Author: jreidinger Date: Tue Jul 1 11:06:51 2008 New Revision: 48698 URL: http://svn.opensuse.org/viewcvs/yast?rev=48698&view=rev Log: add polkit check routine Added: branches/tmp/lslezak/workshop/core/polkit-check/ branches/tmp/lslezak/workshop/core/polkit-check/polkit.c branches/tmp/lslezak/workshop/core/polkit-check/polkit.h Added: branches/tmp/lslezak/workshop/core/polkit-check/polkit.c URL: http://svn.opensuse.org/viewcvs/yast/branches/tmp/lslezak/workshop/core/polkit-check/polkit.c?rev=48698&view=auto ============================================================================== --- branches/tmp/lslezak/workshop/core/polkit-check/polkit.c (added) +++ branches/tmp/lslezak/workshop/core/polkit-check/polkit.c Tue Jul 1 11:06:51 2008 @@ -0,0 +1,125 @@ + +/* + check function +*/ + +#include +#include + +#include +#include + +#include "polkit.h" + +int polkit_check(const char *action_id) { + int ret = -1; + DBusError dbus_error; + DBusConnection *bus = NULL; + PolKitCaller *caller = NULL; + PolKitAction *action = NULL; + PolKitContext *context = NULL; + PolKitError *polkit_error = NULL; + PolKitSession *session = NULL; + PolKitResult polkit_result; + + dbus_error_init(&dbus_error); + + if (!(bus = dbus_bus_get(DBUS_BUS_SYSTEM, &dbus_error))) { + goto finish; + } + + if (!(caller = polkit_caller_new_from_pid(bus, getpid(), &dbus_error))) { + goto finish; + } + + /* This function is called when PulseAudio is called SUID root. We + * want to authenticate the real user that called us and not the + * effective user we gained through being SUID root. Hence we + * overwrite the UID caller data here explicitly, just for + * paranoia. In fact PolicyKit should fill in the UID here anyway + * -- an not the EUID or any other user id. */ + + if (!(polkit_caller_set_uid(caller, getuid()))) { + goto finish; + } + + if (!(polkit_caller_get_ck_session(caller, &session))) { + goto finish; + } + + /* We need to overwrite the UID in both the caller and the session + * object */ + + if (!(polkit_session_set_uid(session, getuid()))) { + goto finish; + } + + if (!(action = polkit_action_new())) { + goto finish; + } + + if (!polkit_action_set_action_id(action, action_id)) { + goto finish; + } + + if (!(context = polkit_context_new())) { + goto finish; + } + + if (!polkit_context_init(context, &polkit_error)) { + goto finish; + } + + polkit_result = polkit_context_is_caller_authorized(context, action, caller, FALSE, &polkit_error); + + if (polkit_error_is_set(polkit_error)) { + goto finish; + } + + printf("Action: %s Result: %s\n", action_id, polkit_result_to_string_representation(polkit_result)); + + switch (polkit_result) + { + case POLKIT_RESULT_ONLY_VIA_ADMIN_AUTH: + case POLKIT_RESULT_ONLY_VIA_ADMIN_AUTH_KEEP_SESSION: + case POLKIT_RESULT_ONLY_VIA_ADMIN_AUTH_KEEP_ALWAYS: + case POLKIT_RESULT_ONLY_VIA_ADMIN_AUTH_ONE_SHOT: + case POLKIT_RESULT_ONLY_VIA_SELF_AUTH: + case POLKIT_RESULT_ONLY_VIA_SELF_AUTH_KEEP_SESSION: + case POLKIT_RESULT_ONLY_VIA_SELF_AUTH_KEEP_ALWAYS: + case POLKIT_RESULT_ONLY_VIA_SELF_AUTH_ONE_SHOT: + ret = -2; + break; + case POLKIT_RESULT_YES: + ret = 0; + break; + case POLKIT_RESULT_NO: + ret = -3; + break; + default: + ; //handle new value in polkit + break; + } + +finish: + + if (caller) + polkit_caller_unref(caller); + + if (action) + polkit_action_unref(action); + + if (context) + polkit_context_unref(context); + + if (bus) + dbus_connection_unref(bus); + + dbus_error_free(&dbus_error); + + if (polkit_error) + polkit_error_free(polkit_error); + + return ret; +} + Added: branches/tmp/lslezak/workshop/core/polkit-check/polkit.h URL: http://svn.opensuse.org/viewcvs/yast/branches/tmp/lslezak/workshop/core/polkit-check/polkit.h?rev=48698&view=auto ============================================================================== --- branches/tmp/lslezak/workshop/core/polkit-check/polkit.h (added) +++ branches/tmp/lslezak/workshop/core/polkit-check/polkit.h Tue Jul 1 11:06:51 2008 @@ -0,0 +1,13 @@ +/* $Id$ */ + +#ifndef polkith +#define polkith + +/** + * checks if user can provide action + * \param action action which user want do + * \return 0 if user have permision, -1 if error occured, -2 if authorization required and -3 if permision denied + */ +int polkit_check(const char *action); + +#endif -- To unsubscribe, e-mail: yast-commit+unsubscribe@opensuse.org For additional commands, e-mail: yast-commit+help@opensuse.org