mirror of
https://github.com/xen-project/xen.git
synced 2026-10-29 18:50:05 +01:00
Daniel De Graaf
9e68bb1b66
These utilities can be used to modify policy booleans, which allow minor policy changes without reloading the security policy. This can be used to make security policy change based on external information such as time of day, user physical presence, completion of system boot, or other relevant variables. Signed-off-by: Daniel De Graaf <dgdegra@tycho.nsa.gov> Committed-by: Keir Fraser <keir@xen.org>
73 lines
1.5 KiB
C
73 lines
1.5 KiB
C
/*
|
|
* Author: Daniel De Graaf <dgdegra@tycho.nsa.gov>
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License version 2,
|
|
* as published by the Free Software Foundation.
|
|
*/
|
|
|
|
#include <stdlib.h>
|
|
#include <errno.h>
|
|
#include <stdio.h>
|
|
#include <xenctrl.h>
|
|
#include <fcntl.h>
|
|
#include <sys/mman.h>
|
|
#include <sys/stat.h>
|
|
#include <string.h>
|
|
#include <unistd.h>
|
|
#include <inttypes.h>
|
|
#include <libflask.h>
|
|
|
|
static void usage(char **argv)
|
|
{
|
|
fprintf(stderr, "Usage: %s name value\n", argv[0]);
|
|
exit(1);
|
|
}
|
|
|
|
static int str2bool(const char *str)
|
|
{
|
|
if (str[0] == '0' || str[0] == '1')
|
|
return (str[0] == '1');
|
|
if (!strcasecmp(str, "enabled") || !strcasecmp(str, "on") || !strcasecmp(str, "y"))
|
|
return 1;
|
|
if (!strcasecmp(str, "disabled") || !strcasecmp(str, "off") || !strcasecmp(str, "n"))
|
|
return 0;
|
|
fprintf(stderr, "Unknown value %s\n", str);
|
|
exit(1);
|
|
}
|
|
|
|
int main(int argc, char **argv)
|
|
{
|
|
int err = 0;
|
|
xc_interface *xch;
|
|
int value;
|
|
|
|
if (argc != 3)
|
|
usage(argv);
|
|
|
|
value = str2bool(argv[2]);
|
|
|
|
xch = xc_interface_open(0,0,0);
|
|
if ( !xch )
|
|
{
|
|
fprintf(stderr, "Unable to create interface to xenctrl: %s\n",
|
|
strerror(errno));
|
|
err = 1;
|
|
goto done;
|
|
}
|
|
|
|
err = flask_setbool(xch, argv[1], value, 1);
|
|
if (err) {
|
|
fprintf(stderr, "flask_setbool: Unable to set boolean %s=%s: %s (%d)",
|
|
argv[1], argv[2], strerror(errno), err);
|
|
err = 2;
|
|
goto done;
|
|
}
|
|
|
|
done:
|
|
if ( xch )
|
|
xc_interface_close(xch);
|
|
|
|
return err;
|
|
}
|