db600d5ea0
* kernel: add report_event cmd * ksud: report event * kernel: trigger on_post_fs_data * ksud: comment unused code * [skip ci] run clang-format Signed-off-by: Ylarod <me@ylarod.cn> * ci: use custom key to sign official bootimgs * format ksud * reject non root * remove Signed-off-by: Ylarod <me@ylarod.cn>
28 lines
782 B
Rust
28 lines
782 B
Rust
use anyhow::ensure;
|
|
use anyhow::Ok;
|
|
use anyhow::Result;
|
|
use subprocess::Exec;
|
|
|
|
const SYSTEM_CON: &str = "u:object_r:system_file:s0";
|
|
const _ADB_CON: &str = "u:object_r:adb_data_file:s0";
|
|
|
|
pub fn setcon(path: &str, con: &str) -> Result<()> {
|
|
// todo use libselinux directly
|
|
let cmd = format!("chcon {} {}", con, path);
|
|
let result = Exec::shell(cmd).join()?;
|
|
ensure!(result.success(), "chcon for: {} failed.", path);
|
|
Ok(())
|
|
}
|
|
|
|
pub fn setsyscon(path: &str) -> Result<()> {
|
|
setcon(path, SYSTEM_CON)
|
|
}
|
|
|
|
pub fn restore_syscon(dir: &str) -> Result<()> {
|
|
// todo use libselinux directly
|
|
let cmd = format!("chcon -R {} {}", SYSTEM_CON, dir);
|
|
let result = Exec::shell(cmd).join()?;
|
|
ensure!(result.success(), "chcon for: {} failed.", dir);
|
|
Ok(())
|
|
}
|