Man Pages

avc_compute_create(3) - phpMan avc_compute_create(3) - phpMan

Command: man perldoc info search(apropos)  


avc_compute_create(3)      SELinux API documentation     avc_compute_create(3)



NAME
       avc_compute_create, avc_compute_member - obtain SELinux label for new object.

SYNOPSIS
       #include <selinux/selinux.h>

       #include <selinux/avc.h>

       int avc_compute_create(security_id_t ssid, security_id_t tsid,
                              security_class_t tclass, security_id_t *newsid);

       int avc_compute_member(security_id_t ssid, security_id_t tsid,
                              security_class_t tclass, security_id_t *newsid);

DESCRIPTION
       avc_compute_create  is  used to compute a SID to use for labeling a new object in a particular class based on a
       SID pair.  This call is identical to security_compute_create, but does not require  converting  from  userspace
       SID's to contexts and back again.

       avc_compute_member is used to compute a SID to use for labeling a polyinstantiated object instance of a partic-
       ular class based on a SID pair.  This call is identical to security_compute_member, but does not  require  con-
       verting from userspace SID's to contexts and back again.

       These functions return a SID for the computed context in the memory referenced by sid.


RETURN VALUE
       On success, zero is returned.  On error, -1 is returned and errno is set appropriately.


ERRORS
       EINVAL The  tclass and/or the security contexts referenced by ssid and tsid are not recognized by the currently
              loaded policy.


       ENOMEM An attempt to allocate memory failed.


AUTHOR
       Eamon Walsh <ewalshATtycho.gov>


SEE ALSO
       avc_init(3), avc_context_to_sid(3), security_compute_create(3), selinux(8)



                                  30 Mar 2007            avc_compute_create(3)