4214d132b3
The feature references a new file created by the selinux make system that is stored on device under /system/etc/selinux/ which contains a scontext, tcontext, tclass, and the bug they map to. logd will reference this map every time an selinux denial comes through to see if it's a known denial with a bug attached and then add the bug number to the denial that's logged. go/selinux-bug-metadata Bug: 34997782 Test: any denial -> bug map listed in the referenced file is correcty displayed in the selinux denials that are logged Change-Id: I75bab59917591ed700471a0b4922b5f02f86bee9
62 lines
1.7 KiB
C++
62 lines
1.7 KiB
C++
/*
|
|
* Copyright (C) 2014 The Android Open Source Project
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
|
|
#ifndef _LOGD_LOG_AUDIT_H__
|
|
#define _LOGD_LOG_AUDIT_H__
|
|
|
|
#include <map>
|
|
#include <queue>
|
|
|
|
#include <sysutils/SocketListener.h>
|
|
|
|
#include "LogBuffer.h"
|
|
|
|
class LogReader;
|
|
|
|
class LogAudit : public SocketListener {
|
|
LogBuffer* logbuf;
|
|
LogReader* reader;
|
|
int fdDmesg; // fdDmesg >= 0 is functionally bool dmesg
|
|
bool main;
|
|
bool events;
|
|
bool initialized;
|
|
|
|
bool tooFast;
|
|
int mSock;
|
|
std::queue<log_time> bucket;
|
|
void checkRateLimit();
|
|
|
|
public:
|
|
LogAudit(LogBuffer* buf, LogReader* reader, int fdDmesg);
|
|
int log(char* buf, size_t len);
|
|
bool isMonotonic() {
|
|
return logbuf->isMonotonic();
|
|
}
|
|
|
|
protected:
|
|
virtual bool onDataAvailable(SocketClient* cli);
|
|
|
|
private:
|
|
static int getLogSocket();
|
|
std::map<std::string, std::string> populateDenialMap();
|
|
std::string denialParse(const std::string& denial, char terminator,
|
|
const std::string& search_term);
|
|
void logParse(const std::string& string, std::string* bug_num);
|
|
int logPrint(const char* fmt, ...)
|
|
__attribute__((__format__(__printf__, 2, 3)));
|
|
};
|
|
|
|
#endif
|