selinux_colors_path – Return a path to the active SELinux policy color configuration file Synopsis #include <selinux/selinux.h> const char *selinux_colors_path(void); Description selinux_colors_path() returns the path to the active policy color configuration file. The path is built from the path returned by selinux_policy_root(3) with /secolor.conf appended. This optional configuration file whose format is shown in secolor.conf(5), controls…
selinux_colors_path – Return a path to the active SELinux policy color configuration file Synopsis #include <selinux/selinux.h> const char *selinux_colors_path(void); Description selinux_colors_path() returns the path to the active policy color configuration file. The path is built from the path returned by selinux_policy_root(3) with /secolor.conf appended. This optional configuration file whose format is shown in secolor.conf(5), controls…
selinux_check_securetty_context – check whether a SELinux tty security context is defined as a securetty context Synopsis #include <selinux/selinux.h> int selinux_check_securetty_context(char *tty_context); Description selinux_check_securetty_context() returns 0 if tty_context is a securetty context, returns < 0 otherwise. See Also selinux(8)
security_compute_av, security_compute_av_flags, security_compute_create, security_compute_create_name, security_compute_relabel, security_compute_member, security_compute_user, security_validatetrans, security_get_initial_context – query the SELinux policy database in the kernel Synopsis #include <selinux/selinux.h> int security_compute_av(char *scon, char *tcon, security_class_t tclass, access_vector_t requested, struct av_decision *avd); int security_compute_av_raw(char *scon, char *tcon, security_class_t tclass, access_vector_t requested, struct av_decision *avd); int security_compute_av_flags(char *scon, char *tcon, security_class_t tclass, access_vector_t requested, struct…
security_compute_av, security_compute_av_flags, security_compute_create, security_compute_create_name, security_compute_relabel, security_compute_member, security_compute_user, security_validatetrans, security_get_initial_context – query the SELinux policy database in the kernel Synopsis #include <selinux/selinux.h> int security_compute_av(char *scon, char *tcon, security_class_t tclass, access_vector_t requested, struct av_decision *avd); int security_compute_av_raw(char *scon, char *tcon, security_class_t tclass, access_vector_t requested, struct av_decision *avd); int security_compute_av_flags(char *scon, char *tcon, security_class_t tclass, access_vector_t requested, struct…
selinux_path, selinux_policy_root, selinux_binary_policy_path, selinux_current_policy_path, selinux_failsafe_context_path, selinux_removable_context_path, selinux_default_context_path, selinux_user_contexts_path, selinux_file_context_path, selinux_media_context_path, selinux_contexts_path, selinux_booleans_path – These functions return the paths to the active SELinux policy configuration directories and files Synopsis #include <selinux/selinux.h> const char *selinux_path(void); const char *selinux_policy_root(void); const char *selinux_binary_policy_path(void); const char *selinux_current_policy_path(void); const char *selinux_failsafe_context_path(void); const char *selinux_removable_context_path(void); const char *selinux_default_context_path(void); const char *selinux_user_contexts_path(void); const…
selinux_boolean_sub – Search the translated name for a boolean_name record Synopsis #include <selinux/selinux.h> char *selinux_boolean_sub(const char *boolean_name); Description selinux_boolean_sub() searches the /etc/selinux/{POLICYTYPE}/booleans.subs_dist file for a matching boolean_name record. If the record exists the boolean substitution name is returned. If not selinux_boolean_sub() returns the original boolean_name. Return Value selinux_boolean_sub() returns the boolean_name or the substituted name…
selinux_path, selinux_policy_root, selinux_binary_policy_path, selinux_current_policy_path, selinux_failsafe_context_path, selinux_removable_context_path, selinux_default_context_path, selinux_user_contexts_path, selinux_file_context_path, selinux_media_context_path, selinux_contexts_path – These functions return the paths to the active SELinux policy configuration directories and files Synopsis #include <selinux/selinux.h> const char *selinux_path(void); const char *selinux_policy_root(void); const char *selinux_binary_policy_path(void); const char *selinux_current_policy_path(void); const char *selinux_failsafe_context_path(void); const char *selinux_removable_context_path(void); const char *selinux_default_context_path(void); const char *selinux_user_contexts_path(void); const char…
select_palette – Sets the internal palette for color conversion. Allegro game programming library. Synopsis #include <allegro.h> void select_palette(const PALETTE p); Description Ugly hack for use in various dodgy situations where you need to convert between paletted and truecolor image formats. Sets the internal palette table in the same way as the set_palette() function, so the…
select_mouse_cursor – Tells Allegro to select software or hardware cursor drawing. Synopsis #include <allegro.h> void select_mouse_cursor(int cursor); Description This function allows you to use the operating system’s native mouse cursors rather than some custom cursor. You will need to enable this functionality by calling enable_hardware_cursor() beforehand. If the operating system does not support this functionality,…
selabel_stats – obtain SELinux labeling statistics Synopsis #include <selinux/selinux.h> #include <selinux/label.h> void selabel_stats(struct selabel_handle *hnd); Description selabel_stats() causes zero or more messages to be printed containing backend-specific information about number of queries performed, number of unused entries, or other operational information. The messages are printed to standard error by default; a custom logging function can…
selabel_partial_match – determine whether a direct or partial match is possible on a file path – Only supported on file backend. Synopsis #include <stdbool.h> #include <selinux/selinux.h> #include <selinux/label.h> bool selabel_partial_match(struct selabel_handle *hnd, const char *key); Description selabel_partial_match() performs a partial match operation on the handle hnd, returning TRUE or FALSE. The key parameter is a…
selabel_open, selabel_close – userspace SELinux labeling interface Synopsis #include <selinux/selinux.h> #include <selinux/label.h> struct selabel_handle *selabel_open(int backend, const struct selinux_opt *options, unsigned nopt); void selabel_close(struct selabel_handle *hnd); Description selabel_open() is used to initialize a labeling handle to be used for lookup operations. The backend argument specifies which backend is to be opened; the list of current…
selabel_lookup – obtain SELinux security context from a string label Synopsis #include <selinux/selinux.h> #include <selinux/label.h> int selabel_lookup(struct selabel_handle *hnd, char **context, const char *key, int type); int selabel_lookup_raw(struct selabel_handle *hnd, char **context, const char *key, int type); Description selabel_lookup() performs a lookup operation on the handle hnd, returning the result in the memory pointed to…
selabel_lookup_best_match – obtain a best match SELinux security context – Only supported on file backend. Synopsis #include <selinux/selinux.h> #include <selinux/label.h> int selabel_lookup_best_match(struct selabel_handle *hnd, char **context, const char *key, const char **links, int type); int selabel_lookup_best_match_raw(struct selabel_handle *hnd, char **context, const char *key, const char **links, int type); Description selabel_lookup_best_match() performs a best match lookup…
selabel_lookup_best_match – obtain a best match SELinux security context – Only supported on file backend. Synopsis #include <selinux/selinux.h> #include <selinux/label.h> int selabel_lookup_best_match(struct selabel_handle *hnd, char **context, const char *key, const char **links, int type); int selabel_lookup_best_match_raw(struct selabel_handle *hnd, char **context, const char *key, const char **links, int type); Description selabel_lookup_best_match() performs a best match lookup…
selabel_lookup – obtain SELinux security context from a string label Synopsis #include <selinux/selinux.h> #include <selinux/label.h> int selabel_lookup(struct selabel_handle *hnd, char **context, const char *key, int type); int selabel_lookup_raw(struct selabel_handle *hnd, char **context, const char *key, int type); Description selabel_lookup() performs a lookup operation on the handle hnd, returning the result in the memory pointed to…
selabel_get_digests_all_partial_matches – retrieve the partial matches digest and the xattr digest that applies to the supplied path – Only supported on file backend. Synopsis #include <stdbool.h> #include <selinux/selinux.h> #include <selinux/label.h> bool selabel_get_digests_all_partial_matches( struct selabel_handle *hnd, const char *key, uint8_t **calculated_digest, uint8_t **xattr_digest, size_t *digest_len); Description selabel_get_digests_all_partial_matches() retrieves the file_contexts partial matches digest and the xattr…
selabel_digest – Return digest of specfiles and list of files used Synopsis #include <selinux/selinux.h> #include <selinux/label.h> int selabel_digest(struct selabel_handle *hnd, unsigned char **digest, size_t *digest_len, char ***specfiles, size_t *num_specfiles); Description selabel_digest() performs an operation on the handle hnd, returning the results of the SHA1 digest pointed to by digest, whose length will be digest_len. The…
selabel_open, selabel_close – userspace SELinux labeling interface Synopsis #include <selinux/selinux.h> #include <selinux/label.h> struct selabel_handle *selabel_open(int backend, const struct selinux_opt *options, unsigned nopt); void selabel_close(struct selabel_handle *hnd); Description selabel_open() is used to initialize a labeling handle to be used for lookup operations. The backend argument specifies which backend is to be opened; the list of current…