/* * Copyright (C) 2014 Tresys Technology, LLC * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA * 02110-1301, USA. */ #include <errno.h> #include <getopt.h> #include <libgen.h> #include <signal.h> #include <stdarg.h> #include <stdlib.h> #include <string.h> #include <unistd.h> #include <sepol/module.h> #include <sepol/module_to_cil.h> char *progname; __attribute__ ((format(printf, 1, 2))) static void log_err(const char *fmt, ...) { va_list argptr; va_start(argptr, fmt); if (vfprintf(stderr, fmt, argptr) < 0) { _exit(EXIT_FAILURE); } va_end(argptr); if (fprintf(stderr, "\n") < 0) { _exit(EXIT_FAILURE); } } static void usage(int err) { fprintf(stderr, "Usage: %s [OPTIONS] [IN_FILE [OUT_FILE]]\n", progname); fprintf(stderr, "\n"); fprintf(stderr, "Read an SELinux policy package (.pp) and output the equivilent CIL.\n"); fprintf(stderr, "If IN_FILE is not provided or is -, read SELinux policy package from\n"); fprintf(stderr, "standard input. If OUT_FILE is not provided or is -, output CIL to\n"); fprintf(stderr, "standard output.\n"); fprintf(stderr, "\n"); fprintf(stderr, "Options:\n"); fprintf(stderr, " -h, --help print this message and exit\n"); exit(err); } int main(int argc, char **argv) { int rc = -1; int opt; static struct option long_opts[] = { { "help", 0, NULL, 'h' }, { NULL, 0, NULL, 0 } }; struct sepol_module_package *mod_pkg = NULL; FILE *in = NULL; FILE *out = NULL; int outfd = -1; // ignore sigpipe so we can check the return code of write, and potentially // return a more helpful error message signal(SIGPIPE, SIG_IGN); progname = basename(argv[0]); while ((opt = getopt_long(argc, argv, "h", long_opts, NULL)) != -1) { switch (opt) { case 'h': usage(0); case '?': default: usage(1); } } if (argc >= optind + 1 && strcmp(argv[1], "-") != 0) { in = fopen(argv[1], "rb"); if (in == NULL) { log_err("Failed to open %s: %s", argv[1], strerror(errno)); rc = -1; goto exit; } } else { in = stdin; } if (argc >= optind + 2 && strcmp(argv[2], "-") != 0) { out = fopen(argv[2], "w"); if (out == NULL) { log_err("Failed to open %s: %s", argv[2], strerror(errno)); rc = -1; goto exit; } } else { out = stdout; } if (argc >= optind + 3) { log_err("Too many arguments"); usage(1); } rc = sepol_ppfile_to_module_package(in, &mod_pkg); if (rc != 0) { goto exit; } fclose(in); in = NULL; rc = sepol_module_package_to_cil(out, mod_pkg); if (rc != 0) { goto exit; } exit: if (in != NULL) { fclose(in); } if (out != NULL) { fclose(out); } if (outfd != -1) { close(outfd); if (rc != 0) { unlink(argv[2]); } } sepol_module_package_free(mod_pkg); return rc; }