Added a mechanism for finding currently active exec policy

- set name of the selected exec policy to an environment
  variable before every exec, and also added a lua function
  which locates the currently active policy (soon to be used
  by the "devel"mode..)

7 files changed, 79 insertions, 0 deletions

diff --git a/lua_scripts/argvenvp.lua b/lua_scripts/argvenvp.lua
index ac65000..a5480f9 100644
--- a/lua_scripts/argvenvp.lua
+++ b/lua_scripts/argvenvp.lua
@@ -672,6 +672,10 @@ function sb_execve_postprocess(rule, exec_policy, exec_type,
 	sb.log("debug", string.format("sb_execve_postprocess:type=%s",
 		exec_type))
 
+	if (exec_policy.name) then
+		table.insert(envp, "__SB2_EXEC_POLICY_NAME="..exec_policy.name)
+	end
+
 	-- End of generic part. Rest of postprocessing depends on type of
 	-- the executable.
 
diff --git a/lua_scripts/mapping.lua b/lua_scripts/mapping.lua
index 4688a4a..320ea78 100644
--- a/lua_scripts/mapping.lua
+++ b/lua_scripts/mapping.lua
@@ -66,6 +66,45 @@ function sb2_procfs_mapper(binary_name, func_name, rp, path, rule)
 	return nil, ret_path, false
 end
 
+-- all_exec_policies is a table, defined by the mapping rule file
+all_exec_policies = nil
+
+-- return the exec policy used for this process
+--
+local active_exec_policy_checked = false
+local active_exec_policy_ptr = nil
+
+function get_active_exec_policy()
+	if (active_exec_policy_checked == false) then
+		local ep_name = sb.get_active_exec_policy_name()
+
+		if (ep_name and all_exec_policies ~= nil) then
+			-- Name of it is known, try to find the object itself
+			for i = 1, table.maxn(all_exec_policies) do
+				if all_exec_policies[i].name == ep_name then
+					active_exec_policy_ptr = all_exec_policies[i]
+					break
+				end
+			end
+			if (debug_messages_enabled) then
+				if active_exec_policy_ptr then
+					sb.log("debug", "Found active Exec policy "..ep_name)
+				else
+					sb.log("debug", "FAILED to find active Exec policy "..ep_name)
+				end
+			end
+		else
+			-- Don't know what exec policy is active
+			if (debug_messages_enabled) then
+				sb.log("debug", "Unknown active Exec policy")
+			end
+		end
+
+		active_exec_policy_checked = true
+	end
+	return active_exec_policy_ptr
+end
+
 -- Load mode-specific rules.
 -- A mode file must define three variables:
 --  1. rule_file_interface_version (string) is checked and must match,
@@ -98,6 +137,8 @@ function load_and_check_rules()
 	--
 	-- (version 19 is in intermediate version;
 	--  several interface changes will follow)
+	-- - added "all_exec_policies" list to all
+	--   mapping modes
 	-- Differences between version 17 and 18:
 	-- - added sb2_procfs_mapper()
 	-- Differences between version 16 and 17:
diff --git a/lua_scripts/pathmaps/devel/00_default.lua b/lua_scripts/pathmaps/devel/00_default.lua
index f66a20d..f7d5295 100644
--- a/lua_scripts/pathmaps/devel/00_default.lua
+++ b/lua_scripts/pathmaps/devel/00_default.lua
@@ -635,3 +635,11 @@ exec_policy_chains = {
 	devel_exec_policies
 }
 
+-- This table lists all exec policies - this is used when the current
+-- process wants to locate the currently active policy
+all_exec_policies = {
+	exec_policy_host_os,
+	exec_policy_target,
+	exec_policy_tools,
+}
+
diff --git a/lua_scripts/pathmaps/emulate/00_default.lua b/lua_scripts/pathmaps/emulate/00_default.lua
index 421fb61..d7630a5 100644
--- a/lua_scripts/pathmaps/emulate/00_default.lua
+++ b/lua_scripts/pathmaps/emulate/00_default.lua
@@ -208,3 +208,10 @@ exec_policy_chains = {
 	all_exec_policies_chain
 }
 
+-- This table lists all exec policies - this is used when the current
+-- process wants to locate the currently active policy
+all_exec_policies = {
+	exec_policy_target,
+	default_exec_policy,
+}
+
diff --git a/lua_scripts/pathmaps/install/00_default.lua b/lua_scripts/pathmaps/install/00_default.lua
index 29fcb81..7ca7161 100644
--- a/lua_scripts/pathmaps/install/00_default.lua
+++ b/lua_scripts/pathmaps/install/00_default.lua
@@ -105,3 +105,9 @@ exec_policy_chains = {
 	all_exec_policies_chain
 }
 
+-- This table lists all exec policies - this is used when the current
+-- process wants to locate the currently active policy
+all_exec_policies = {
+	default_exec_policy,
+}
+
diff --git a/lua_scripts/pathmaps/simple/00_default.lua b/lua_scripts/pathmaps/simple/00_default.lua
index 71a7ca2..34ab4ca 100644
--- a/lua_scripts/pathmaps/simple/00_default.lua
+++ b/lua_scripts/pathmaps/simple/00_default.lua
@@ -120,3 +120,9 @@ exec_policy_chains = {
 	all_exec_policies_chain
 }
 
+-- This table lists all exec policies - this is used when the current
+-- process wants to locate the currently active policy
+all_exec_policies = {
+	default_exec_policy,
+}
+
diff --git a/lua_scripts/pathmaps/tools/00_default.lua b/lua_scripts/pathmaps/tools/00_default.lua
index efbf3bc..24f6054 100644
--- a/lua_scripts/pathmaps/tools/00_default.lua
+++ b/lua_scripts/pathmaps/tools/00_default.lua
@@ -160,3 +160,10 @@ exec_policy_chains = {
 	all_exec_policies_chain
 }
 
+-- This table lists all exec policies - this is used when the current
+-- process wants to locate the currently active policy
+all_exec_policies = {
+	exec_policy_tools,
+	default_exec_policy,
+}
+