When auditing setprop denials, it is often unclear of who the process is
in a multi-process domain. To help identify the invoker, log the pid, uid,
and gid of the caller.
Before:
avc: denied { set } for property=wifi.xxx ...
After:
avc: denied { set } for property=wifi.xxx pid=30691 uid=123 gid=345 ...
Change-Id: I5cdcb3d18fbd52e0987b5e1497b9f6620c6c742a
Signed-off-by: William Roberts <william.c.roberts@intel.com>
41 lines
1.2 KiB
C++
41 lines
1.2 KiB
C++
/*
|
|
* Copyright (C) 2007 The Android Open Source Project
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
|
|
#ifndef _INIT_PROPERTY_H
|
|
#define _INIT_PROPERTY_H
|
|
|
|
#include <stddef.h>
|
|
#include <sys/socket.h>
|
|
#include <sys/system_properties.h>
|
|
#include <string>
|
|
|
|
struct property_audit_data {
|
|
ucred *cr;
|
|
const char* name;
|
|
};
|
|
|
|
extern void property_init(void);
|
|
extern void property_load_boot_defaults(void);
|
|
extern void load_persist_props(void);
|
|
extern void load_all_props(void);
|
|
extern void start_property_service(void);
|
|
void get_property_workspace(int *fd, int *sz);
|
|
std::string property_get(const char* name);
|
|
extern int property_set(const char *name, const char *value);
|
|
extern bool properties_initialized();
|
|
|
|
|
|
#endif /* _INIT_PROPERTY_H */
|