|
HTML rendering created 2024-06-26 by Michael Kerrisk, author of The Linux Programming Interface. For details of in-depth Linux/UNIX system programming training courses that I teach, look here. Hosting by jambit GmbH. |
|
|
NAME | SYNOPSIS | DESCRIPTION | RETURN VALUE | SEE ALSO | COLOPHON |
|
|
|
get_ordered_context_list(3) SELinux get_ordered_context_list(3)
get_ordered_context_list, get_ordered_context_list_with_level,
get_default_context, get_default_context_with_level,
get_default_context_with_role,
get_default_context_with_rolelevel, query_user_context,
manual_user_enter_context, get_default_role - determine SELinux
context(s) for user sessions
#include <selinux/selinux.h>
#include <selinux/get_context_list.h>
int get_ordered_context_list(const char *user, const char
*fromcon, char ***list);
int get_ordered_context_list_with_level(const char *user, const
char *level, const char *fromcon, char ***list);
int get_default_context(const char *user, const char *fromcon,
char **newcon);
int get_default_context_with_level(const char *user, const char
*level, const char *fromcon, char **newcon);
int get_default_context_with_role(const char *user, const char
*role, const char *fromcon, char **newcon);
int get_default_context_with_rolelevel(const char *user, const
char *role, const char *level, const char *fromcon, char
**newcon);
int query_user_context(char **list, char **newcon);
int manual_user_enter_context(const char *user, char **newcon);
int get_default_type(const char *role, char **type);
This family of functions can be used to obtain either a
prioritized list of all reachable security contexts for a given
SELinux user or a single default (highest priority) context for a
given SELinux user for use by login-like programs. These
functions takes a SELinux user identity that must be defined in
the SELinux policy as their input, not a Linux username. Most
callers should typically first call getseuserbyname(3) to look up
the SELinux user identity and level for a given Linux username
and then invoke one of get_ordered_context_list_with_level() or
get_default_context_with_level() with the returned SELinux user
and level as inputs.
get_ordered_context_list() obtains the list of contexts for the
specified SELinux user identity that are reachable from the
specified fromcon context based on the global
/etc/selinux/{SELINUXTYPE}/contexts/default_contexts file and the
per-user /etc/selinux/{SELINUXTYPE}/contexts/users/<username>
file if it exists. The fromcon parameter may be NULL to indicate
that the current context should be used. The function returns
the number of contexts in the list, or -1 upon errors. The list
must be freed using the freeconary(3) function.
get_ordered_context_list_with_level() invokes the
get_ordered_context_list() function and applies the specified
level.
get_default_context() is the same as get_ordered_context_list()
but only returns a single context which has to be freed with
freecon(3).
get_default_context_with_level() invokes the
get_default_context() function and applies the specified level.
get_default_context_with_role() is the same as
get_default_context() but only returns a context with the
specified role, returning -1 if no such context is reachable for
the user.
get_default_context_with_rolelevel() invokes the
get_default_context_with_role() function and applies the
specified level.
query_user_context() takes a list of contexts, queries the user
via stdin/stdout as to which context they want, and returns a new
context as selected by the user (which has to be freed with
freecon(3)).
manual_user_enter_context() allows the user to manually enter a
context as a fallback if a list of authorized contexts could not
be obtained. Caller must free via freecon(3).
get_default_type() Get the default type (domain) for role and set
type to refer to it, which has to be freed with free.
get_ordered_context_list() and
get_ordered_context_list_with_level() return the number of
contexts in the list upon success or -1 upon errors. The other
functions return 0 for success or -1 for errors.
selinux(8), freeconary(3), freecon(3), security_compute_av(3),
getseuserbyname(3)
This page is part of the selinux (Security-Enhanced Linux user-
space libraries and tools) project. Information about the
project can be found at
⟨https://github.com/SELinuxProject/selinux/wiki⟩. If you have a
bug report for this manual page, see
⟨https://github.com/SELinuxProject/selinux/wiki/Contributing⟩.
This page was obtained from the project's upstream Git repository
⟨https://github.com/SELinuxProject/selinux⟩ on 2024-06-14. (At
that time, the date of the most recent commit that was found in
the repository was 2023-05-11.) If you discover any rendering
problems in this HTML version of the page, or you believe there
is a better or more up-to-date source for the page, or you have
corrections or improvements to the information in this COLOPHON
(which is not part of the original manual page), send a mail to
[email protected]
[email protected] 1 January 2004 get_ordered_context_list(3)
Pages that refer to this page: getseuserbyname(3), security_compute_av(3), default_contexts(5), default_type(5), failsafe_context(5), user_contexts(5)
|
HTML rendering created 2024-06-26 by Michael Kerrisk, author of The Linux Programming Interface. For details of in-depth Linux/UNIX system programming training courses that I teach, look here. Hosting by jambit GmbH. |
|