56 lines
1.0 KiB
C
56 lines
1.0 KiB
C
|
#include <unistd.h>
|
||
|
|
#include <sys/types.h>
|
||
|
|
#include <stdio.h>
|
||
|
|
#include <stdlib.h>
|
||
|
|
#include <errno.h>
|
||
|
|
#include <selinux/selinux.h>
|
||
|
|
|
||
|
|
int main(int argc, char **argv)
|
||
|
|
{
|
||
|
|
struct av_decision avd;
|
||
|
|
security_class_t tclass;
|
||
|
|
int ret;
|
||
|
|
|
||
|
|
if (argc != 4) {
|
||
|
|
fprintf(stderr, "usage: %s scontext tcontext tclass\n",
|
||
|
|
argv[0]);
|
||
|
|
exit(1);
|
||
|
|
}
|
||
|
|
|
||
|
|
tclass = string_to_security_class(argv[3]);
|
||
|
|
if (!tclass) {
|
||
|
|
fprintf(stderr, "%s: invalid class '%s'\n", argv[0], argv[3]);
|
||
|
|
exit(2);
|
||
|
|
}
|
||
|
|
|
||
|
|
ret = security_compute_av(argv[1], argv[2], tclass, 1, &avd);
|
||
|
|
if (ret < 0) {
|
||
|
|
fprintf(stderr, "%s: security_compute_av failed\n", argv[0]);
|
||
|
|
exit(3);
|
||
|
|
}
|
||
|
|
|
||
|
|
printf("allowed=");
|
||
|
|
print_access_vector(tclass, avd.allowed);
|
||
|
|
printf("\n");
|
||
|
|
|
||
|
|
if (avd.decided != ~0U) {
|
||
|
|
printf("decided=");
|
||
|
|
print_access_vector(tclass, avd.decided);
|
||
|
|
printf("\n");
|
||
|
|
}
|
||
|
|
|
||
|
|
if (avd.auditallow) {
|
||
|
|
printf("auditallow=");
|
||
|
|
print_access_vector(tclass, avd.auditallow);
|
||
|
|
printf("\n");
|
||
|
|
}
|
||
|
|
|
||
|
|
if (avd.auditdeny != ~0U) {
|
||
|
|
printf("auditdeny");
|
||
|
|
print_access_vector(tclass, avd.auditdeny);
|
||
|
|
printf("\n");
|
||
|
|
}
|
||
|
|
|
||
|
|
exit(0);
|
||
|
|
}
|