39 lines
1.2 KiB
C
39 lines
1.2 KiB
C
#include <unistd.h>
|
|
#include <sys/types.h>
|
|
#include <stdlib.h>
|
|
#include <errno.h>
|
|
#include "selinux_internal.h"
|
|
#include <selinux/flask.h>
|
|
#include <selinux/av_permissions.h>
|
|
|
|
int selinux_check_passwd_access(access_vector_t requested) {
|
|
int status=-1;
|
|
security_context_t user_context;
|
|
if (is_selinux_enabled() == 0)
|
|
return 0;
|
|
if( getprevcon_raw(&user_context)==0 ) {
|
|
struct av_decision avd;
|
|
int retval = security_compute_av_raw(user_context,
|
|
user_context,
|
|
SECCLASS_PASSWD,
|
|
requested,
|
|
&avd);
|
|
|
|
if ((retval == 0) &&
|
|
((requested & avd.allowed) == requested)) {
|
|
status=0;
|
|
}
|
|
freecon(user_context);
|
|
}
|
|
|
|
if (status != 0 && security_getenforce()==0)
|
|
status=0;
|
|
|
|
return status;
|
|
}
|
|
hidden_def(selinux_check_passwd_access)
|
|
|
|
int checkPasswdAccess(access_vector_t requested) {
|
|
return selinux_check_passwd_access(requested);
|
|
}
|