SELinux: load_policy applet

4 files changed, 13 insertions, 0 deletions

diff --git a/include/applets.h b/include/applets.h
index 3aaf011eb..3f5bf9bde 100644
--- a/include/applets.h
+++ b/include/applets.h
@@ -180,6 +180,7 @@ USE_SETARCH(APPLET_NOUSAGE(linux32, setarch, _BB_DIR_BIN, _BB_SUID_NEVER))
 USE_SETARCH(APPLET_NOUSAGE(linux64, setarch, _BB_DIR_BIN, _BB_SUID_NEVER))
 USE_FEATURE_INITRD(APPLET_NOUSAGE(linuxrc, init, _BB_DIR_ROOT, _BB_SUID_NEVER))
 USE_LN(APPLET(ln, _BB_DIR_BIN, _BB_SUID_NEVER))
+USE_LOAD_POLICY(APPLET(load_policy, _BB_DIR_USR_SBIN, _BB_SUID_NEVER))
 USE_LOADFONT(APPLET(loadfont, _BB_DIR_USR_BIN, _BB_SUID_NEVER))
 USE_LOADKMAP(APPLET(loadkmap, _BB_DIR_SBIN, _BB_SUID_NEVER))
 USE_LOGGER(APPLET(logger, _BB_DIR_USR_BIN, _BB_SUID_NEVER))
diff --git a/include/usage.h b/include/usage.h
index 615ee4ed7..7adc1fc78 100644
--- a/include/usage.h
+++ b/include/usage.h
@@ -1758,6 +1758,10 @@
        "$ ls -l /tmp/ls\n" \
        "lrwxrwxrwx    1 root     root            7 Apr 12 18:39 ls -> BusyBox*\n"
 
+#define load_policy_trivial_usage \
+       "[FILE]"
+#define load_policy_full_usage
+
 #define loadfont_trivial_usage \
        "< font"
 #define loadfont_full_usage \
diff --git a/selinux/Config.in b/selinux/Config.in
index 6c08e51b7..42bca66d6 100644
--- a/selinux/Config.in
+++ b/selinux/Config.in
@@ -34,6 +34,13 @@ config GETSEBOOL
         help
           Enable support to get SELinux boolean values.
 
+config LOAD_POLICY
+        bool "load_policy"
+        default n
+        depends on SELINUX
+        help
+          Enable support to load SELinux policy.
+
 config MATCHPATHCON
         bool "matchpathcon"
         default n
diff --git a/selinux/Kbuild b/selinux/Kbuild
index 398d1368d..09cae4d2d 100644
--- a/selinux/Kbuild
+++ b/selinux/Kbuild
@@ -9,6 +9,7 @@ lib-y:=
 lib-$(CONFIG_CHCON)             += chcon.o
 lib-$(CONFIG_GETENFORCE)        += getenforce.o
 lib-$(CONFIG_GETSEBOOL)         += getsebool.o
+lib-$(CONFIG_LOAD_POLICY)       += load_policy.o
 lib-$(CONFIG_MATCHPATHCON)      += matchpathcon.o
 lib-$(CONFIG_RUNCON)            += runcon.o
 lib-$(CONFIG_SELINUXENABLED)    += selinuxenabled.o