X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=src%2Fcore%2Fselinux-access.h;h=dd1e8bb9d033b4ccbd94ee82e666ac43a91a473f;hp=9e89064819dc60ab9df9367412a39f6703c54bcf;hb=b02cb41c78c61c27bf1432e19f241a3c3d47a419;hpb=ebcf1f97de4f6b1580ae55eb56b1a3939fe6b602 diff --git a/src/core/selinux-access.h b/src/core/selinux-access.h index 9e8906481..dd1e8bb9d 100644 --- a/src/core/selinux-access.h +++ b/src/core/selinux-access.h @@ -24,21 +24,28 @@ #include "sd-bus.h" #include "bus-error.h" #include "bus-util.h" +#include "manager.h" -void selinux_access_free(void); +void mac_selinux_access_free(void); -int selinux_generic_access_check(sd_bus *bus, sd_bus_message *message, const char *path, const char *permission, sd_bus_error *error); +int mac_selinux_generic_access_check(sd_bus_message *message, const char *path, const char *permission, sd_bus_error *error); + +int mac_selinux_unit_access_check_strv(char **units, sd_bus_message *message, Manager *m, const char *permission, sd_bus_error *error); #ifdef HAVE_SELINUX -#define selinux_access_check(bus, message, permission, error) \ - selinux_generic_access_check(bus, message, NULL, permission, error) -#define selinux_unit_access_check(unit, bus, message, permission, error) \ - ({ Unit *_unit = (unit); selinux_generic_access_check(bus, message, _unit->fragment_path ?: _unit->fragment_path, permission, error); }) +#define mac_selinux_access_check(message, permission, error) \ + mac_selinux_generic_access_check((message), NULL, (permission), (error)) + +#define mac_selinux_unit_access_check(unit, message, permission, error) \ + ({ \ + Unit *_unit = (unit); \ + mac_selinux_generic_access_check((message), _unit->source_path ?: _unit->fragment_path, (permission), (error)); \ + }) #else -#define selinux_access_check(bus, message, permission, error) 0 -#define selinux_unit_access_check(unit, bus, message, permission, error) 0 +#define mac_selinux_access_check(message, permission, error) 0 +#define mac_selinux_unit_access_check(unit, message, permission, error) 0 #endif