LXR busybox/libbb/selinux

   1/*
   2 * libbb/selinux_common.c
   3 *   -- common SELinux utility functions
   4 *
   5 * Copyright 2007 KaiGai Kohei <kaigai@kaigai.gr.jp>
   6 *
   7 * Licensed under GPLv2, see file LICENSE in this tarball for details.
   8 */
   9#include "libbb.h"
  10#include <selinux/context.h>
  11
  12context_t FAST_FUNC set_security_context_component(security_context_t cur_context,
  13                                         char *user, char *role, char *type, char *range)
  14{
  15        context_t con = context_new(cur_context);
  16        if (!con)
  17                return NULL;
  18
  19        if (user && context_user_set(con, user))
  20                goto error;
  21        if (type && context_type_set(con, type))
  22                goto error;
  23        if (range && context_range_set(con, range))
  24                goto error;
  25        if (role && context_role_set(con, role))
  26                goto error;
  27        return con;
  28
  29error:
  30        context_free(con);
  31        return NULL;
  32}
  33
  34void FAST_FUNC setfscreatecon_or_die(security_context_t scontext)
  35{
  36        if (setfscreatecon(scontext) < 0) {
  37                /* Can be NULL. All known printf implementations
  38                 * display "(null)", "<null>" etc */
  39                bb_perror_msg_and_die("cannot set default "
  40                                "file creation context to %s", scontext);
  41        }
  42}
  43
  44void FAST_FUNC selinux_preserve_fcontext(int fdesc)
  45{
  46        security_context_t context;
  47
  48        if (fgetfilecon(fdesc, &context) < 0) {
  49                if (errno == ENODATA || errno == ENOTSUP)
  50                        return;
  51                bb_perror_msg_and_die("fgetfilecon failed");
  52        }
  53        setfscreatecon_or_die(context);
  54        freecon(context);
  55}
  56
  57