Linux Manuals session 3

selinux_status_open, selinux_status_close, selinux_status_updated, selinux_status_getenforce, selinux_status_policyload and selinux_status_deny_unknown – reference the SELinux kernel status without invocation of system calls Synopsis #include <selinux/avc.h> int selinux_status_open(int fallback); void selinux_status_close(void); int selinux_status_updated(void); int selinux_status_getenforce(void); int selinux_status_policyload(void); int selinux_status_deny_unknown(void); Description Linux 2.6.37 or later provides a SELinux kernel status page; being mostly placed on /sys/fs/selinux/status entry. It enables userspace applications…

selinux_status_open, selinux_status_close, selinux_status_updated, selinux_status_getenforce, selinux_status_policyload and selinux_status_deny_unknown – reference the SELinux kernel status without invocation of system calls Synopsis #include <selinux/avc.h> int selinux_status_open(int fallback); void selinux_status_close(void); int selinux_status_updated(void); int selinux_status_getenforce(void); int selinux_status_policyload(void); int selinux_status_deny_unknown(void); Description Linux 2.6.37 or later provides a SELinux kernel status page; being mostly placed on /sys/fs/selinux/status entry. It enables userspace applications…

selinux_status_open, selinux_status_close, selinux_status_updated, selinux_status_getenforce, selinux_status_policyload and selinux_status_deny_unknown – reference the SELinux kernel status without invocation of system calls Synopsis #include <selinux/avc.h> int selinux_status_open(int fallback); void selinux_status_close(void); int selinux_status_updated(void); int selinux_status_getenforce(void); int selinux_status_policyload(void); int selinux_status_deny_unknown(void); Description Linux 2.6.37 or later provides a SELinux kernel status page; being mostly placed on /sys/fs/selinux/status entry. It enables userspace applications…

selinux_policy_root – return the path of the SELinux policy files for this machine selinux_set_policy_root – Set an alternate SELinux root path for the SELinux policy files for this machine. Synopsis #include <selinux/selinux.h> const char *selinux_policy_root(void); int selinux_set_policy_root(const char *policypath); Description selinux_policy_root() reads the contents of the /etc/selinux/config file to determine which policy files should be…

selinux_set_mapping – establish dynamic object class and permission mapping Synopsis #include <selinux/selinux.h> struct security_class_mapping { const char *name; const char *perms[]; }; int selinux_set_mapping(struct security_class_mapping *map); Description selinux_set_mapping() establishes a mapping from a user-provided ordering of object classes and permissions to the numbers actually used by the loaded system policy. Use of this function is…

selinux_set_callback – userspace SELinux callback facilities Synopsis #include <selinux/selinux.h> void selinux_set_callback(int type, union selinux_callback callback); Description selinux_set_callback() sets the callback indicated by type to the value of callback, which should be passed as a function pointer cast to type union selinux_callback. All callback functions should return a negative value with errno set appropriately on error….

selinux_path, selinux_policy_root, selinux_binary_policy_path, selinux_current_policy_path, selinux_failsafe_context_path, selinux_removable_context_path, selinux_default_context_path, selinux_user_contexts_path, selinux_file_context_path, selinux_media_context_path, selinux_contexts_path – These functions return the paths to the active SELinux policy configuration directories and files Synopsis #include <selinux/selinux.h> const char *selinux_path(void); const char *selinux_policy_root(void); const char *selinux_binary_policy_path(void); const char *selinux_current_policy_path(void); const char *selinux_failsafe_context_path(void); const char *selinux_removable_context_path(void); const char *selinux_default_context_path(void); const char *selinux_user_contexts_path(void); const char…

selinux_restorecon_xattr – manage default security.sehash extended attribute entries added by selinux_restorecon(3), setfiles(8) or restorecon(8). Synopsis #include <selinux/restorecon.h> int selinux_restorecon_xattr(const char *pathname, unsigned int xattr_flags, struct dir_xattr ***xattr_list); Description selinux_restorecon_xattr() returns a linked list of dir_xattr structures containing information described below based on: pathname containing a directory tree to be searched for security.sehash extended attribute entries….

selinux_restorecon_set_sehandle – set a labeling handle for use by selinux_restorecon(3) Synopsis #include <selinux/restorecon.h> #include <selinux/label.h> void selinux_restorecon_set_sehandle(struct selabel_handle *handle); Description selinux_restorecon_set_sehandle() sets the handle to be use by selinux_restorecon(3) when relabeling files. selinux_restorecon_set_sehandle() is generally used when customised selabel_open(3) parameters are required to perform relabeling operations with selinux_restorecon(3). See Also selinux_restorecon(3), selinux_restorecon_set_exclude_list(3), selinux_restorecon_default_handle(3), selinux_restorecon_set_alt_rootpath(3), selinux_restorecon_xattr(3)

selinux_restorecon_set_exclude_list – set list of directories to be excluded from relabeling. Synopsis #include <selinux/restorecon.h> void selinux_restorecon_set_exclude_list(const char **exclude_list); Description selinux_restorecon_set_exclude_list() passes to selinux_restorecon(3) a pointer containing a NULL terminated list of one or more directories that are not to be relabeled in exclude_list. selinux_restorecon_set_exclude_list() must be called prior to selinux_restorecon(3). See Also selinux_restorecon(3), selinux_restorecon_set_sehandle(3), selinux_restorecon_default_handle(3),…

selinux_restorecon_set_alt_rootpath – set an alternate rootpath. Synopsis #include <selinux/restorecon.h> int selinux_restorecon_set_alt_rootpath(const char *alt_rootpath); Description selinux_restorecon_set_alt_rootpath() passes to selinux_restorecon(3) a pointer containing an alternate rootpath alt_rootpath. selinux_restorecon_set_alt_rootpath() must be called prior to selinux_restorecon(3). Return Value On success, zero is returned. On error, -1 is returned and errno is set appropriately. See Also selinux_restorecon(3), selinux_restorecon_set_sehandle(3), selinux_restorecon_default_handle(3), selinux_restorecon_set_exclude_list(3),…

selinux_restorecon_default_handle – sets default parameters for selinux_restorecon(3) Synopsis #include <selinux/restorecon.h> #include <selinux/label.h> struct selabel_handle *selinux_restorecon_default_handle(void); Description selinux_restorecon_default_handle() sets default parameters for selinux_restorecon(3) by calling selabel_open(3) with the SELABEL_OPT_DIGEST option only. This will enable a digest to be calculated on the currently loaded policy file_contexts(5) set of files as described in the NOTES section of selinux_restorecon(3)….

selinux_restorecon – restore file(s) default SELinux security contexts Synopsis #include <selinux/restorecon.h> int selinux_restorecon(const char *pathname, unsigned int restorecon_flags); Description selinux_restorecon() restores file default security contexts on filesystems that support extended attributes (see xattr(7)), based on: pathname containing a directory or file to be relabeled. If this is a directory and the restorecon_flags SELINUX_RESTORECON_RECURSE has been…

selinux_path, selinux_policy_root, selinux_binary_policy_path, selinux_current_policy_path, selinux_failsafe_context_path, selinux_removable_context_path, selinux_default_context_path, selinux_user_contexts_path, selinux_file_context_path, selinux_media_context_path, selinux_contexts_path – These functions return the paths to the active SELinux policy configuration directories and files Synopsis #include <selinux/selinux.h> const char *selinux_path(void); const char *selinux_policy_root(void); const char *selinux_binary_policy_path(void); const char *selinux_current_policy_path(void); const char *selinux_failsafe_context_path(void); const char *selinux_removable_context_path(void); const char *selinux_default_context_path(void); const char *selinux_user_contexts_path(void); const char…

selinux_raw_context_to_color – Return RGB color string for an SELinux security context Synopsis #include <selinux/selinux.h> int selinux_raw_context_to_color(char *raw, char **color_str); Description selinux_raw_context_to_color() returns a color_str associated to the raw context raw provided that the mcstransd(8) daemon is running, the policy is an MLS type policy (MCS or MLS) and there is a color configuration file secolor.conf(5)…

selinux_policy_root – return the path of the SELinux policy files for this machine selinux_set_policy_root – Set an alternate SELinux root path for the SELinux policy files for this machine. Synopsis #include <selinux/selinux.h> const char *selinux_policy_root(void); int selinux_set_policy_root(const char *policypath); Description selinux_policy_root() reads the contents of the /etc/selinux/config file to determine which policy files should be…

selinux_path, selinux_policy_root, selinux_binary_policy_path, selinux_current_policy_path, selinux_failsafe_context_path, selinux_removable_context_path, selinux_default_context_path, selinux_user_contexts_path, selinux_file_context_path, selinux_media_context_path, selinux_contexts_path – These functions return the paths to the active SELinux policy configuration directories and files Synopsis #include <selinux/selinux.h> const char *selinux_path(void); const char *selinux_policy_root(void); const char *selinux_binary_policy_path(void); const char *selinux_current_policy_path(void); const char *selinux_failsafe_context_path(void); const char *selinux_removable_context_path(void); const char *selinux_default_context_path(void); const char *selinux_user_contexts_path(void); const char…

selinux_path, selinux_policy_root, selinux_binary_policy_path, selinux_current_policy_path, selinux_failsafe_context_path, selinux_removable_context_path, selinux_default_context_path, selinux_user_contexts_path, selinux_file_context_path, selinux_media_context_path, selinux_contexts_path – These functions return the paths to the active SELinux policy configuration directories and files Synopsis #include <selinux/selinux.h> const char *selinux_path(void); const char *selinux_policy_root(void); const char *selinux_binary_policy_path(void); const char *selinux_current_policy_path(void); const char *selinux_failsafe_context_path(void); const char *selinux_removable_context_path(void); const char *selinux_default_context_path(void); const char *selinux_user_contexts_path(void); const char…

security_load_policy – load a new SELinux policy Synopsis #include <selinux/selinux.h> int security_load_policy(void *data, size_t len); int selinux_mkload_policy(int preservebools); int selinux_init_load_policy(int *enforce); Description security_load_policy() loads a new policy, returns 0 for success and -1 for error. selinux_mkload_policy() makes a policy image and loads it. This function provides a higher level interface for loading policy than security_load_policy(),…

selinux_path, selinux_policy_root, selinux_binary_policy_path, selinux_current_policy_path, selinux_failsafe_context_path, selinux_removable_context_path, selinux_default_context_path, selinux_user_contexts_path, selinux_file_context_path, selinux_media_context_path, selinux_contexts_path – These functions return the paths to the active SELinux policy configuration directories and files Synopsis #include <selinux/selinux.h> const char *selinux_path(void); const char *selinux_policy_root(void); const char *selinux_binary_policy_path(void); const char *selinux_current_policy_path(void); const char *selinux_failsafe_context_path(void); const char *selinux_removable_context_path(void); const char *selinux_default_context_path(void); const char *selinux_user_contexts_path(void); const char…