#include #include #include #include #include #include #include "utils.h" bool USAGE_ERROR = false; void display_allow(policydb_t *policydb, avtab_key_t *key, int idx, uint32_t perms) { printf(" allow %s %s:%s { %s };\n", policydb->p_type_val_to_name[key->source_type ? key->source_type - 1 : idx], key->target_type == key->source_type ? "self" : policydb->p_type_val_to_name[key->target_type ? key->target_type - 1 : idx], policydb->p_class_val_to_name[key->target_class - 1], sepol_av_to_string (policydb, key->target_class, perms)); } bool load_policy(char *filename, policydb_t * policydb, struct policy_file *pf) { int fd = -1; struct stat sb; void *map = MAP_FAILED; bool ret = false; fd = open(filename, O_RDONLY); if (fd < 0) { fprintf(stderr, "Can't open '%s': %s\n", filename, strerror(errno)); goto cleanup; } if (fstat(fd, &sb) < 0) { fprintf(stderr, "Can't stat '%s': %s\n", filename, strerror(errno)); goto cleanup; } map = mmap(NULL, sb.st_size, PROT_READ | PROT_WRITE, MAP_PRIVATE, fd, 0); if (map == MAP_FAILED) { fprintf(stderr, "Can't mmap '%s': %s\n", filename, strerror(errno)); goto cleanup; } policy_file_init(pf); pf->type = PF_USE_MEMORY; pf->data = map; pf->len = sb.st_size; if (policydb_init(policydb)) { fprintf(stderr, "Could not initialize policydb!\n"); goto cleanup; } if (policydb_read(policydb, pf, 0)) { fprintf(stderr, "error(s) encountered while parsing configuration\n"); goto cleanup; } ret = true; cleanup: if (map != MAP_FAILED) { munmap(map, sb.st_size); } if (fd >= 0) { close(fd); } return ret; }