get_ordered_context_list(3)                  SELinux                  get_ordered_context_list(3)



NAME
       get_ordered_context_list,     get_ordered_context_list_with_level,    get_default_context,
       get_default_context_with_level,      get_default_context_with_role,       get_default_con‐
       text_with_rolelevel,  query_user_context,  manual_user_enter_context,  get_default_role  -
       determine SELinux context(s) for user sessions

SYNOPSIS
       #include <selinux/selinux.h>
       #include <selinux/get_context_list.h>

       int get_ordered_context_list(const char *user, char * fromcon, char ***list);

       int get_ordered_context_list_with_level(const char *user, const char *level, char *  from‐
       con, char ***list);

       int get_default_context(const char *user, char * fromcon, char **newcon);

       int  get_default_context_with_level(const  char  *user, const char *level, char * fromcon,
       char **newcon);

       int get_default_context_with_role(const char *user, const char *role, char * fromcon, char
       **newcon);

       int  get_default_context_with_rolelevel(const  char  *user,  const char *level, const char
       *role, char * fromcon, char **newcon);

       int query_user_context(char **list, char **newcon);

       int manual_user_enter_context(const char *user, char **newcon);

       int get_default_type(const char *role, char **type);

DESCRIPTION
       get_ordered_context_list() invokes the security_compute_user(3)  function  to  obtain  the
       list of contexts for the specified user that are reachable from the specified fromcon con‐
       text.   The  function   then   orders   the   resulting   list   based   on   the   global
       /etc/selinux/{SELINUXTYPE}/contexts/default_contexts     file     and     the     per-user
       /etc/selinux/{SELINUXTYPE}/contexts/users/<username>  file  if  it  exists.   The  fromcon
       parameter  may  be NULL to indicate that the current context should be used.  The function
       returns the number of contexts in the list, or -1 upon errors.  The  list  must  be  freed
       using the freeconary(3) function.

       get_ordered_context_list_with_level()  invokes the get_ordered_context_list() function and
       applies the specified level.

       get_default_context() is the same as get_ordered_context_list() but only returns a  single
       context which has to be freed with freecon(3).

       get_default_context_with_level()  invokes  the  get_default_context() function and applies
       the specified level.

       get_default_context_with_role() is the same as get_default_context() but  only  returns  a
       context  with  the  specified  role,  returning -1 if no such context is reachable for the
       user.

       get_default_context_with_rolelevel() invokes the get_default_context_with_role()  function
       and applies the specified level.

       query_user_context()  takes  a  list  of contexts, queries the user via stdin/stdout as to
       which context they want, and returns a new context as selected by the user (which  has  to
       be freed with freecon(3)).

       manual_user_enter_context() allows the user to manually enter a context as a fallback if a
       list of authorized contexts could not be obtained. Caller must free via freecon(3).

       get_default_type() Get the default type (domain) for role and set type  to  refer  to  it,
       which has to be freed with free.

RETURN VALUE
       get_ordered_context_list()  and get_ordered_context_list_with_level() return the number of
       contexts in the list upon success or -1 upon errors.  The other  functions  return  0  for
       success or -1 for errors.

SEE ALSO
       selinux(8), freeconary(3), freecon(3), security_compute_av(3), getseuserbyname(3)



russell AT coker.au                      1 January 2004              get_ordered_context_list(3)