blob: 32832bb541707e1d9265b01d3369066d3bbb21a1 [file] [log] [blame]
#include <stdlib.h>
#include "private.h"
#include "debug.h"
#include <sepol/policydb/policydb.h>
/* Construct a policydb from the supplied (data, len) pair */
int policydb_from_image(sepol_handle_t * handle,
void *data, size_t len, policydb_t * policydb)
{
policy_file_t pf;
policy_file_init(&pf);
pf.type = PF_USE_MEMORY;
pf.data = data;
pf.len = len;
pf.handle = handle;
if (policydb_read(policydb, &pf, 0)) {
ERR(handle, "policy image is invalid");
errno = EINVAL;
return STATUS_ERR;
}
return STATUS_SUCCESS;
}
/* Write a policydb to a memory region, and return the (data, len) pair. */
int policydb_to_image(sepol_handle_t * handle,
policydb_t * policydb, void **newdata, size_t * newlen)
{
void *tmp_data = NULL;
size_t tmp_len;
policy_file_t pf;
struct policydb tmp_policydb;
/* Compute the length for the new policy image. */
policy_file_init(&pf);
pf.type = PF_LEN;
pf.handle = handle;
if (policydb_write(policydb, &pf)) {
ERR(handle, "could not compute policy length");
errno = EINVAL;
goto err;
}
/* Allocate the new policy image. */
pf.type = PF_USE_MEMORY;
pf.data = malloc(pf.len);
if (!pf.data) {
ERR(handle, "out of memory");
goto err;
}
/* Need to save len and data prior to modification by policydb_write. */
tmp_len = pf.len;
tmp_data = pf.data;
/* Write out the new policy image. */
if (policydb_write(policydb, &pf)) {
ERR(handle, "could not write policy");
errno = EINVAL;
goto err;
}
/* Verify the new policy image. */
pf.type = PF_USE_MEMORY;
pf.data = tmp_data;
pf.len = tmp_len;
if (policydb_init(&tmp_policydb)) {
ERR(handle, "Out of memory");
errno = ENOMEM;
goto err;
}
if (policydb_read(&tmp_policydb, &pf, 0)) {
ERR(handle, "new policy image is invalid");
errno = EINVAL;
goto err;
}
policydb_destroy(&tmp_policydb);
/* Update (newdata, newlen) */
*newdata = tmp_data;
*newlen = tmp_len;
/* Recover */
return STATUS_SUCCESS;
err:
ERR(handle, "could not create policy image");
/* Recover */
free(tmp_data);
return STATUS_ERR;
}