vasilito
ff4ff35918
Red Bear OS is a full fork. All sources must be available from git clone with zero network access. Removed gitignore rules that excluded fetched source trees under recipes/*/source/, local/recipes/kde/*/source/, local/recipes/qt/*/source/, and vendor source trees. Build artifacts (target/, build/, source.tar, *.o, *.so) remain excluded. 127291 files added — kernel, relibc, base, bootloader, pkgar, all KDE/Qt frameworks, mesa, wayland, DRM drivers, and every other recipe source.
97 lines
2.1 KiB
C
97 lines
2.1 KiB
C
/*
|
|
htop - SELinuxMeter.c
|
|
(C) 2020 htop dev team
|
|
Released under the GNU GPLv2+, see the COPYING file
|
|
in the source distribution for its full text.
|
|
*/
|
|
|
|
#include "config.h" // IWYU pragma: keep
|
|
|
|
#include "linux/SELinuxMeter.h"
|
|
|
|
#include "CRT.h"
|
|
|
|
#include <stdbool.h>
|
|
#include <stdint.h>
|
|
#include <stdio.h>
|
|
#include <unistd.h>
|
|
#include <sys/statfs.h>
|
|
#include <sys/statvfs.h>
|
|
|
|
#include "Object.h"
|
|
#include "XUtils.h"
|
|
|
|
|
|
static const int SELinuxMeter_attributes[] = {
|
|
METER_TEXT,
|
|
};
|
|
|
|
static bool enabled = false;
|
|
static bool enforcing = false;
|
|
|
|
static bool hasSELinuxMount(void) {
|
|
struct statfs sfbuf;
|
|
int r = statfs("/sys/fs/selinux", &sfbuf);
|
|
if (r != 0) {
|
|
return false;
|
|
}
|
|
|
|
if ((uint32_t)sfbuf.f_type != /* SELINUX_MAGIC */ 0xf97cff8cU) {
|
|
return false;
|
|
}
|
|
|
|
struct statvfs vfsbuf;
|
|
r = statvfs("/sys/fs/selinux", &vfsbuf);
|
|
if (r != 0 || (vfsbuf.f_flag & ST_RDONLY)) {
|
|
return false;
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
static bool isSelinuxEnabled(void) {
|
|
return hasSELinuxMount() && (0 == access("/etc/selinux/config", F_OK));
|
|
}
|
|
|
|
static bool isSelinuxEnforcing(void) {
|
|
if (!enabled) {
|
|
return false;
|
|
}
|
|
|
|
char buf[20];
|
|
ssize_t r = xReadfile("/sys/fs/selinux/enforce", buf, sizeof(buf));
|
|
if (r < 0)
|
|
return false;
|
|
|
|
int enforce = 0;
|
|
if (sscanf(buf, "%d", &enforce) != 1) {
|
|
return false;
|
|
}
|
|
|
|
return !!enforce;
|
|
}
|
|
|
|
static void SELinuxMeter_updateValues(Meter* this) {
|
|
enabled = isSelinuxEnabled();
|
|
enforcing = isSelinuxEnforcing();
|
|
|
|
xSnprintf(this->txtBuffer, sizeof(this->txtBuffer), "%s%s", enabled ? "enabled" : "disabled", enabled ? (enforcing ? "; mode: enforcing" : "; mode: permissive") : "");
|
|
}
|
|
|
|
const MeterClass SELinuxMeter_class = {
|
|
.super = {
|
|
.extends = Class(Meter),
|
|
.delete = Meter_delete,
|
|
},
|
|
.updateValues = SELinuxMeter_updateValues,
|
|
.defaultMode = TEXT_METERMODE,
|
|
.supportedModes = (1 << TEXT_METERMODE),
|
|
.maxItems = 0,
|
|
.total = 0.0,
|
|
.attributes = SELinuxMeter_attributes,
|
|
.name = "SELinux",
|
|
.uiName = "SELinux",
|
|
.description = "SELinux state overview",
|
|
.caption = "SELinux: "
|
|
};
|