selabel_open(3) SELinux API documentation selabel_open(3) NAME selabel_open, selabel_close - userspace SELinux labeling interface SYNOPSIS #include <selinux/selinux.h> #include <selinux/label.h> struct selabel_handle *selabel_open(int backend, const struct selinux_opt *options, unsigned nopt); void selabel_close(struct selabel_handle *hnd); DESCRIPTION selabel_open() is used to initialize a labeling handle to be used for lookup operations. The backend argument specifies which backend is to be opened; the list of current backends appears in BACKENDS below. The options argument should be NULL or a pointer to an array of selinux_opt structures of length nopt: struct selinux_opt { int type; const char *value; }; The available option types are described in GLOBAL OPTIONS below as well as in the docu- mentation for each individual backend. The return value on success is a non-NULL value for use in subsequent label operations. selabel_close() terminates use of a handle, freeing any internal resources associated with it. After this call has been made, the handle must not be used again. GLOBAL OPTIONS Global options which may be passed to selabel_open() include the following: SELABEL_OPT_UNUSED The option with a type code of zero is a no-op. Thus an array of options may be initizalized to zero and any untouched elements will not cause an error. SELABEL_OPT_VALIDATE A non-null value for this option enables context validation. By default, secu- rity_check_context(3) is used; a custom validation function can be provided via selinux_set_callback(3). Note that an invalid context may not be treated as an error unless it is actually encountered during a lookup operation. SELABEL_OPT_DIGEST A non-null value for this option enables the generation of an SHA1 digest of the spec files loaded as described in selabel_digest(3) BACKENDS SELABEL_CTX_FILE File contexts backend, described in selabel_file(5). SELABEL_CTX_MEDIA Media contexts backend, described in selabel_media(5). SELABEL_CTX_X X Windows contexts backend, described in selabel_x(5). SELABEL_CTX_DB Database objects contexts backend, described in selabel_db(5). RETURN VALUE A non-NULL handle value is returned on success. On error, NULL is returned and errno is set appropriately. AUTHOR Eamon Walsh <ewalsh AT tycho.gov> SEE ALSO selabel_lookup(3), selabel_stats(3), selinux_set_callback(3), selinux(8) 18 Jun 2007 selabel_open(3)
Generated by $Id: phpMan.php,v 4.55 2007/09/05 04:42:51 chedong Exp $ Author: Che Dong
On Apache
Under GNU General Public License
2024-04-27 01:00 @18.220.66.151 CrawledBy Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)