static int validate_handler(
const semanage_fcontext_t* fcon,
void* varg) {
char* str;
/* Unpack varg */
struct validate_handler_arg* arg =
(struct validate_handler_arg*) varg;
semanage_handle_t* handle = arg->handle;
const sepol_policydb_t* policydb = arg->policydb;
/* Unpack fcontext */
const char* expr = semanage_fcontext_get_expr(fcon);
int type = semanage_fcontext_get_type(fcon);
const char* type_str = semanage_fcontext_get_type_str(type);
semanage_context_t* con = semanage_fcontext_get_con(fcon);
if (con && sepol_context_check(handle->sepolh, policydb, con) < 0)
goto invalid;
return 0;
invalid:
if (semanage_context_to_string(handle, con, &str) >= 0) {
ERR(handle, "invalid context %s specified for %s [%s]",
str, expr, type_str);
free(str);
} else
ERR(handle, "invalid context specified for %s [%s]",
expr, type_str);
return -1;
}
int semanage_fcontext_key_extract(semanage_handle_t * handle,
const semanage_fcontext_t * fcontext,
semanage_fcontext_key_t ** key_ptr)
{
if (semanage_fcontext_key_create(handle, fcontext->expr,
fcontext->type, key_ptr) < 0) {
ERR(handle, "could not extract key from "
"file context %s (%s)", fcontext->expr,
semanage_fcontext_get_type_str(fcontext->type));
return STATUS_ERR;
}
return STATUS_SUCCESS;
}
