diff options
| author | Stephen Smalley <sds@tycho.nsa.gov> | 2016-11-18 09:48:25 -0500 |
|---|---|---|
| committer | Stephen Smalley <sds@tycho.nsa.gov> | 2016-11-18 09:48:25 -0500 |
| commit | a609434b95fb5aaee9da24d2e98be7eea741b040 (patch) | |
| tree | ec9243e5b61c1fa3ded701acd7e76002224984b3 /libselinux/src/getenforce.c | |
| parent | 9140de74cf3f156c7aa4e7e65882288bf3e388df (diff) | |
| download | android_external_selinux-a609434b95fb5aaee9da24d2e98be7eea741b040.tar.gz android_external_selinux-a609434b95fb5aaee9da24d2e98be7eea741b040.tar.bz2 android_external_selinux-a609434b95fb5aaee9da24d2e98be7eea741b040.zip | |
libselinux: normalize enforce values from the kernel
Normalize enforce values received from the kernel via
/sys/fs/selinux/enforce or netlink selinux notifications
to ensure that we always return a 0 or 1 to userspace code.
selinux_status_getenforce(), which reads the enforce value
via the SELinux kernel status page (/sys/fs/selinux/status)
already normalizes its result, so we do not need to update it.
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Diffstat (limited to 'libselinux/src/getenforce.c')
| -rw-r--r-- | libselinux/src/getenforce.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libselinux/src/getenforce.c b/libselinux/src/getenforce.c index 4fb516a6..03d3abc5 100644 --- a/libselinux/src/getenforce.c +++ b/libselinux/src/getenforce.c @@ -34,7 +34,7 @@ int security_getenforce(void) if (sscanf(buf, "%d", &enforce) != 1) return -1; - return enforce; + return !!enforce; } hidden_def(security_getenforce) |