some useful sed commands:
sed -n 's/.*seinfo=\([a-zA-Z0-9_]\+\).*/\1/p' se_files/seapp_contexts | sort -u
sed -n -e 's/.*seinfo=\([a-zA-Z0-9_]\+\).*/\1/p' -e 's/.*seinfo="\([a-zA-Z0-9_]\+\)".*/\1/p' se_files/mac_permissions_pr.xml | sort -u
sed -n 's/.*domain=knox_untrusted_app \+.*type=\([a-zA-Z0-9_]\+\).*/\1/p' seapp
_contexts
过滤:
grep store_app allow.type | cut -d ':' -f 2 | cut -d ' ' -f 2 | sort -u | grep -v -E 'binder|process|^file|capability' | while read t; do echo "-e \"/ : $t /d\""; done | tr '\n' ' ' | xargs sed "$@" allow.rule >allow.rule.dec
-- some error, need check
远程执行:
cat mac_permissions.xml | ssh linux "xmlindent" | cat - > mac_permissions_pr.xml
远程copy:
tar czf - se_files.new/ | ssh linux "ssh vm-fedora 'tar xzf - -C tmp' "
sed -n 's/.*seinfo=\([a-zA-Z0-9_]\+\).*/\1/p' se_files/seapp_contexts | sort -u
sed -n -e 's/.*seinfo=\([a-zA-Z0-9_]\+\).*/\1/p' -e 's/.*seinfo="\([a-zA-Z0-9_]\+\)".*/\1/p' se_files/mac_permissions_pr.xml | sort -u
sed -n 's/.*domain=knox_untrusted_app \+.*type=\([a-zA-Z0-9_]\+\).*/\1/p' seapp
_contexts
过滤:
grep store_app allow.type | cut -d ':' -f 2 | cut -d ' ' -f 2 | sort -u | grep -v -E 'binder|process|^file|capability' | while read t; do echo "-e \"/ : $t /d\""; done | tr '\n' ' ' | xargs sed "$@" allow.rule >allow.rule.dec
-- some error, need check
远程执行:
cat mac_permissions.xml | ssh linux "xmlindent" | cat - > mac_permissions_pr.xml
远程copy:
tar czf - se_files.new/ | ssh linux "ssh vm-fedora 'tar xzf - -C tmp' "