selinux

Documentation

Index

• Variables
• func GetVirtLauncherContext(vmi *v1.VirtualMachineInstance) (string, error)
• func RelabelFiles(newLabel string, continueOnError bool, files ...*safepath.Path) error
• type ContextExecutor
  • func NewContextExecutor(pid int, cmd *exec.Cmd) (*ContextExecutor, error)
  • func (ce *ContextExecutor) Execute() error
• type Executor
• type MockExecutor
  • func NewMockExecutor(ctrl *gomock.Controller) *MockExecutor
  • func (_m *MockExecutor) CloseOnExec(fd int)
  • func (_m *MockExecutor) EXPECT() *_MockExecutorRecorder
  • func (_m *MockExecutor) FileLabel(filepath string) (string, error)
  • func (_m *MockExecutor) LockOSThread()
  • func (_m *MockExecutor) NewSELinux() (SELinux, bool, error)
  • func (_m *MockExecutor) Run(cmd *exec.Cmd) error
  • func (_m *MockExecutor) SetExecLabel(label string) error
  • func (_m *MockExecutor) UnlockOSThread()
• type SELinux
  • func NewSELinux() (SELinux, bool, error)
• type SELinuxExecutor
  • func (se SELinuxExecutor) CloseOnExec(fd int)
  • func (se SELinuxExecutor) FileLabel(filepath string) (string, error)
  • func (se SELinuxExecutor) LockOSThread()
  • func (se SELinuxExecutor) NewSELinux() (SELinux, bool, error)
  • func (se SELinuxExecutor) Run(cmd *exec.Cmd) error
  • func (se SELinuxExecutor) SetExecLabel(label string) error
  • func (se SELinuxExecutor) UnlockOSThread()
• type SELinuxImpl
  • func (se *SELinuxImpl) InstallPolicy(dir string) (err error)
  • func (se *SELinuxImpl) IsPermissive() bool
  • func (se *SELinuxImpl) IsPresent() (present bool, mode string, err error)
  • func (se *SELinuxImpl) Mode() string

Variables

var POLICY_FILES = []string{"virt_launcher"}

Functions

func GetVirtLauncherContext

func GetVirtLauncherContext(vmi *v1.VirtualMachineInstance) (string, error)

func RelabelFiles

func RelabelFiles(newLabel string, continueOnError bool, files ...*safepath.Path) error

Types

type ContextExecutor

type ContextExecutor struct {
	// contains filtered or unexported fields
}

func NewContextExecutor

func NewContextExecutor(pid int, cmd *exec.Cmd) (*ContextExecutor, error)

func (*ContextExecutor) Execute

func (ce *ContextExecutor) Execute() error

type Executor

type Executor interface {
	NewSELinux() (SELinux, bool, error)
	FileLabel(filepath string) (string, error)
	SetExecLabel(label string) error
	LockOSThread()
	UnlockOSThread()
	CloseOnExec(fd int)
	Run(cmd *exec.Cmd) error
}

type MockExecutor

type MockExecutor struct {
	// contains filtered or unexported fields
}

Mock of Executor interface

func NewMockExecutor

func NewMockExecutor(ctrl *gomock.Controller) *MockExecutor

func (*MockExecutor) CloseOnExec

func (_m *MockExecutor) CloseOnExec(fd int)

func (*MockExecutor) EXPECT

func (_m *MockExecutor) EXPECT() *_MockExecutorRecorder

func (*MockExecutor) FileLabel

func (_m *MockExecutor) FileLabel(filepath string) (string, error)

func (*MockExecutor) LockOSThread

func (_m *MockExecutor) LockOSThread()

func (*MockExecutor) NewSELinux

func (_m *MockExecutor) NewSELinux() (SELinux, bool, error)

func (*MockExecutor) Run

func (_m *MockExecutor) Run(cmd *exec.Cmd) error

func (*MockExecutor) SetExecLabel

func (_m *MockExecutor) SetExecLabel(label string) error

func (*MockExecutor) UnlockOSThread

func (_m *MockExecutor) UnlockOSThread()

type SELinux

type SELinux interface {
	InstallPolicy(dir string) (err error)
	Mode() string
	IsPermissive() bool
}

func NewSELinux

func NewSELinux() (SELinux, bool, error)

type SELinuxExecutor

type SELinuxExecutor struct {
}

func (SELinuxExecutor) CloseOnExec

func (se SELinuxExecutor) CloseOnExec(fd int)

func (SELinuxExecutor) FileLabel

func (se SELinuxExecutor) FileLabel(filepath string) (string, error)

func (SELinuxExecutor) LockOSThread

func (se SELinuxExecutor) LockOSThread()

func (SELinuxExecutor) NewSELinux

func (se SELinuxExecutor) NewSELinux() (SELinux, bool, error)

func (SELinuxExecutor) Run

func (se SELinuxExecutor) Run(cmd *exec.Cmd) error

func (SELinuxExecutor) SetExecLabel

func (se SELinuxExecutor) SetExecLabel(label string) error

func (SELinuxExecutor) UnlockOSThread

func (se SELinuxExecutor) UnlockOSThread()

type SELinuxImpl

type SELinuxImpl struct {
	Paths []string
	// contains filtered or unexported fields
}

func (*SELinuxImpl) InstallPolicy

func (se *SELinuxImpl) InstallPolicy(dir string) (err error)

func (*SELinuxImpl) IsPermissive

func (se *SELinuxImpl) IsPermissive() bool

func (*SELinuxImpl) IsPresent

func (se *SELinuxImpl) IsPresent() (present bool, mode string, err error)

func (*SELinuxImpl) Mode

func (se *SELinuxImpl) Mode() string