selinux/getenforce.c

   1 /*
   2  * getenforce
   3  *
   4  * Based on libselinux 1.33.1
   5  * Port to BusyBox  Hiroshi Shinji <shiroshi@my.email.ne.jp>
   6  *
   7  * Licensed under GPLv2, see file LICENSE in this tarball for details.
   8  */
   9
  10 #include "libbb.h"
  11
  12 int getenforce_main(int argc, char **argv) MAIN_EXTERNALLY_VISIBLE;
  13 int getenforce_main(int argc UNUSED_PARAM, char **argv UNUSED_PARAM)
  14 {
  15         int rc;
  16
  17         rc = is_selinux_enabled();
  18         if (rc < 0)
  19                 bb_error_msg_and_die("is_selinux_enabled() failed");
  20
  21         if (rc == 1) {
  22                 rc = security_getenforce();
  23                 if (rc < 0)
  24                         bb_error_msg_and_die("getenforce() failed");
  25
  26                 if (rc)
  27                         puts("Enforcing");
  28                 else
  29                         puts("Permissive");
  30         } else {
  31                 puts("Disabled");
  32         }
  33
  34         return 0;
  35 }