Daan De Meyer
d158595dc7
Each dlopen_*() wrapper kept its dl handle as a file-scope 'static void *xxx_dl = NULL;' even though only the wrapper itself ever referenced it. Move each one inside the corresponding function so its scope matches its actual use, leaving the rest of each translation unit free of the unused file-scope name. In pcre2-util.c the assert(pcre2_dl) in pattern_matches_and_log() becomes assert(sym_pcre2_match), which carries the same invariant (pattern_compile_and_log() ran dlopen_pcre2()).
74 lines
2.3 KiB
C
74 lines
2.3 KiB
C
/* SPDX-License-Identifier: LGPL-2.1-or-later */
|
|
|
|
#include "apparmor-util.h"
|
|
#include "log.h"
|
|
|
|
#if HAVE_APPARMOR
|
|
|
|
#include <syslog.h>
|
|
|
|
#include "sd-dlopen.h"
|
|
|
|
#include "fileio.h"
|
|
|
|
DLSYM_PROTOTYPE(aa_change_onexec) = NULL;
|
|
DLSYM_PROTOTYPE(aa_change_profile) = NULL;
|
|
DLSYM_PROTOTYPE(aa_features_new_from_kernel) = NULL;
|
|
DLSYM_PROTOTYPE(aa_features_unref) = NULL;
|
|
DLSYM_PROTOTYPE(aa_policy_cache_dir_path_preview) = NULL;
|
|
DLSYM_PROTOTYPE(aa_policy_cache_new) = NULL;
|
|
DLSYM_PROTOTYPE(aa_policy_cache_replace_all) = NULL;
|
|
DLSYM_PROTOTYPE(aa_policy_cache_unref) = NULL;
|
|
|
|
bool mac_apparmor_use(void) {
|
|
static int cached_use = -1;
|
|
int r;
|
|
|
|
if (cached_use >= 0)
|
|
return cached_use;
|
|
|
|
r = read_boolean_file("/sys/module/apparmor/parameters/enabled");
|
|
if (r < 0) {
|
|
if (r != -ENOENT)
|
|
log_debug_errno(r, "Failed to read and parse /sys/module/apparmor/parameters/enabled, assuming AppArmor is not available: %m");
|
|
return (cached_use = false);
|
|
}
|
|
if (r == 0)
|
|
return (cached_use = false);
|
|
|
|
if (dlopen_libapparmor(LOG_DEBUG) < 0)
|
|
return (cached_use = false);
|
|
|
|
return (cached_use = true);
|
|
}
|
|
|
|
#endif
|
|
|
|
int dlopen_libapparmor(int log_level) {
|
|
#if HAVE_APPARMOR
|
|
static void *libapparmor_dl = NULL;
|
|
|
|
SD_ELF_NOTE_DLOPEN(
|
|
"apparmor",
|
|
"Support for AppArmor policies",
|
|
SD_ELF_NOTE_DLOPEN_PRIORITY_RECOMMENDED,
|
|
"libapparmor.so.1");
|
|
|
|
return dlopen_many_sym_or_warn(
|
|
&libapparmor_dl,
|
|
"libapparmor.so.1",
|
|
log_level,
|
|
DLSYM_ARG(aa_change_onexec),
|
|
DLSYM_ARG(aa_change_profile),
|
|
DLSYM_ARG(aa_features_new_from_kernel),
|
|
DLSYM_ARG(aa_features_unref),
|
|
DLSYM_ARG(aa_policy_cache_dir_path_preview),
|
|
DLSYM_ARG(aa_policy_cache_new),
|
|
DLSYM_ARG(aa_policy_cache_replace_all),
|
|
DLSYM_ARG(aa_policy_cache_unref));
|
|
#else
|
|
return log_full_errno(log_level, SYNTHETIC_ERRNO(EOPNOTSUPP),
|
|
"libapparmor support is not compiled in.");
|
|
#endif
|
|
}
|