1 | /*
|
---|
2 | * libbb/selinux_common.c
|
---|
3 | * -- common SELinux utility functions
|
---|
4 | *
|
---|
5 | * Copyright 2007 KaiGai Kohei <kaigai@kaigai.gr.jp>
|
---|
6 | *
|
---|
7 | * Licensed under GPLv2, see file LICENSE in this source tree.
|
---|
8 | */
|
---|
9 | #include "libbb.h"
|
---|
10 | #include <selinux/context.h>
|
---|
11 |
|
---|
12 | context_t FAST_FUNC set_security_context_component(security_context_t cur_context,
|
---|
13 | char *user, char *role, char *type, char *range)
|
---|
14 | {
|
---|
15 | context_t con = context_new(cur_context);
|
---|
16 | if (!con)
|
---|
17 | return NULL;
|
---|
18 |
|
---|
19 | if (user && context_user_set(con, user))
|
---|
20 | goto error;
|
---|
21 | if (type && context_type_set(con, type))
|
---|
22 | goto error;
|
---|
23 | if (range && context_range_set(con, range))
|
---|
24 | goto error;
|
---|
25 | if (role && context_role_set(con, role))
|
---|
26 | goto error;
|
---|
27 | return con;
|
---|
28 |
|
---|
29 | error:
|
---|
30 | context_free(con);
|
---|
31 | return NULL;
|
---|
32 | }
|
---|
33 |
|
---|
34 | void FAST_FUNC setfscreatecon_or_die(security_context_t scontext)
|
---|
35 | {
|
---|
36 | if (setfscreatecon(scontext) < 0) {
|
---|
37 | /* Can be NULL. All known printf implementations
|
---|
38 | * display "(null)", "<null>" etc */
|
---|
39 | bb_perror_msg_and_die("can't set default "
|
---|
40 | "file creation context to %s", scontext);
|
---|
41 | }
|
---|
42 | }
|
---|
43 |
|
---|
44 | void FAST_FUNC selinux_preserve_fcontext(int fdesc)
|
---|
45 | {
|
---|
46 | security_context_t context;
|
---|
47 |
|
---|
48 | if (fgetfilecon(fdesc, &context) < 0) {
|
---|
49 | if (errno == ENODATA || errno == ENOTSUP)
|
---|
50 | return;
|
---|
51 | bb_perror_msg_and_die("fgetfilecon failed");
|
---|
52 | }
|
---|
53 | setfscreatecon_or_die(context);
|
---|
54 | freecon(context);
|
---|
55 | }
|
---|