalid: 111 if (semanage_context_to_string(handle, con, &str) >= 0) { 112 ERR(handle, "invalid context %s specified for %s [%s]", 113 str, expr, type_str); 114 free(str); 115 } else 116 ERR(handle, "invalid context specified for %s [%s]", 117 expr, type_str); 118 return -1; 119} 120 121int hidden semanage_fcontext_validate_local(semanage_handle_t * handle, 122 const sepol_policydb_t * policydb) 123{ 124 125 struct validate_handler_arg arg; 126 arg.handle = handle; 127 arg.policydb = policydb; 128 return semanage_fcontext_iterate_local(handle, validate_handler, &arg); 129} 130