#!/bin/sh

SYSTEMD_CAT="`which systemd-cat 2>/dev/null || true`"

print_error() {
	errorstr="ESET Server Security selinux Error: $1"

	echo "$errorstr" 1>&2
	if [ -n "$SYSTEMD_CAT" ]; then
		echo -n "$errorstr" | $SYSTEMD_CAT -t "efs" -p err
	fi
}

if ! getenforce > /dev/null 2>&1; then
	exit 0
fi

# remove loaded policy
if semodule -l | grep '^eset_efs\>' > /dev/null 2>&1 && ! semodule -r eset_efs > /dev/null 2>&1; then
	print_error "Failed to remove policy eset_efs"
	print_error "Please remove old policy module manually with \"semodule -r eset_efs\"."
	exit 1
fi

# try to remove policy with old name for sure (can be needed during upgrade)
OLD_SELINUX_POLICY_NAME="efs"
if semodule -l | grep "^$OLD_SELINUX_POLICY_NAME\>" > /dev/null 2>&1 && ! semodule -r $OLD_SELINUX_POLICY_NAME > /dev/null 2>&1; then
	print_error "Failed to remove policy $OLD_SELINUX_POLICY_NAME"
	print_error "Please remove old policy module manually with \"semodule -r $OLD_SELINUX_POLICY_NAME\"."
	exit 1
fi

# relabel files after module unload
restorecon -RF /var/opt/eset/efs > /dev/null 2>&1
restorecon -RF /opt/eset/efs > /dev/null 2>&1
restorecon -RF /var/run/eset/efs > /dev/null 2>&1

exit 0