mirror of
https://github.com/systemd/systemd
synced 2025-12-28 20:04:45 +01:00
Compare commits
2 Commits
47c1db6730
...
4b6f74f5a0
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
4b6f74f5a0 | ||
|
|
d775d8e6f7 |
8
TODO
8
TODO
@ -20,9 +20,11 @@ Janitorial Clean-ups:
|
|||||||
|
|
||||||
Features:
|
Features:
|
||||||
|
|
||||||
* Provide a tool to hook into CONFIG_STATIC_USERMODEHELPER in the kernel, so
|
* port selinux code from mallinfo() to mallinfo2() once added to glibc
|
||||||
that we can collect all usermode helper calls and spawn them as regular
|
|
||||||
services.
|
* in fd_get_path() if we see (deleted) then do stat and check for st_nlink
|
||||||
|
|
||||||
|
* add support for close_range() added in kernel 5.9
|
||||||
|
|
||||||
* Add service setting to run a service within the specified VRF. i.e. do the
|
* Add service setting to run a service within the specified VRF. i.e. do the
|
||||||
equivalent of "ip vrf exec".
|
equivalent of "ip vrf exec".
|
||||||
|
|||||||
@ -532,6 +532,7 @@ foreach ident : [
|
|||||||
#include <unistd.h>
|
#include <unistd.h>
|
||||||
#include <signal.h>
|
#include <signal.h>
|
||||||
#include <sys/wait.h>'''],
|
#include <sys/wait.h>'''],
|
||||||
|
['mallinfo', '''#include <malloc.h>'''],
|
||||||
]
|
]
|
||||||
|
|
||||||
have = cc.has_function(ident[0], prefix : ident[1], args : '-D_GNU_SOURCE')
|
have = cc.has_function(ident[0], prefix : ident[1], args : '-D_GNU_SOURCE')
|
||||||
|
|||||||
@ -93,6 +93,10 @@
|
|||||||
#endif
|
#endif
|
||||||
|
|
||||||
/* Temporarily disable some warnings */
|
/* Temporarily disable some warnings */
|
||||||
|
#define DISABLE_WARNING_DEPRECATED_DECLARATIONS \
|
||||||
|
_Pragma("GCC diagnostic push"); \
|
||||||
|
_Pragma("GCC diagnostic ignored \"-Wdeprecated-declarations\"")
|
||||||
|
|
||||||
#define DISABLE_WARNING_FORMAT_NONLITERAL \
|
#define DISABLE_WARNING_FORMAT_NONLITERAL \
|
||||||
_Pragma("GCC diagnostic push"); \
|
_Pragma("GCC diagnostic push"); \
|
||||||
_Pragma("GCC diagnostic ignored \"-Wformat-nonliteral\"")
|
_Pragma("GCC diagnostic ignored \"-Wformat-nonliteral\"")
|
||||||
|
|||||||
@ -84,14 +84,25 @@ void mac_selinux_retest(void) {
|
|||||||
}
|
}
|
||||||
|
|
||||||
#if HAVE_SELINUX
|
#if HAVE_SELINUX
|
||||||
|
# if HAVE_MALLINFO
|
||||||
|
static struct mallinfo mallinfo_nowarn(void) {
|
||||||
|
/* glibc has deprecated mallinfo(), but the replacement malloc_info() returns an XML blob ;=[ */
|
||||||
|
DISABLE_WARNING_DEPRECATED_DECLARATIONS
|
||||||
|
return mallinfo();
|
||||||
|
REENABLE_WARNING
|
||||||
|
}
|
||||||
|
# else
|
||||||
|
# warning "mallinfo() is missing, add mallinfo2() supported instead."
|
||||||
|
# endif
|
||||||
|
|
||||||
static int open_label_db(void) {
|
static int open_label_db(void) {
|
||||||
struct selabel_handle *hnd;
|
struct selabel_handle *hnd;
|
||||||
usec_t before_timestamp, after_timestamp;
|
usec_t before_timestamp, after_timestamp;
|
||||||
struct mallinfo before_mallinfo, after_mallinfo;
|
|
||||||
char timespan[FORMAT_TIMESPAN_MAX];
|
char timespan[FORMAT_TIMESPAN_MAX];
|
||||||
int l;
|
|
||||||
|
|
||||||
before_mallinfo = mallinfo();
|
# if HAVE_MALLINFO
|
||||||
|
struct mallinfo before_mallinfo = mallinfo_nowarn();
|
||||||
|
# endif
|
||||||
before_timestamp = now(CLOCK_MONOTONIC);
|
before_timestamp = now(CLOCK_MONOTONIC);
|
||||||
|
|
||||||
hnd = selabel_open(SELABEL_CTX_FILE, NULL, 0);
|
hnd = selabel_open(SELABEL_CTX_FILE, NULL, 0);
|
||||||
@ -99,13 +110,16 @@ static int open_label_db(void) {
|
|||||||
return log_enforcing_errno(errno, "Failed to initialize SELinux labeling handle: %m");
|
return log_enforcing_errno(errno, "Failed to initialize SELinux labeling handle: %m");
|
||||||
|
|
||||||
after_timestamp = now(CLOCK_MONOTONIC);
|
after_timestamp = now(CLOCK_MONOTONIC);
|
||||||
after_mallinfo = mallinfo();
|
# if HAVE_MALLINFO
|
||||||
|
struct mallinfo after_mallinfo = mallinfo_nowarn();
|
||||||
l = after_mallinfo.uordblks > before_mallinfo.uordblks ? after_mallinfo.uordblks - before_mallinfo.uordblks : 0;
|
int l = after_mallinfo.uordblks > before_mallinfo.uordblks ? after_mallinfo.uordblks - before_mallinfo.uordblks : 0;
|
||||||
|
|
||||||
log_debug("Successfully loaded SELinux database in %s, size on heap is %iK.",
|
log_debug("Successfully loaded SELinux database in %s, size on heap is %iK.",
|
||||||
format_timespan(timespan, sizeof(timespan), after_timestamp - before_timestamp, 0),
|
format_timespan(timespan, sizeof(timespan), after_timestamp - before_timestamp, 0),
|
||||||
(l+1023)/1024);
|
DIV_ROUND_UP(l, 1024));
|
||||||
|
# else
|
||||||
|
log_debug("Successfully loaded SELinux database in %s.",
|
||||||
|
format_timespan(timespan, sizeof(timespan), after_timestamp - before_timestamp, 0));
|
||||||
|
# endif
|
||||||
|
|
||||||
/* release memory after measurement */
|
/* release memory after measurement */
|
||||||
if (label_hnd)
|
if (label_hnd)
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user