htop/linux/SELinuxMeter.c

94 lines
2.0 KiB
C
Raw Normal View History

2020-10-07 15:18:02 +00:00
/*
htop - SELinuxMeter.c
(C) 2020 htop dev team
2020-10-07 15:18:02 +00:00
Released under the GNU GPLv2, see the COPYING file
in the source distribution for its full text.
*/
#include "SELinuxMeter.h"
#include "CRT.h"
#include <stdbool.h>
#include <stdio.h>
#include <unistd.h>
#include <sys/statfs.h>
2020-10-07 15:18:02 +00:00
#include <sys/statvfs.h>
#include "Macros.h"
#include "Object.h"
#include "XUtils.h"
2020-10-07 15:18:02 +00:00
static const int SELinuxMeter_attributes[] = {
METER_TEXT,
};
static bool enabled = false;
static bool enforcing = false;
static bool hasSELinuxMount(void) {
struct statfs sfbuf;
int r = statfs("/sys/fs/selinux", &sfbuf);
2020-11-01 00:09:51 +00:00
if (r != 0) {
2020-10-07 15:18:02 +00:00
return false;
2020-11-01 00:09:51 +00:00
}
2020-10-07 15:18:02 +00:00
if ((uint32_t)sfbuf.f_type != /* SELINUX_MAGIC */ 0xf97cff8cU) {
2020-10-07 15:18:02 +00:00
return false;
2020-11-01 00:09:51 +00:00
}
2020-10-07 15:18:02 +00:00
struct statvfs vfsbuf;
r = statvfs("/sys/fs/selinux", &vfsbuf);
2020-11-01 00:09:51 +00:00
if (r != 0 || (vfsbuf.f_flag & ST_RDONLY)) {
2020-10-07 15:18:02 +00:00
return false;
2020-11-01 00:09:51 +00:00
}
2020-10-07 15:18:02 +00:00
return true;
}
static bool isSelinuxEnabled(void) {
return hasSELinuxMount() && (0 == access("/etc/selinux/config", F_OK));
}
static bool isSelinuxEnforcing(void) {
2020-11-01 00:09:51 +00:00
if (!enabled) {
2020-10-07 15:18:02 +00:00
return false;
2020-11-01 00:09:51 +00:00
}
2020-10-07 15:18:02 +00:00
char buf[20];
ssize_t r = xReadfile("/sys/fs/selinux/enforce", buf, sizeof(buf));
if (r < 0)
2020-10-07 15:18:02 +00:00
return false;
int enforce = 0;
2020-11-01 00:09:51 +00:00
if (sscanf(buf, "%d", &enforce) != 1) {
2020-10-07 15:18:02 +00:00
return false;
2020-11-01 00:09:51 +00:00
}
2020-10-07 15:18:02 +00:00
return !!enforce;
}
2020-10-06 11:13:16 +00:00
static void SELinuxMeter_updateValues(ATTR_UNUSED Meter* this) {
2020-10-07 15:18:02 +00:00
enabled = isSelinuxEnabled();
enforcing = isSelinuxEnforcing();
2020-10-06 11:13:16 +00:00
xSnprintf(this->txtBuffer, sizeof(this->txtBuffer), "%s%s", enabled ? "enabled" : "disabled", enabled ? (enforcing ? "; mode: enforcing" : "; mode: permissive") : "");
2020-10-07 15:18:02 +00:00
}
const MeterClass SELinuxMeter_class = {
.super = {
.extends = Class(Meter),
.delete = Meter_delete,
},
.updateValues = SELinuxMeter_updateValues,
.defaultMode = TEXT_METERMODE,
.maxItems = 0,
.total = 100.0,
.attributes = SELinuxMeter_attributes,
.name = "SELinux",
.uiName = "SELinux",
.description = "SELinux state overview",
.caption = "SELinux: "
};