Blast-Radius Aware AI Code Review for Business-Critical Systems
LiveReview LiveReview Explore LiveReview

selinux_file_context_cmp - Compare two SELinux security contexts excluding the 'user' component

Description

selinux_file_context_cmp()  compares  two  context strings excluding the user component with strcmp(3) as
       shown in the EXAMPLE section.

       This is useful as for most object contexts, the user component is not relevant.

Errors

       None.

Example

       If context a is:
              user_u:user_r:user_t:s0

       and context b is:
              root:user_r:user_t:s0

       then the actual strings compared are:
              :user_r:user_t:s0 and :user_r:user_t:s0

       Therefore they will match and selinux_file_context_cmp() will return zero.

Name

       selinux_file_context_cmp - Compare two SELinux security contexts excluding the 'user' component

Notes

       The contexts being compared do not specifically need to be file contexts.

Return Value

       The return values follow the strcmp(3) function, where:
              0  if they are equal.
              1  if a is greater than b
              -1 if a is less than b

See Also

selinux(8)

SELinux API documentation                         08 March 2011                      selinux_file_context_cmp(3)

Synopsis

#include<selinux/selinux.h>intselinux_file_context_cmp(constchar*a,constchar*b);

See Also