1 #include <stdio.h> 2 #include <stdlib.h> 3 #include <string.h> 4 #include <getopt.h> 5 #include <errno.h> 6 #include <stdbool.h> 7 #include <selinux/selinux.h> 8 #include <selinux/label.h> 9 10 static __attribute__ ((__noreturn__)) void usage(const char *progname) 11 { 12 fprintf(stderr, 13 "usage: %s [-v] -p <path> [-f file]\n\n" 14 "Where:\n\t" 15 "-v Validate file_contxts entries against loaded policy.\n\t" 16 "-p Path to check if a match or partial match is possible\n\t" 17 " against a regex entry in the file_contexts file.\n\t" 18 "-f Optional file_contexts file (defaults to current policy).\n\n" 19 "Example:\n\t" 20 "%s -p /sys/devices/system/cpu/online\n\t" 21 " Check if a match or partial match is possible against\n\t" 22 " the path \"/sys/devices/system/cpu/online\", returning\n\t" 23 " TRUE or FALSE.\n\n", progname, progname); 24 exit(1); 25 } 26 27 int main(int argc, char **argv) 28 { 29 int opt; 30 bool partial_match; 31 char *validate = NULL, *path = NULL, *file = NULL; 32 33 struct selabel_handle *hnd; 34 struct selinux_opt selabel_option[] = { 35 { SELABEL_OPT_PATH, file }, 36 { SELABEL_OPT_VALIDATE, validate } 37 }; 38 39 if (argc < 2) 40 usage(argv[0]); 41 42 while ((opt = getopt(argc, argv, "f:vp:")) > 0) { 43 switch (opt) { 44 case 'f': 45 file = optarg; 46 break; 47 case 'v': 48 validate = (char *)1; 49 break; 50 case 'p': 51 path = optarg; 52 break; 53 default: 54 usage(argv[0]); 55 } 56 } 57 58 selabel_option[0].value = file; 59 selabel_option[1].value = validate; 60 61 hnd = selabel_open(SELABEL_CTX_FILE, selabel_option, 2); 62 if (!hnd) { 63 fprintf(stderr, "ERROR: selabel_open - Could not obtain " 64 "handle.\n"); 65 return -1; 66 } 67 68 partial_match = selabel_partial_match(hnd, path); 69 70 printf("Match or Partial match: %s\n", 71 partial_match == 1 ? "TRUE" : "FALSE"); 72 73 selabel_close(hnd); 74 return partial_match; 75 } 76
