1 #include <unistd.h>
2 #include <sys/types.h>
3 #include <stdlib.h>
4 #include <errno.h>
5 #include "selinux_internal.h"
6 #include <selinux/avc.h>
7
8 static pthread_once_t once = PTHREAD_ONCE_INIT;
9
avc_init_once(void)10 static void avc_init_once(void)
11 {
12 avc_open(NULL, 0);
13 }
14
selinux_check_access(const security_context_t scon,const security_context_t tcon,const char * class,const char * perm,void * aux)15 int selinux_check_access(const security_context_t scon, const security_context_t tcon, const char *class, const char *perm, void *aux) {
16 int status = -1;
17 int rc = -1;
18 security_id_t scon_id;
19 security_id_t tcon_id;
20 security_class_t sclass;
21 access_vector_t av;
22
23 if (is_selinux_enabled() == 0)
24 return 0;
25
26 __selinux_once(once, avc_init_once);
27
28 if ((rc = avc_context_to_sid(scon, &scon_id)) < 0) return rc;
29
30 if ((rc = avc_context_to_sid(tcon, &tcon_id)) < 0) return rc;
31
32 if ((sclass = string_to_security_class(class)) == 0) return status;
33
34 if ((av = string_to_av_perm(sclass, perm)) == 0) return status;
35
36 return avc_has_perm (scon_id, tcon_id, sclass, av, NULL, aux);
37 }
38
39