PostgreSQL Source Code
git master
|
Go to the source code of this file.
Functions | |
bool | sepgsql_is_enabled (void) |
int | sepgsql_get_mode (void) |
int | sepgsql_set_mode (int new_mode) |
bool | sepgsql_getenforce (void) |
void | sepgsql_audit_log (bool denied, bool enforcing, const char *scontext, const char *tcontext, uint16 tclass, uint32 audited, const char *audit_name) |
void | sepgsql_compute_avd (const char *scontext, const char *tcontext, uint16 tclass, struct av_decision *avd) |
char * | sepgsql_compute_create (const char *scontext, const char *tcontext, uint16 tclass, const char *objname) |
Variables | |
struct { | |
const char * class_name | |
uint16 class_code | |
struct { | |
const char * av_name | |
uint32 av_code | |
} av [32] | |
} | selinux_catalog [] |
static int | sepgsql_mode = SEPGSQL_MODE_INTERNAL |
void sepgsql_audit_log | ( | bool | denied, |
bool | enforcing, | ||
const char * | scontext, | ||
const char * | tcontext, | ||
uint16 | tclass, | ||
uint32 | audited, | ||
const char * | audit_name | ||
) |
Definition at line 678 of file selinux.c.
References appendStringInfo(), appendStringInfoString(), Assert, av_name, buf, class_name, ereport, errmsg(), i, initStringInfo(), LOG, selinux_catalog, and SEPG_CLASS_MAX.
Referenced by sepgsql_avc_check_perms_label().
void sepgsql_compute_avd | ( | const char * | scontext, |
const char * | tcontext, | ||
uint16 | tclass, | ||
struct av_decision * | avd | ||
) |
Definition at line 739 of file selinux.c.
References Assert, av_code, av_name, class_code, ereport, errcode(), errmsg(), ERROR, i, selinux_catalog, and SEPG_CLASS_MAX.
Referenced by sepgsql_avc_compute().
char* sepgsql_compute_create | ( | const char * | scontext, |
const char * | tcontext, | ||
uint16 | tclass, | ||
const char * | objname | ||
) |
Definition at line 842 of file selinux.c.
References Assert, ereport, errcode(), errmsg(), ERROR, PG_END_TRY, PG_FINALLY, PG_TRY, pstrdup(), selinux_catalog, and SEPG_CLASS_MAX.
Referenced by sepgsql_attribute_post_create(), sepgsql_avc_compute(), sepgsql_database_post_create(), sepgsql_proc_post_create(), sepgsql_relation_post_create(), and sepgsql_schema_post_create().
int sepgsql_get_mode | ( | void | ) |
Definition at line 625 of file selinux.c.
References sepgsql_mode.
Referenced by sepgsql_avc_check_perms_label().
bool sepgsql_getenforce | ( | void | ) |
Definition at line 651 of file selinux.c.
References sepgsql_mode, and SEPGSQL_MODE_DEFAULT.
Referenced by check_relation_privileges(), sepgsql_avc_check_perms_label(), and sepgsql_utility_command().
bool sepgsql_is_enabled | ( | void | ) |
Definition at line 616 of file selinux.c.
References sepgsql_mode, and SEPGSQL_MODE_DISABLED.
Referenced by sepgsql_getcon(), sepgsql_mcstrans_in(), sepgsql_mcstrans_out(), and sepgsql_restorecon().
int sepgsql_set_mode | ( | int | new_mode | ) |
Definition at line 634 of file selinux.c.
References sepgsql_mode.
Referenced by _PG_init(), and sepgsql_client_auth().
struct { ... } av[32] |
uint32 av_code |
Definition at line 37 of file selinux.c.
Referenced by sepgsql_compute_avd().
const char* av_name |
Definition at line 36 of file selinux.c.
Referenced by sepgsql_audit_log(), and sepgsql_compute_avd().
uint16 class_code |
Definition at line 33 of file selinux.c.
Referenced by sepgsql_compute_avd().
const char* class_name |
Definition at line 32 of file selinux.c.
Referenced by sepgsql_audit_log(), and to_regclass().
struct { ... } selinux_catalog[] |
Referenced by sepgsql_audit_log(), sepgsql_compute_avd(), and sepgsql_compute_create().
|
static |
Definition at line 610 of file selinux.c.
Referenced by sepgsql_get_mode(), sepgsql_getenforce(), sepgsql_is_enabled(), and sepgsql_set_mode().