Implement basic static security checks with PID

This commit is contained in:
emersion 2018-11-08 11:54:28 +01:00
parent 4a21981855
commit 50d84b8512
No known key found for this signature in database
GPG key ID: 0FDE7BE0E88F5E48
3 changed files with 157 additions and 22 deletions

View file

@ -1,18 +1,13 @@
#ifndef _SWAY_SECURITY_H
#define _SWAY_SECURITY_H
#include <unistd.h>
#include <stdbool.h>
#include <wayland-server.h>
#include "sway/config.h"
uint32_t get_feature_policy_mask(pid_t pid);
uint32_t get_ipc_policy_mask(pid_t pid);
uint32_t get_command_policy_mask(const char *cmd);
bool load_security(struct wl_display *display);
bool check_security_rule(const char *cmd, const char *global);
struct feature_policy *get_feature_policy(const char *name);
const char *command_policy_str(enum command_context context);
struct feature_policy *alloc_feature_policy(const char *program);
struct ipc_policy *alloc_ipc_policy(const char *program);
struct command_policy *alloc_command_policy(const char *command);
#endif