Restructure the native module

Consolidate all code into the src folder
2026-01-12 13:05:30 -08:00 · 2022-07-23 13:51:56 -07:00
parent c7c9fb9576
commit b9e89a1a2d
198 changed files with 52 additions and 45 deletions
--- a/native/src/sepolicy/main.cpp
+++ b/native/src/sepolicy/main.cpp
@@ -0,0 +1,121 @@
+#include <base.hpp>
+#include <vector>
+
+#include "policy.hpp"
+
+using namespace std;
+
+[[noreturn]] static void usage(char *arg0) {
+    fprintf(stderr,
+R"EOF(MagiskPolicy - SELinux Policy Patch Tool
+
+Usage: %s [--options...] [policy statements...]
+
+Options:
+   --help            show help message for policy statements
+   --load FILE       load monolithic sepolicy from FILE
+   --load-split      load from precompiled sepolicy or compile
+                     split cil policies
+   --compile-split   compile split cil policies
+   --save FILE       dump monolithic sepolicy to FILE
+   --live            immediately load sepolicy into the kernel
+   --magisk          apply built-in Magisk sepolicy rules
+   --apply FILE      apply rules from FILE, read and parsed
+                     line by line as policy statements
+                     (multiple --apply are allowed)
+
+If neither --load, --load-split, nor --compile-split is specified,
+it will load from current live policies (/sys/fs/selinux/policy)
+
+)EOF", arg0);
+    exit(1);
+}
+
+int main(int argc, char *argv[]) {
+    cmdline_logging();
+    const char *out_file = nullptr;
+    vector<string_view> rule_files;
+    sepolicy *sepol = nullptr;
+    bool magisk = false;
+    bool live = false;
+
+    if (argc < 2) usage(argv[0]);
+    int i = 1;
+    for (; i < argc; ++i) {
+        // Parse options
+        if (argv[i][0] == '-' && argv[i][1] == '-') {
+            auto option = argv[i] + 2;
+            if (option == "live"sv)
+                live = true;
+            else if (option == "magisk"sv)
+                magisk = true;
+            else if (option == "load"sv) {
+                if (argv[i + 1] == nullptr)
+                    usage(argv[0]);
+                sepol = sepolicy::from_file(argv[i + 1]);
+                if (!sepol) {
+                    fprintf(stderr, "Cannot load policy from %s\n", argv[i + 1]);
+                    return 1;
+                }
+                ++i;
+            } else if (option == "load-split"sv) {
+                sepol = sepolicy::from_split();
+                if (!sepol) {
+                    fprintf(stderr, "Cannot load split cil\n");
+                    return 1;
+                }
+            } else if (option == "compile-split"sv) {
+                sepol = sepolicy::compile_split();
+                if (!sepol) {
+                    fprintf(stderr, "Cannot compile split cil\n");
+                    return 1;
+                }
+            } else if (option == "save"sv) {
+                if (argv[i + 1] == nullptr)
+                    usage(argv[0]);
+                out_file = argv[i + 1];
+                ++i;
+            } else if (option == "apply"sv) {
+                if (argv[i + 1] == nullptr)
+                    usage(argv[0]);
+                rule_files.emplace_back(argv[i + 1]);
+                ++i;
+            } else if (option == "help"sv) {
+                statement_help();
+            } else {
+                usage(argv[0]);
+            }
+        } else {
+            break;
+        }
+    }
+
+    // Use current policy if nothing is loaded
+    if (sepol == nullptr && !(sepol = sepolicy::from_file(SELINUX_POLICY))) {
+        fprintf(stderr, "Cannot load policy from " SELINUX_POLICY "\n");
+        return 1;
+    }
+
+    if (magisk)
+        sepol->magisk_rules();
+
+    if (!rule_files.empty())
+        for (const auto &rule_file : rule_files)
+            sepol->load_rule_file(rule_file.data());
+
+    for (; i < argc; ++i)
+        sepol->parse_statement(argv[i]);
+
+    if (live && !sepol->to_file(SELINUX_LOAD)) {
+        fprintf(stderr, "Cannot apply policy\n");
+        return 1;
+    }
+
+    if (out_file && !sepol->to_file(out_file)) {
+        fprintf(stderr, "Cannot dump policy to %s\n", out_file);
+        return 1;
+    }
+
+    delete sepol;
+    return 0;
+}