From 32422d1b640617a56688370e3ebf4025bb3cf087 Mon Sep 17 00:00:00 2001 From: Rob Landley Date: Fri, 27 Mar 2015 22:03:13 -0500 Subject: Promote setenforce to android. --- toys/android/setenforce.c | 32 ++++++++++++++++++++++++++++++++ toys/pending/setenforce.c | 32 -------------------------------- 2 files changed, 32 insertions(+), 32 deletions(-) create mode 100644 toys/android/setenforce.c delete mode 100644 toys/pending/setenforce.c diff --git a/toys/android/setenforce.c b/toys/android/setenforce.c new file mode 100644 index 00000000..68957465 --- /dev/null +++ b/toys/android/setenforce.c @@ -0,0 +1,32 @@ +/* setenforce.c - Set the current SELinux mode + * + * Copyright 2014 The Android Open Source Project + +USE_SETENFORCE(NEWTOY(setenforce, "<1", TOYFLAG_USR|TOYFLAG_SBIN)) + +config SETENFORCE + bool "setenforce" + default y + depends on TOYBOX_SELINUX + help + usage: setenforce [enforcing|permissive|1|0] + + Sets whether SELinux is enforcing (1) or permissive (0). +*/ + +#define FOR_setenforce +#include "toys.h" + +void setenforce_main(void) +{ + char *new = *toys.optargs; + int state, ret; + + if (!is_selinux_enabled()) error_exit("SELinux is disabled"); + else if (!strcmp(new, "1") || !strcasecmp(new, "enforcing")) state = 1; + else if (!strcmp(new, "0") || !strcasecmp(new, "permissive")) state = 0; + else error_exit("Invalid state: %s", new); + + ret = security_setenforce(state); + if (ret == -1) perror_msg("Couldn't set enforcing status to '%s'", new); +} diff --git a/toys/pending/setenforce.c b/toys/pending/setenforce.c deleted file mode 100644 index 7d3d3801..00000000 --- a/toys/pending/setenforce.c +++ /dev/null @@ -1,32 +0,0 @@ -/* setenforce.c - Set the current SELinux mode - * - * Copyright 2014 The Android Open Source Project - -USE_SETENFORCE(NEWTOY(setenforce, "<1", TOYFLAG_USR|TOYFLAG_SBIN)) - -config SETENFORCE - bool "setenforce" - default n - depends on TOYBOX_SELINUX - help - usage: setenforce [enforcing|permissive|1|0] - - Sets whether SELinux is enforcing (1) or permissive (0). -*/ - -#define FOR_setenforce -#include "toys.h" - -void setenforce_main(void) -{ - char *new = *toys.optargs; - int state, ret; - - if (!is_selinux_enabled()) error_exit("SELinux is disabled"); - else if (!strcmp(new, "1") || !strcasecmp(new, "enforcing")) state = 1; - else if (!strcmp(new, "0") || !strcasecmp(new, "permissive")) state = 0; - else error_exit("Invalid state: %s", new); - - ret = security_setenforce(state); - if (ret == -1) perror_msg("Couldn't set enforcing status to '%s'", new); -} -- cgit v1.2.3