SELinux: load_policy applet

diff --git a/include/applets.h b/include/applets.h
index 3aaf011..3f5bf9b 100644 (file)
--- a/include/applets.h
+++ b/include/applets.h
@@ -180,6 +180,7 @@ USE_SETARCH(APPLET_NOUSAGE(linux32, setarch, _BB_DIR_BIN, _BB_SUID_NEVER))
 USE_SETARCH(APPLET_NOUSAGE(linux64, setarch, _BB_DIR_BIN, _BB_SUID_NEVER))
 USE_FEATURE_INITRD(APPLET_NOUSAGE(linuxrc, init, _BB_DIR_ROOT, _BB_SUID_NEVER))
 USE_LN(APPLET(ln, _BB_DIR_BIN, _BB_SUID_NEVER))
+USE_LOAD_POLICY(APPLET(load_policy, _BB_DIR_USR_SBIN, _BB_SUID_NEVER))
 USE_LOADFONT(APPLET(loadfont, _BB_DIR_USR_BIN, _BB_SUID_NEVER))
 USE_LOADKMAP(APPLET(loadkmap, _BB_DIR_SBIN, _BB_SUID_NEVER))
 USE_LOGGER(APPLET(logger, _BB_DIR_USR_BIN, _BB_SUID_NEVER))

diff --git a/include/usage.h b/include/usage.h
index 615ee4e..7adc1fc 100644 (file)
--- a/include/usage.h
+++ b/include/usage.h
@@ -1758,6 +1758,10 @@
        "$ ls -l /tmp/ls\n" \
        "lrwxrwxrwx    1 root     root            7 Apr 12 18:39 ls -> BusyBox*\n"
 
+#define load_policy_trivial_usage \
+       "[FILE]"
+#define load_policy_full_usage
+
 #define loadfont_trivial_usage \
        "< font"
 #define loadfont_full_usage \

diff --git a/selinux/Config.in b/selinux/Config.in
index 6c08e51..42bca66 100644 (file)
--- a/selinux/Config.in
+++ b/selinux/Config.in
@@ -34,6 +34,13 @@ config GETSEBOOL
        help
          Enable support to get SELinux boolean values.
 
+config LOAD_POLICY
+       bool "load_policy"
+       default n
+       depends on SELINUX
+       help
+         Enable support to load SELinux policy.
+
 config MATCHPATHCON
        bool "matchpathcon"
        default n

diff --git a/selinux/Kbuild b/selinux/Kbuild
index 398d136..09cae4d 100644 (file)
--- a/selinux/Kbuild
+++ b/selinux/Kbuild
@@ -9,6 +9,7 @@ lib-y:=
 lib-$(CONFIG_CHCON)            += chcon.o
 lib-$(CONFIG_GETENFORCE)       += getenforce.o
 lib-$(CONFIG_GETSEBOOL)                += getsebool.o
+lib-$(CONFIG_LOAD_POLICY)      += load_policy.o
 lib-$(CONFIG_MATCHPATHCON)     += matchpathcon.o
 lib-$(CONFIG_RUNCON)           += runcon.o
 lib-$(CONFIG_SELINUXENABLED)   += selinuxenabled.o