secilc/secil2tree: Add option to write CIL AST after post processing

This will show the resulting CIL AST after deny rules have been
processed.

Signed-off-by: James Carter <[email protected]>
Reviewed-by: Daniel Burgener <[email protected]>
Acked-by: Petr Lautrbach <[email protected]>

secilc/secil2tree.c

@@ -45,6 +45,7 @@ enum write_ast_phase {
  WRITE_AST_PHASE_PARSE = 0,
  WRITE_AST_PHASE_BUILD,
  WRITE_AST_PHASE_RESOLVE,
+ WRITE_AST_PHASE_POST,
 };
 
 static __attribute__((__noreturn__)) void usage(const char *prog)
@@ -58,7 +59,7 @@ static __attribute__((__noreturn__)) void usage(const char *prog)
  printf(" Blocks, blockinherits, blockabstracts, and\n");
  printf(" in-statements will not be allowed.\n");
  printf(" -A, --ast-phase=<phase> write AST of phase <phase>. Phase must be parse, \n");
- printf(" build, or resolve. (default: resolve)\n");
+ printf(" build, resolve, or post. (default: resolve)\n");
  printf(" -v, --verbose increment verbosity level\n");
  printf(" -h, --help display usage information\n");
  exit(1);
@@ -115,6 +116,8 @@ int main(int argc, char *argv[])
  write_ast = WRITE_AST_PHASE_BUILD;
  } else if (!strcasecmp(optarg, "resolve")) {
  write_ast = WRITE_AST_PHASE_RESOLVE;
+ } else if (!strcasecmp(optarg, "post")) {
+ write_ast = WRITE_AST_PHASE_POST;
  } else {
  fprintf(stderr, "Invalid AST phase: %s\n", optarg);
  usage(argv[0]);
@@ -203,6 +206,9 @@ int main(int argc, char *argv[])
  case WRITE_AST_PHASE_RESOLVE:
  rc = cil_write_resolve_ast(file, db);
  break;
+ case WRITE_AST_PHASE_POST:
+ rc = cil_write_post_ast(file, db);
+ break;
  }
 
  if (rc != SEPOL_OK) {