ba1ce16b8b
In Android S preview, there’s no 32-bit libraries in x86_64 system image for emulator. Signed-off-by: Shaka Huang <shakalaca@gmail.com>
121 lines
3.2 KiB
C++
121 lines
3.2 KiB
C++
#include <sys/xattr.h>
|
|
|
|
#include <utils.hpp>
|
|
#include <selinux.hpp>
|
|
|
|
using namespace std;
|
|
|
|
// Stub implementation
|
|
|
|
static int stub(const char *) { return 0; }
|
|
|
|
static int stub(const char *, const char *) { return 0; }
|
|
|
|
static int stub(const char *, char **ctx) {
|
|
*ctx = strdup("");
|
|
return 0;
|
|
}
|
|
|
|
static int stub(int, const char *) { return 0; }
|
|
|
|
static int stub(int, char **ctx) {
|
|
*ctx = strdup("");
|
|
return 0;
|
|
}
|
|
|
|
// Builtin implementation
|
|
|
|
static void __freecon(char *s) {
|
|
free(s);
|
|
}
|
|
|
|
static int __setcon(const char *ctx) {
|
|
int fd = open("/proc/self/attr/current", O_WRONLY | O_CLOEXEC);
|
|
if (fd < 0)
|
|
return fd;
|
|
size_t len = strlen(ctx) + 1;
|
|
int rc = write(fd, ctx, len);
|
|
close(fd);
|
|
return rc != len;
|
|
}
|
|
|
|
static int __getfilecon(const char *path, char **ctx) {
|
|
char buf[1024];
|
|
int rc = syscall(__NR_getxattr, path, XATTR_NAME_SELINUX, buf, sizeof(buf) - 1);
|
|
if (rc >= 0)
|
|
*ctx = strdup(buf);
|
|
return rc;
|
|
}
|
|
|
|
static int __lgetfilecon(const char *path, char **ctx) {
|
|
char buf[1024];
|
|
int rc = syscall(__NR_lgetxattr, path, XATTR_NAME_SELINUX, buf, sizeof(buf) - 1);
|
|
if (rc >= 0)
|
|
*ctx = strdup(buf);
|
|
return rc;
|
|
}
|
|
|
|
static int __fgetfilecon(int fd, char **ctx) {
|
|
char buf[1024];
|
|
int rc = syscall(__NR_fgetxattr, fd, XATTR_NAME_SELINUX, buf, sizeof(buf) - 1);
|
|
if (rc >= 0)
|
|
*ctx = strdup(buf);
|
|
return rc;
|
|
}
|
|
|
|
static int __setfilecon(const char *path, const char *ctx) {
|
|
return syscall(__NR_setxattr, path, XATTR_NAME_SELINUX, ctx, strlen(ctx) + 1, 0);
|
|
}
|
|
|
|
static int __lsetfilecon(const char *path, const char *ctx) {
|
|
return syscall(__NR_lsetxattr, path, XATTR_NAME_SELINUX, ctx, strlen(ctx) + 1, 0);
|
|
}
|
|
|
|
static int __fsetfilecon(int fd, const char *ctx) {
|
|
return syscall(__NR_fsetxattr, fd, XATTR_NAME_SELINUX, ctx, strlen(ctx) + 1, 0);
|
|
}
|
|
|
|
// Function pointers
|
|
|
|
void (*freecon)(char *) = __freecon;
|
|
int (*setcon)(const char *) = stub;
|
|
int (*getfilecon)(const char *, char **) = stub;
|
|
int (*lgetfilecon)(const char *, char **) = stub;
|
|
int (*fgetfilecon)(int, char **) = stub;
|
|
int (*setfilecon)(const char *, const char *) = stub;
|
|
int (*lsetfilecon)(const char *, const char *) = stub;
|
|
int (*fsetfilecon)(int, const char *) = stub;
|
|
|
|
void getfilecon_at(int dirfd, const char *name, char **con) {
|
|
char path[4096];
|
|
fd_pathat(dirfd, name, path, sizeof(path));
|
|
if (lgetfilecon(path, con))
|
|
*con = strdup("");
|
|
}
|
|
|
|
void setfilecon_at(int dirfd, const char *name, const char *con) {
|
|
char path[4096];
|
|
fd_pathat(dirfd, name, path, sizeof(path));
|
|
lsetfilecon(path, con);
|
|
}
|
|
|
|
void selinux_builtin_impl() {
|
|
setcon = __setcon;
|
|
getfilecon = __getfilecon;
|
|
lgetfilecon = __lgetfilecon;
|
|
fgetfilecon = __fgetfilecon;
|
|
setfilecon = __setfilecon;
|
|
lsetfilecon = __lsetfilecon;
|
|
fsetfilecon = __fsetfilecon;
|
|
}
|
|
|
|
void dload_selinux() {
|
|
if (access("/system/lib/libselinux.so", F_OK) && access("/system/lib64/libselinux.so", F_OK))
|
|
return;
|
|
/* We only check whether libselinux.so exists but don't dlopen.
|
|
* For some reason calling symbols returned from dlsym
|
|
* will result to SEGV_ACCERR on some devices.
|
|
* Always use builtin implementations for SELinux stuffs. */
|
|
selinux_builtin_impl();
|
|
}
|