libselinux/utils: introduce getpolicyload

Commit Message

Christian Göttsche July 6, 2023, 1:48 p.m. UTC

Introduce a helper binary to print the number of policy reloads on the
running system.
Print only a single number to ease the usage by scripts.

Signed-off-by: Christian Göttsche <[e-mail]>
---
 libselinux/utils/getpolicyload.c | 29 +++++++++++++++++++++++++++++
 1 file changed, 29 insertions(+)
 create mode 100644 libselinux/utils/getpolicyload.c

Comments

James Carter July 11, 2023, 5:03 p.m. UTC | #1

On Thu, Jul 6, 2023 at 9:58 AM Christian Göttsche
<[e-mail]> wrote:
>
> Introduce a helper binary to print the number of policy reloads on the
> running system.
> Print only a single number to ease the usage by scripts.
>
> Signed-off-by: Christian Göttsche <[e-mail]>
> ---
>  libselinux/utils/getpolicyload.c | 29 +++++++++++++++++++++++++++++
>  1 file changed, 29 insertions(+)
>  create mode 100644 libselinux/utils/getpolicyload.c
>
> diff --git a/libselinux/utils/getpolicyload.c b/libselinux/utils/getpolicyload.c
> new file mode 100644
> index 00000000..53217ff5
> --- /dev/null
> +++ b/libselinux/utils/getpolicyload.c
> @@ -0,0 +1,29 @@
> +#include <stdio.h>
> +#include <stdlib.h>
> +
> +#include <selinux/avc.h>
> +
> +
> +int main() {

Should be:
int main(int argc __attribute__ ((unused)), char* argv[] __attribute__
((unused))) {

> +        int rc;
> +
> +       /*

Extra whitespace after the "*"


> +        * Do not use netlink as fallback, since selinux_status_policyload(3)
> +        * works only after a first message has been received.
> +        */
> +        rc = selinux_status_open(/*fallback=*/0);
> +        if (rc < 0) {
> +                fprintf(stderr, "getpolicyload:  failed to open SELinux status map:  %m\n");

You should just use argv[0] here.

> +                return EXIT_FAILURE;
> +        }
> +
> +        rc = selinux_status_policyload();
> +        if (rc < 0)
> +                fprintf(stderr, "getpolicyload:  failed to read policyload from SELinux status page:  %m\n");

You should just use argv[0] here as well.

Thanks,
Jim


> +        else
> +                printf("%d\n", rc);
> +
> +        selinux_status_close();
> +
> +        return (rc < 0) ? EXIT_FAILURE : EXIT_SUCCESS;
> +}
> --
> 2.40.1
>

Patch

diff --git a/libselinux/utils/getpolicyload.c b/libselinux/utils/getpolicyload.c
new file mode 100644
index 00000000..53217ff5
--- /dev/null
+++ b/libselinux/utils/getpolicyload.c
@@ -0,0 +1,29 @@ 
+#include <stdio.h>
+#include <stdlib.h>
+
+#include <selinux/avc.h>
+
+
+int main() {
+        int rc;
+
+	/* 
+	 * Do not use netlink as fallback, since selinux_status_policyload(3)
+	 * works only after a first message has been received.
+	 */
+        rc = selinux_status_open(/*fallback=*/0);
+        if (rc < 0) {
+                fprintf(stderr, "getpolicyload:  failed to open SELinux status map:  %m\n");
+                return EXIT_FAILURE;
+        }
+
+        rc = selinux_status_policyload();
+        if (rc < 0)
+                fprintf(stderr, "getpolicyload:  failed to read policyload from SELinux status page:  %m\n");
+        else
+                printf("%d\n", rc);
+
+        selinux_status_close();
+
+        return (rc < 0) ? EXIT_FAILURE : EXIT_SUCCESS;
+}