selinux/getenforce.c

   1 /*
   2  * getenforce
   3  *
   4  * Based on libselinux 1.33.1
   5  * Port to BusyBox  Hiroshi Shinji <shiroshi@my.email.ne.jp>
   6  *
   7  */
   8
   9 #include "busybox.h"
  10
  11 int getenforce_main(int argc, char **argv)
  12 {
  13         int rc;
  14
  15         rc = is_selinux_enabled();
  16         if (rc < 0)
  17                 bb_error_msg_and_die("is_selinux_enabled() failed");
  18
  19         if (rc == 1) {
  20                 rc = security_getenforce();
  21                 if (rc < 0)
  22                         bb_error_msg_and_die("getenforce() failed");
  23
  24                 if (rc)
  25                         puts("Enforcing");
  26                 else
  27                         puts("Permissive");
  28         } else {
  29                 puts("Disabled");
  30         }
  31
  32         return 0;
  33 }