SELinux: load_policy applet - this time with svn add

1 files changed, 31 insertions, 0 deletions

diff --git a/selinux/load_policy.c b/selinux/load_policy.c
new file mode 100644
index 0000000..83051e6
--- /dev/null
+++ b/selinux/load_policy.c
@@ -0,0 +1,31 @@
+/*
+ * load_policy
+ * This implementation is based on old load_policy to be small.
+ * Author: Yuichi Nakamura <ynakam@hitachisoft.jp>
+ */
+#include "busybox.h"
+
+int load_policy_main(int argc, char *argv[]);
+int load_policy_main(int argc, char *argv[])
+{
+	int fd;
+	struct stat st;
+	void *data;
+	if (argc != 2) {
+		bb_show_usage();
+	}
+
+	fd = xopen(argv[1], O_RDONLY);
+	if (fstat(fd, &st) < 0) {
+		bb_perror_msg_and_die("can't fstat");
+	}
+	data = mmap(NULL, st.st_size, PROT_READ, MAP_SHARED, fd, 0);
+	if (data == MAP_FAILED) {
+		bb_perror_msg_and_die("can't mmap");
+	}
+	if (security_load_policy(data, st.st_size) < 0) {
+		bb_perror_msg_and_die("can't load policy");
+	}
+
+	return 0;
+}