1 #include <unistd.h>
2 #include <sys/types.h>
3 #include <fcntl.h>
4 #include <stdlib.h>
5 #include <stdio.h>
6 #include <errno.h>
7 #include <string.h>
8 #include <limits.h>
9 #include "selinux_internal.h"
10 #include "policy.h"
11 #include "mapping.h"
12
security_validatetrans_raw(const char * scon,const char * tcon,security_class_t tclass,const char * newcon)13 int security_validatetrans_raw(const char *scon,
14 const char *tcon,
15 security_class_t tclass,
16 const char *newcon)
17 {
18 char path[PATH_MAX];
19 char *buf = NULL;
20 int size, bufsz;
21 int fd, ret = -1;
22 errno = ENOENT;
23
24 if (!selinux_mnt) {
25 return -1;
26 }
27
28 snprintf(path, sizeof path, "%s/validatetrans", selinux_mnt);
29 fd = open(path, O_WRONLY | O_CLOEXEC);
30 if (fd < 0) {
31 return -1;
32 }
33
34 errno = EINVAL;
35 size = selinux_page_size;
36 buf = malloc(size);
37 if (!buf) {
38 goto out;
39 }
40
41 bufsz = snprintf(buf, size, "%s %s %hu %s", scon, tcon, unmap_class(tclass), newcon);
42 if (bufsz >= size || bufsz < 0) {
43 // It got truncated or there was an encoding error
44 goto out;
45 }
46
47 // clear errno for write()
48 errno = 0;
49 ret = write(fd, buf, strlen(buf));
50 if (ret > 0) {
51 // The kernel returns the bytes written on success, not 0 as noted in the commit message
52 ret = 0;
53 }
54 out:
55 free(buf);
56 close(fd);
57 return ret;
58 }
59
hidden_def(security_validatetrans_raw)60 hidden_def(security_validatetrans_raw)
61
62 int security_validatetrans(const char *scon,
63 const char *tcon,
64 security_class_t tclass,
65 const char *newcon)
66 {
67 int ret = -1;
68 char *rscon = NULL;
69 char *rtcon = NULL;
70 char *rnewcon = NULL;
71
72 if (selinux_trans_to_raw_context(scon, &rscon)) {
73 goto out;
74 }
75
76 if (selinux_trans_to_raw_context(tcon, &rtcon)) {
77 goto out;
78 }
79
80 if (selinux_trans_to_raw_context(newcon, &rnewcon)) {
81 goto out;
82 }
83
84 ret = security_validatetrans_raw(rscon, rtcon, tclass, rnewcon);
85
86 out:
87 freecon(rnewcon);
88 freecon(rtcon);
89 freecon(rscon);
90
91 return ret;
92 }
93
94 hidden_def(security_validatetrans)
95