1 /*
2 * Policy capability support functions
3 */
4
5 #include <string.h>
6 #include <sepol/policydb/polcaps.h>
7
8 static const char * const polcap_names[POLICYDB_CAP_MAX + 1] = {
9 [POLICYDB_CAP_NETPEER] = "network_peer_controls",
10 [POLICYDB_CAP_OPENPERM] = "open_perms",
11 [POLICYDB_CAP_EXTSOCKCLASS] = "extended_socket_class",
12 [POLICYDB_CAP_ALWAYSNETWORK] = "always_check_network",
13 [POLICYDB_CAP_CGROUPSECLABEL] = "cgroup_seclabel",
14 [POLICYDB_CAP_NNP_NOSUID_TRANSITION] = "nnp_nosuid_transition",
15 [POLICYDB_CAP_GENFS_SECLABEL_SYMLINKS] = "genfs_seclabel_symlinks",
16 [POLICYDB_CAP_IOCTL_SKIP_CLOEXEC] = "ioctl_skip_cloexec",
17 [POLICYDB_CAP_USERSPACE_INITIAL_CONTEXT] = "userspace_initial_context",
18 };
19
sepol_polcap_getnum(const char * name)20 int sepol_polcap_getnum(const char *name)
21 {
22 int capnum;
23
24 for (capnum = 0; capnum <= POLICYDB_CAP_MAX; capnum++) {
25 if (polcap_names[capnum] == NULL)
26 continue;
27 if (strcasecmp(polcap_names[capnum], name) == 0)
28 return capnum;
29 }
30 return -1;
31 }
32
sepol_polcap_getname(unsigned int capnum)33 const char *sepol_polcap_getname(unsigned int capnum)
34 {
35 if (capnum > POLICYDB_CAP_MAX)
36 return NULL;
37
38 return polcap_names[capnum];
39 }
40