18290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley#include <unistd.h> 28290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley#include <stdio.h> 38290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley#include <stdlib.h> 48290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley#include <ctype.h> 58290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley#include <string.h> 68290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley#include <strings.h> 78290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley#include <errno.h> 88290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley#include <selinux/selinux.h> 98290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley 10492051ed2a06ea902d7b7e8ba1998121ced9b0beMatt Finifterstatic void usage(const char *progname) 118290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley{ 128290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley fprintf(stderr, "usage: %s [ Enforcing | Permissive | 1 | 0 ]\n", 138290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley progname); 148290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley exit(1); 158290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley} 168290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley 178290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalleyint setenforce_main(int argc, char **argv) 188290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley{ 198290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley int rc = 0; 208290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley if (argc != 2) { 218290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley usage(argv[0]); 228290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley } 238290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley 248290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley if (is_selinux_enabled() <= 0) { 258290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley fprintf(stderr, "%s: SELinux is disabled\n", argv[0]); 268290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley return 1; 278290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley } 288290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley if (strlen(argv[1]) == 1 && (argv[1][0] == '0' || argv[1][0] == '1')) { 298290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley rc = security_setenforce(atoi(argv[1])); 308290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley } else { 318290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley if (strcasecmp(argv[1], "enforcing") == 0) { 328290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley rc = security_setenforce(1); 338290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley } else if (strcasecmp(argv[1], "permissive") == 0) { 348290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley rc = security_setenforce(0); 358290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley } else 368290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley usage(argv[0]); 378290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley } 388290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley if (rc < 0) { 398290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley fprintf(stderr, "%s: Could not set enforcing status: %s\n", 408290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley argv[0], strerror(errno)); 418290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley return 2; 428290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley } 438290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley return 0; 448290d1083ec7eee3f32265012f5d6be2774c4afcStephen Smalley} 45