PHP/SELinux: libselinux wrappers

[KaiGai Kohei <kaigai@ak.jp.nec.com>]

Hi,

I tried to implement libselinux wrappers for PHP.

It requires the following steps to build.

 $ svn checkout http://sepgsql.googlecode.com/svn/misc/php-selinux
 $ cd php-selinux
 $ ./build-php-selinux.sh  /tmp/php-5.2.6-4.src.rpm

 (*) You have to get the source rpm package from somewhere.

It is a conceptual implementation earlier than submitting
to PHP developer's community.

Please comment anything, if you have.
I have a plan to submit it to them with some more works like
documentation, test cases.

Thanks,

---------------------------------
  Already implemented functions
---------------------------------
selinux_is_enabled
selinux_mls_is_enabled
/*
 * /proc/<PID>/attr functions
 */
selinux_getcon
selinux_getcon_raw
selinux_setcon
selinux_setcon_raw
selinux_getpidcon
selinux_getpidcon_raw
selinux_getprevcon
selinux_getprevcon_raw
selinux_getexeccon
selinux_getexeccon_raw
selinux_setexeccon
selinux_setexeccon_raw
selinux_getfscreatecon
selinux_getfscreatecon_raw
selinux_setfscreatecon
selinux_setfscreatecon_raw
selinux_getkeycreatecon
selinux_getkeycreatecon_raw
selinux_setkeycreatecon
selinux_setkeycreatecon_raw
selinux_getsockcreatecon
selinux_getsockcreatecon_raw
selinux_setsockcreatecon
selinux_setsockcreatecon_raw

/*
 * Get file context
 */
selinux_getfilecon
selinux_getfilecon_raw
selinux_lgetfilecon
selinux_lgetfilecon_raw
selinux_fgetfilecon
selinux_fgetfilecon_raw

/*
 * Set file context
 */
selinux_setfilecon
selinux_setfilecon_raw
selinux_lsetfilecon
selinux_lsetfilecon_raw
selinux_fsetfilecon
selinux_fsetfilecon_raw

/*
 * Labeled Networking
 */
selinux_getpeercon
selinux_getpeercon_raw

/*
 * get initial context
 */
selinux_get_initial_context
selinux_get_initial_context_raw

/*
 * sanity check in security context
 */
selinux_check_context
selinux_check_context_raw
selinux_canonicalize_context
selinux_canonicalize_context_raw

/*
 * global setting related
 */
selinux_getenforce
selinux_setenforce
selinux_policyvers

/*
 * booleans
 */
selinux_get_boolean_names
selinux_get_boolean_pending
selinux_get_boolean_active
selinux_set_boolean
selinux_commit_booleans

/*
 * mcstrans
 */
selinux_trans_to_raw_context
selinux_raw_to_trans_context

-- 
OSS Platform Development Division, NEC
KaiGai Kohei <kaigai@ak.jp.nec.com>

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.