| Top |
SELinux policy managementSELinux policy management — Read SELinux policy and manage filesystem labels |
| OstreeSePolicy * | ostree_sepolicy_new () |
| GFile * | ostree_sepolicy_get_path () |
| const char * | ostree_sepolicy_get_name () |
| gboolean | ostree_sepolicy_get_label () |
| const char * | ostree_sepolicy_get_csum () |
| gboolean | ostree_sepolicy_restorecon () |
| gboolean | ostree_sepolicy_setfscreatecon () |
| void | ostree_sepolicy_fscreatecon_cleanup () |
A OstreeSePolicy object can load the SELinux policy from a given root and perform labeling.
OstreeSePolicy * ostree_sepolicy_new (GFile *path,GCancellable *cancellable,GError **error);
gboolean ostree_sepolicy_get_label (OstreeSePolicy *self,const char *relpath,guint32 unix_mode,char **out_label,GCancellable *cancellable,GError **error);
Store in out_label
the security context for the given relpath
and
mode unix_mode
. If the policy does not specify a label, NULL
will be returned.
self |
Self |
|
relpath |
Path |
|
unix_mode |
Unix mode |
|
out_label |
Return location for security context. |
[allow-none][out][transfer full] |
cancellable |
Cancellable |
|
error |
Error |
gboolean ostree_sepolicy_restorecon (OstreeSePolicy *self,const char *path,GFileInfo *info,GFile *target,OstreeSePolicyRestoreconFlags flags,char **out_new_label,GCancellable *cancellable,GError **error);
Reset the security context of target
based on the SELinux policy.
self |
Self |
|
path |
Path string to use for policy lookup |
|
info |
File attributes. |
[allow-none] |
target |
Physical path to target file |
|
flags |
Flags controlling behavior |
|
out_new_label |
New label, or |
[allow-none][out] |
cancellable |
Cancellable |
|
error |
Error |
gboolean ostree_sepolicy_setfscreatecon (OstreeSePolicy *self,const char *path,guint32 mode,GError **error);
void
ostree_sepolicy_fscreatecon_cleanup (void **unused);
Cleanup function for ostree_sepolicy_setfscreatecon().