logo
Free, unlimited AI code reviews that run on commit
git-lrc git-lrc GitHub Install Now We'd appreciate a star git-lrc - Free, unlimited AI code reviews that run on commit | Product Hunt git-lrc - Free, unlimited AI code reviews that run on commit | Product Hunt

avc_context_to_sid, avc_sid_to_context, avc_get_initial_sid - obtain and manipulate SELinux security ID's

Author

       Eamon Walsh <ewalsh@tycho.nsa.gov>

Description

       Security ID's (SID's) are opaque representations of security contexts, managed by the userspace AVC.

       avc_context_to_sid() returns a SID for the given context in the memory referenced by sid.

       avc_sid_to_context()  returns  a  copy of the context represented by sid in the memory referenced by ctx.
       The user must free the copy with freecon(3).

       avc_get_initial_sid() returns a SID for the kernel initial security identifier specified by name.

Errors

ENOMEM An attempt to allocate memory failed.

Name

       avc_context_to_sid, avc_sid_to_context, avc_get_initial_sid - obtain and manipulate SELinux security ID's

Notes

       As of libselinux version 2.0.86, SID's are no longer reference counted.  A SID will  be  valid  from  the
       time  it is first obtained until the next call to avc_destroy(3).  The sidget(3) and sidput(3) functions,
       formerly used to adjust the reference count, are no-ops and are deprecated.

Return Value

avc_context_to_sid() and avc_sid_to_context() return zero on success.  On error, -1 is returned and errno
       is set appropriately.

See Also

avc_init(3), avc_has_perm(3), avc_cache_stats(3), avc_add_callback(3), getcon(3), freecon(3), selinux(8)

                                                   27 May 2004                             avc_context_to_sid(3)

Synopsis

#include<selinux/selinux.h>#include<selinux/avc.h>intavc_context_to_sid(constchar*ctx,security_id_t*sid);intavc_sid_to_context(security_id_tsid,char**ctx);intavc_get_initial_sid(constchar*name,security_id_t*sid);

See Also