Fix only partial rollback of Smack rules

[platform/core/test/security-tests.git] / src / ckm / privileged / access_provider2.h

diff --git a/src/ckm/privileged/access_provider2.h b/src/ckm/privileged/access_provider2.h
index 30631be..4a745df 100644 (file)
--- a/src/ckm/privileged/access_provider2.h
+++ b/src/ckm/privileged/access_provider2.h
@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2013 Samsung Electronics Co., Ltd All Rights Reserved
+ * Copyright (c) 2013 - 2020 Samsung Electronics Co., Ltd All Rights Reserved
  *
  *    Licensed under the Apache License, Version 2.0 (the "License");
  *    you may not use this file except in compliance with the License.
@@ -23,14 +23,17 @@
 #define _ACCESS_FOR_DUMMIES_H_
 
 #include <string>
+#include <memory>
 
 #include <smack_access.h>
 
+class ScopedProcessLabel;
+
 class AccessProvider {
 public:
     explicit AccessProvider(const std::string &ownerId);
     AccessProvider(const std::string &ownerId, int uid, int gid);
-    virtual ~AccessProvider() {}
+    virtual ~AccessProvider();
 
     AccessProvider(const AccessProvider &second) = delete;
     AccessProvider& operator=(const AccessProvider &second) = delete;
@@ -38,6 +41,7 @@ public:
     void allowAPI(const std::string &api, const std::string &rules);
     void apply();
     void applyAndSwithToUser(int uid, int gid);
+    void clear();
 
 private:
     void allowJournaldLogs();
@@ -47,7 +51,7 @@ protected:
     std::string m_mySubject;
     uid_t m_origUid;
     gid_t m_origGid;
-    std::string m_origLabel;
+    std::unique_ptr<ScopedProcessLabel> m_processLabel;
     bool m_inSwitchContext;
 };