From 935a41a04c3f638134fa905503fc41ddbd18902f Mon Sep 17 00:00:00 2001 From: Colin Walters Date: Tue, 9 Nov 2004 06:11:33 +0000 Subject: 2004-11-09 Colin Walters * dbus/dbus-string.c (_dbus_string_get_length): New function, writes DBusString to C buffer. * dbus/dbus-string.h: Prototype it. * dbus/dbus-message.c (dbus_message_type_to_string): New function, converts message type into C string. * dbus/dbus-message.h: Prototype it. * bus/selinux.c (bus_selinux_check): Take source pid, target pid, and audit data. Pass audit data to avc_has_perm. (log_audit_callback): New function, appends extra audit information. (bus_selinux_allows_acquire_service): Also take service name, add it to audit data. (bus_selinux_allows_send): Also take message type, interface, method member, error name, and destination, and add them to audit data. (log_cb): Initialize func_audit. * bus/selinux.h (bus_selinux_allows_acquire_service) (bus_selinux_allows_send): Update prototypes * bus/services.c (bus_registry_acquire_service): Pass service name to bus_selinux_allows_acquire_service. * bus/bus.c (bus_context_check_security_policy): Pass additional audit data. Move assignment of dest to its own line. --- bus/services.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'bus/services.c') diff --git a/bus/services.c b/bus/services.c index 31041c37..1036947a 100644 --- a/bus/services.c +++ b/bus/services.c @@ -310,7 +310,8 @@ bus_registry_acquire_service (BusRegistry *registry, sid = bus_selinux_id_table_lookup (registry->service_sid_table, service_name); - if (!bus_selinux_allows_acquire_service (connection, sid)) + if (!bus_selinux_allows_acquire_service (connection, sid, + _dbus_string_get_const_data (service_name))) { dbus_set_error (error, DBUS_ERROR_ACCESS_DENIED, "Connection \"%s\" is not allowed to own the service \"%s\" due " -- cgit