*
* Copyright 2026 Alexander Vanhee
* Copyright (C) 2022 Red Hat <www.redhat.com>
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation, either version 3 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program. If not, see <https://www.gnu.org/licenses/>.
*
* SPDX-License-Identifier: GPL-3.0-or-later
*/
#pragma once
#include <gio/gio.h>
#include <glib-object.h>
G_BEGIN_DECLS
#define BZ_TYPE_APP_PERMISSIONS (bz_app_permissions_get_type ())
G_DECLARE_FINAL_TYPE (BzAppPermissions, bz_app_permissions, BZ, APP_PERMISSIONS, GObject)
typedef enum
{
BZ_APP_PERMISSIONS_FLAGS_NONE = 0,
BZ_APP_PERMISSIONS_FLAGS_NETWORK = 1 << 0,
BZ_APP_PERMISSIONS_FLAGS_SYSTEM_BUS = 1 << 1,
BZ_APP_PERMISSIONS_FLAGS_SESSION_BUS = 1 << 2,
BZ_APP_PERMISSIONS_FLAGS_DEVICES = 1 << 3,
BZ_APP_PERMISSIONS_FLAGS_HOME_FULL = 1 << 4,
BZ_APP_PERMISSIONS_FLAGS_HOME_READ = 1 << 5,
BZ_APP_PERMISSIONS_FLAGS_FILESYSTEM_FULL = 1 << 6,
BZ_APP_PERMISSIONS_FLAGS_FILESYSTEM_READ = 1 << 7,
BZ_APP_PERMISSIONS_FLAGS_DOWNLOADS_FULL = 1 << 8,
BZ_APP_PERMISSIONS_FLAGS_DOWNLOADS_READ = 1 << 9,
BZ_APP_PERMISSIONS_FLAGS_SETTINGS = 1 << 10,
BZ_APP_PERMISSIONS_FLAGS_X11 = 1 << 11,
BZ_APP_PERMISSIONS_FLAGS_ESCAPE_SANDBOX = 1 << 12,
BZ_APP_PERMISSIONS_FLAGS_FILESYSTEM_OTHER = 1 << 13,
BZ_APP_PERMISSIONS_FLAGS_BUS_POLICY_OTHER = 1 << 14,
BZ_APP_PERMISSIONS_FLAGS_AUDIO_DEVICES = 1 << 15,
BZ_APP_PERMISSIONS_FLAGS_INPUT_DEVICES = 1 << 16,
BZ_APP_PERMISSIONS_FLAGS_SYSTEM_DEVICES = 1 << 17,
BZ_APP_PERMISSIONS_FLAGS_SCREEN = 1 << 18,
} BzAppPermissionsFlags;
#define BZ_TYPE_APP_PERMISSIONS_FLAGS (bz_app_permissions_flags_get_type ())
typedef enum
{
BZ_FILESYSTEM_PATH_SYSTEM_ROOT,
BZ_FILESYSTEM_PATH_HOME_SUBDIR,
BZ_FILESYSTEM_PATH_HOST_OS,
BZ_FILESYSTEM_PATH_HOST_ETC,
BZ_FILESYSTEM_PATH_XDG_DESKTOP,
BZ_FILESYSTEM_PATH_XDG_DOCUMENTS,
BZ_FILESYSTEM_PATH_XDG_MUSIC,
BZ_FILESYSTEM_PATH_XDG_PICTURES,
BZ_FILESYSTEM_PATH_XDG_PUBLIC_SHARE,
BZ_FILESYSTEM_PATH_XDG_VIDEOS,
BZ_FILESYSTEM_PATH_XDG_TEMPLATES,
BZ_FILESYSTEM_PATH_XDG_CACHE,
BZ_FILESYSTEM_PATH_XDG_CONFIG,
BZ_FILESYSTEM_PATH_XDG_DATA,
BZ_FILESYSTEM_PATH_XDG_RUN,
BZ_FILESYSTEM_PATH_CUSTOM,
} BzFilesystemPathType;
#define BZ_TYPE_FILESYSTEM_PATH_TYPE (bz_filesystem_path_type_get_type ())
typedef enum
{
BZ_BUS_POLICY_PERMISSION_UNKNOWN = 0,
BZ_BUS_POLICY_PERMISSION_NONE,
BZ_BUS_POLICY_PERMISSION_SEE,
BZ_BUS_POLICY_PERMISSION_TALK,
BZ_BUS_POLICY_PERMISSION_OWN,
} BzBusPolicyPermission;
#define BZ_TYPE_BUS_POLICY_PERMISSION (bz_bus_policy_permission_get_type ())
typedef struct
{
BzFilesystemPathType type;
char *subpath;
} BzFilesystemPath;
typedef struct
{
GBusType bus_type;
char *bus_name;
BzBusPolicyPermission permission;
} BzBusPolicy;
GType bz_app_permissions_flags_get_type (void) G_GNUC_CONST;
GType bz_safety_rating_get_type (void) G_GNUC_CONST;
GType bz_filesystem_path_type_get_type (void) G_GNUC_CONST;
GType bz_bus_policy_permission_get_type (void) G_GNUC_CONST;
BzFilesystemPath *
bz_filesystem_path_new (BzFilesystemPathType type,
const char *subpath);
void
bz_filesystem_path_free (BzFilesystemPath *self);
char *
bz_filesystem_path_to_display_string (const BzFilesystemPath *path);
const char *
bz_filesystem_path_to_icon_name (const BzFilesystemPath *path);
BzBusPolicy *
bz_bus_policy_new (GBusType bus_type,
const char *bus_name,
BzBusPolicyPermission permission);
void
bz_bus_policy_free (BzBusPolicy *self);
G_DEFINE_AUTOPTR_CLEANUP_FUNC (BzFilesystemPath, bz_filesystem_path_free)
G_DEFINE_AUTOPTR_CLEANUP_FUNC (BzBusPolicy, bz_bus_policy_free)
BzAppPermissions *
bz_app_permissions_new (void);
BzAppPermissions *
bz_app_permissions_new_from_metadata (GKeyFile *keyfile,
GError **error);
void
bz_app_permissions_seal (BzAppPermissions *self);
gboolean
bz_app_permissions_is_sealed (BzAppPermissions *self);
gboolean
bz_app_permissions_is_empty (BzAppPermissions *self);
void
bz_app_permissions_set_flags (BzAppPermissions *self,
BzAppPermissionsFlags flags);
BzAppPermissionsFlags
bz_app_permissions_get_flags (BzAppPermissions *self);
void
bz_app_permissions_add_flag (BzAppPermissions *self,
BzAppPermissionsFlags flags);
void
bz_app_permissions_remove_flag (BzAppPermissions *self,
BzAppPermissionsFlags flags);
void
bz_app_permissions_add_filesystem_read (BzAppPermissions *self,
BzFilesystemPathType type,
const char *subpath);
const GPtrArray *
bz_app_permissions_get_filesystem_read (BzAppPermissions *self);
void
bz_app_permissions_add_filesystem_full (BzAppPermissions *self,
BzFilesystemPathType type,
const char *subpath);
const GPtrArray *
bz_app_permissions_get_filesystem_full (BzAppPermissions *self);
void
bz_app_permissions_add_bus_policy (BzAppPermissions *self,
GBusType bus_type,
const char *bus_name,
BzBusPolicyPermission permission);
const BzBusPolicy *const *
bz_app_permissions_get_bus_policies (BzAppPermissions *self,
size_t *out_n_bus_policies);
BzAppPermissions *
bz_app_permissions_diff (BzAppPermissions *self,
BzAppPermissions *other);
void
bz_app_permissions_serialize (BzAppPermissions *self,
GVariantBuilder *builder);
gboolean
bz_app_permissions_deserialize (BzAppPermissions *self,
GVariant *import,
GError **error);
G_END_DECLS
