diff options
Diffstat (limited to 'libqpol/src/terule_query.c')
-rw-r--r-- | libqpol/src/terule_query.c | 264 |
1 files changed, 264 insertions, 0 deletions
diff --git a/libqpol/src/terule_query.c b/libqpol/src/terule_query.c new file mode 100644 index 0000000..7973922 --- /dev/null +++ b/libqpol/src/terule_query.c @@ -0,0 +1,264 @@ +/** + * @file + * Implementation for the public interface for searching and iterating over type rules. + * + * @author Kevin Carr kcarr@tresys.com + * @author Jeremy A. Mowery jmowery@tresys.com + * @author Jason Tang jtang@tresys.com + * + * Copyright (C) 2006-2007 Tresys Technology, LLC + * + * This library is free software; you can redistribute it and/or + * modify it under the terms of the GNU Lesser General Public + * License as published by the Free Software Foundation; either + * version 2.1 of the License, or (at your option) any later version. + * + * This library is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + * Lesser General Public License for more details. + * + * You should have received a copy of the GNU Lesser General Public + * License along with this library; if not, write to the Free Software + * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA + */ + +#include "iterator_internal.h" +#include <qpol/iterator.h> +#include <qpol/policy.h> +#include <qpol/terule_query.h> +#include <sepol/policydb/policydb.h> +#include <sepol/policydb/avtab.h> +#include <sepol/policydb/util.h> +#include <stdlib.h> +#include "qpol_internal.h" + +int qpol_policy_get_terule_iter(const qpol_policy_t * policy, uint32_t rule_type_mask, qpol_iterator_t ** iter) +{ + policydb_t *db; + avtab_state_t *state; + + if (iter) { + *iter = NULL; + } + if (policy == NULL || iter == NULL) { + ERR(policy, "%s", strerror(EINVAL)); + errno = EINVAL; + return STATUS_ERR; + } + +#if 1 // Seems to make sediff/sediffx work better without breaking things + if (!qpol_policy_has_capability(policy, QPOL_CAP_RULES_LOADED)) { + ERR(policy, "%s", "Cannot get terules: Rules not loaded"); + errno = ENOTSUP; + return STATUS_ERR; + } +#endif + + db = &policy->p->p; + + state = calloc(1, sizeof(avtab_state_t)); + if (state == NULL) { + ERR(policy, "%s", strerror(ENOMEM)); + errno = ENOMEM; + return STATUS_ERR; + } + state->ucond_tab = &db->te_avtab; + state->cond_tab = &db->te_cond_avtab; + state->rule_type_mask = rule_type_mask; + state->node = db->te_avtab.htable[0]; + + if (qpol_iterator_create + (policy, state, avtab_state_get_cur, avtab_state_next, avtab_state_end, avtab_state_size, free, iter)) { + free(state); + return STATUS_ERR; + } + if (state->node == NULL || !(state->node->key.specified & state->rule_type_mask)) { + avtab_state_next(*iter); + } + return STATUS_SUCCESS; +} + +int qpol_terule_get_source_type(const qpol_policy_t * policy, const qpol_terule_t * rule, const qpol_type_t ** source) +{ + policydb_t *db = NULL; + avtab_ptr_t terule = NULL; + + if (source) { + *source = NULL; + } + + if (!policy || !rule || !source) { + ERR(policy, "%s", strerror(EINVAL)); + errno = EINVAL; + return STATUS_ERR; + } + + db = &policy->p->p; + terule = (avtab_ptr_t) rule; + + *source = (qpol_type_t *) db->type_val_to_struct[terule->key.source_type - 1]; + + return STATUS_SUCCESS; +} + +int qpol_terule_get_target_type(const qpol_policy_t * policy, const qpol_terule_t * rule, const qpol_type_t ** target) +{ + policydb_t *db = NULL; + avtab_ptr_t terule = NULL; + + if (target) { + *target = NULL; + } + + if (!policy || !rule || !target) { + ERR(policy, "%s", strerror(EINVAL)); + errno = EINVAL; + return STATUS_ERR; + } + + db = &policy->p->p; + terule = (avtab_ptr_t) rule; + + *target = (qpol_type_t *) db->type_val_to_struct[terule->key.target_type - 1]; + + return STATUS_SUCCESS; +} + +int qpol_terule_get_object_class(const qpol_policy_t * policy, const qpol_terule_t * rule, const qpol_class_t ** obj_class) +{ + policydb_t *db = NULL; + avtab_ptr_t terule = NULL; + + if (obj_class) { + *obj_class = NULL; + } + + if (!policy || !rule || !obj_class) { + ERR(policy, "%s", strerror(EINVAL)); + errno = EINVAL; + return STATUS_ERR; + } + + db = &policy->p->p; + terule = (avtab_ptr_t) rule; + + *obj_class = (qpol_class_t *) db->class_val_to_struct[terule->key.target_class - 1]; + + return STATUS_SUCCESS; +} + +int qpol_terule_get_default_type(const qpol_policy_t * policy, const qpol_terule_t * rule, const qpol_type_t ** dflt) +{ + policydb_t *db = NULL; + avtab_ptr_t terule = NULL; + + if (dflt) { + *dflt = NULL; + } + + if (!policy || !rule || !dflt) { + ERR(policy, "%s", strerror(EINVAL)); + errno = EINVAL; + return STATUS_ERR; + } + + db = &policy->p->p; + terule = (avtab_ptr_t) rule; + + *dflt = (qpol_type_t *) db->type_val_to_struct[terule->datum.data - 1]; + + return STATUS_SUCCESS; +} + +int qpol_terule_get_rule_type(const qpol_policy_t * policy, const qpol_terule_t * rule, uint32_t * rule_type) +{ + policydb_t *db = NULL; + avtab_ptr_t terule = NULL; + + if (rule_type) { + *rule_type = 0; + } + + if (!policy || !rule || !rule_type) { + ERR(policy, "%s", strerror(EINVAL)); + errno = EINVAL; + return STATUS_ERR; + } + + db = &policy->p->p; + terule = (avtab_ptr_t) rule; + + *rule_type = (terule->key.specified & (QPOL_RULE_TYPE_TRANS | QPOL_RULE_TYPE_CHANGE | QPOL_RULE_TYPE_MEMBER)); + + return STATUS_SUCCESS; +} + +int qpol_terule_get_cond(const qpol_policy_t * policy, const qpol_terule_t * rule, const qpol_cond_t ** cond) +{ + avtab_ptr_t terule = NULL; + + if (cond) { + *cond = NULL; + } + + if (!policy || !rule || !cond) { + ERR(policy, "%s", strerror(EINVAL)); + errno = EINVAL; + return STATUS_ERR; + } + + terule = (avtab_ptr_t) rule; + + *cond = (qpol_cond_t *) terule->parse_context; + + return STATUS_SUCCESS; +} + +int qpol_terule_get_is_enabled(const qpol_policy_t * policy, const qpol_terule_t * rule, uint32_t * is_enabled) +{ + avtab_ptr_t terule = NULL; + + if (is_enabled) { + *is_enabled = 0; + } + + if (!policy || !rule || !is_enabled) { + ERR(policy, "%s", strerror(EINVAL)); + errno = EINVAL; + return STATUS_ERR; + } + + terule = (avtab_ptr_t) rule; + + *is_enabled = ((terule->merged & QPOL_COND_RULE_ENABLED) ? 1 : 0); + + return STATUS_SUCCESS; +} + +int qpol_terule_get_which_list(const qpol_policy_t * policy, const qpol_terule_t * rule, uint32_t * which_list) +{ + avtab_ptr_t terule = NULL; + + if (which_list) { + *which_list = 0; + } + + if (!policy || !rule || !which_list) { + ERR(policy, "%s", strerror(EINVAL)); + errno = EINVAL; + return STATUS_ERR; + } + + terule = (avtab_ptr_t) rule; + + if (!terule->parse_context) { + ERR(policy, "%s", strerror(EINVAL)); + errno = EINVAL; + return STATUS_ERR; + } + + *which_list = ((terule->merged & QPOL_COND_RULE_LIST) ? 1 : 0); + + return STATUS_SUCCESS; +} |