add API definition

diff --git a/include/privilege-control.h b/include/privilege-control.h
index d8576cc..b84bf72 100644 (file)
--- a/include/privilege-control.h
+++ b/include/privilege-control.h
@@ -361,6 +361,27 @@ int add_api_feature(app_type_t app_type,
                     const gid_t* list_of_db_gids,
                     size_t list_size) DEPRECATED;
 
+/**
+ * Run before any privilege modification.
+ * @return PC_OPERATION_SUCCESS on success, PC_ERR_* on error
+ */
+int perm_begin(void);
+
+/**
+ * Run after any privilege modification.
+ * @return PC_OPERATION_SUCCESS on success, PC_ERR_* on error
+ */
+int perm_end(void);
+
+/**
+ * Add additional rules to libprivilege.
+ * The rules can use wild-cards and labels.
+ *
+ * @param  set_smack_rule_set an array of rules, NULL terminated
+ * @return                    PC_OPERATION_SUCCESS on success, PC_ERR_* on error
+ */
+int perm_add_additional_rules(const char** set_smack_rule_set);
+
 #ifdef __cplusplus
 }
 #endif // __cplusplus

diff --git a/src/privilege-control.c b/src/privilege-control.c
index 8fe7ede..2bdfc82 100644 (file)
--- a/src/privilege-control.c
+++ b/src/privilege-control.c
@@ -95,6 +95,22 @@ enum {
        DECISION_LABEL = 1
 };
 
+API int perm_begin(void)
+{
+       SECURE_C_LOGD("Entering function: %s.", __func__);
+//     return rdb_modification_start();
+       return PC_OPERATION_SUCCESS;
+}
+
+API int perm_end(void)
+{
+       SECURE_C_LOGD("Entering function: %s.", __func__);
+
+//     rdb_modification_finish();
+//     sync();
+       return PC_OPERATION_SUCCESS;
+}
+
 API int control_privilege(void)//deprecated
 {
        SECURE_C_LOGD("Entering function: %s.", __func__);
@@ -2492,3 +2508,20 @@ API int app_register_av(const char* app_av_id)//deprecated
 
        return ret;
 }
+
+API int perm_add_additional_rules(const char** smack_rules){
+       SECURE_C_LOGD("Entering function: %s.", __func__);
+/*     int ret;
+       if (!smack_rules){
+               C_LOGE("smack_rules is NULL");
+               return PC_ERR_INVALID_PARAM;
+       }
+
+       ret = rdb_add_additional_rules(smack_rules);
+       if (ret != PC_OPERATION_SUCCESS) {
+               C_LOGE("RDB rdb_add_additional_rules failed with: %d", ret);
+               return ret;
+       }*/
+
+       return PC_OPERATION_SUCCESS;
+}