xref: /aosp_15_r20/system/sepolicy/tools/sepolicy-analyze/utils.c (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)

#include <fcntl.h>
#include <sepol/policydb/policydb.h>
#include <sepol/policydb/util.h>
#include <sys/mman.h>
#include <sys/stat.h>
#include <unistd.h>

#include "utils.h"

bool USAGE_ERROR = false;

void display_allow(policydb_t *policydb, avtab_key_t *key, int idx, uint32_t perms)
{
    printf("    allow %s %s:%s { %s };\n",
           policydb->p_type_val_to_name[key->source_type
                                        ? key->source_type - 1 : idx],
           key->target_type == key->source_type ? "self" :
           policydb->p_type_val_to_name[key->target_type
                                        ? key->target_type - 1 : idx],
           policydb->p_class_val_to_name[key->target_class - 1],
           sepol_av_to_string
           (policydb, key->target_class, perms));
}

bool load_policy(char *filename, policydb_t * policydb, struct policy_file *pf)
{
    int fd = -1;
    struct stat sb;
    void *map = MAP_FAILED;
    bool ret = false;

    fd = open(filename, O_RDONLY);
    if (fd < 0) {
        fprintf(stderr, "Can't open '%s':  %s\n", filename, strerror(errno));
        goto cleanup;
    }
    if (fstat(fd, &sb) < 0) {
        fprintf(stderr, "Can't stat '%s':  %s\n", filename, strerror(errno));
        goto cleanup;
    }
    map = mmap(NULL, sb.st_size, PROT_READ | PROT_WRITE, MAP_PRIVATE, fd, 0);
    if (map == MAP_FAILED) {
        fprintf(stderr, "Can't mmap '%s':  %s\n", filename, strerror(errno));
        goto cleanup;
    }

    policy_file_init(pf);
    pf->type = PF_USE_MEMORY;
    pf->data = map;
    pf->len = sb.st_size;
    if (policydb_init(policydb)) {
        fprintf(stderr, "Could not initialize policydb!\n");
        goto cleanup;
    }
    if (policydb_read(policydb, pf, 0)) {
        fprintf(stderr, "error(s) encountered while parsing configuration\n");
        goto cleanup;
    }

    ret = true;

cleanup:
    if (map != MAP_FAILED) {
        munmap(map, sb.st_size);
    }
    if (fd >= 0) {
        close(fd);
    }
    return ret;
}