08deac6e3e
This has the advantage that mac_selinux_access_check() can be used as a function in all contexts. For example, parameters passed to it won't be reported as unused if the "function" call is replaced with 0 on SELinux disabled builds.
15 lines
542 B
C
15 lines
542 B
C
/* SPDX-License-Identifier: LGPL-2.1+ */
|
|
#pragma once
|
|
|
|
#include "sd-bus.h"
|
|
|
|
#include "manager.h"
|
|
|
|
int mac_selinux_generic_access_check(sd_bus_message *message, const char *path, const char *permission, sd_bus_error *error);
|
|
|
|
#define mac_selinux_access_check(message, permission, error) \
|
|
mac_selinux_generic_access_check((message), NULL, (permission), (error))
|
|
|
|
#define mac_selinux_unit_access_check(unit, message, permission, error) \
|
|
mac_selinux_generic_access_check((message), unit_label_path(unit), (permission), (error))
|