#include <unistd.h>
|
#include <fcntl.h>
|
#include <string.h>
|
#include "selinux_internal.h"
|
#include <stdlib.h>
|
#include <errno.h>
|
#include <limits.h>
|
#include <stdio.h>
|
#include "policy.h"
|
|
int is_selinux_enabled(void)
|
{
|
/* init_selinuxmnt() gets called before this function. We
|
* will assume that if a selinux file system is mounted, then
|
* selinux is enabled. */
|
#ifdef ANDROID
|
return (selinux_mnt ? 1 : 0);
|
#else
|
return (selinux_mnt && has_selinux_config);
|
#endif
|
}
|
|
hidden_def(is_selinux_enabled)
|
|
/*
|
* Function: is_selinux_mls_enabled()
|
* Return: 1 on success
|
* 0 on failure
|
*/
|
int is_selinux_mls_enabled(void)
|
{
|
char buf[20], path[PATH_MAX];
|
int fd, ret, enabled = 0;
|
|
if (!selinux_mnt)
|
return enabled;
|
|
snprintf(path, sizeof path, "%s/mls", selinux_mnt);
|
fd = open(path, O_RDONLY | O_CLOEXEC);
|
if (fd < 0)
|
return enabled;
|
|
memset(buf, 0, sizeof buf);
|
|
do {
|
ret = read(fd, buf, sizeof buf - 1);
|
} while (ret < 0 && errno == EINTR);
|
close(fd);
|
if (ret < 0)
|
return enabled;
|
|
if (!strcmp(buf, "1"))
|
enabled = 1;
|
|
return enabled;
|
}
|
|
hidden_def(is_selinux_mls_enabled)
|
