new applets: selinux utils by KaiGai Kohei <kaigai@kaigai.gr.jp>

1 files changed, 33 insertions, 0 deletions

diff --git a/selinux/getenforce.c b/selinux/getenforce.c
new file mode 100644
index 000000000..e240e4dca
--- /dev/null
+++ b/selinux/getenforce.c
@@ -0,0 +1,33 @@
+/*
+ * getenforce
+ *
+ * Based on libselinux 1.33.1
+ * Port to BusyBox  Hiroshi Shinji <shiroshi@my.email.ne.jp>
+ *
+ */
+
+#include "busybox.h"
+
+int getenforce_main(int argc, char **argv)
+{
+        int rc;
+
+        rc = is_selinux_enabled();
+        if (rc < 0)
+                bb_error_msg_and_die("is_selinux_enabled() failed");
+
+        if (rc == 1) {
+                rc = security_getenforce();
+                if (rc < 0)
+                        bb_error_msg_and_die("getenforce() failed");
+
+                if (rc)
+                        puts("Enforcing");
+                else
+                        puts("Permissive");
+        } else {
+                puts("Disabled");
+        }
+
+        return 0;
+}