summaryrefslogtreecommitdiff
path: root/selinux/getenforce.c
diff options
context:
space:
mode:
Diffstat (limited to 'selinux/getenforce.c')
-rw-r--r--selinux/getenforce.c33
1 files changed, 33 insertions, 0 deletions
diff --git a/selinux/getenforce.c b/selinux/getenforce.c
new file mode 100644
index 0000000..e240e4d
--- /dev/null
+++ b/selinux/getenforce.c
@@ -0,0 +1,33 @@
+/*
+ * getenforce
+ *
+ * Based on libselinux 1.33.1
+ * Port to BusyBox Hiroshi Shinji <shiroshi@my.email.ne.jp>
+ *
+ */
+
+#include "busybox.h"
+
+int getenforce_main(int argc, char **argv)
+{
+ int rc;
+
+ rc = is_selinux_enabled();
+ if (rc < 0)
+ bb_error_msg_and_die("is_selinux_enabled() failed");
+
+ if (rc == 1) {
+ rc = security_getenforce();
+ if (rc < 0)
+ bb_error_msg_and_die("getenforce() failed");
+
+ if (rc)
+ puts("Enforcing");
+ else
+ puts("Permissive");
+ } else {
+ puts("Disabled");
+ }
+
+ return 0;
+}