static PyObject *pyflask_load(PyObject *self, PyObject *args, PyObject *kwds) { int xc_handle; char *policy; uint32_t len; int ret; static char *kwd_list[] = { "policy", NULL }; if( !PyArg_ParseTupleAndKeywords(args, kwds, "s#", kwd_list, &policy, &len) ) return NULL; xc_handle = xc_interface_open(); if (xc_handle < 0) { errno = xc_handle; return PyErr_SetFromErrno(xc_error_obj); } ret = flask_load(xc_handle, policy, len); xc_interface_close(xc_handle); if ( ret != 0 ) { errno = -ret; return PyErr_SetFromErrno(xc_error_obj); } return Py_BuildValue("i", ret); }
int main (int argCnt, const char *args[]) { const char *polFName; int polFd = 0; void *polMem = NULL; void *polMemCp = NULL; struct stat info; int ret; xc_interface *xch = 0; if (argCnt != 2) usage(argCnt, args); polFName = args[1]; polFd = open(polFName, O_RDONLY); if ( polFd < 0 ) { fprintf(stderr, "Error occurred opening policy file '%s': %s\n", polFName, strerror(errno)); ret = -1; goto cleanup; } ret = stat(polFName, &info); if ( ret < 0 ) { fprintf(stderr, "Error occurred retrieving information about" "policy file '%s': %s\n", polFName, strerror(errno)); goto cleanup; } polMemCp = malloc(info.st_size); #ifdef USE_MMAP polMem = mmap(NULL, info.st_size, PROT_READ, MAP_SHARED, polFd, 0); if ( !polMem ) { fprintf(stderr, "Error occurred mapping policy file in memory: %s\n", strerror(errno)); ret = -1; goto cleanup; } xch = xc_interface_open(0,0,0); if ( !xch ) { fprintf(stderr, "Unable to create interface to xenctrl: %s\n", strerror(errno)); ret = -1; goto cleanup; } memcpy(polMemCp, polMem, info.st_size); #else ret = read(polFd, polMemCp, info.st_size); if ( ret < 0 ) { fprintf(stderr, "Unable to read new Flask policy file: %s\n", strerror(errno)); goto cleanup; } else { printf("Read %d bytes from policy file '%s'.\n", ret, polFName); } #endif ret = flask_load(xch, polMemCp, info.st_size); if ( ret < 0 ) { errno = -ret; fprintf(stderr, "Unable to load new Flask policy: %s\n", strerror(errno)); ret = -1; goto cleanup; } else { printf("Successfully loaded policy.\n"); } done: if ( polMemCp ) free(polMemCp); if ( polMem ) { ret = munmap(polMem, info.st_size); if ( ret < 0 ) fprintf(stderr, "Unable to unmap policy memory: %s\n", strerror(errno)); } if ( polFd ) close(polFd); if ( xch ) xc_interface_close(xch); return ret; cleanup: goto done; }