8290d1083e
Add -Z option to ls and ps for displaying security contexts. Modify id to display security context. Add new SELinux commands: chcon, getenforce, getsebool, load_policy, restorecon, runcon, setenforce, setsebool. Change-Id: Ia20941be4a6cd706fe392fed6e38a37d880ec5f1
49 lines
1.1 KiB
C
49 lines
1.1 KiB
C
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <string.h>
|
|
#include <unistd.h>
|
|
#include <fcntl.h>
|
|
#include <sys/stat.h>
|
|
#include <sys/mman.h>
|
|
#include <errno.h>
|
|
#include <selinux/selinux.h>
|
|
|
|
int load_policy_main(int argc, char **argv)
|
|
{
|
|
int fd, rc, vers;
|
|
struct stat sb;
|
|
void *map;
|
|
const char *path;
|
|
|
|
if (argc != 2) {
|
|
fprintf(stderr, "usage: %s policy-file\n", argv[0]);
|
|
exit(1);
|
|
}
|
|
|
|
path = argv[1];
|
|
fd = open(path, O_RDONLY);
|
|
if (fd < 0) {
|
|
fprintf(stderr, "Could not open %s: %s\n", path, strerror(errno));
|
|
exit(2);
|
|
}
|
|
|
|
if (fstat(fd, &sb) < 0) {
|
|
fprintf(stderr, "Could not stat %s: %s\n", path, strerror(errno));
|
|
exit(3);
|
|
}
|
|
|
|
map = mmap(NULL, sb.st_size, PROT_READ, MAP_PRIVATE, fd, 0);
|
|
if (map == MAP_FAILED) {
|
|
fprintf(stderr, "Could not mmap %s: %s\n", path, strerror(errno));
|
|
exit(4);
|
|
}
|
|
|
|
rc = security_load_policy(map, sb.st_size);
|
|
if (rc < 0) {
|
|
fprintf(stderr, "Could not load %s: %s\n", path, strerror(errno));
|
|
exit(5);
|
|
}
|
|
munmap(map, sb.st_size);
|
|
close(fd);
|
|
exit(0);
|
|
}
|