Top | ![]() |
![]() |
![]() |
![]() |
SELinux policy managementSELinux policy management — Read SELinux policy and manage filesystem labels |
OstreeSePolicy * | ostree_sepolicy_new () |
GFile * | ostree_sepolicy_get_path () |
const char * | ostree_sepolicy_get_name () |
gboolean | ostree_sepolicy_get_label () |
const char * | ostree_sepolicy_get_csum () |
gboolean | ostree_sepolicy_restorecon () |
gboolean | ostree_sepolicy_setfscreatecon () |
void | ostree_sepolicy_fscreatecon_cleanup () |
A OstreeSePolicy object can load the SELinux policy from a given root and perform labeling.
OstreeSePolicy * ostree_sepolicy_new (GFile *path
,GCancellable *cancellable
,GError **error
);
gboolean ostree_sepolicy_get_label (OstreeSePolicy *self
,const char *relpath
,guint32 unix_mode
,char **out_label
,GCancellable *cancellable
,GError **error
);
Store in out_label
the security context for the given relpath
and
mode unix_mode
. If the policy does not specify a label, NULL
will be returned.
self |
Self |
|
relpath |
Path |
|
unix_mode |
Unix mode |
|
out_label |
Return location for security context. |
[allow-none][out][transfer full] |
cancellable |
Cancellable |
|
error |
Error |
gboolean ostree_sepolicy_restorecon (OstreeSePolicy *self
,const char *path
,GFileInfo *info
,GFile *target
,OstreeSePolicyRestoreconFlags flags
,char **out_new_label
,GCancellable *cancellable
,GError **error
);
Reset the security context of target
based on the SELinux policy.
self |
Self |
|
path |
Path string to use for policy lookup |
|
info |
File attributes. |
[allow-none] |
target |
Physical path to target file |
|
flags |
Flags controlling behavior |
|
out_new_label |
New label, or |
[allow-none][out] |
cancellable |
Cancellable |
|
error |
Error |
gboolean ostree_sepolicy_setfscreatecon (OstreeSePolicy *self
,const char *path
,guint32 mode
,GError **error
);
void
ostree_sepolicy_fscreatecon_cleanup (void **unused
);
Cleanup function for ostree_sepolicy_setfscreatecon()
.