1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
|
#include <semanage/fcontext_record.h>
#include <semanage/semanage.h>
#include <semanage/fcontexts_local.h>
#include <sepol/sepol.h>
#include <errno.h>
#include <stdio.h>
#include <stdlib.h>
int main(const int argc, const char **argv) {
semanage_handle_t *sh = NULL;
semanage_fcontext_t *fcontext;
semanage_context_t *con;
semanage_fcontext_key_t *k;
int exist = 0;
sh = semanage_handle_create();
if (sh == NULL) {
perror("Can't create semanage handle\n");
return -1;
}
if (semanage_access_check(sh) < 0) {
perror("Semanage access check failed\n");
return -1;
}
if (semanage_connect(sh) < 0) {
perror("Semanage connect failed\n");
return -1;
}
if (semanage_fcontext_key_create(sh, argv[2], SEMANAGE_FCONTEXT_REG, &k) < 0) {
fprintf(stderr, "Could not create key for %s", argv[2]);
return -1;
}
if(semanage_fcontext_exists(sh, k, &exist) < 0) {
fprintf(stderr,"Could not check if key exists for %s", argv[2]);
return -1;
}
if (exist) {
fprintf(stderr,"Could create %s mapping already exists", argv[2]);
return -1;
}
if (semanage_fcontext_create(sh, &fcontext) < 0) {
fprintf(stderr,"Could not create file context for %s", argv[2]);
return -1;
}
semanage_fcontext_set_expr(sh, fcontext, argv[2]);
if (semanage_context_from_string(sh, argv[1], &con)) {
fprintf(stderr,"Could not create context using %s for file context %s", argv[1], argv[2]);
return -1;
}
if (semanage_fcontext_set_con(sh, fcontext, con) < 0) {
fprintf(stderr,"Could not set file context for %s", argv[2]);
return -1;
}
semanage_fcontext_set_type(fcontext, SEMANAGE_FCONTEXT_REG);
if(semanage_fcontext_modify_local(sh, k, fcontext) < 0) {
fprintf(stderr,"Could not add file context for %s", argv[2]);
return -1;
}
semanage_fcontext_key_free(k);
semanage_fcontext_free(fcontext);
return 0;
}
|
