]>
Commit | Line | Data |
---|---|---|
1 | /* | |
2 | * QEMU simple authorization driver | |
3 | * | |
4 | * Copyright (c) 2018 Red Hat, Inc. | |
5 | * | |
6 | * This library is free software; you can redistribute it and/or | |
7 | * modify it under the terms of the GNU Lesser General Public | |
8 | * License as published by the Free Software Foundation; either | |
9 | * version 2.1 of the License, or (at your option) any later version. | |
10 | * | |
11 | * This library is distributed in the hope that it will be useful, | |
12 | * but WITHOUT ANY WARRANTY; without even the implied warranty of | |
13 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU | |
14 | * Lesser General Public License for more details. | |
15 | * | |
16 | * You should have received a copy of the GNU Lesser General Public | |
17 | * License along with this library; if not, see <http://www.gnu.org/licenses/>. | |
18 | * | |
19 | */ | |
20 | ||
21 | #include "qemu/osdep.h" | |
22 | #include "authz/simple.h" | |
23 | #include "trace.h" | |
24 | #include "qemu/module.h" | |
25 | #include "qom/object_interfaces.h" | |
26 | ||
27 | static bool qauthz_simple_is_allowed(QAuthZ *authz, | |
28 | const char *identity, | |
29 | Error **errp) | |
30 | { | |
31 | QAuthZSimple *sauthz = QAUTHZ_SIMPLE(authz); | |
32 | ||
33 | trace_qauthz_simple_is_allowed(authz, sauthz->identity, identity); | |
34 | return g_str_equal(identity, sauthz->identity); | |
35 | } | |
36 | ||
37 | static void | |
38 | qauthz_simple_prop_set_identity(Object *obj, | |
39 | const char *value, | |
40 | Error **errp G_GNUC_UNUSED) | |
41 | { | |
42 | QAuthZSimple *sauthz = QAUTHZ_SIMPLE(obj); | |
43 | ||
44 | g_free(sauthz->identity); | |
45 | sauthz->identity = g_strdup(value); | |
46 | } | |
47 | ||
48 | ||
49 | static char * | |
50 | qauthz_simple_prop_get_identity(Object *obj, | |
51 | Error **errp G_GNUC_UNUSED) | |
52 | { | |
53 | QAuthZSimple *sauthz = QAUTHZ_SIMPLE(obj); | |
54 | ||
55 | return g_strdup(sauthz->identity); | |
56 | } | |
57 | ||
58 | ||
59 | static void | |
60 | qauthz_simple_finalize(Object *obj) | |
61 | { | |
62 | QAuthZSimple *sauthz = QAUTHZ_SIMPLE(obj); | |
63 | ||
64 | g_free(sauthz->identity); | |
65 | } | |
66 | ||
67 | ||
68 | static void | |
69 | qauthz_simple_complete(UserCreatable *uc, Error **errp) | |
70 | { | |
71 | QAuthZSimple *sauthz = QAUTHZ_SIMPLE(uc); | |
72 | ||
73 | if (!sauthz->identity) { | |
74 | error_setg(errp, "The 'identity' property must be set"); | |
75 | return; | |
76 | } | |
77 | } | |
78 | ||
79 | ||
80 | static void | |
81 | qauthz_simple_class_init(ObjectClass *oc, void *data) | |
82 | { | |
83 | QAuthZClass *authz = QAUTHZ_CLASS(oc); | |
84 | UserCreatableClass *ucc = USER_CREATABLE_CLASS(oc); | |
85 | ||
86 | ucc->complete = qauthz_simple_complete; | |
87 | authz->is_allowed = qauthz_simple_is_allowed; | |
88 | ||
89 | object_class_property_add_str(oc, "identity", | |
90 | qauthz_simple_prop_get_identity, | |
91 | qauthz_simple_prop_set_identity); | |
92 | } | |
93 | ||
94 | ||
95 | QAuthZSimple *qauthz_simple_new(const char *id, | |
96 | const char *identity, | |
97 | Error **errp) | |
98 | { | |
99 | return QAUTHZ_SIMPLE( | |
100 | object_new_with_props(TYPE_QAUTHZ_SIMPLE, | |
101 | object_get_objects_root(), | |
102 | id, errp, | |
103 | "identity", identity, | |
104 | NULL)); | |
105 | } | |
106 | ||
107 | ||
108 | static const TypeInfo qauthz_simple_info = { | |
109 | .parent = TYPE_QAUTHZ, | |
110 | .name = TYPE_QAUTHZ_SIMPLE, | |
111 | .instance_size = sizeof(QAuthZSimple), | |
112 | .instance_finalize = qauthz_simple_finalize, | |
113 | .class_init = qauthz_simple_class_init, | |
114 | .interfaces = (InterfaceInfo[]) { | |
115 | { TYPE_USER_CREATABLE }, | |
116 | { } | |
117 | } | |
118 | }; | |
119 | ||
120 | ||
121 | static void | |
122 | qauthz_simple_register_types(void) | |
123 | { | |
124 | type_register_static(&qauthz_simple_info); | |
125 | } | |
126 | ||
127 | ||
128 | type_init(qauthz_simple_register_types); |