avc_compute_create
Section: SELinux API documentation (3)
Updated: 30 Mar 2007
Index
Return to Main Contents
NAME
avc_compute_create, avc_compute_member - obtain SELinux label for new object
SYNOPSIS
#include <selinux/selinux.h>
#include <selinux/avc.h>
int avc_compute_create(security_id_t ssid, security_id_t tsid,
security_class_t tclass, security_id_t *newsid);
int avc_compute_member(security_id_t ssid, security_id_t tsid,
security_class_t tclass, security_id_t *newsid);
DESCRIPTION
avc_compute_create()
is used to compute a SID to use for labeling a new object in a particular class based on a SID pair. This call is identical to
security_compute_create(),
but does not require converting from userspace SID's to contexts and back again.
avc_compute_member()
is used to compute a SID to use for labeling a polyinstantiated object instance of a particular class based on a SID pair. This call is identical to
security_compute_member(),
but does not require converting from userspace SID's to contexts and back again.
These functions
return a SID for the computed context in the memory referenced by
sid.
RETURN VALUE
On success, zero is returned. On error, -1 is returned and
errno
is set appropriately.
ERRORS
- EINVAL
-
The
tclass
and/or the security contexts referenced by
ssid
and
tsid
are not recognized by the currently loaded policy.
- ENOMEM
-
An attempt to allocate memory failed.
AUTHOR
Eamon Walsh <ewalsh@tycho.nsa.gov>
SEE ALSO
avc_init(3),
avc_context_to_sid(3),
security_compute_create(3),
selinux(8)
Index
- NAME
-
- SYNOPSIS
-
- DESCRIPTION
-
- RETURN VALUE
-
- ERRORS
-
- AUTHOR
-
- SEE ALSO
-
This document was created by
man2html,
using the manual pages.
Time: 18:11:41 GMT, April 16, 2024