Пример #1
0
static int validate_handler(
	const semanage_fcontext_t* fcon,
	void* varg) {

	char* str;

	/* Unpack varg */
	struct validate_handler_arg* arg =
		(struct validate_handler_arg*) varg;
	semanage_handle_t* handle = arg->handle;
	const sepol_policydb_t* policydb = arg->policydb;

	/* Unpack fcontext */
	const char* expr = semanage_fcontext_get_expr(fcon);
	int type = semanage_fcontext_get_type(fcon);
	const char* type_str = semanage_fcontext_get_type_str(type);
	semanage_context_t* con = semanage_fcontext_get_con(fcon);

	if (con && sepol_context_check(handle->sepolh, policydb, con) < 0)
		goto invalid;

	return 0;

	invalid:
	if (semanage_context_to_string(handle, con, &str) >= 0) {
		ERR(handle, "invalid context %s specified for %s [%s]", 
			str, expr, type_str);
		free(str);
	} else
		ERR(handle, "invalid context specified for %s [%s]", 
			expr, type_str);
	return -1;
}
Пример #2
0
static int node_print(semanage_handle_t * handle,
		      semanage_node_t * node, FILE * str)
{

	char *con_str = NULL;
	char *addr = NULL;
	char *mask = NULL;

	int proto = semanage_node_get_proto(node);
	const char *proto_str = semanage_node_get_proto_str(proto);
	semanage_context_t *con = semanage_node_get_con(node);

	if (semanage_node_get_addr(handle, node, &addr) < 0)
		goto err;

	if (semanage_node_get_mask(handle, node, &mask) < 0)
		goto err;

	if (semanage_context_to_string(handle, con, &con_str) < 0)
		goto err;

	if (fprintf
	    (str, "nodecon %s %s %s %s\n", proto_str, addr, mask, con_str) < 0)
		goto err;

	free(addr);
	free(mask);
	free(con_str);
	return STATUS_SUCCESS;

      err:
	free(addr);
	free(mask);
	free(con_str);
	ERR(handle, "could not print node to stream");
	return STATUS_ERR;
}