51 lines
1.5 KiB
C
51 lines
1.5 KiB
C
#ifndef SEPOLICY_INJECT_H
|
|
#define SEPOLICY_INJECT_H
|
|
|
|
#define ALL NULL
|
|
|
|
#include <getopt.h>
|
|
#include <unistd.h>
|
|
#include <stdlib.h>
|
|
#include <sys/mman.h>
|
|
#include <sys/types.h>
|
|
#include <sys/stat.h>
|
|
#include <fcntl.h>
|
|
#include <stdio.h>
|
|
#include <sepol/debug.h>
|
|
#include <sepol/policydb/policydb.h>
|
|
#include <sepol/policydb/expand.h>
|
|
#include <sepol/policydb/link.h>
|
|
#include <sepol/policydb/services.h>
|
|
#include <sepol/policydb/avrule_block.h>
|
|
#include <sepol/policydb/conditional.h>
|
|
#include <sepol/policydb/constraint.h>
|
|
|
|
// Global policydb
|
|
policydb_t *policy;
|
|
|
|
// sepolicy manipulation functions
|
|
int load_policy(char *filename, policydb_t *policydb, struct policy_file *pf);
|
|
void create_domain(char *d);
|
|
int add_file_transition(char *srcS, char *origS, char *tgtS, char *c, char* filename);
|
|
int add_transition(char *srcS, char *origS, char *tgtS, char *c);
|
|
int add_type(char *domainS, char *typeS);
|
|
int add_rule(char *s, char *t, char *c, char *p, int effect, int not);
|
|
int add_typerule(char *s, char *targetAttribute, char **minusses, char *c, char *p, int effect, int not);
|
|
int live_patch();
|
|
|
|
// Handy functions
|
|
void allow(char *s, char *t, char *c, char *p);
|
|
void deny(char *s, char *t, char *c, char *p);
|
|
void auditallow(char *s, char *t, char *c, char *p);
|
|
void auditdeny(char *s, char *t, char *c, char *p);
|
|
void permissive(char *s);
|
|
void enforce(char *s);
|
|
void attradd(char *s, char *a);
|
|
int exists(char *source);
|
|
|
|
// Built in rules
|
|
void su_rules();
|
|
void min_rules();
|
|
|
|
#endif
|