diff options
| author | Colin Walters <walters@verbum.org> | 2004-11-09 06:11:33 +0000 |
|---|---|---|
| committer | Colin Walters <walters@verbum.org> | 2004-11-09 06:11:33 +0000 |
| commit | 935a41a04c3f638134fa905503fc41ddbd18902f (patch) | |
| tree | 0f6dee53c28bba5a8ce6658b634c66ba1cc5abda /bus/services.c | |
| parent | 2f5e949851f7704b296f55ce1d1fcc4480176107 (diff) | |
2004-11-09 Colin Walters <walters@verbum.org>
* dbus/dbus-string.c (_dbus_string_get_length): New
function, writes DBusString to C buffer.
* dbus/dbus-string.h: Prototype it.
* dbus/dbus-message.c (dbus_message_type_to_string): New
function, converts message type into C string.
* dbus/dbus-message.h: Prototype it.
* bus/selinux.c (bus_selinux_check): Take source pid,
target pid, and audit data. Pass audit data to
avc_has_perm.
(log_audit_callback): New function, appends extra
audit information.
(bus_selinux_allows_acquire_service): Also take
service name, add it to audit data.
(bus_selinux_allows_send): Also take message
type, interface, method member, error name,
and destination, and add them to audit data.
(log_cb): Initialize func_audit.
* bus/selinux.h (bus_selinux_allows_acquire_service)
(bus_selinux_allows_send): Update prototypes
* bus/services.c (bus_registry_acquire_service): Pass
service name to bus_selinux_allows_acquire_service.
* bus/bus.c (bus_context_check_security_policy): Pass
additional audit data. Move assignment of dest
to its own line.
Diffstat (limited to 'bus/services.c')
| -rw-r--r-- | bus/services.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/bus/services.c b/bus/services.c index 31041c37..1036947a 100644 --- a/bus/services.c +++ b/bus/services.c @@ -310,7 +310,8 @@ bus_registry_acquire_service (BusRegistry *registry, sid = bus_selinux_id_table_lookup (registry->service_sid_table, service_name); - if (!bus_selinux_allows_acquire_service (connection, sid)) + if (!bus_selinux_allows_acquire_service (connection, sid, + _dbus_string_get_const_data (service_name))) { dbus_set_error (error, DBUS_ERROR_ACCESS_DENIED, "Connection \"%s\" is not allowed to own the service \"%s\" due " |