mirror of
https://gitlab.freedesktop.org/dbus/dbus.git
synced 2026-01-16 21:40:42 +01:00
dc25979ebb
Because the recipient process is not yet available, we have to make some assumption about its AppArmor profile. Parsing the first word of the Exec value and then chasing symlinks seems like too much magic, so I've gone for something more explicit. If the .service file contains AssumedAppArmorLabel=/foo/bar then we will do the AppArmor query on the assumption that the recipient AppArmor label will be as stated. Otherwise, we will do a query with an unspecified label, which means that AppArmor rules that do specify a peer label will never match it. Regardless of the result of this query, we will do an independent AppArmor query when the activation has actually happened, this time with the correct peer label; that second query will still be used to decide whether to deliver the message. As a result, if this change has any effect, it is to make the bus more restrictive; it does not allow anything that would previously have been denied. Signed-off-by: Simon McVittie <simon.mcvittie@collabora.co.uk> Reviewed-by: Philip Withnall <philip.withnall@collabora.co.uk> Bug: https://bugs.freedesktop.org/show_bug.cgi?id=98666
57 lines
2.2 KiB
C
57 lines
2.2 KiB
C
/* -*- mode: C; c-file-style: "gnu"; indent-tabs-mode: nil; -*- */
|
|
/* desktop-file.h .desktop file parser
|
|
*
|
|
* Copyright (C) 2003 CodeFactory AB
|
|
*
|
|
* Licensed under the Academic Free License version 2.1
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
|
|
*
|
|
*/
|
|
#ifndef BUS_DESKTOP_FILE_H
|
|
#define BUS_DESKTOP_FILE_H
|
|
|
|
#include <dbus/dbus.h>
|
|
#include <dbus/dbus-string.h>
|
|
|
|
#define BUS_DESKTOP_PARSE_ERROR_INVALID_SYNTAX "org.freedesktop.DBus.DesktopParseError.InvalidSyntax"
|
|
#define BUS_DESKTOP_PARSE_ERROR_INVALID_ESCAPES "org.freedesktop.DBus.DesktopParseError.InvalidEscapes"
|
|
#define BUS_DESKTOP_PARSE_ERROR_INVALID_CHARS "org.freedesktop.DBus.DesktopParseError.InvalidChars"
|
|
|
|
#define DBUS_SERVICE_SECTION "D-BUS Service"
|
|
#define DBUS_SERVICE_NAME "Name"
|
|
#define DBUS_SERVICE_EXEC "Exec"
|
|
#define DBUS_SERVICE_USER "User"
|
|
#define DBUS_SERVICE_SYSTEMD_SERVICE "SystemdService"
|
|
#define DBUS_SERVICE_ASSUMED_APPARMOR_LABEL "AssumedAppArmorLabel"
|
|
|
|
typedef struct BusDesktopFile BusDesktopFile;
|
|
|
|
BusDesktopFile *bus_desktop_file_load (DBusString *filename,
|
|
DBusError *error);
|
|
void bus_desktop_file_free (BusDesktopFile *file);
|
|
|
|
dbus_bool_t bus_desktop_file_get_raw (BusDesktopFile *desktop_file,
|
|
const char *section_name,
|
|
const char *keyname,
|
|
const char **val);
|
|
dbus_bool_t bus_desktop_file_get_string (BusDesktopFile *desktop_file,
|
|
const char *section,
|
|
const char *keyname,
|
|
char **val,
|
|
DBusError *error);
|
|
|
|
|
|
#endif /* BUS_DESKTOP_FILE_H */
|