1 #include <unistd.h>
2 #include <fcntl.h>
3 #include <string.h>
4 #include "selinux_internal.h"
5 #include <stdlib.h>
6 #include <errno.h>
7 #include <limits.h>
8 #include <stdio.h>
9 #include "policy.h"
10
is_selinux_enabled(void)11 int is_selinux_enabled(void)
12 {
13 char buf[BUFSIZ];
14 FILE *fp;
15 char *bufp;
16 int enabled = 0;
17 char * con;
18
19 /* init_selinuxmnt() gets called before this function. We
20 * will assume that if a selinux file system is mounted, then
21 * selinux is enabled. */
22 if (selinux_mnt) {
23
24 /* Since a file system is mounted, we consider selinux
25 * enabled. If getcon fails, selinux is still enabled.
26 * We only consider it disabled if no policy is loaded. */
27 enabled = 1;
28 if (getcon(&con) == 0) {
29 if (!strcmp(con, "kernel"))
30 enabled = 0;
31 freecon(con);
32 }
33 return enabled;
34 }
35
36 /* Drop back to detecting it the long way. */
37 fp = fopen("/proc/filesystems", "r");
38 if (!fp)
39 return -1;
40
41 while ((bufp = fgets(buf, sizeof buf - 1, fp)) != NULL) {
42 if (strstr(buf, "selinuxfs")) {
43 enabled = 1;
44 break;
45 }
46 }
47
48 if (!bufp)
49 goto out;
50
51 /* Since an selinux file system is available, we consider
52 * selinux enabled. If getcon fails, selinux is still
53 * enabled. We only consider it disabled if no policy is loaded. */
54 if (getcon(&con) == 0) {
55 if (!strcmp(con, "kernel"))
56 enabled = 0;
57 freecon(con);
58 }
59
60 out:
61 fclose(fp);
62 return enabled;
63 }
64
hidden_def(is_selinux_enabled)65 hidden_def(is_selinux_enabled)
66
67 /*
68 * Function: is_selinux_mls_enabled()
69 * Return: 1 on success
70 * 0 on failure
71 */
72 int is_selinux_mls_enabled(void)
73 {
74 char buf[20], path[PATH_MAX];
75 int fd, ret, enabled = 0;
76
77 if (!selinux_mnt)
78 return enabled;
79
80 snprintf(path, sizeof path, "%s/mls", selinux_mnt);
81 fd = open(path, O_RDONLY);
82 if (fd < 0)
83 return enabled;
84
85 memset(buf, 0, sizeof buf);
86
87 do {
88 ret = read(fd, buf, sizeof buf - 1);
89 } while (ret < 0 && errno == EINTR);
90 close(fd);
91 if (ret < 0)
92 return enabled;
93
94 if (!strcmp(buf, "1"))
95 enabled = 1;
96
97 return enabled;
98 }
99
100 hidden_def(is_selinux_mls_enabled)
101