Implement API for managing list of permitted labels for launcher 93/67993/20
authorRadoslaw Bartosiak <r.bartosiak@samsung.com>
Fri, 29 Apr 2016 14:16:22 +0000 (16:16 +0200)
committerRadoslaw Bartosiak <r.bartosiak@samsung.com>
Mon, 23 May 2016 14:00:26 +0000 (16:00 +0200)
commit47647b392d78be429f765ec7f5c85e0968298710
tree7f8737a6c605b5e560470a463b22cb8609961b4c
parenta1f04212d1db38d1e32ddcf9c045f5d09ec8ef50
Implement API for managing list of permitted labels for launcher

Four new API functions:
- security_manager_app_labels_monitor_init
- security_manager_app_labels_monitor_finish
- security_manager_app_labels_monitor_get_fd
- security_manager_app_labels_monitor_process

They provide functionality needed for the launcher to run without
CAP_MAC_ADMIN. It will rely on new feature of Smack:
relabel-self list of labels, that a process can change its label
to without special capabilities.
The new APIs will enable the launcher to wait for changes of
apps labels list (when an app is installed or uninstalled) and
to update its relabel-list with a separate, dedicated function.

Change-Id: I1d8a7bce8c081ba27e7c388ee096c7c07005d92d
Signed-off-by: Radoslaw Bartosiak <r.bartosiak@samsung.com>
14 files changed:
packaging/security-manager.spec
src/client/CMakeLists.txt
src/client/client-label-monitor.cpp [new file with mode: 0644]
src/common/CMakeLists.txt
src/common/config.cpp
src/common/include/config.h
src/common/include/permissible-set.h [new file with mode: 0644]
src/common/include/service_impl.h
src/common/permissible-set.cpp [new file with mode: 0644]
src/common/service_impl.cpp
src/include/CMakeLists.txt
src/include/label-monitor.h [new file with mode: 0644]
src/include/security-manager-types.h
src/include/security-manager.h