From 63cfe7b84de6609e18e1876a7b1807a86aeb8e07 Mon Sep 17 00:00:00 2001
From: Pavel Hrdina <phrdina@redhat.com>
Date: Mon, 24 Jun 2019 14:41:50 +0200
Subject: [PATCH] vircgroup: introduce virCgroupV2DeviceGetPerms
MIME-Version: 1.0
Content-Type: text/plain; charset=utf8
Content-Transfer-Encoding: 8bit

Signed-off-by: Pavel Hrdina <phrdina@redhat.com>
Reviewed-by: Ján Tomko <jtomko@redhat.com>
---
 src/libvirt_private.syms      |  1 +
 src/util/vircgroupv2devices.c | 34 ++++++++++++++++++++++++++++++++++
 src/util/vircgroupv2devices.h |  6 ++++++
 3 files changed, 41 insertions(+)

diff --git a/src/libvirt_private.syms b/src/libvirt_private.syms
index 3553e82f5c..88b0a38696 100644
--- a/src/libvirt_private.syms
+++ b/src/libvirt_private.syms
@@ -1721,6 +1721,7 @@ virCgroupV2DevicesAttachProg;
 virCgroupV2DevicesAvailable;
 virCgroupV2DevicesCreateProg;
 virCgroupV2DevicesDetectProg;
+virCgroupV2DevicesGetPerms;
 virCgroupV2DevicesPrepareProg;
 virCgroupV2DevicesRemoveProg;
 
diff --git a/src/util/vircgroupv2devices.c b/src/util/vircgroupv2devices.c
index 980d8a2b7c..43ae14d2a5 100644
--- a/src/util/vircgroupv2devices.c
+++ b/src/util/vircgroupv2devices.c
@@ -557,6 +557,32 @@ virCgroupV2DevicesRemoveProg(virCgroupPtr group)
 
     return 0;
 }
+
+
+uint32_t
+virCgroupV2DevicesGetPerms(int perms,
+                           char type)
+{
+    uint32_t ret = 0;
+
+    if (perms & VIR_CGROUP_DEVICE_MKNOD)
+        ret |= BPF_DEVCG_ACC_MKNOD << 16;
+
+    if (perms & VIR_CGROUP_DEVICE_READ)
+        ret |= BPF_DEVCG_ACC_READ << 16;
+
+    if (perms & VIR_CGROUP_DEVICE_WRITE)
+        ret |= BPF_DEVCG_ACC_WRITE << 16;
+
+    if (type == 'b')
+        ret |= BPF_DEVCG_DEV_BLOCK;
+    else if (type == 'c')
+        ret |= BPF_DEVCG_DEV_CHAR;
+    else
+        ret |= BPF_DEVCG_DEV_BLOCK | BPF_DEVCG_DEV_CHAR;
+
+    return ret;
+}
 #else /* !HAVE_DECL_BPF_CGROUP_DEVICE */
 bool
 virCgroupV2DevicesAvailable(virCgroupPtr group G_GNUC_UNUSED)
@@ -612,4 +638,12 @@ virCgroupV2DevicesRemoveProg(virCgroupPtr group G_GNUC_UNUSED)
 {
     return 0;
 }
+
+
+uint32_t
+virCgroupV2DevicesGetPerms(int perms G_GNUC_UNUSED,
+                           char type G_GNUC_UNUSED)
+{
+    return 0;
+}
 #endif /* !HAVE_DECL_BPF_CGROUP_DEVICE */
diff --git a/src/util/vircgroupv2devices.h b/src/util/vircgroupv2devices.h
index 879d9cb77b..e00da25c1e 100644
--- a/src/util/vircgroupv2devices.h
+++ b/src/util/vircgroupv2devices.h
@@ -18,6 +18,8 @@
 
 #pragma once
 
+#include <sys/types.h>
+
 #include "vircgroup.h"
 
 bool
@@ -39,3 +41,7 @@ virCgroupV2DevicesPrepareProg(virCgroupPtr group);
 
 int
 virCgroupV2DevicesRemoveProg(virCgroupPtr group);
+
+uint32_t
+virCgroupV2DevicesGetPerms(int perms,
+                           char type);
-- 
2.39.5