mirror of
https://github.com/xen-project/xen.git
synced 2026-10-28 18:21:39 +01:00
kaf24@firebug.cl.cam.ac.uk
a7da7a4ecb
access control module and makes the tools more self-explanatory. Signed-off-by: Stefan Berger <stefanb@us.ibm.com>
134 lines
2.9 KiB
Bash
134 lines
2.9 KiB
Bash
#!/bin/sh
|
|
# *
|
|
# * getlabel
|
|
# *
|
|
# * Copyright (C) 2005 IBM Corporation
|
|
# *
|
|
# * Authors:
|
|
# * Stefan Berger <stefanb@us.ibm.com>
|
|
# *
|
|
# * This program is free software; you can redistribute it and/or
|
|
# * modify it under the terms of the GNU General Public License as
|
|
# * published by the Free Software Foundation, version 2 of the
|
|
# * License.
|
|
# *
|
|
# * 'getlabel' tries to find the labels corresponding to the ssidref
|
|
# *
|
|
# * 'getlabel -?' shows the usage of the program
|
|
# *
|
|
# * 'getlabel -sid <ssidref> [<policy name>]' lists the label corresponding
|
|
# * to the given ssidref.
|
|
# *
|
|
# * 'getlabel -dom <domain id> [<policy name>]' lists the label of the
|
|
# * domain with given id
|
|
# *
|
|
#
|
|
|
|
if [ -z "$runbash" ]; then
|
|
runbash="1"
|
|
export runbash
|
|
exec sh -c "bash $0 $*"
|
|
fi
|
|
|
|
|
|
export PATH=$PATH:.
|
|
source labelfuncs.sh
|
|
|
|
usage ()
|
|
{
|
|
echo "Use this tool to display the label of a domain or the label that is
|
|
corresponding to an ssidref given the name of the running policy.
|
|
|
|
Usage: $0 -sid <ssidref> [<policy name>] or
|
|
$0 -dom <domid> [<policy name>]
|
|
|
|
policy name : the name of the policy, i.e. 'chwall'
|
|
If the policy name is omitted, the grub.conf
|
|
entry of the running system is tried to be read
|
|
and the policy name determined from there.
|
|
ssidref : an ssidref in hex or decimal format, i.e., '0x00010002'
|
|
or '65538'
|
|
domid : id of the domain, i.e., '1'; Use numbers from the 2nd
|
|
column shown when invoking 'xm list'
|
|
"
|
|
}
|
|
|
|
|
|
|
|
if [ "$1" == "-?" ]; then
|
|
mode="usage"
|
|
elif [ "$1" == "-dom" ]; then
|
|
mode="domid"
|
|
shift
|
|
elif [ "$1" == "-sid" ]; then
|
|
mode="sid"
|
|
shift
|
|
elif [ "$1" == "" ]; then
|
|
usage
|
|
exit -1
|
|
fi
|
|
|
|
|
|
if [ "$mode" == "usage" ]; then
|
|
usage
|
|
elif [ "$mode" == "domid" ]; then
|
|
if [ "$2" == "" ]; then
|
|
findGrubConf
|
|
ret=$?
|
|
if [ $ret -eq 0 ]; then
|
|
echo "Could not find grub.conf"
|
|
exit -1;
|
|
fi
|
|
findPolicyInGrub $grubconf
|
|
if [ "$policy" != "" ]; then
|
|
echo "Assuming policy to be '$policy'.";
|
|
else
|
|
echo "Could not find policy."
|
|
exit -1;
|
|
fi
|
|
else
|
|
policy=$2
|
|
fi
|
|
findMapFile $policy
|
|
res=$?
|
|
if [ "$res" != "0" ]; then
|
|
getSSIDUsingSecpolTool $1
|
|
res=$?
|
|
if [ "$res" != "0" ]; then
|
|
translateSSIDREF $ssid $mapfile
|
|
else
|
|
echo "Could not determine the SSID of the domain."
|
|
fi
|
|
else
|
|
echo "Could not find map file for policy '$policy'."
|
|
fi
|
|
elif [ "$mode" == "sid" ]; then
|
|
if [ "$2" == "" ]; then
|
|
findGrubConf
|
|
ret=$?
|
|
if [ $ret -eq 0 ]; then
|
|
echo "Could not find grub.conf"
|
|
exit -1;
|
|
fi
|
|
findPolicyInGrub $grubconf
|
|
if [ "$policy" != "" ]; then
|
|
echo "Assuming policy to be '$policy'.";
|
|
else
|
|
echo "Could not find policy."
|
|
exit -1;
|
|
fi
|
|
else
|
|
policy=$2
|
|
fi
|
|
findMapFile $policy
|
|
res=$?
|
|
if [ "$res" != "0" ]; then
|
|
translateSSIDREF $1 $mapfile
|
|
else
|
|
echo "Could not find map file for policy '$policy'."
|
|
fi
|
|
|
|
else
|
|
usage
|
|
fi
|