fstrim shouldn't run inside a container

[thirdparty/util-linux.git] / login-utils / selinux_utils.c

diff --git a/login-utils/selinux_utils.c b/login-utils/selinux_utils.c
index 2db5dd3d09e18948efa7c9062ca990da62246a0b..dfd696f3e8f574bb74338cfc678ce5191b07b32c 100644 (file)
--- a/login-utils/selinux_utils.c
+++ b/login-utils/selinux_utils.c
@@ -1,54 +1,29 @@
-#include <sys/types.h>
+#include <selinux/context.h>
+#include <selinux/selinux.h>
 #include <stdio.h>
 #include <string.h>
-#include <selinux/selinux.h>
-#include <selinux/flask.h>
-#include <selinux/av_permissions.h>
-#include <selinux/context.h>
+#include <sys/types.h>
+
 #include "selinux_utils.h"
 
-int checkAccess(char *chuser, int access) {
-  int status=-1;
-  security_context_t user_context;
-  const char *user=NULL;
-  if( getprevcon(&user_context)==0 ) {
-    context_t c=context_new(user_context);
-    user=context_user_get(c);
-    if (strcmp(chuser, user) == 0) {
-      status=0;
-    } else {
-      struct av_decision avd;
-      int retval = security_compute_av(user_context,
-                                      user_context,
-                                      SECCLASS_PASSWD,
-                                      access,
-                                      &avd);
-         
-      if ((retval == 0) && 
-         ((access & avd.allowed) == access)) {
-       status=0;
-      }
-    }
-    context_free(c);
-    freecon(user_context);
-  }
-  return status;
+access_vector_t get_access_vector(const char *tclass, const char *op)
+{
+       security_class_t tc = string_to_security_class(tclass);
+
+       return tc ? string_to_av_perm(tc, op) : 0;
 }
 
-int setupDefaultContext(char *orig_file) {
-  if (is_selinux_enabled() > 0) {
-    security_context_t scontext;
-    
-    if (getfilecon(orig_file,&scontext)<0) {
-      return 1;
-    }
-    
-    if (setfscreatecon(scontext) < 0) 
-      {
-       freecon(scontext);
-       return 1;
-      }
-    freecon(scontext);
-  }
-  return 0;
+int setupDefaultContext(char *orig_file)
+{
+       if (is_selinux_enabled() > 0) {
+               security_context_t scontext;
+               if (getfilecon(orig_file, &scontext) < 0)
+                       return 1;
+               if (setfscreatecon(scontext) < 0) {
+                       freecon(scontext);
+                       return 1;
+               }
+               freecon(scontext);
+       }
+       return 0;
 }