SymbX/systemd
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

selinux: name mac_selinux_generic_access_check as internal function

Browse Source 
`mac_selinux_generic_access_check()` should not be called directly, only
via the wrapper macros `mac_selinux_access_check` and
`mac_selinux_unit_access_check`.
This commit is contained in:
Christian Göttsche
2021-11-20 16:38:03 +00:00
committed by Topi Miettinen
parent 6fbb33f631
commit 963438a027
2 changed files with 9 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/core/selinux-access.c
+2 -2
View File
@@ -177,7 +177,7 @@ static int access_init(sd_bus_error *error) {
If the machine is in permissive mode it will return ok. Audit messages will
still be generated if the access would be denied in enforcing mode.
*/
int mac_selinux_generic_access_check(
int mac_selinux_access_check_internal(
sd_bus_message *message,
const char *path,
const char *permission,
@@ -286,7 +286,7 @@ int mac_selinux_generic_access_check(
#else /* HAVE_SELINUX */
int mac_selinux_generic_access_check(
int mac_selinux_access_check_internal(
sd_bus_message *message,
const char *path,
const char *permission,
src/core/selinux-access.h
+7 -7
View File
@@ -5,14 +5,14 @@
#include "manager.h"
int mac_selinux_generic_access_check(sd_bus_message *message,
const char *path,
const char *permission,
const char *function,
sd_bus_error *error);
int mac_selinux_access_check_internal(sd_bus_message *message,
const char *path,
const char *permission,
const char *function,
sd_bus_error *error);
#define mac_selinux_access_check(message, permission, error) \
mac_selinux_generic_access_check((message), NULL, (permission), __func__, (error))
mac_selinux_access_check_internal((message), NULL, (permission), __func__, (error))
#define mac_selinux_unit_access_check(unit, message, permission, error) \
mac_selinux_generic_access_check((message), unit_label_path(unit), (permission), __func__, (error))
mac_selinux_access_check_internal((message), unit_label_path(unit), (permission), __func__, (error))