X-Git-Url: https://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?a=blobdiff_plain;f=src%2Flabel.c;h=a5994622c70ecef5e7ef03efb5e78503348a6151;hb=fd42f6e020de94d11b3cc6bcff6bfc6af23c8aa9;hp=5157b790d284de06a50306d1216c7c31999edb12;hpb=871e580949b1417058da7f7e9fa0380d308ef708;p=elogind.git diff --git a/src/label.c b/src/label.c index 5157b790d..a5994622c 100644 --- a/src/label.c +++ b/src/label.c @@ -22,6 +22,7 @@ #include #include #include +#include #include "label.h" #include "util.h" @@ -33,12 +34,12 @@ static struct selabel_handle *label_hnd = NULL; static inline bool use_selinux(void) { - static int use_selinux_ind = -1; + static int use_selinux_cached = -1; - if (use_selinux_ind < 0) - use_selinux_ind = is_selinux_enabled() > 0; + if (use_selinux_cached < 0) + use_selinux_cached = is_selinux_enabled() > 0; - return use_selinux_ind; + return use_selinux_cached; } #endif @@ -47,7 +48,8 @@ int label_init(void) { int r = 0; #ifdef HAVE_SELINUX - usec_t n; + usec_t before_timestamp, after_timestamp; + struct mallinfo before_mallinfo, after_mallinfo; if (!use_selinux()) return 0; @@ -55,20 +57,27 @@ int label_init(void) { if (label_hnd) return 0; - n = now(CLOCK_MONOTONIC); + before_mallinfo = mallinfo(); + before_timestamp = now(CLOCK_MONOTONIC); + label_hnd = selabel_open(SELABEL_CTX_FILE, NULL, 0); if (!label_hnd) { log_full(security_getenforce() == 1 ? LOG_ERR : LOG_DEBUG, "Failed to initialize SELinux context: %m"); r = security_getenforce() == 1 ? -errno : 0; } else { - char buf[FORMAT_TIMESPAN_MAX]; + char timespan[FORMAT_TIMESPAN_MAX]; + int l; - n = now(CLOCK_MONOTONIC) - n; - log_info("Successfully loaded SELinux database in %s.", - format_timespan(buf, sizeof(buf), n)); - } + after_timestamp = now(CLOCK_MONOTONIC); + after_mallinfo = mallinfo(); + l = after_mallinfo.uordblks > before_mallinfo.uordblks ? after_mallinfo.uordblks - before_mallinfo.uordblks : 0; + + log_info("Successfully loaded SELinux database in %s, size on heap is %iK.", + format_timespan(timespan, sizeof(timespan), after_timestamp - before_timestamp), + (l+1023)/1024); + } #endif return r; @@ -124,7 +133,7 @@ void label_finish(void) { #endif } -int label_get_socket_label_from_exe(const char *exe, char **label) { +int label_get_create_label_from_exe(const char *exe, char **label) { int r = 0;