OpenCoverage

chcon.c

Absolute File Name:/home/opencoverage/opencoverage/guest-scripts/coreutils/src/src/chcon.c
Source codeSwitch to Preprocessed file
LineSourceCount
1/* chcon -- change security context of files-
2 Copyright (C) 2005-2018 Free Software Foundation, Inc.-
3-
4 This program is free software: you can redistribute it and/or modify-
5 it under the terms of the GNU General Public License as published by-
6 the Free Software Foundation, either version 3 of the License, or-
7 (at your option) any later version.-
8-
9 This program is distributed in the hope that it will be useful,-
10 but WITHOUT ANY WARRANTY; without even the implied warranty of-
11 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the-
12 GNU General Public License for more details.-
13-
14 You should have received a copy of the GNU General Public License-
15 along with this program. If not, see <https://www.gnu.org/licenses/>. */-
16-
17#include <config.h>-
18#include <stdio.h>-
19#include <sys/types.h>-
20#include <getopt.h>-
21-
22#include "system.h"-
23#include "dev-ino.h"-
24#include "die.h"-
25#include "error.h"-
26#include "ignore-value.h"-
27#include "quote.h"-
28#include "root-dev-ino.h"-
29#include "selinux-at.h"-
30#include "xfts.h"-
31-
32/* The official name of this program (e.g., no 'g' prefix). */-
33#define PROGRAM_NAME "chcon"-
34-
35#define AUTHORS \-
36 proper_name ("Russell Coker"), \-
37 proper_name ("Jim Meyering")-
38-
39/* If nonzero, and the systems has support for it, change the context-
40 of symbolic links rather than any files they point to. */-
41static bool affect_symlink_referent;-
42-
43/* If true, change the modes of directories recursively. */-
44static bool recurse;-
45-
46/* Level of verbosity. */-
47static bool verbose;-
48-
49/* Pointer to the device and inode numbers of '/', when --recursive.-
50 Otherwise NULL. */-
51static struct dev_ino *root_dev_ino;-
52-
53/* The name of the context file is being given. */-
54static char const *specified_context;-
55-
56/* Specific components of the context */-
57static char const *specified_user;-
58static char const *specified_role;-
59static char const *specified_range;-
60static char const *specified_type;-
61-
62/* For long options that have no equivalent short option, use a-
63 non-character as a pseudo short option, starting with CHAR_MAX + 1. */-
64enum-
65{-
66 DEREFERENCE_OPTION = CHAR_MAX + 1,-
67 NO_PRESERVE_ROOT,-
68 PRESERVE_ROOT,-
69 REFERENCE_FILE_OPTION-
70};-
71-
72static struct option const long_options[] =-
73{-
74 {"recursive", no_argument, NULL, 'R'},-
75 {"dereference", no_argument, NULL, DEREFERENCE_OPTION},-
76 {"no-dereference", no_argument, NULL, 'h'},-
77 {"no-preserve-root", no_argument, NULL, NO_PRESERVE_ROOT},-
78 {"preserve-root", no_argument, NULL, PRESERVE_ROOT},-
79 {"reference", required_argument, NULL, REFERENCE_FILE_OPTION},-
80 {"user", required_argument, NULL, 'u'},-
81 {"role", required_argument, NULL, 'r'},-
82 {"type", required_argument, NULL, 't'},-
83 {"range", required_argument, NULL, 'l'},-
84 {"verbose", no_argument, NULL, 'v'},-
85 {GETOPT_HELP_OPTION_DECL},-
86 {GETOPT_VERSION_OPTION_DECL},-
87 {NULL, 0, NULL, 0}-
88};-
89-
90/* Given a security context, CONTEXT, derive a context_t (*RET),-
91 setting any portions selected via the global variables, specified_user,-
92 specified_role, etc. */-
93static int-
94compute_context_from_mask (char const *context, context_t *ret)-
95{-
96 bool ok = true;-
97 context_t new_context = context_new (context);-
98 if (!new_context)
!new_contextDescription
TRUEnever evaluated
FALSEnever evaluated
0
99 {-
100 error (0, errno, _("failed to create security context: %s"),-
101 quote (context));-
102 return 1;
never executed: return 1;
0
103 }-
104-
105#define SET_COMPONENT(C, comp) \-
106 do \-
107 { \-
108 if (specified_ ## comp \-
109 && context_ ## comp ## _set ((C), specified_ ## comp)) \-
110 { \-
111 error (0, errno, \-
112 _("failed to set %s security context component to %s"), \-
113 #comp, quote (specified_ ## comp)); \-
114 ok = false; \-
115 } \-
116 } \-
117 while (0)-
118-
119 SET_COMPONENT (new_context, user);
never executed: end of block
specified_userDescription
TRUEnever evaluated
FALSEnever evaluated
context_user_s...pecified_user)Description
TRUEnever evaluated
FALSEnever evaluated
0
120 SET_COMPONENT (new_context, range);
never executed: end of block
specified_rangeDescription
TRUEnever evaluated
FALSEnever evaluated
context_range_...ecified_range)Description
TRUEnever evaluated
FALSEnever evaluated
0
121 SET_COMPONENT (new_context, role);
never executed: end of block
specified_roleDescription
TRUEnever evaluated
FALSEnever evaluated
context_role_s...pecified_role)Description
TRUEnever evaluated
FALSEnever evaluated
0
122 SET_COMPONENT (new_context, type);
never executed: end of block
specified_typeDescription
TRUEnever evaluated
FALSEnever evaluated
context_type_s...pecified_type)Description
TRUEnever evaluated
FALSEnever evaluated
0
123-
124 if (!ok)
!okDescription
TRUEnever evaluated
FALSEnever evaluated
0
125 {-
126 int saved_errno = errno;-
127 context_free (new_context);-
128 errno = saved_errno;-
129 return 1;
never executed: return 1;
0
130 }-
131-
132 *ret = new_context;-
133 return 0;
never executed: return 0;
0
134}-
135-
136/* Change the context of FILE, using specified components.-
137 If it is a directory and -R is given, recurse.-
138 Return 0 if successful, 1 if errors occurred. */-
139-
140static int-
141change_file_context (int fd, char const *file)-
142{-
143 char *file_context = NULL;-
144 context_t context IF_LINT (= 0);-
145 char const * context_string;-
146 int errors = 0;-
147-
148 if (specified_context == NULL)
specified_cont...== ((void *)0)Description
TRUEnever evaluated
FALSEnever evaluated
0
149 {-
150 int status = (affect_symlink_referent
affect_symlink_referentDescription
TRUEnever evaluated
FALSEnever evaluated
0
151 ? getfileconat (fd, file, &file_context)-
152 : lgetfileconat (fd, file, &file_context));-
153-
154 if (status < 0 && errno != ENODATA)
status < 0Description
TRUEnever evaluated
FALSEnever evaluated
(*__errno_location ()) != 61Description
TRUEnever evaluated
FALSEnever evaluated
0
155 {-
156 error (0, errno, _("failed to get security context of %s"),-
157 quoteaf (file));-
158 return 1;
never executed: return 1;
0
159 }-
160-
161 /* If the file doesn't have a context, and we're not setting all of-
162 the context components, there isn't really an obvious default.-
163 Thus, we just give up. */-
164 if (file_context == NULL)
file_context == ((void *)0)Description
TRUEnever evaluated
FALSEnever evaluated
0
165 {-
166 error (0, 0, _("can't apply partial context to unlabeled file %s"),-
167 quoteaf (file));-
168 return 1;
never executed: return 1;
0
169 }-
170-
171 if (compute_context_from_mask (file_context, &context))
compute_contex...ext, &context)Description
TRUEnever evaluated
FALSEnever evaluated
0
172 return 1;
never executed: return 1;
0
173-
174 context_string = context_str (context);-
175 }
never executed: end of block
0
176 else-
177 {-
178 context_string = specified_context;-
179 }
never executed: end of block
0
180-
181 if (file_context == NULL || ! STREQ (context_string, file_context))
never executed: __result = (((const unsigned char *) (const char *) ( context_string ))[3] - __s2[3]);
never executed: end of block
never executed: end of block
never executed: __result = (((const unsigned char *) (const char *) ( file_context ))[3] - __s2[3]);
never executed: end of block
never executed: end of block
file_context == ((void *)0)Description
TRUEnever evaluated
FALSEnever evaluated
! ( __extensio...)))); }) == 0)Description
TRUEnever evaluated
FALSEnever evaluated
__s1_len > 0Description
TRUEnever evaluated
FALSEnever evaluated
__result == 0Description
TRUEnever evaluated
FALSEnever evaluated
__s1_len > 1Description
TRUEnever evaluated
FALSEnever evaluated
__result == 0Description
TRUEnever evaluated
FALSEnever evaluated
__s1_len > 2Description
TRUEnever evaluated
FALSEnever evaluated
__result == 0Description
TRUEnever evaluated
FALSEnever evaluated
__s2_len > 0Description
TRUEnever evaluated
FALSEnever evaluated
__result == 0Description
TRUEnever evaluated
FALSEnever evaluated
__s2_len > 1Description
TRUEnever evaluated
FALSEnever evaluated
__result == 0Description
TRUEnever evaluated
FALSEnever evaluated
__s2_len > 2Description
TRUEnever evaluated
FALSEnever evaluated
__result == 0Description
TRUEnever evaluated
FALSEnever evaluated
0
182 {-
183 int fail = (affect_symlink_referent
affect_symlink_referentDescription
TRUEnever evaluated
FALSEnever evaluated
0
184 ? setfileconat (fd, file, se_const (context_string))-
185 : lsetfileconat (fd, file, se_const (context_string)));-
186-
187 if (fail)
failDescription
TRUEnever evaluated
FALSEnever evaluated
0
188 {-
189 errors = 1;-
190 error (0, errno, _("failed to change context of %s to %s"),-
191 quoteaf_n (0, file), quote_n (1, context_string));-
192 }
never executed: end of block
0
193 }
never executed: end of block
0
194-
195 if (specified_context == NULL)
specified_cont...== ((void *)0)Description
TRUEnever evaluated
FALSEnever evaluated
0
196 {-
197 context_free (context);-
198 freecon (file_context);-
199 }
never executed: end of block
0
200-
201 return errors;
never executed: return errors;
0
202}-
203-
204/* Change the context of FILE.-
205 Return true if successful. This function is called-
206 once for every file system object that fts encounters. */-
207-
208static bool-
209process_file (FTS *fts, FTSENT *ent)-
210{-
211 char const *file_full_name = ent->fts_path;-
212 char const *file = ent->fts_accpath;-
213 const struct stat *file_stats = ent->fts_statp;-
214 bool ok = true;-
215-
216 switch (ent->fts_info)-
217 {-
218 case FTS_D:
never executed: case 1:
0
219 if (recurse)
recurseDescription
TRUEnever evaluated
FALSEnever evaluated
0
220 {-
221 if (ROOT_DEV_INO_CHECK (root_dev_ino, ent->fts_statp))
root_dev_inoDescription
TRUEnever evaluated
FALSEnever evaluated
(*ent->fts_sta...ev_ino).st_inoDescription
TRUEnever evaluated
FALSEnever evaluated
(*ent->fts_sta...ev_ino).st_devDescription
TRUEnever evaluated
FALSEnever evaluated
0
222 {-
223 /* This happens e.g., with "chcon -R --preserve-root ... /"-
224 and with "chcon -RH --preserve-root ... symlink-to-root". */-
225 ROOT_DEV_INO_WARN (file_full_name);
never executed: __result = (((const unsigned char *) (const char *) ( file_full_name ))[3] - __s2[3]);
never executed: end of block
never executed: end of block
never executed: __result = (((const unsigned char *) (const char *) ( "/" ))[3] - __s2[3]);
never executed: end of block
never executed: end of block
never executed: error (0, 0, dcgettext (((void *)0), "it is dangerous to operate recursively on %s" , 5) , quotearg_style (shell_escape_always_quoting_style, file_full_name));
never executed: error (0, 0, dcgettext (((void *)0), "it is dangerous to operate recursively on %s (same as %s)" , 5) , quotearg_n_style (0, shell_escape_always_quoting_style, file_full_name), quotearg_n_style (1, shell_escape_always_quoting_style, "/"));
( __extension_...)))); }) == 0)Description
TRUEnever evaluated
FALSEnever evaluated
__s1_len > 0Description
TRUEnever evaluated
FALSEnever evaluated
__result == 0Description
TRUEnever evaluated
FALSEnever evaluated
__s1_len > 1Description
TRUEnever evaluated
FALSEnever evaluated
__result == 0Description
TRUEnever evaluated
FALSEnever evaluated
__s1_len > 2Description
TRUEnever evaluated
FALSEnever evaluated
__result == 0Description
TRUEnever evaluated
FALSEnever evaluated
__s2_len > 0Description
TRUEnever evaluated
FALSEnever evaluated
__result == 0Description
TRUEnever evaluated
FALSEnever evaluated
__s2_len > 1Description
TRUEnever evaluated
FALSEnever evaluated
__result == 0Description
TRUEnever evaluated
FALSEnever evaluated
__s2_len > 2Description
TRUEnever evaluated
FALSEnever evaluated
__result == 0Description
TRUEnever evaluated
FALSEnever evaluated
0
226 /* Tell fts not to traverse into this hierarchy. */-
227 fts_set (fts, ent, FTS_SKIP);-
228 /* Ensure that we do not process "/" on the second visit. */-
229 ignore_value (fts_read (fts));-
230 return false;
never executed: return 0 ;
0
231 }-
232 return true;
never executed: return 1 ;
0
233 }-
234 break;
never executed: break;
0
235-
236 case FTS_DP:
never executed: case 6:
0
237 if (! recurse)
! recurseDescription
TRUEnever evaluated
FALSEnever evaluated
0
238 return true;
never executed: return 1 ;
0
239 break;
never executed: break;
0
240-
241 case FTS_NS:
never executed: case 10:
0
242 /* For a top-level file or directory, this FTS_NS (stat failed)-
243 indicator is determined at the time of the initial fts_open call.-
244 With programs like chmod, chown, and chgrp, that modify-
245 permissions, it is possible that the file in question is-
246 accessible when control reaches this point. So, if this is-
247 the first time we've seen the FTS_NS for this file, tell-
248 fts_read to stat it "again". */-
249 if (ent->fts_level == 0 && ent->fts_number == 0)
ent->fts_level == 0Description
TRUEnever evaluated
FALSEnever evaluated
ent->fts_number == 0Description
TRUEnever evaluated
FALSEnever evaluated
0
250 {-
251 ent->fts_number = 1;-
252 fts_set (fts, ent, FTS_AGAIN);-
253 return true;
never executed: return 1 ;
0
254 }-
255 error (0, ent->fts_errno, _("cannot access %s"),-
256 quoteaf (file_full_name));-
257 ok = false;-
258 break;
never executed: break;
0
259-
260 case FTS_ERR:
never executed: case 7:
0
261 error (0, ent->fts_errno, "%s", quotef (file_full_name));-
262 ok = false;-
263 break;
never executed: break;
0
264-
265 case FTS_DNR:
never executed: case 4:
0
266 error (0, ent->fts_errno, _("cannot read directory %s"),-
267 quoteaf (file_full_name));-
268 ok = false;-
269 break;
never executed: break;
0
270-
271 case FTS_DC: /* directory that causes cycles */
never executed: case 2:
0
272 if (cycle_warning_required (fts, ent))
cycle_warning_...red (fts, ent)Description
TRUEnever evaluated
FALSEnever evaluated
0
273 {-
274 emit_cycle_warning (file_full_name);-
275 return false;
never executed: return 0 ;
0
276 }-
277 break;
never executed: break;
0
278-
279 default:
never executed: default:
0
280 break;
never executed: break;
0
281 }-
282-
283 if (ent->fts_info == FTS_DP
ent->fts_info == 6Description
TRUEnever evaluated
FALSEnever evaluated
0
284 && ok && ROOT_DEV_INO_CHECK (root_dev_ino, file_stats))
okDescription
TRUEnever evaluated
FALSEnever evaluated
root_dev_inoDescription
TRUEnever evaluated
FALSEnever evaluated
(*file_stats)....ev_ino).st_inoDescription
TRUEnever evaluated
FALSEnever evaluated
(*file_stats)....ev_ino).st_devDescription
TRUEnever evaluated
FALSEnever evaluated
0
285 {-
286 ROOT_DEV_INO_WARN (file_full_name);
never executed: __result = (((const unsigned char *) (const char *) ( file_full_name ))[3] - __s2[3]);
never executed: end of block
never executed: end of block
never executed: __result = (((const unsigned char *) (const char *) ( "/" ))[3] - __s2[3]);
never executed: end of block
never executed: end of block
never executed: error (0, 0, dcgettext (((void *)0), "it is dangerous to operate recursively on %s" , 5) , quotearg_style (shell_escape_always_quoting_style, file_full_name));
never executed: error (0, 0, dcgettext (((void *)0), "it is dangerous to operate recursively on %s (same as %s)" , 5) , quotearg_n_style (0, shell_escape_always_quoting_style, file_full_name), quotearg_n_style (1, shell_escape_always_quoting_style, "/"));
( __extension_...)))); }) == 0)Description
TRUEnever evaluated
FALSEnever evaluated
__s1_len > 0Description
TRUEnever evaluated
FALSEnever evaluated
__result == 0Description
TRUEnever evaluated
FALSEnever evaluated
__s1_len > 1Description
TRUEnever evaluated
FALSEnever evaluated
__result == 0Description
TRUEnever evaluated
FALSEnever evaluated
__s1_len > 2Description
TRUEnever evaluated
FALSEnever evaluated
__result == 0Description
TRUEnever evaluated
FALSEnever evaluated
__s2_len > 0Description
TRUEnever evaluated
FALSEnever evaluated
__result == 0Description
TRUEnever evaluated
FALSEnever evaluated
__s2_len > 1Description
TRUEnever evaluated
FALSEnever evaluated
__result == 0Description
TRUEnever evaluated
FALSEnever evaluated
__s2_len > 2Description
TRUEnever evaluated
FALSEnever evaluated
__result == 0Description
TRUEnever evaluated
FALSEnever evaluated
0
287 ok = false;-
288 }
never executed: end of block
0
289-
290 if (ok)
okDescription
TRUEnever evaluated
FALSEnever evaluated
0
291 {-
292 if (verbose)
verboseDescription
TRUEnever evaluated
FALSEnever evaluated
0
293 printf (_("changing security context of %s\n"),
never executed: printf ( dcgettext (((void *)0), "changing security context of %s\n" , 5) , quotearg_style (shell_escape_always_quoting_style, file_full_name));
0
294 quoteaf (file_full_name));
never executed: printf ( dcgettext (((void *)0), "changing security context of %s\n" , 5) , quotearg_style (shell_escape_always_quoting_style, file_full_name));
0
295-
296 if (change_file_context (fts->fts_cwd_fd, file) != 0)
change_file_co...fd, file) != 0Description
TRUEnever evaluated
FALSEnever evaluated
0
297 ok = false;
never executed: ok = 0 ;
0
298 }
never executed: end of block
0
299-
300 if ( ! recurse)
! recurseDescription
TRUEnever evaluated
FALSEnever evaluated
0
301 fts_set (fts, ent, FTS_SKIP);
never executed: fts_set (fts, ent, 4);
0
302-
303 return ok;
never executed: return ok;
0
304}-
305-
306/* Recursively operate on the specified FILES (the last entry-
307 of which is NULL). BIT_FLAGS controls how fts works.-
308 Return true if successful. */-
309-
310static bool-
311process_files (char **files, int bit_flags)-
312{-
313 bool ok = true;-
314-
315 FTS *fts = xfts_open (files, bit_flags, NULL);-
316-
317 while (1)-
318 {-
319 FTSENT *ent;-
320-
321 ent = fts_read (fts);-
322 if (ent == NULL)
ent == ((void *)0)Description
TRUEnever evaluated
FALSEnever evaluated
0
323 {-
324 if (errno != 0)
(*__errno_location ()) != 0Description
TRUEnever evaluated
FALSEnever evaluated
0
325 {-
326 /* FIXME: try to give a better message */-
327 error (0, errno, _("fts_read failed"));-
328 ok = false;-
329 }
never executed: end of block
0
330 break;
never executed: break;
0
331 }-
332-
333 ok &= process_file (fts, ent);-
334 }
never executed: end of block
0
335-
336 if (fts_close (fts) != 0)
fts_close (fts) != 0Description
TRUEnever evaluated
FALSEnever evaluated
0
337 {-
338 error (0, errno, _("fts_close failed"));-
339 ok = false;-
340 }
never executed: end of block
0
341-
342 return ok;
never executed: return ok;
0
343}-
344-
345void-
346usage (int status)-
347{-
348 if (status != EXIT_SUCCESS)
status != 0Description
TRUEevaluated 7 times by 1 test
Evaluated by:
  • chcon
FALSEevaluated 24 times by 1 test
Evaluated by:
  • chcon
7-24
349 emit_try_help ();
executed 7 times by 1 test: end of block
Executed by:
  • chcon
7
350 else-
351 {-
352 printf (_("\-
353Usage: %s [OPTION]... CONTEXT FILE...\n\-
354 or: %s [OPTION]... [-u USER] [-r ROLE] [-l RANGE] [-t TYPE] FILE...\n\-
355 or: %s [OPTION]... --reference=RFILE FILE...\n\-
356"),-
357 program_name, program_name, program_name);-
358 fputs (_("\-
359Change the SELinux security context of each FILE to CONTEXT.\n\-
360With --reference, change the security context of each FILE to that of RFILE.\n\-
361"), stdout);-
362-
363 emit_mandatory_arg_note ();-
364-
365 fputs (_("\-
366 --dereference affect the referent of each symbolic link (this is\n\-
367 the default), rather than the symbolic link itself\n\-
368 -h, --no-dereference affect symbolic links instead of any referenced file\n\-
369"), stdout);-
370 fputs (_("\-
371 -u, --user=USER set user USER in the target security context\n\-
372 -r, --role=ROLE set role ROLE in the target security context\n\-
373 -t, --type=TYPE set type TYPE in the target security context\n\-
374 -l, --range=RANGE set range RANGE in the target security context\n\-
375"), stdout);-
376 fputs (_("\-
377 --no-preserve-root do not treat '/' specially (the default)\n\-
378 --preserve-root fail to operate recursively on '/'\n\-
379"), stdout);-
380 fputs (_("\-
381 --reference=RFILE use RFILE's security context rather than specifying\n\-
382 a CONTEXT value\n\-
383"), stdout);-
384 fputs (_("\-
385 -R, --recursive operate on files and directories recursively\n\-
386"), stdout);-
387 fputs (_("\-
388 -v, --verbose output a diagnostic for every file processed\n\-
389"), stdout);-
390 fputs (_("\-
391\n\-
392The following options modify how a hierarchy is traversed when the -R\n\-
393option is also specified. If more than one is specified, only the final\n\-
394one takes effect.\n\-
395\n\-
396 -H if a command line argument is a symbolic link\n\-
397 to a directory, traverse it\n\-
398 -L traverse every symbolic link to a directory\n\-
399 encountered\n\-
400 -P do not traverse any symbolic links (default)\n\-
401\n\-
402"), stdout);-
403 fputs (HELP_OPTION_DESCRIPTION, stdout);-
404 fputs (VERSION_OPTION_DESCRIPTION, stdout);-
405 emit_ancillary_info (PROGRAM_NAME);-
406 }
executed 24 times by 1 test: end of block
Executed by:
  • chcon
24
407 exit (status);
executed 31 times by 1 test: exit (status);
Executed by:
  • chcon
31
408}-
409-
410int-
411main (int argc, char **argv)-
412{-
413 /* Bit flags that control how fts works. */-
414 int bit_flags = FTS_PHYSICAL;-
415-
416 /* 1 if --dereference, 0 if --no-dereference, -1 if neither has been-
417 specified. */-
418 int dereference = -1;-
419-
420 bool ok;-
421 bool preserve_root = false;-
422 bool component_specified = false;-
423 char *reference_file = NULL;-
424 int optc;-
425-
426 initialize_main (&argc, &argv);-
427 set_program_name (argv[0]);-
428 setlocale (LC_ALL, "");-
429 bindtextdomain (PACKAGE, LOCALEDIR);-
430 textdomain (PACKAGE);-
431-
432 atexit (close_stdout);-
433-
434 while ((optc = getopt_long (argc, argv, "HLPRhvu:r:t:l:", long_options, NULL))
(optc = getopt... *)0) )) != -1Description
TRUEevaluated 56 times by 1 test
Evaluated by:
  • chcon
FALSEevaluated 4 times by 1 test
Evaluated by:
  • chcon
4-56
435 != -1)
(optc = getopt... *)0) )) != -1Description
TRUEevaluated 56 times by 1 test
Evaluated by:
  • chcon
FALSEevaluated 4 times by 1 test
Evaluated by:
  • chcon
4-56
436 {-
437 switch (optc)-
438 {-
439 case 'H': /* Traverse command-line symlinks-to-directories. */
executed 1 time by 1 test: case 'H':
Executed by:
  • chcon
1
440 bit_flags = FTS_COMFOLLOW | FTS_PHYSICAL;-
441 break;
executed 1 time by 1 test: break;
Executed by:
  • chcon
1
442-
443 case 'L': /* Traverse all symlinks-to-directories. */
executed 1 time by 1 test: case 'L':
Executed by:
  • chcon
1
444 bit_flags = FTS_LOGICAL;-
445 break;
executed 1 time by 1 test: break;
Executed by:
  • chcon
1
446-
447 case 'P': /* Traverse no symlinks-to-directories. */
executed 1 time by 1 test: case 'P':
Executed by:
  • chcon
1
448 bit_flags = FTS_PHYSICAL;-
449 break;
executed 1 time by 1 test: break;
Executed by:
  • chcon
1
450-
451 case 'h': /* --no-dereference: affect symlinks */
executed 2 times by 1 test: case 'h':
Executed by:
  • chcon
2
452 dereference = 0;-
453 break;
executed 2 times by 1 test: break;
Executed by:
  • chcon
2
454-
455 case DEREFERENCE_OPTION: /* --dereference: affect the referent
executed 1 time by 1 test: case DEREFERENCE_OPTION:
Executed by:
  • chcon
1
456 of each symlink */-
457 dereference = 1;-
458 break;
executed 1 time by 1 test: break;
Executed by:
  • chcon
1
459-
460 case NO_PRESERVE_ROOT:
executed 1 time by 1 test: case NO_PRESERVE_ROOT:
Executed by:
  • chcon
1
461 preserve_root = false;-
462 break;
executed 1 time by 1 test: break;
Executed by:
  • chcon
1
463-
464 case PRESERVE_ROOT:
executed 1 time by 1 test: case PRESERVE_ROOT:
Executed by:
  • chcon
1
465 preserve_root = true;-
466 break;
executed 1 time by 1 test: break;
Executed by:
  • chcon
1
467-
468 case REFERENCE_FILE_OPTION:
executed 2 times by 1 test: case REFERENCE_FILE_OPTION:
Executed by:
  • chcon
2
469 reference_file = optarg;-
470 break;
executed 2 times by 1 test: break;
Executed by:
  • chcon
2
471-
472 case 'R':
executed 2 times by 1 test: case 'R':
Executed by:
  • chcon
2
473 recurse = true;-
474 break;
executed 2 times by 1 test: break;
Executed by:
  • chcon
2
475-
476 case 'f':
never executed: case 'f':
0
477 /* ignore */-
478 break;
never executed: break;
0
479-
480 case 'v':
executed 2 times by 1 test: case 'v':
Executed by:
  • chcon
2
481 verbose = true;-
482 break;
executed 2 times by 1 test: break;
Executed by:
  • chcon
2
483-
484 case 'u':
executed 3 times by 1 test: case 'u':
Executed by:
  • chcon
3
485 specified_user = optarg;-
486 component_specified = true;-
487 break;
executed 3 times by 1 test: break;
Executed by:
  • chcon
3
488-
489 case 'r':
executed 2 times by 1 test: case 'r':
Executed by:
  • chcon
2
490 specified_role = optarg;-
491 component_specified = true;-
492 break;
executed 2 times by 1 test: break;
Executed by:
  • chcon
2
493-
494 case 't':
executed 2 times by 1 test: case 't':
Executed by:
  • chcon
2
495 specified_type = optarg;-
496 component_specified = true;-
497 break;
executed 2 times by 1 test: break;
Executed by:
  • chcon
2
498-
499 case 'l':
executed 2 times by 1 test: case 'l':
Executed by:
  • chcon
2
500 specified_range = optarg;-
501 component_specified = true;-
502 break;
executed 2 times by 1 test: break;
Executed by:
  • chcon
2
503-
504 case_GETOPT_HELP_CHAR;
never executed: break;
executed 24 times by 1 test: case GETOPT_HELP_CHAR:
Executed by:
  • chcon
0-24
505 case_GETOPT_VERSION_CHAR (PROGRAM_NAME, AUTHORS);
executed 6 times by 1 test: exit ( 0 );
Executed by:
  • chcon
never executed: break;
executed 6 times by 1 test: case GETOPT_VERSION_CHAR:
Executed by:
  • chcon
0-6
506 default:
executed 3 times by 1 test: default:
Executed by:
  • chcon
3
507 usage (EXIT_FAILURE);-
508 }
never executed: end of block
0
509 }-
510-
511 if (recurse)
recurseDescription
TRUEnever evaluated
FALSEevaluated 4 times by 1 test
Evaluated by:
  • chcon
0-4
512 {-
513 if (bit_flags == FTS_PHYSICAL)
bit_flags == 0x0010Description
TRUEnever evaluated
FALSEnever evaluated
0
514 {-
515 if (dereference == 1)
dereference == 1Description
TRUEnever evaluated
FALSEnever evaluated
0
516 die (EXIT_FAILURE, 0,
never executed: ((!!sizeof (struct { _Static_assert ( 1 , "verify_expr (" "1" ", " "(error (1, 0, dcgettext (((void *)0), \"-R --dereference requires either -H or -L\", 5)), assume (false))" ")"); int _gl_dummy; })) ? ((error ( 1 , 0, dcgettext (((void *)0), "-R --dereference requires either -H or -L" , 5) ), (( 0 ) ? (void) 0 : __builtin_unreachable ()))) : ((error ( 1 , 0, dcgettext (((void *)0), "-R --dereference requires either -H or -L" , 5) ), (( 0 ) ? (void) 0 : __builtin_unreachable ())))) ;
0
517 _("-R --dereference requires either -H or -L"));
never executed: ((!!sizeof (struct { _Static_assert ( 1 , "verify_expr (" "1" ", " "(error (1, 0, dcgettext (((void *)0), \"-R --dereference requires either -H or -L\", 5)), assume (false))" ")"); int _gl_dummy; })) ? ((error ( 1 , 0, dcgettext (((void *)0), "-R --dereference requires either -H or -L" , 5) ), (( 0 ) ? (void) 0 : __builtin_unreachable ()))) : ((error ( 1 , 0, dcgettext (((void *)0), "-R --dereference requires either -H or -L" , 5) ), (( 0 ) ? (void) 0 : __builtin_unreachable ())))) ;
0
518 affect_symlink_referent = false;-
519 }
never executed: end of block
0
520 else-
521 {-
522 if (dereference == 0)
dereference == 0Description
TRUEnever evaluated
FALSEnever evaluated
0
523 die (EXIT_FAILURE, 0, _("-R -h requires -P"));
never executed: ((!!sizeof (struct { _Static_assert ( 1 , "verify_expr (" "1" ", " "(error (1, 0, dcgettext (((void *)0), \"-R -h requires -P\", 5)), assume (false))" ")"); int _gl_dummy; })) ? ((error ( 1 , 0, dcgettext (((void *)0), "-R -h requires -P" , 5) ), (( 0 ) ? (void) 0 : __builtin_unreachable ()))) : ((error ( 1 , 0, dcgettext (((void *)0), "-R -h requires -P" , 5) ), (( 0 ) ? (void) 0 : __builtin_unreachable ()))));
0
524 affect_symlink_referent = true;-
525 }
never executed: end of block
0
526 }-
527 else-
528 {-
529 bit_flags = FTS_PHYSICAL;-
530 affect_symlink_referent = (dereference != 0);-
531 }
executed 4 times by 1 test: end of block
Executed by:
  • chcon
4
532-
533 if (argc - optind < (reference_file || component_specified ? 1 : 2))
argc - optind ...ified ? 1 : 2)Description
TRUEevaluated 4 times by 1 test
Evaluated by:
  • chcon
FALSEnever evaluated
0-4
534 {-
535 if (argc <= optind)
argc <= optindDescription
TRUEevaluated 3 times by 1 test
Evaluated by:
  • chcon
FALSEevaluated 1 time by 1 test
Evaluated by:
  • chcon
1-3
536 error (0, 0, _("missing operand"));
executed 3 times by 1 test: error (0, 0, dcgettext (((void *)0), "missing operand" , 5) );
Executed by:
  • chcon
3
537 else-
538 error (0, 0, _("missing operand after %s"), quote (argv[argc - 1]));
executed 1 time by 1 test: error (0, 0, dcgettext (((void *)0), "missing operand after %s" , 5) , quote (argv[argc - 1]));
Executed by:
  • chcon
1
539 usage (EXIT_FAILURE);-
540 }
never executed: end of block
0
541-
542 if (reference_file)
reference_fileDescription
TRUEnever evaluated
FALSEnever evaluated
0
543 {-
544 char *ref_context = NULL;-
545-
546 if (getfilecon (reference_file, &ref_context) < 0)
rpl_getfilecon...f_context) < 0Description
TRUEnever evaluated
FALSEnever evaluated
0
547 die (EXIT_FAILURE, errno, _("failed to get security context of %s"),
never executed: ((!!sizeof (struct { _Static_assert ( 1 , "verify_expr (" "1" ", " "(error (1, (*__errno_location ()), dcgettext (((void *)0), \"failed to get security context of %s\", 5), quotearg_style (shell_escape_always_quoting_style, reference_file)), assume (false...uiltin_unreachable ()))) : ((error ( 1 , (*__errno_location ()) , dcgettext (((void *)0), "failed to get security context of %s" , 5) , quotearg_style (shell_escape_always_quoting_style, reference_file)), (( 0 ) ? (void) 0 : __builtin_unreachable ())))) ;
0
548 quoteaf (reference_file));
never executed: ((!!sizeof (struct { _Static_assert ( 1 , "verify_expr (" "1" ", " "(error (1, (*__errno_location ()), dcgettext (((void *)0), \"failed to get security context of %s\", 5), quotearg_style (shell_escape_always_quoting_style, reference_file)), assume (false...uiltin_unreachable ()))) : ((error ( 1 , (*__errno_location ()) , dcgettext (((void *)0), "failed to get security context of %s" , 5) , quotearg_style (shell_escape_always_quoting_style, reference_file)), (( 0 ) ? (void) 0 : __builtin_unreachable ())))) ;
0
549-
550 specified_context = ref_context;-
551 }
never executed: end of block
0
552 else if (component_specified)
component_specifiedDescription
TRUEnever evaluated
FALSEnever evaluated
0
553 {-
554 /* FIXME: it's already null, so this is a no-op. */-
555 specified_context = NULL;-
556 }
never executed: end of block
0
557 else-
558 {-
559 specified_context = argv[optind++];-
560 if (security_check_context (se_const (specified_context)) < 0)
security_check..._context)) < 0Description
TRUEnever evaluated
FALSEnever evaluated
0
561 die (EXIT_FAILURE, errno, _("invalid context: %s"),
never executed: ((!!sizeof (struct { _Static_assert ( 1 , "verify_expr (" "1" ", " "(error (1, (*__errno_location ()), dcgettext (((void *)0), \"invalid context: %s\", 5), quote (specified_context)), assume (false))" ")"); int _gl_dummy; })) ? ((error ( 1 , (*__errno_loc..., 5) , quote (specified_context)), (( 0 ) ? (void) 0 : __builtin_unreachable ()))) : ((error ( 1 , (*__errno_location ()) , dcgettext (((void *)0), "invalid context: %s" , 5) , quote (specified_context)), (( 0 ) ? (void) 0 : __builtin_unreachable ())))) ;
0
562 quote (specified_context));
never executed: ((!!sizeof (struct { _Static_assert ( 1 , "verify_expr (" "1" ", " "(error (1, (*__errno_location ()), dcgettext (((void *)0), \"invalid context: %s\", 5), quote (specified_context)), assume (false))" ")"); int _gl_dummy; })) ? ((error ( 1 , (*__errno_loc..., 5) , quote (specified_context)), (( 0 ) ? (void) 0 : __builtin_unreachable ()))) : ((error ( 1 , (*__errno_location ()) , dcgettext (((void *)0), "invalid context: %s" , 5) , quote (specified_context)), (( 0 ) ? (void) 0 : __builtin_unreachable ())))) ;
0
563 }
never executed: end of block
0
564-
565 if (reference_file && component_specified)
reference_fileDescription
TRUEnever evaluated
FALSEnever evaluated
component_specifiedDescription
TRUEnever evaluated
FALSEnever evaluated
0
566 {-
567 error (0, 0, _("conflicting security context specifiers given"));-
568 usage (EXIT_FAILURE);-
569 }
never executed: end of block
0
570-
571 if (recurse && preserve_root)
recurseDescription
TRUEnever evaluated
FALSEnever evaluated
preserve_rootDescription
TRUEnever evaluated
FALSEnever evaluated
0
572 {-
573 static struct dev_ino dev_ino_buf;-
574 root_dev_ino = get_root_dev_ino (&dev_ino_buf);-
575 if (root_dev_ino == NULL)
root_dev_ino == ((void *)0)Description
TRUEnever evaluated
FALSEnever evaluated
0
576 die (EXIT_FAILURE, errno, _("failed to get attributes of %s"),
never executed: ((!!sizeof (struct { _Static_assert ( 1 , "verify_expr (" "1" ", " "(error (1, (*__errno_location ()), dcgettext (((void *)0), \"failed to get attributes of %s\", 5), quotearg_style (shell_escape_always_quoting_style, \"/\")), assume (false))" ")"); int _... ? (void) 0 : __builtin_unreachable ()))) : ((error ( 1 , (*__errno_location ()) , dcgettext (((void *)0), "failed to get attributes of %s" , 5) , quotearg_style (shell_escape_always_quoting_style, "/")), (( 0 ) ? (void) 0 : __builtin_unreachable ())))) ;
0
577 quoteaf ("/"));
never executed: ((!!sizeof (struct { _Static_assert ( 1 , "verify_expr (" "1" ", " "(error (1, (*__errno_location ()), dcgettext (((void *)0), \"failed to get attributes of %s\", 5), quotearg_style (shell_escape_always_quoting_style, \"/\")), assume (false))" ")"); int _... ? (void) 0 : __builtin_unreachable ()))) : ((error ( 1 , (*__errno_location ()) , dcgettext (((void *)0), "failed to get attributes of %s" , 5) , quotearg_style (shell_escape_always_quoting_style, "/")), (( 0 ) ? (void) 0 : __builtin_unreachable ())))) ;
0
578 }
never executed: end of block
0
579 else-
580 {-
581 root_dev_ino = NULL;-
582 }
never executed: end of block
0
583-
584 ok = process_files (argv + optind, bit_flags | FTS_NOSTAT);-
585-
586 return ok ? EXIT_SUCCESS : EXIT_FAILURE;
never executed: return ok ? 0 : 1 ;
0
587}-
Source codeSwitch to Preprocessed file
Generated by Squish Coco 4.1.2