|
sl@0
|
1 |
/* -*- mode: C; c-file-style: "gnu" -*- */
|
|
sl@0
|
2 |
/* policy.h Bus security policy
|
|
sl@0
|
3 |
*
|
|
sl@0
|
4 |
* Copyright (C) 2003 Red Hat, Inc.
|
|
sl@0
|
5 |
* Portion Copyright © 2008 Nokia Corporation and/or its subsidiary(-ies). All rights reserved.
|
|
sl@0
|
6 |
* Licensed under the Academic Free License version 2.1
|
|
sl@0
|
7 |
*
|
|
sl@0
|
8 |
* This program is free software; you can redistribute it and/or modify
|
|
sl@0
|
9 |
* it under the terms of the GNU General Public License as published by
|
|
sl@0
|
10 |
* the Free Software Foundation; either version 2 of the License, or
|
|
sl@0
|
11 |
* (at your option) any later version.
|
|
sl@0
|
12 |
*
|
|
sl@0
|
13 |
* This program is distributed in the hope that it will be useful,
|
|
sl@0
|
14 |
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
sl@0
|
15 |
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
sl@0
|
16 |
* GNU General Public License for more details.
|
|
sl@0
|
17 |
*
|
|
sl@0
|
18 |
* You should have received a copy of the GNU General Public License
|
|
sl@0
|
19 |
* along with this program; if not, write to the Free Software
|
|
sl@0
|
20 |
* Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
sl@0
|
21 |
*
|
|
sl@0
|
22 |
*/
|
|
sl@0
|
23 |
|
|
sl@0
|
24 |
#ifndef BUS_POLICY_H
|
|
sl@0
|
25 |
#define BUS_POLICY_H
|
|
sl@0
|
26 |
|
|
sl@0
|
27 |
#include <dbus/dbus.h>
|
|
sl@0
|
28 |
#ifndef __SYMBIAN32__
|
|
sl@0
|
29 |
#include <dbus/dbus-string.h>
|
|
sl@0
|
30 |
#include <dbus/dbus-list.h>
|
|
sl@0
|
31 |
#include <dbus/dbus-sysdeps.h>
|
|
sl@0
|
32 |
#else
|
|
sl@0
|
33 |
#include "dbus-string.h"
|
|
sl@0
|
34 |
#include "dbus-list.h"
|
|
sl@0
|
35 |
#include "dbus-sysdeps.h"
|
|
sl@0
|
36 |
#endif //__SYMBIAN32__
|
|
sl@0
|
37 |
#include "bus.h"
|
|
sl@0
|
38 |
|
|
sl@0
|
39 |
typedef enum
|
|
sl@0
|
40 |
{
|
|
sl@0
|
41 |
BUS_POLICY_RULE_SEND,
|
|
sl@0
|
42 |
BUS_POLICY_RULE_RECEIVE,
|
|
sl@0
|
43 |
BUS_POLICY_RULE_OWN,
|
|
sl@0
|
44 |
BUS_POLICY_RULE_USER,
|
|
sl@0
|
45 |
BUS_POLICY_RULE_GROUP
|
|
sl@0
|
46 |
} BusPolicyRuleType;
|
|
sl@0
|
47 |
|
|
sl@0
|
48 |
/** determines whether the rule affects a connection, or some global item */
|
|
sl@0
|
49 |
#define BUS_POLICY_RULE_IS_PER_CLIENT(rule) (!((rule)->type == BUS_POLICY_RULE_USER || \
|
|
sl@0
|
50 |
(rule)->type == BUS_POLICY_RULE_GROUP))
|
|
sl@0
|
51 |
|
|
sl@0
|
52 |
struct BusPolicyRule
|
|
sl@0
|
53 |
{
|
|
sl@0
|
54 |
int refcount;
|
|
sl@0
|
55 |
|
|
sl@0
|
56 |
BusPolicyRuleType type;
|
|
sl@0
|
57 |
|
|
sl@0
|
58 |
unsigned int allow : 1; /**< #TRUE if this allows, #FALSE if it denies */
|
|
sl@0
|
59 |
|
|
sl@0
|
60 |
union
|
|
sl@0
|
61 |
{
|
|
sl@0
|
62 |
struct
|
|
sl@0
|
63 |
{
|
|
sl@0
|
64 |
/* message type can be DBUS_MESSAGE_TYPE_INVALID meaning "any" */
|
|
sl@0
|
65 |
int message_type;
|
|
sl@0
|
66 |
/* any of these can be NULL meaning "any" */
|
|
sl@0
|
67 |
char *path;
|
|
sl@0
|
68 |
char *interface;
|
|
sl@0
|
69 |
char *member;
|
|
sl@0
|
70 |
char *error;
|
|
sl@0
|
71 |
char *destination;
|
|
sl@0
|
72 |
unsigned int requested_reply : 1;
|
|
sl@0
|
73 |
} send;
|
|
sl@0
|
74 |
|
|
sl@0
|
75 |
struct
|
|
sl@0
|
76 |
{
|
|
sl@0
|
77 |
/* message type can be DBUS_MESSAGE_TYPE_INVALID meaning "any" */
|
|
sl@0
|
78 |
int message_type;
|
|
sl@0
|
79 |
/* any of these can be NULL meaning "any" */
|
|
sl@0
|
80 |
char *path;
|
|
sl@0
|
81 |
char *interface;
|
|
sl@0
|
82 |
char *member;
|
|
sl@0
|
83 |
char *error;
|
|
sl@0
|
84 |
char *origin;
|
|
sl@0
|
85 |
unsigned int eavesdrop : 1;
|
|
sl@0
|
86 |
unsigned int requested_reply : 1;
|
|
sl@0
|
87 |
} receive;
|
|
sl@0
|
88 |
|
|
sl@0
|
89 |
struct
|
|
sl@0
|
90 |
{
|
|
sl@0
|
91 |
/* can be NULL meaning "any" */
|
|
sl@0
|
92 |
char *service_name;
|
|
sl@0
|
93 |
} own;
|
|
sl@0
|
94 |
|
|
sl@0
|
95 |
struct
|
|
sl@0
|
96 |
{
|
|
sl@0
|
97 |
/* can be DBUS_UID_UNSET meaning "any" */
|
|
sl@0
|
98 |
dbus_uid_t uid;
|
|
sl@0
|
99 |
} user;
|
|
sl@0
|
100 |
|
|
sl@0
|
101 |
struct
|
|
sl@0
|
102 |
{
|
|
sl@0
|
103 |
/* can be DBUS_GID_UNSET meaning "any" */
|
|
sl@0
|
104 |
dbus_gid_t gid;
|
|
sl@0
|
105 |
} group;
|
|
sl@0
|
106 |
|
|
sl@0
|
107 |
} d;
|
|
sl@0
|
108 |
};
|
|
sl@0
|
109 |
|
|
sl@0
|
110 |
BusPolicyRule* bus_policy_rule_new (BusPolicyRuleType type,
|
|
sl@0
|
111 |
dbus_bool_t allow);
|
|
sl@0
|
112 |
BusPolicyRule* bus_policy_rule_ref (BusPolicyRule *rule);
|
|
sl@0
|
113 |
void bus_policy_rule_unref (BusPolicyRule *rule);
|
|
sl@0
|
114 |
|
|
sl@0
|
115 |
BusPolicy* bus_policy_new (void);
|
|
sl@0
|
116 |
BusPolicy* bus_policy_ref (BusPolicy *policy);
|
|
sl@0
|
117 |
void bus_policy_unref (BusPolicy *policy);
|
|
sl@0
|
118 |
BusClientPolicy* bus_policy_create_client_policy (BusPolicy *policy,
|
|
sl@0
|
119 |
DBusConnection *connection,
|
|
sl@0
|
120 |
DBusError *error);
|
|
sl@0
|
121 |
dbus_bool_t bus_policy_allow_user (BusPolicy *policy,
|
|
sl@0
|
122 |
DBusUserDatabase *user_database,
|
|
sl@0
|
123 |
unsigned long uid);
|
|
sl@0
|
124 |
dbus_bool_t bus_policy_append_default_rule (BusPolicy *policy,
|
|
sl@0
|
125 |
BusPolicyRule *rule);
|
|
sl@0
|
126 |
dbus_bool_t bus_policy_append_mandatory_rule (BusPolicy *policy,
|
|
sl@0
|
127 |
BusPolicyRule *rule);
|
|
sl@0
|
128 |
dbus_bool_t bus_policy_append_user_rule (BusPolicy *policy,
|
|
sl@0
|
129 |
dbus_uid_t uid,
|
|
sl@0
|
130 |
BusPolicyRule *rule);
|
|
sl@0
|
131 |
dbus_bool_t bus_policy_append_group_rule (BusPolicy *policy,
|
|
sl@0
|
132 |
dbus_gid_t gid,
|
|
sl@0
|
133 |
BusPolicyRule *rule);
|
|
sl@0
|
134 |
dbus_bool_t bus_policy_append_console_rule (BusPolicy *policy,
|
|
sl@0
|
135 |
dbus_bool_t at_console,
|
|
sl@0
|
136 |
BusPolicyRule *rule);
|
|
sl@0
|
137 |
|
|
sl@0
|
138 |
dbus_bool_t bus_policy_merge (BusPolicy *policy,
|
|
sl@0
|
139 |
BusPolicy *to_absorb);
|
|
sl@0
|
140 |
|
|
sl@0
|
141 |
BusClientPolicy* bus_client_policy_new (void);
|
|
sl@0
|
142 |
BusClientPolicy* bus_client_policy_ref (BusClientPolicy *policy);
|
|
sl@0
|
143 |
void bus_client_policy_unref (BusClientPolicy *policy);
|
|
sl@0
|
144 |
dbus_bool_t bus_client_policy_check_can_send (BusClientPolicy *policy,
|
|
sl@0
|
145 |
BusRegistry *registry,
|
|
sl@0
|
146 |
dbus_bool_t requested_reply,
|
|
sl@0
|
147 |
DBusConnection *receiver,
|
|
sl@0
|
148 |
DBusMessage *message);
|
|
sl@0
|
149 |
dbus_bool_t bus_client_policy_check_can_receive (BusClientPolicy *policy,
|
|
sl@0
|
150 |
BusRegistry *registry,
|
|
sl@0
|
151 |
dbus_bool_t requested_reply,
|
|
sl@0
|
152 |
DBusConnection *sender,
|
|
sl@0
|
153 |
DBusConnection *addressed_recipient,
|
|
sl@0
|
154 |
DBusConnection *proposed_recipient,
|
|
sl@0
|
155 |
DBusMessage *message);
|
|
sl@0
|
156 |
dbus_bool_t bus_client_policy_check_can_own (BusClientPolicy *policy,
|
|
sl@0
|
157 |
DBusConnection *connection,
|
|
sl@0
|
158 |
const DBusString *service_name);
|
|
sl@0
|
159 |
dbus_bool_t bus_client_policy_append_rule (BusClientPolicy *policy,
|
|
sl@0
|
160 |
BusPolicyRule *rule);
|
|
sl@0
|
161 |
void bus_client_policy_optimize (BusClientPolicy *policy);
|
|
sl@0
|
162 |
|
|
sl@0
|
163 |
|
|
sl@0
|
164 |
#endif /* BUS_POLICY_H */
|