diff options
| author | Perberos <[email protected]> | 2011-11-08 16:22:08 -0300 |
|---|---|---|
| committer | Perberos <[email protected]> | 2011-11-08 16:22:08 -0300 |
| commit | f45852ab2a7126f354079499fc8b03976c0eab27 (patch) | |
| tree | 885c32d804d3c970c5da41a5527882e8a956b42d /src/selinux.cpp | |
| download | mate-system-monitor-f45852ab2a7126f354079499fc8b03976c0eab27.tar.bz2 mate-system-monitor-f45852ab2a7126f354079499fc8b03976c0eab27.tar.xz | |
initial
Diffstat (limited to 'src/selinux.cpp')
| -rw-r--r-- | src/selinux.cpp | 65 |
1 files changed, 65 insertions, 0 deletions
diff --git a/src/selinux.cpp b/src/selinux.cpp new file mode 100644 index 0000000..6bfee5a --- /dev/null +++ b/src/selinux.cpp @@ -0,0 +1,65 @@ +#include <config.h> + +#include <glib.h> + +#include "selinux.h" +#include "procman.h" +#include "util.h" + + +static int (*getpidcon)(pid_t, char**); +static void (*freecon)(char*); +static int (*is_selinux_enabled)(void); + +static gboolean has_selinux; + +static gboolean load_selinux(void) +{ + return load_symbols("libselinux.so.1", + "getpidcon", &getpidcon, + "freecon", &freecon, + "is_selinux_enabled", &is_selinux_enabled, + NULL); +} + + + +void +get_process_selinux_context (ProcInfo *info) +{ + char *con; + + if (has_selinux && !getpidcon (info->pid, &con)) { + info->security_context = g_strdup (con); + freecon (con); + } +} + + + +gboolean +can_show_security_context_column (void) +{ + if (!(has_selinux = load_selinux())) + return FALSE; + + switch (is_selinux_enabled()) { + case 1: + /* We're running on an SELinux kernel */ + return TRUE; + + case -1: + /* Error; hide the security context column */ + + case 0: + /* We're not running on an SELinux kernel: + hide the security context column */ + + default: + g_warning("SELinux was found but is not enabled.\n"); + return FALSE; + } +} + + + |