avc_compute_member (3) - Linux Man Pages
avc_compute_member: obtain SELinux label for new object
avc_compute_create, avc_compute_member - obtain SELinux label for new object
int avc_compute_create(security_id_t ssid, security_id_t tsid, security_class_t tclass, security_id_t *newsid);
DESCRIPTIONavc_compute_create() is used to compute a SID to use for labeling a new object in a particular class based on a SID pair. This call is identical to security_compute_create(), but does not require converting from userspace SID's to contexts and back again.
avc_compute_member() is used to compute a SID to use for labeling a polyinstantiated object instance of a particular class based on a SID pair. This call is identical to security_compute_member(), but does not require converting from userspace SID's to contexts and back again.
RETURN VALUEOn success, zero is returned. On error, -1 is returned and errno is set appropriately.
- The tclass and/or the security contexts referenced by ssid and tsid are not recognized by the currently loaded policy.
- An attempt to allocate memory failed.
AUTHOREamon Walsh <ewalsh [at] tycho.nsa.gov>
SEE ALSOavc_init(3), avc_context_to_sid(3), security_compute_create(3), selinux(8)
Linux man pages generated by: SysTutorials