1/*
2 * libbb/selinux_common.c
3 *   -- common SELinux utility functions
4 *
5 * Copyright 2007 KaiGai Kohei <kaigai@kaigai.gr.jp>
6 *
7 * Licensed under GPLv2, see file LICENSE in this tarball for details.
8 */
9#include "libbb.h"
10#include <selinux/context.h>
11
12context_t FAST_FUNC set_security_context_component(security_context_t cur_context,
13					 char *user, char *role, char *type, char *range)
14{
15	context_t con = context_new(cur_context);
16	if (!con)
17		return NULL;
18
19	if (user && context_user_set(con, user))
20		goto error;
21	if (type && context_type_set(con, type))
22		goto error;
23	if (range && context_range_set(con, range))
24		goto error;
25	if (role && context_role_set(con, role))
26		goto error;
27	return con;
28
29error:
30	context_free(con);
31	return NULL;
32}
33
34void FAST_FUNC setfscreatecon_or_die(security_context_t scontext)
35{
36	if (setfscreatecon(scontext) < 0) {
37		/* Can be NULL. All known printf implementations
38		 * display "(null)", "<null>" etc */
39		bb_perror_msg_and_die("can't set default "
40				"file creation context to %s", scontext);
41	}
42}
43
44void FAST_FUNC selinux_preserve_fcontext(int fdesc)
45{
46	security_context_t context;
47
48	if (fgetfilecon(fdesc, &context) < 0) {
49		if (errno == ENODATA || errno == ENOTSUP)
50			return;
51		bb_perror_msg_and_die("fgetfilecon failed");
52	}
53	setfscreatecon_or_die(context);
54	freecon(context);
55}
56
57