]> git.ipfire.org Git - thirdparty/systemd.git/commitdiff
selinux: name mac_selinux_generic_access_check as internal function
authorChristian Göttsche <cgzones@googlemail.com>
Wed, 28 Jul 2021 15:00:02 +0000 (17:00 +0200)
committerTopi Miettinen <topimiettinen@users.noreply.github.com>
Sat, 20 Nov 2021 16:38:03 +0000 (16:38 +0000)
`mac_selinux_generic_access_check()` should not be called directly, only
via the wrapper macros `mac_selinux_access_check` and
`mac_selinux_unit_access_check`.

src/core/selinux-access.c
src/core/selinux-access.h

index 6afc64a7b16f15cc2ab217fd86dedec40956f89a..ad098e99dfa7c7a3693956b693e868f37722955e 100644 (file)
@@ -177,7 +177,7 @@ static int access_init(sd_bus_error *error) {
    If the machine is in permissive mode it will return ok.  Audit messages will
    still be generated if the access would be denied in enforcing mode.
 */
-int mac_selinux_generic_access_check(
+int mac_selinux_access_check_internal(
                 sd_bus_message *message,
                 const char *path,
                 const char *permission,
@@ -286,7 +286,7 @@ int mac_selinux_generic_access_check(
 
 #else /* HAVE_SELINUX */
 
-int mac_selinux_generic_access_check(
+int mac_selinux_access_check_internal(
                 sd_bus_message *message,
                 const char *path,
                 const char *permission,
index 93aedc2347e7cce68972bcf36967c96a8354eee6..e5ebcb13a20cfdb70961823f918dc09e8d29980b 100644 (file)
@@ -5,14 +5,14 @@
 
 #include "manager.h"
 
-int mac_selinux_generic_access_check(sd_bus_message *message,
-                                     const char *path,
-                                     const char *permission,
-                                     const char *function,
-                                     sd_bus_error *error);
+int mac_selinux_access_check_internal(sd_bus_message *message,
+                                      const char *path,
+                                      const char *permission,
+                                      const char *function,
+                                      sd_bus_error *error);
 
 #define mac_selinux_access_check(message, permission, error) \
-        mac_selinux_generic_access_check((message), NULL, (permission), __func__, (error))
+        mac_selinux_access_check_internal((message), NULL, (permission), __func__, (error))
 
 #define mac_selinux_unit_access_check(unit, message, permission, error) \
-        mac_selinux_generic_access_check((message), unit_label_path(unit), (permission), __func__, (error))
+        mac_selinux_access_check_internal((message), unit_label_path(unit), (permission), __func__, (error))