MCPcopy Create free account
hub / github.com/apache/cloudberry / sepgsql_avc_check_perms

Function sepgsql_avc_check_perms

contrib/sepgsql/uavc.c:418–434  ·  view source on GitHub ↗

Source from the content-addressed store, hash-verified

416}
417
418bool
419sepgsql_avc_check_perms(const ObjectAddress *tobject,
420 uint16 tclass, uint32 required,
421 const char *audit_name,
422 bool abort_on_violation)
423{
424 char *tcontext = GetSecurityLabel(tobject, SEPGSQL_LABEL_TAG);
425 bool rc;
426
427 rc = sepgsql_avc_check_perms_label(tcontext,
428 tclass, required,
429 audit_name, abort_on_violation);
430 if (tcontext)
431 pfree(tcontext);
432
433 return rc;
434}
435
436/*
437 * sepgsql_avc_trusted_proc

Callers 15

sepgsql_database_dropFunction · 0.85
sepgsql_database_setattrFunction · 0.85
sepgsql_database_relabelFunction · 0.85
sepgsql_schema_dropFunction · 0.85
sepgsql_schema_relabelFunction · 0.85
check_schema_permsFunction · 0.85
sepgsql_needs_fmgr_hookFunction · 0.85
sepgsql_fmgr_hookFunction · 0.85
sepgsql_attribute_dropFunction · 0.85

Calls 3

GetSecurityLabelFunction · 0.85
pfreeFunction · 0.50

Tested by

no test coverage detected