package de.robv.android.xposed;

import de.robv.android.xposed.services.BaseService;
import de.robv.android.xposed.services.DirectAccessService;

/**
 * A helper to work with (or without) SELinux, abstracting much of its big complexity.
 */
public final class SELinuxHelper {

    private SELinuxHelper() {
    }

    /**
     * Determines whether SELinux is disabled or enabled.
     *
     * @return A boolean indicating whether SELinux is enabled.
     */
    public static boolean isSELinuxEnabled() {
        return sIsSELinuxEnabled;
    }

    /**
     * Determines whether SELinux is permissive or enforcing.
     *
     * @return A boolean indicating whether SELinux is enforcing.
     */
    public static boolean isSELinuxEnforced() {
        return sIsSELinuxEnabled;
    }

    /**
     * Gets the security context of the current process.
     *
     * @return A String representing the security context of the current process.
     */
    public static String getContext() {
        return null;
    }

    /**
     * Retrieve the service to be used when accessing files in {@code /data/data/*}.
     *
     * <p class="caution"><strong>IMPORTANT:</strong> If you call this from the Zygote process,
     * don't re-use the result in different process!
     *
     * @return An instance of the service.
     */
    public static BaseService getAppDataFileService() {
        if (sServiceAppDataFile != null)
            return sServiceAppDataFile;
        return new DirectAccessService();
    }


    // ----------------------------------------------------------------------------
    private static boolean sIsSELinuxEnabled = false;
    private static BaseService sServiceAppDataFile = new DirectAccessService();

}
