From 3c9553ac2cac7f3a41966def44a50d722d7e645b Mon Sep 17 00:00:00 2001 From: Eamon Walsh Date: Wed, 15 Aug 2007 14:14:25 -0400 Subject: [PATCH] xace: rename hostlist security hook to "server" as this hook will be used for other types of server access besides just the host list. --- Xext/security.c | 8 ++++---- Xext/xace.c | 4 ++-- Xext/xace.h | 2 +- Xext/xacestr.h | 6 ++++-- Xext/xselinux.c | 8 ++++---- dix/dispatch.c | 2 +- os/access.c | 2 +- 7 files changed, 17 insertions(+), 15 deletions(-) diff --git a/Xext/security.c b/Xext/security.c index 9e3b2dd9d..0059245c1 100644 --- a/Xext/security.c +++ b/Xext/security.c @@ -1222,10 +1222,10 @@ SecurityCheckExtAccess(CallbackListPtr *pcbl, pointer unused, } static void -SecurityCheckHostlistAccess(CallbackListPtr *pcbl, pointer unused, - pointer calldata) +SecurityCheckServerAccess(CallbackListPtr *pcbl, pointer unused, + pointer calldata) { - XaceHostlistAccessRec *rec = (XaceHostlistAccessRec*)calldata; + XaceServerAccessRec *rec = (XaceServerAccessRec*)calldata; if (TRUSTLEVEL(rec->client) != XSecurityClientTrusted) { @@ -1851,5 +1851,5 @@ SecurityExtensionInit(INITARGS) XaceRC(XACE_BACKGRND_ACCESS, SecurityCheckBackgrndAccess, NULL); XaceRC(XACE_EXT_DISPATCH, SecurityCheckExtAccess, NULL); XaceRC(XACE_EXT_ACCESS, SecurityCheckExtAccess, NULL); - XaceRC(XACE_HOSTLIST_ACCESS, SecurityCheckHostlistAccess, NULL); + XaceRC(XACE_SERVER_ACCESS, SecurityCheckServerAccess, NULL); } /* SecurityExtensionInit */ diff --git a/Xext/xace.c b/Xext/xace.c index 50361d06b..de1887f31 100644 --- a/Xext/xace.c +++ b/Xext/xace.c @@ -135,8 +135,8 @@ int XaceHook(int hook, ...) prv = &rec.status; break; } - case XACE_HOSTLIST_ACCESS: { - XaceHostlistAccessRec rec = { + case XACE_SERVER_ACCESS: { + XaceServerAccessRec rec = { va_arg(ap, ClientPtr), va_arg(ap, Mask), Success /* default allow */ diff --git a/Xext/xace.h b/Xext/xace.h index e2982cfe2..f7ff205cc 100644 --- a/Xext/xace.h +++ b/Xext/xace.h @@ -49,7 +49,7 @@ CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. #define XACE_MAP_ACCESS 6 #define XACE_BACKGRND_ACCESS 7 #define XACE_EXT_ACCESS 8 -#define XACE_HOSTLIST_ACCESS 9 +#define XACE_SERVER_ACCESS 9 #define XACE_SELECTION_ACCESS 10 #define XACE_SCREEN_ACCESS 11 #define XACE_SCREENSAVER_ACCESS 12 diff --git a/Xext/xacestr.h b/Xext/xacestr.h index 8d092514d..e4db3a12c 100644 --- a/Xext/xacestr.h +++ b/Xext/xacestr.h @@ -86,12 +86,12 @@ typedef struct { int status; } XaceExtAccessRec; -/* XACE_HOSTLIST_ACCESS */ +/* XACE_SERVER_ACCESS */ typedef struct { ClientPtr client; Mask access_mode; int status; -} XaceHostlistAccessRec; +} XaceServerAccessRec; /* XACE_SELECTION_ACCESS */ typedef struct { @@ -101,6 +101,8 @@ typedef struct { int status; } XaceSelectionAccessRec; +/* XACE_SCREEN_ACCESS */ +/* XACE_SCREENSAVER_ACCESS */ typedef struct { ClientPtr client; ScreenPtr screen; diff --git a/Xext/xselinux.c b/Xext/xselinux.c index 038ec59c4..9cb2f326b 100644 --- a/Xext/xselinux.c +++ b/Xext/xselinux.c @@ -1175,15 +1175,15 @@ XSELinuxDrawable(CallbackListPtr *pcbl, pointer unused, pointer calldata) } /* XSELinuxDrawable */ static void -XSELinuxHostlist(CallbackListPtr *pcbl, pointer unused, pointer calldata) +XSELinuxServer(CallbackListPtr *pcbl, pointer unused, pointer calldata) { - XaceHostlistAccessRec *rec = (XaceHostlistAccessRec*)calldata; + XaceServerAccessRec *rec = (XaceServerAccessRec*)calldata; access_vector_t perm = (rec->access_mode == DixReadAccess) ? XSERVER__GETHOSTLIST : XSERVER__SETHOSTLIST; if (ServerPerm(rec->client, SECCLASS_XSERVER, perm) != Success) rec->status = BadAccess; -} /* XSELinuxHostlist */ +} /* XSELinuxServer */ /* Extension callbacks */ static void @@ -1397,7 +1397,7 @@ XSELinuxExtensionInit(INITARGS) XaceRegisterCallback(XACE_EXT_DISPATCH, XSELinuxExtDispatch, NULL); XaceRegisterCallback(XACE_RESOURCE_ACCESS, XSELinuxResLookup, NULL); XaceRegisterCallback(XACE_MAP_ACCESS, XSELinuxMap, NULL); - XaceRegisterCallback(XACE_HOSTLIST_ACCESS, XSELinuxHostlist, NULL); + XaceRegisterCallback(XACE_SERVER_ACCESS, XSELinuxServer, NULL); XaceRegisterCallback(XACE_BACKGRND_ACCESS, XSELinuxBackgrnd, NULL); XaceRegisterCallback(XACE_DRAWABLE_ACCESS, XSELinuxDrawable, NULL); XaceRegisterCallback(XACE_PROPERTY_ACCESS, XSELinuxProperty, NULL); diff --git a/dix/dispatch.c b/dix/dispatch.c index 4a9064db7..8cca44bfc 100644 --- a/dix/dispatch.c +++ b/dix/dispatch.c @@ -3346,7 +3346,7 @@ ProcListHosts(ClientPtr client) REQUEST_SIZE_MATCH(xListHostsReq); /* untrusted clients can't list hosts */ - result = XaceHook(XACE_HOSTLIST_ACCESS, client, DixReadAccess); + result = XaceHook(XACE_SERVER_ACCESS, client, DixReadAccess); if (result != Success) return result; diff --git a/os/access.c b/os/access.c index 8d96e0420..b049acc04 100644 --- a/os/access.c +++ b/os/access.c @@ -1500,7 +1500,7 @@ AuthorizedClient(ClientPtr client) return TRUE; /* untrusted clients can't change host access */ - if (XaceHook(XACE_HOSTLIST_ACCESS, client, DixWriteAccess) != Success) + if (XaceHook(XACE_SERVER_ACCESS, client, DixWriteAccess) != Success) return FALSE; return LocalClient(client);