libsefs-dev 3.3.8+20151215-2 / usr / include / sefs / entry.hh

/**
 *  @file
 *  Defines the public interface for file context entries.
 *
 *  @author Jeremy A. Mowery jmowery@tresys.com
 *  @author Jason Tang jtang@tresys.com
 *
 *  Copyright (C) 2007 Tresys Technology, LLC
 *
 *  This library is free software; you can redistribute it and/or
 *  modify it under the terms of the GNU Lesser General Public
 *  License as published by the Free Software Foundation; either
 *  version 2.1 of the License, or (at your option) any later version.
 *
 *  This library is distributed in the hope that it will be useful,
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 *  Lesser General Public License for more details.
 *
 *  You should have received a copy of the GNU Lesser General Public
 *  License along with this library; if not, write to the Free Software
 *  Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
 */

#ifndef SEFS_ENTRY_H
#define SEFS_ENTRY_H

#ifdef __cplusplus
extern "C"
{
#endif

#include <sys/types.h>
#include <apol/context-query.h>
#include <apol/vector.h>

#ifdef __cplusplus
}

#include <stdexcept>

class sefs_fclist;
struct sefs_context_node;

/**
 * This class represents an individual entry within a list an fcfile
 * object.  Note that the entry's contents (even upon a
 * copy-constructed version of the entry) are always tied to its
 * fclist, so do not access entries whose fclist has been destroyed.
 */
class sefs_entry
{
	friend class sefs_db;
	friend class sefs_fcfile;
	friend class sefs_filesystem;

      public:

	/**
	 * Perform a deep copy of an entry object.
	 */
	 sefs_entry(const sefs_entry * e);

	~sefs_entry();

	/**
	 * Get the context from a sefs entry.  If the entry has no
	 * context (such as being marked <tt>&lt;&lt;none&gt;&gt;</tt>
	 * in a file_contexts file) then apol_context_get_user() and
	 * others will return an empty string.
	 * @return A pointer to the context, or NULL on error.  The
	 * caller should not modify or destroy the returned context.
	 */
	const apol_context_t *context() const;

	/**
	 * Get the inode number associated with a sefs entry.
	 * @return Inode number associated with the entry or 0 on
	 * error.  Entries originating from a file_contexts object
	 * will have no inode and thus return 0.
	 */
	ino64_t inode() const;

	/**
	 * Get the device name associated with a sefs entry.  For
	 * example, if /dev/sda5 is mounted as /home, the device name
	 * for entry "/home/gburdell" will be "/dev/sda5".
	 * @return Device number associated with the entry or NULL on
	 * error.  Do not free() this value.  Entries originating from
	 * a file_contexts object will have no device name and thus
	 * return NULL.
	 */
	const char *dev() const;

	/**
	 * Get the object class associated with a sefs entry.  The
	 * returned value will be one of one of QPOL_CLASS_ALL,
	 * QPOL_CLASS_FILE, etc., as defined in
	 * <qpol/genfscon_query.h>.  If this returns QPOL_CLASS_ALL
	 * then the entry is associated with all object classes.
	 * @return Entry's object class.  Upon error return
	 * QPOL_CLASS_ALL.
	 * @see apol_objclass_to_str() to convert the value to a
	 * string.
	 */
	uint32_t objectClass() const;

	/**
	 * Get the paths associated with a sefs entry.
	 * @return Path for the entry.If the entry came from a
	 * file_contexts object the paths will be a regular expression
	 * rather than literal paths.  Do not free() this pointer.
	 */
	const char *path() const;

	/**
	 * Get the file from which a sefs entry originated.
	 * This function is only meaningful when entries are returned
	 * from a query on a modular file context file.
	 * @return The path of the file (policy package or source
	 * file) providing the entry or NULL if the entry is not from
	 * a module.  Do not free() this pointer.
	 */
	const char *origin() const;

	/**
	 * Return a string representation of this entry.  The string
	 * is suitable for printing to the screen or to a
	 * file_contexts file.
	 * @return An allocated string representation.  The caller is
	 * responsibily for free()ing the string afterwards.
	 * @exception std::bad_alloc Out of memory.
	 */
	char *toString() const throw(std::bad_alloc);

      private:
	/**
	 * Create a blank entry.  The entity creating this entry is
	 * responsible for setting additional values as needed.
	 * @param fclist List that will contain this entry.  This
	 * constructor will not add itself to the fclist.
	 * @param new_context Context node containing the SELinux
	 * context.
	 * @param new_objectClass Object class for the entry.
	 * @param new_path Path to this entry.  The entry will share
	 * this pointer.
	 * @param new_origin Name of file_contexts file from which
	 * this entry originated.  The entry will share this pointer.
	 * @exception std::bad_alloc Out of memory.
	 */
	 sefs_entry(class sefs_fclist * fclist, const struct sefs_context_node *new_context, uint32_t new_objectClass,
		    const char *new_path, const char *new_origin = NULL);

	// note that entry does not own any of these pointers; they
	// are shallow copies into the fclist's BST
	class sefs_fclist *_fclist;
	const struct sefs_context_node *_context;
	ino64_t _inode;
	const char *_dev;
	uint32_t _objectClass;
	const char *_path, *_origin;
};

extern "C"
{
#endif

//we do not want to wrap two copies of everything so have SWIG ignore
//the compatibility section.
#ifndef SWIG

	typedef struct sefs_entry sefs_entry_t;

/**
 * Get the context from a sefs entry.
 * @see sefs_entry::context()
 */
	extern const apol_context_t *sefs_entry_get_context(const sefs_entry_t * ent);

/**
 * Get the inode number associated with a sefs entry.
 * @see sefs_entry::inode()
 */
	extern ino64_t sefs_entry_get_inode(const sefs_entry_t * ent);

/**
 * Get the device number associated with a sefs entry.
 * @see sefs_entry::dev()
 */
	extern const char *sefs_entry_get_dev(const sefs_entry_t * ent);

/**
 * Get the object class associated with a sefs entry.
 * @see sefs_entry::objectClass()
 */
	extern uint32_t sefs_entry_get_object_class(const sefs_entry_t * ent);

/**
 * Get the path associated with a sefs entry.
 * @see sefs_entry::path()
 */
	extern const char *sefs_entry_get_path(const sefs_entry_t * ent);

/**
 * Get the file from which a sefs entry originated.
 * @see sefs_entry::origin()
 */
	extern const char *sefs_entry_get_origin(const sefs_entry_t * ent);

/**
 * Return a string representation of this entry.
 * @see sefs_entry::toString()
 */
	extern char *sefs_entry_to_string(const sefs_entry_t * ent);

#endif				       /* SWIG */

#ifdef __cplusplus
}
#endif

#endif				       /* SEFS_ENTRY_H */