mirror of
https://gitlab.freedesktop.org/dbus/dbus.git
synced 2025-12-22 09:00:17 +01:00
b78d222083
* bus/config-parser.c: (struct PolicyType): Add POLICY_CONSOLE (struct Element.d.policy): s/gid_or_uid/gid_uid_or_at_console (start_busconfig_child): Sets up console element when <policy at_console=""> is encountered in a policy file (append_rule_from_element): Convert console elements to console rules. * bus/policy.c: (bus_policy_create_client_policy): Add console rules to the client policy based on if the client is at the console (bus_policy_append_console_rule): New function for adding a console rule to a policy (bus_policy_merge): Handle console rule merging * dbus/dbus-sysdeps.h: Added the DBUS_CONSOLE_DIR constant where we check for console user files * dbus/dbus-sysdeps.c: (_dbus_file_exists): New function which checks if the given file exists (_dbus_user_at_console): New function which does the system specific process of checking if the user is at the console * dbus/dbus-userdb.c: (_dbus_is_console_user): New function converts a UID to user name and then calls the system specific _dbus_user_at_console to see if the user is at the console and therefor a console user
158 lines
6.3 KiB
C
158 lines
6.3 KiB
C
/* -*- mode: C; c-file-style: "gnu" -*- */
|
|
/* policy.h Bus security policy
|
|
*
|
|
* Copyright (C) 2003 Red Hat, Inc.
|
|
*
|
|
* Licensed under the Academic Free License version 2.1
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
*
|
|
*/
|
|
|
|
#ifndef BUS_POLICY_H
|
|
#define BUS_POLICY_H
|
|
|
|
#include <dbus/dbus.h>
|
|
#include <dbus/dbus-string.h>
|
|
#include <dbus/dbus-list.h>
|
|
#include <dbus/dbus-sysdeps.h>
|
|
#include "bus.h"
|
|
|
|
typedef enum
|
|
{
|
|
BUS_POLICY_RULE_SEND,
|
|
BUS_POLICY_RULE_RECEIVE,
|
|
BUS_POLICY_RULE_OWN,
|
|
BUS_POLICY_RULE_USER,
|
|
BUS_POLICY_RULE_GROUP
|
|
} BusPolicyRuleType;
|
|
|
|
/** determines whether the rule affects a connection, or some global item */
|
|
#define BUS_POLICY_RULE_IS_PER_CLIENT(rule) (!((rule)->type == BUS_POLICY_RULE_USER || \
|
|
(rule)->type == BUS_POLICY_RULE_GROUP))
|
|
|
|
struct BusPolicyRule
|
|
{
|
|
int refcount;
|
|
|
|
BusPolicyRuleType type;
|
|
|
|
unsigned int allow : 1; /**< #TRUE if this allows, #FALSE if it denies */
|
|
|
|
union
|
|
{
|
|
struct
|
|
{
|
|
/* message type can be DBUS_MESSAGE_TYPE_INVALID meaning "any" */
|
|
int message_type;
|
|
/* any of these can be NULL meaning "any" */
|
|
char *path;
|
|
char *interface;
|
|
char *member;
|
|
char *error;
|
|
char *destination;
|
|
unsigned int requested_reply : 1;
|
|
} send;
|
|
|
|
struct
|
|
{
|
|
/* message type can be DBUS_MESSAGE_TYPE_INVALID meaning "any" */
|
|
int message_type;
|
|
/* any of these can be NULL meaning "any" */
|
|
char *path;
|
|
char *interface;
|
|
char *member;
|
|
char *error;
|
|
char *origin;
|
|
unsigned int eavesdrop : 1;
|
|
unsigned int requested_reply : 1;
|
|
} receive;
|
|
|
|
struct
|
|
{
|
|
/* can be NULL meaning "any" */
|
|
char *service_name;
|
|
} own;
|
|
|
|
struct
|
|
{
|
|
/* can be DBUS_UID_UNSET meaning "any" */
|
|
dbus_uid_t uid;
|
|
} user;
|
|
|
|
struct
|
|
{
|
|
/* can be DBUS_GID_UNSET meaning "any" */
|
|
dbus_gid_t gid;
|
|
} group;
|
|
|
|
} d;
|
|
};
|
|
|
|
BusPolicyRule* bus_policy_rule_new (BusPolicyRuleType type,
|
|
dbus_bool_t allow);
|
|
BusPolicyRule* bus_policy_rule_ref (BusPolicyRule *rule);
|
|
void bus_policy_rule_unref (BusPolicyRule *rule);
|
|
|
|
BusPolicy* bus_policy_new (void);
|
|
BusPolicy* bus_policy_ref (BusPolicy *policy);
|
|
void bus_policy_unref (BusPolicy *policy);
|
|
BusClientPolicy* bus_policy_create_client_policy (BusPolicy *policy,
|
|
DBusConnection *connection,
|
|
DBusError *error);
|
|
dbus_bool_t bus_policy_allow_user (BusPolicy *policy,
|
|
DBusUserDatabase *user_database,
|
|
unsigned long uid);
|
|
dbus_bool_t bus_policy_append_default_rule (BusPolicy *policy,
|
|
BusPolicyRule *rule);
|
|
dbus_bool_t bus_policy_append_mandatory_rule (BusPolicy *policy,
|
|
BusPolicyRule *rule);
|
|
dbus_bool_t bus_policy_append_user_rule (BusPolicy *policy,
|
|
dbus_uid_t uid,
|
|
BusPolicyRule *rule);
|
|
dbus_bool_t bus_policy_append_group_rule (BusPolicy *policy,
|
|
dbus_gid_t gid,
|
|
BusPolicyRule *rule);
|
|
dbus_bool_t bus_policy_append_console_rule (BusPolicy *policy,
|
|
dbus_bool_t at_console,
|
|
BusPolicyRule *rule);
|
|
|
|
dbus_bool_t bus_policy_merge (BusPolicy *policy,
|
|
BusPolicy *to_absorb);
|
|
|
|
BusClientPolicy* bus_client_policy_new (void);
|
|
BusClientPolicy* bus_client_policy_ref (BusClientPolicy *policy);
|
|
void bus_client_policy_unref (BusClientPolicy *policy);
|
|
dbus_bool_t bus_client_policy_check_can_send (BusClientPolicy *policy,
|
|
BusRegistry *registry,
|
|
dbus_bool_t requested_reply,
|
|
DBusConnection *receiver,
|
|
DBusMessage *message);
|
|
dbus_bool_t bus_client_policy_check_can_receive (BusClientPolicy *policy,
|
|
BusRegistry *registry,
|
|
dbus_bool_t requested_reply,
|
|
DBusConnection *sender,
|
|
DBusConnection *addressed_recipient,
|
|
DBusConnection *proposed_recipient,
|
|
DBusMessage *message);
|
|
dbus_bool_t bus_client_policy_check_can_own (BusClientPolicy *policy,
|
|
DBusConnection *connection,
|
|
const DBusString *service_name);
|
|
dbus_bool_t bus_client_policy_append_rule (BusClientPolicy *policy,
|
|
BusPolicyRule *rule);
|
|
void bus_client_policy_optimize (BusClientPolicy *policy);
|
|
|
|
|
|
#endif /* BUS_POLICY_H */
|