1#include <unistd.h>
2#include <fcntl.h>
3#include <string.h>
4#include "selinux_internal.h"
5#include <stdlib.h>
6#include <errno.h>
7#include <limits.h>
8#include <stdio.h>
9#include "policy.h"
10
11int is_selinux_enabled(void)
12{
13	char buf[BUFSIZ];
14	FILE *fp;
15	char *bufp;
16	int enabled = 0;
17	char * con;
18
19	/* init_selinuxmnt() gets called before this function. We
20 	 * will assume that if a selinux file system is mounted, then
21 	 * selinux is enabled. */
22	if (selinux_mnt) {
23
24		/* Since a file system is mounted, we consider selinux
25		 * enabled. If getcon fails, selinux is still enabled.
26		 * We only consider it disabled if no policy is loaded. */
27		enabled = 1;
28		if (getcon(&con) == 0) {
29			if (!strcmp(con, "kernel"))
30				enabled = 0;
31			freecon(con);
32		}
33		return enabled;
34        }
35
36	/* Drop back to detecting it the long way. */
37	fp = fopen("/proc/filesystems", "r");
38	if (!fp)
39		return -1;
40
41	while ((bufp = fgets(buf, sizeof buf - 1, fp)) != NULL) {
42		if (strstr(buf, "selinuxfs")) {
43			enabled = 1;
44			break;
45		}
46	}
47
48	if (!bufp)
49		goto out;
50
51	/* Since an selinux file system is available, we consider
52	 * selinux enabled. If getcon fails, selinux is still
53	 * enabled. We only consider it disabled if no policy is loaded. */
54	if (getcon(&con) == 0) {
55		if (!strcmp(con, "kernel"))
56			enabled = 0;
57		freecon(con);
58	}
59
60      out:
61	fclose(fp);
62	return enabled;
63}
64
65hidden_def(is_selinux_enabled)
66
67/*
68 * Function: is_selinux_mls_enabled()
69 * Return:   1 on success
70 *	     0 on failure
71 */
72int is_selinux_mls_enabled(void)
73{
74	char buf[20], path[PATH_MAX];
75	int fd, ret, enabled = 0;
76
77	if (!selinux_mnt)
78		return enabled;
79
80	snprintf(path, sizeof path, "%s/mls", selinux_mnt);
81	fd = open(path, O_RDONLY);
82	if (fd < 0)
83		return enabled;
84
85	memset(buf, 0, sizeof buf);
86
87	do {
88		ret = read(fd, buf, sizeof buf - 1);
89	} while (ret < 0 && errno == EINTR);
90	close(fd);
91	if (ret < 0)
92		return enabled;
93
94	if (!strcmp(buf, "1"))
95		enabled = 1;
96
97	return enabled;
98}
99
100hidden_def(is_selinux_mls_enabled)
101