| #include <selinux/selinux.h> |
| #include <pthread.h> |
| #include "dso.h" |
| |
| hidden_proto(selinux_mkload_policy) |
| hidden_proto(fini_selinuxmnt) |
| hidden_proto(set_selinuxmnt) |
| hidden_proto(selinuxfs_exists) |
| hidden_proto(security_disable) |
| hidden_proto(security_policyvers) |
| hidden_proto(security_load_policy) |
| hidden_proto(security_get_boolean_active) |
| hidden_proto(security_get_boolean_names) |
| hidden_proto(security_set_boolean) |
| hidden_proto(security_commit_booleans) |
| hidden_proto(security_check_context) |
| hidden_proto(security_check_context_raw) |
| hidden_proto(security_canonicalize_context) |
| hidden_proto(security_canonicalize_context_raw) |
| hidden_proto(security_compute_av) |
| hidden_proto(security_compute_av_raw) |
| hidden_proto(security_compute_av_flags) |
| hidden_proto(security_compute_av_flags_raw) |
| hidden_proto(security_compute_user) |
| hidden_proto(security_compute_user_raw) |
| hidden_proto(security_compute_create) |
| hidden_proto(security_compute_create_raw) |
| hidden_proto(security_compute_create_name) |
| hidden_proto(security_compute_create_name_raw) |
| hidden_proto(security_compute_member_raw) |
| hidden_proto(security_compute_relabel_raw) |
| hidden_proto(is_selinux_enabled) |
| hidden_proto(is_selinux_mls_enabled) |
| hidden_proto(freecon) |
| hidden_proto(freeconary) |
| hidden_proto(getprevcon) |
| hidden_proto(getprevcon_raw) |
| hidden_proto(getcon) |
| hidden_proto(getcon_raw) |
| hidden_proto(setcon_raw) |
| hidden_proto(getpeercon_raw) |
| hidden_proto(getpidcon_raw) |
| hidden_proto(getexeccon_raw) |
| hidden_proto(getfilecon) |
| hidden_proto(getfilecon_raw) |
| hidden_proto(lgetfilecon_raw) |
| hidden_proto(fgetfilecon_raw) |
| hidden_proto(setfilecon_raw) |
| hidden_proto(lsetfilecon_raw) |
| hidden_proto(fsetfilecon_raw) |
| hidden_proto(setexeccon) |
| hidden_proto(setexeccon_raw) |
| hidden_proto(getfscreatecon_raw) |
| hidden_proto(getkeycreatecon_raw) |
| hidden_proto(getsockcreatecon_raw) |
| hidden_proto(setfscreatecon_raw) |
| hidden_proto(setkeycreatecon_raw) |
| hidden_proto(setsockcreatecon_raw) |
| hidden_proto(security_getenforce) |
| hidden_proto(security_setenforce) |
| hidden_proto(security_deny_unknown) |
| hidden_proto(security_get_checkreqprot) |
| hidden_proto(selinux_boolean_sub) |
| hidden_proto(selinux_current_policy_path) |
| hidden_proto(selinux_binary_policy_path) |
| hidden_proto(selinux_booleans_subs_path) |
| hidden_proto(selinux_default_context_path) |
| hidden_proto(selinux_securetty_types_path) |
| hidden_proto(selinux_failsafe_context_path) |
| hidden_proto(selinux_removable_context_path) |
| hidden_proto(selinux_virtual_domain_context_path) |
| hidden_proto(selinux_virtual_image_context_path) |
| hidden_proto(selinux_lxc_contexts_path) |
| hidden_proto(selinux_file_context_path) |
| hidden_proto(selinux_file_context_homedir_path) |
| hidden_proto(selinux_file_context_local_path) |
| hidden_proto(selinux_file_context_subs_dist_path) |
| hidden_proto(selinux_file_context_subs_path) |
| hidden_proto(selinux_netfilter_context_path) |
| hidden_proto(selinux_homedir_context_path) |
| hidden_proto(selinux_user_contexts_path) |
| hidden_proto(selinux_booleans_path) |
| hidden_proto(selinux_customizable_types_path) |
| hidden_proto(selinux_media_context_path) |
| hidden_proto(selinux_x_context_path) |
| hidden_proto(selinux_sepgsql_context_path) |
| hidden_proto(selinux_openrc_contexts_path) |
| hidden_proto(selinux_openssh_contexts_path) |
| hidden_proto(selinux_snapperd_contexts_path) |
| hidden_proto(selinux_systemd_contexts_path) |
| hidden_proto(selinux_path) |
| hidden_proto(selinux_check_passwd_access) |
| hidden_proto(selinux_check_securetty_context) |
| hidden_proto(matchpathcon_init_prefix) |
| hidden_proto(selinux_users_path) |
| hidden_proto(selinux_usersconf_path); |
| hidden_proto(selinux_translations_path); |
| hidden_proto(selinux_colors_path); |
| hidden_proto(selinux_getenforcemode); |
| hidden_proto(selinux_getpolicytype); |
| hidden_proto(selinux_raw_to_trans_context); |
| hidden_proto(selinux_trans_to_raw_context); |
| hidden_proto(selinux_raw_context_to_color); |
| hidden_proto(security_get_initial_context); |
| hidden_proto(security_get_initial_context_raw); |
| hidden_proto(selinux_reset_config); |
| |
| hidden void flush_class_cache(void); |
| |
| extern int load_setlocaldefs hidden; |
| extern int require_seusers hidden; |
| extern int selinux_page_size hidden; |
| |
| /* Make pthread_once optional */ |
| #pragma weak pthread_once |
| #pragma weak pthread_key_create |
| #pragma weak pthread_key_delete |
| #pragma weak pthread_setspecific |
| |
| /* Call handler iff the first call. */ |
| #define __selinux_once(ONCE_CONTROL, INIT_FUNCTION) \ |
| do { \ |
| if (pthread_once != NULL) \ |
| pthread_once (&(ONCE_CONTROL), (INIT_FUNCTION)); \ |
| else if ((ONCE_CONTROL) == PTHREAD_ONCE_INIT) { \ |
| INIT_FUNCTION (); \ |
| (ONCE_CONTROL) = 2; \ |
| } \ |
| } while (0) |
| |
| /* Pthread key macros */ |
| #define __selinux_key_create(KEY, DESTRUCTOR) \ |
| (pthread_key_create != NULL ? pthread_key_create(KEY, DESTRUCTOR) : -1) |
| |
| #define __selinux_key_delete(KEY) \ |
| do { \ |
| if (pthread_key_delete != NULL) \ |
| pthread_key_delete(KEY); \ |
| } while (0) |
| |
| #define __selinux_setspecific(KEY, VALUE) \ |
| do { \ |
| if (pthread_setspecific != NULL) \ |
| pthread_setspecific(KEY, VALUE); \ |
| } while (0) |
| |
| /* selabel_lookup() is only thread safe if we're compiled with pthreads */ |
| |
| #pragma weak pthread_mutex_init |
| #pragma weak pthread_mutex_destroy |
| #pragma weak pthread_mutex_lock |
| #pragma weak pthread_mutex_unlock |
| |
| #define __pthread_mutex_init(LOCK, ATTR) \ |
| do { \ |
| if (pthread_mutex_init != NULL) \ |
| pthread_mutex_init(LOCK, ATTR); \ |
| } while (0) |
| |
| #define __pthread_mutex_destroy(LOCK) \ |
| do { \ |
| if (pthread_mutex_destroy != NULL) \ |
| pthread_mutex_destroy(LOCK); \ |
| } while (0) |
| |
| #define __pthread_mutex_lock(LOCK) \ |
| do { \ |
| if (pthread_mutex_lock != NULL) \ |
| pthread_mutex_lock(LOCK); \ |
| } while (0) |
| |
| #define __pthread_mutex_unlock(LOCK) \ |
| do { \ |
| if (pthread_mutex_unlock != NULL) \ |
| pthread_mutex_unlock(LOCK); \ |
| } while (0) |
| |
| |
| #define SELINUXDIR "/etc/selinux/" |
| #define SELINUXCONFIG SELINUXDIR "config" |
| |
| extern int has_selinux_config hidden; |
