summaryrefslogtreecommitdiffstats
path: root/src/providers/ipa/ipa_selinux.h
blob: 08cdaef7e0ee72526a48ae847b0b4dcaf5dc8d43 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
/*
    SSSD

    IPA Backend Module -- selinux loading

    Authors:
        Jan Zeleny <jzeleny@redhat.com>

    Copyright (C) 2011 Red Hat

    This program is free software; you can redistribute it and/or modify
    it under the terms of the GNU General Public License as published by
    the Free Software Foundation; either version 3 of the License, or
    (at your option) any later version.

    This program is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    GNU General Public License for more details.

    You should have received a copy of the GNU General Public License
    along with this program.  If not, see <http://www.gnu.org/licenses/>.
*/

#ifndef _IPA_SELINUX_H_
#define _IPA_SELINUX_H_

#include "providers/ldap/ldap_common.h"

#ifdef HAVE_SELINUX_LOGIN_DIR

#define ALL_SERVICES "*"
#define selogin_path(mem_ctx, username) \
    talloc_asprintf(mem_ctx, "%s/logins/%s", selinux_policy_root(), username)
#endif /* HAVE_SELINUX_LOGIN_DIR */

struct ipa_selinux_ctx {
    struct ipa_id_ctx *id_ctx;
    time_t last_update;

    struct sdap_search_base **selinux_search_bases;
    struct sdap_search_base **host_search_bases;
    struct sdap_search_base **hbac_search_bases;
};

void ipa_selinux_handler(struct be_req *be_req);

#endif