mirror of
https://gitlab.com/apparmor/apparmor.git
synced 2025-03-04 08:24:42 +01:00

Currently the cache file has its mtime set at creation time, but this can lead to cache issues when a policy file is updated separately from the cache. This makes it possible for an update to ship a policy file that is newer than the what the cache file was generated from, but result in a cache hit because the cache file was local compiled after the policy file was package into an update (this requires the update to set the mtime of the file when locally installed to the mtime of the file in its update archive but this is commonly done, especially in image based updates). Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Seth Arnold <seth.arnold@canonical.com>
50 lines
1.8 KiB
C
50 lines
1.8 KiB
C
/*
|
|
* Copyright (c) 2014
|
|
* Canonical, Ltd. (All rights reserved)
|
|
*
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of version 2 of the GNU General Public
|
|
* License published by the Free Software Foundation.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, contact Novell, Inc. or Canonical
|
|
* Ltd.
|
|
*/
|
|
|
|
#ifndef __AA_POLICY_CACHE_H
|
|
#define __AA_POLICY_CACHE_H
|
|
|
|
extern struct timespec cache_tstamp, mru_policy_tstamp;
|
|
|
|
/* returns true if time is more recent than mru_tstamp */
|
|
#define tstamp_cmp(a, b) \
|
|
(((a).tv_sec == (b).tv_sec) ? \
|
|
((a).tv_nsec - (b).tv_nsec) : \
|
|
((a).tv_sec - (b).tv_sec))
|
|
#define tstamp_is_null(a) ((a).tv_sec == 0 && (a).tv_nsec == 0)
|
|
|
|
extern int show_cache;
|
|
extern int skip_cache;
|
|
extern int skip_read_cache;
|
|
extern int write_cache;
|
|
extern int cond_clear_cache; /* only applies if write is set */
|
|
extern int force_clear_cache; /* force clearing regargless of state */
|
|
extern int create_cache_dir; /* create the cache dir if missing? */
|
|
extern int mru_skip_cache;
|
|
extern int debug_cache;
|
|
|
|
void set_cache_tstamp(struct timespec t);
|
|
void update_mru_tstamp(FILE *file, const char *path);
|
|
bool valid_cached_file_version(const char *cachename);
|
|
char *cache_filename(const char *cachedir, const char *basename);
|
|
void valid_read_cache(const char *cachename);
|
|
int cache_hit(const char *cachename);
|
|
int setup_cache_tmp(const char **cachetmpname, const char *cachename);
|
|
void install_cache(const char *cachetmpname, const char *cachename);
|
|
|
|
#endif /* __AA_POLICY_CACHE_H */
|