Re: [PATCH 1/3] libselinux: labeling support (try 3)

[Eamon Walsh <ewalsh@tycho.nsa.gov>]

Here's some test code that I've been using.  The program looks up
the command line argument as a file first, then as a media label.

The file options are set up with a "matchpathcon_prefix" of /etc and
validation turned on.

I can produce a patch for setfiles, but that will take a little
longer since all the inode code that was placed into libselinux has
to be put back into setfiles.


#include <stdio.h>
#include <stdlib.h>

#include <selinux/selinux.h>
#include <selinux/label.h>

static void test_file(const char *str)
{
	selabel_handle_t hnd;
	security_context_t result;
	int rc;
	struct selabel_opt opts[] = {
		{ SELABEL_OPT_PREFIX, "/etc" },
		{ SELABEL_OPT_VALIDATE, "1" }
	};

	hnd = selabel_open(SELABEL_CTX_FILE, opts, 2);
	if (!hnd) {
		perror("selabel_open");
		exit(1);
	}

	rc = selabel_lookup(hnd, &result, str, 0);
	if (rc < 0) {
		perror("selabel_lookup");
	} else {
		printf("File result is: %s\n", result);
		freecon(result);
	}
	
	selabel_close(hnd);
}

static void test_media(const char *str)
{
	selabel_handle_t hnd;
	security_context_t result;
	int rc;

	hnd = selabel_open(SELABEL_CTX_MEDIA, NULL, 0);
	if (!hnd) {
		perror("selabel_open");
		exit(1);
	}

	rc = selabel_lookup(hnd, &result, str, 0);
	if (rc < 0) {
		perror("selabel_lookup");
	} else {
		printf("Media result is: %s\n", result);
		freecon(result);
	}
	
	selabel_close(hnd);
}

int main(int argc, char **argv)
{
	if (argc != 2) {
		fprintf(stderr, "usage\n");
		return 1;
	}
		
	test_file(argv[1]);
	test_media(argv[1]);

	return 0;
}




-- 
Eamon Walsh <ewalsh@tycho.nsa.gov>
National Security Agency


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.