xref: /aosp_15_r20/external/toybox/toys/android/load_policy.c (revision cf5a6c84e2b8763fc1a7db14496fd4742913b199)
1*cf5a6c84SAndroid Build Coastguard Worker /* load_policy.c - Load an SELinux policy file
2*cf5a6c84SAndroid Build Coastguard Worker  *
3*cf5a6c84SAndroid Build Coastguard Worker  * Copyright 2015 The Android Open Source Project
4*cf5a6c84SAndroid Build Coastguard Worker 
5*cf5a6c84SAndroid Build Coastguard Worker USE_LOAD_POLICY(NEWTOY(load_policy, "<1>1", TOYFLAG_USR|TOYFLAG_SBIN))
6*cf5a6c84SAndroid Build Coastguard Worker 
7*cf5a6c84SAndroid Build Coastguard Worker config LOAD_POLICY
8*cf5a6c84SAndroid Build Coastguard Worker   bool "load_policy"
9*cf5a6c84SAndroid Build Coastguard Worker   depends on TOYBOX_SELINUX
10*cf5a6c84SAndroid Build Coastguard Worker   default y
11*cf5a6c84SAndroid Build Coastguard Worker   help
12*cf5a6c84SAndroid Build Coastguard Worker     usage: load_policy FILE
13*cf5a6c84SAndroid Build Coastguard Worker 
14*cf5a6c84SAndroid Build Coastguard Worker     Load the specified SELinux policy file.
15*cf5a6c84SAndroid Build Coastguard Worker */
16*cf5a6c84SAndroid Build Coastguard Worker 
17*cf5a6c84SAndroid Build Coastguard Worker #define FOR_load_policy
18*cf5a6c84SAndroid Build Coastguard Worker #include "toys.h"
19*cf5a6c84SAndroid Build Coastguard Worker 
load_policy_main(void)20*cf5a6c84SAndroid Build Coastguard Worker void load_policy_main(void)
21*cf5a6c84SAndroid Build Coastguard Worker {
22*cf5a6c84SAndroid Build Coastguard Worker   int fd = xopenro(*toys.optargs);
23*cf5a6c84SAndroid Build Coastguard Worker   off_t policy_len = fdlength(fd);
24*cf5a6c84SAndroid Build Coastguard Worker   char *policy_data = xmmap(0, policy_len, PROT_READ, MAP_PRIVATE, fd, 0);
25*cf5a6c84SAndroid Build Coastguard Worker 
26*cf5a6c84SAndroid Build Coastguard Worker   close(fd);
27*cf5a6c84SAndroid Build Coastguard Worker   if (security_load_policy(policy_data, policy_len) < 0)
28*cf5a6c84SAndroid Build Coastguard Worker     perror_exit("security_load_policy %s", *toys.optargs);
29*cf5a6c84SAndroid Build Coastguard Worker 
30*cf5a6c84SAndroid Build Coastguard Worker   munmap(policy_data, policy_len);
31*cf5a6c84SAndroid Build Coastguard Worker }
32