| get_ordered_context_list(3) - phpMan
get_ordered_context_list(3) SELinux get_ordered_context_list(3)
NAME
get_ordered_context_list, get_ordered_context_list_with_level, get_default_context,
get_default_context_with_level, get_default_context_with_role, get_default_con‐
text_with_rolelevel, query_user_context, manual_user_enter_context, get_default_role -
determine SELinux context(s) for user sessions
SYNOPSIS
#include <selinux/selinux.h>
#include <selinux/get_context_list.h>
int get_ordered_context_list(const char *user, char * fromcon, char ***list);
int get_ordered_context_list_with_level(const char *user, const char *level, char * from‐
con, char ***list);
int get_default_context(const char *user, char * fromcon, char **newcon);
int get_default_context_with_level(const char *user, const char *level, char * fromcon,
char **newcon);
int get_default_context_with_role(const char *user, const char *role, char * fromcon, char
**newcon);
int get_default_context_with_rolelevel(const char *user, const char *level, const char
*role, char * fromcon, char **newcon);
int query_user_context(char **list, char **newcon);
int manual_user_enter_context(const char *user, char **newcon);
int get_default_type(const char *role, char **type);
DESCRIPTION
get_ordered_context_list() invokes the security_compute_user(3) function to obtain the
list of contexts for the specified user that are reachable from the specified fromcon con‐
text. The function then orders the resulting list based on the global
/etc/selinux/{SELINUXTYPE}/contexts/default_contexts file and the per-user
/etc/selinux/{SELINUXTYPE}/contexts/users/<username> file if it exists. The fromcon
parameter may be NULL to indicate that the current context should be used. The function
returns the number of contexts in the list, or -1 upon errors. The list must be freed
using the freeconary(3) function.
get_ordered_context_list_with_level() invokes the get_ordered_context_list() function and
applies the specified level.
get_default_context() is the same as get_ordered_context_list() but only returns a single
context which has to be freed with freecon(3).
get_default_context_with_level() invokes the get_default_context() function and applies
the specified level.
get_default_context_with_role() is the same as get_default_context() but only returns a
context with the specified role, returning -1 if no such context is reachable for the
user.
get_default_context_with_rolelevel() invokes the get_default_context_with_role() function
and applies the specified level.
query_user_context() takes a list of contexts, queries the user via stdin/stdout as to
which context they want, and returns a new context as selected by the user (which has to
be freed with freecon(3)).
manual_user_enter_context() allows the user to manually enter a context as a fallback if a
list of authorized contexts could not be obtained. Caller must free via freecon(3).
get_default_type() Get the default type (domain) for role and set type to refer to it,
which has to be freed with free.
RETURN VALUE
get_ordered_context_list() and get_ordered_context_list_with_level() return the number of
contexts in the list upon success or -1 upon errors. The other functions return 0 for
success or -1 for errors.
SEE ALSO
selinux(8), freeconary(3), freecon(3), security_compute_av(3), getseuserbyname(3)
russell AT coker.au 1 January 2004 get_ordered_context_list(3)
|