summaryrefslogtreecommitdiff
path: root/selinux/setenforce.c
diff options
context:
space:
mode:
Diffstat (limited to 'selinux/setenforce.c')
-rw-r--r--selinux/setenforce.c44
1 files changed, 44 insertions, 0 deletions
diff --git a/selinux/setenforce.c b/selinux/setenforce.c
new file mode 100644
index 0000000..670e300
--- /dev/null
+++ b/selinux/setenforce.c
@@ -0,0 +1,44 @@
+/*
+ * setenforce
+ *
+ * Based on libselinux 1.33.1
+ * Port to BusyBox Hiroshi Shinji <shiroshi@my.email.ne.jp>
+ *
+ */
+
+#include "busybox.h"
+
+static const smallint setenforce_mode[] = {
+ 0,
+ 1,
+ 0,
+ 1,
+};
+static const char *const setenforce_cmd[] = {
+ "0",
+ "1",
+ "permissive",
+ "enforcing",
+ NULL,
+};
+
+int setenforce_main(int argc, char **argv)
+{
+ int i, rc;
+
+ if (argc != 2)
+ bb_show_usage();
+
+ selinux_or_die();
+
+ for (i = 0; setenforce_cmd[i]; i++) {
+ if (strcasecmp(argv[1], setenforce_cmd[i]) != 0)
+ continue;
+ rc = security_setenforce(setenforce_mode[i]);
+ if (rc < 0)
+ bb_perror_msg_and_die("setenforce() failed");
+ return 0;
+ }
+
+ bb_show_usage();
+}