tequilaOS/platform_external_selinux
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
platform_external_selinux/libselinux/man/man3
History
KaiGai Kohei bc2a8f418e libselinux: add selinux_status_* interfaces for /selinux/status 
The attached patch adds several interfaces to reference /selinux/status
according to sequential-lock logic.

selinux_status_open() open the kernel status page and mmap it with
read-only mode, or open netlink socket as a fallback in older kernels.

Then, we can obtain status information from the mmap'ed page using
selinux_status_updated(), selinux_status_getenfoce(),
selinux_status_policyload() or selinux_status_deny_unknown().

It enables to help to implement userspace avc with heavy access control
decision; that we cannot ignore the cost to communicate with kernel for
validation of userspace caches.

Signed-off-by: Steve Lawrence <slawrence@tresys.com>
2011-03-01 11:21:19 -05:00
..
avc_add_callback.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
avc_audit.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
avc_av_stats.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
avc_cache_stats.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
avc_cleanup.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
avc_compute_create.3 Documentation updates for the removal of recounted SID's. 2009-09-02 20:36:42 -04:00
avc_compute_member.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
avc_context_to_sid.3 Documentation updates for the removal of recounted SID's. 2009-09-02 20:36:42 -04:00
avc_destroy.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
avc_entry_ref_init.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
avc_get_initial_context.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
avc_get_initial_sid.3 Author: Daniel J Walsh 2008-09-29 15:55:18 -04:00
avc_has_perm.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
avc_has_perm_noaudit.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
avc_init.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
avc_netlink_acquire_fd.3 The attached patch enables userspace object managers to handle notification 2009-04-07 22:08:48 -04:00
avc_netlink_check_nb.3 The attached patch enables userspace object managers to handle notification 2009-04-07 22:08:48 -04:00
avc_netlink_close.3 The attached patch enables userspace object managers to handle notification 2009-04-07 22:08:48 -04:00
avc_netlink_loop.3 libselinux: fix avc_netlink_loop() error caused by nonblocking mode. 2010-03-08 18:15:53 -05:00
avc_netlink_open.3 The attached patch enables userspace object managers to handle notification 2009-04-07 22:08:48 -04:00
avc_netlink_release_fd.3 The attached patch enables userspace object managers to handle notification 2009-04-07 22:08:48 -04:00
avc_open.3 Documentation updates for the removal of recounted SID's. 2009-09-02 20:36:42 -04:00
avc_reset.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
avc_sid_stats.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
avc_sid_to_context.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
checkPasswdAccess.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
context_free.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
context_new.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
context_range_get.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
context_range_set.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
context_role_get.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
context_role_set.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
context_type_get.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
context_type_set.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
context_user_get.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
context_user_set.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
fgetfilecon.3 Author: Daniel J Walsh 2008-09-29 15:12:38 -04:00
fini_selinuxmnt.3 Author: Guido Trentalancia 2009-11-27 14:44:41 -05:00
freecon.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
freeconary.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
fsetfilecon.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
get_default_context.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
get_default_context_with_level.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
get_default_context_with_role.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
get_default_context_with_rolelevel.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
get_default_type.3 Author: Daniel J Walsh 2008-09-29 15:55:18 -04:00
get_ordered_context_list.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
get_ordered_context_list_with_level.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
getcon.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
getexeccon.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
getfilecon.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
getfscreatecon.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
getkeycreatecon.3 Author: Daniel J Walsh 2008-09-29 15:12:38 -04:00
getpeercon.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
getpidcon.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
getprevcon.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
getseuserbyname.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
getsockcreatecon.3 Author: Daniel J Walsh 2008-09-29 15:55:18 -04:00
init_selinuxmnt.3 Author: Guido Trentalancia 2009-11-27 14:44:41 -05:00
is_context_customizable.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
is_selinux_enabled.3 Author: Daniel J Walsh 2010-03-18 16:38:17 -04:00
is_selinux_mls_enabled.3 Author: Daniel J Walsh 2008-09-29 15:55:18 -04:00
lgetfilecon.3 Author: Daniel J Walsh 2008-09-29 15:12:38 -04:00
lsetfilecon.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
manual_user_enter_context.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
matchmediacon.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
matchpathcon.3 Author: Guido Trentalancia 2009-11-27 14:44:41 -05:00
matchpathcon_checkmatches.3 Author: Guido Trentalancia 2009-11-27 14:44:41 -05:00
matchpathcon_filespec_add.3 Author: Guido Trentalancia 2009-11-27 14:44:41 -05:00
matchpathcon_filespec_destroy.3 Author: Guido Trentalancia 2009-11-27 14:44:41 -05:00
matchpathcon_filespec_eval.3 Author: Guido Trentalancia 2009-11-27 14:44:41 -05:00
matchpathcon_fini.3 Author: Daniel J Walsh 2008-09-29 15:55:18 -04:00
matchpathcon_index.3 Author: Guido Trentalancia 2009-11-27 14:44:41 -05:00
matchpathcon_init.3 Author: Daniel J Walsh 2008-09-29 15:55:18 -04:00
print_access_vector.3 Author: Guido Trentalancia 2009-11-27 14:44:41 -05:00
query_user_context.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
rpm_execcon.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
security_av_perm_to_string.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
security_av_string.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
security_check_context.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
security_class_to_string.3 Author: Guido Trentalancia 2009-11-27 14:44:41 -05:00
security_commit_booleans.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
security_compute_av.3 Author: Guido Trentalancia 2009-11-27 14:44:41 -05:00
security_compute_av_flags.3 This patch enables applications to handle permissive domain correctly. 2009-04-07 22:10:30 -04:00
security_compute_create.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
security_compute_member.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
security_compute_relabel.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
security_compute_user.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
security_deny_unknown.3 It is useful for userspace object manager, if libselinux has an 2009-04-07 22:48:01 -04:00
security_disable.3 Author: Guido Trentalancia 2009-11-27 14:44:41 -05:00
security_get_boolean_active.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
security_get_boolean_names.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
security_get_boolean_pending.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
security_get_initial_context.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
security_getenforce.3 It is useful for userspace object manager, if libselinux has an 2009-04-07 22:48:01 -04:00
security_load_booleans.3 Author: Guido Trentalancia 2009-11-27 14:44:41 -05:00
security_load_policy.3 Author: Guido Trentalancia 2009-11-27 14:44:41 -05:00
security_mkload_policy.3 Author: Guido Trentalancia 2009-11-27 14:44:41 -05:00
security_policyvers.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
security_set_boolean.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
security_setenforce.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
selabel_close.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
selabel_lookup.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
selabel_open.3 This patch allows selabel_*() interfaces to provide an expected security context 2010-03-15 19:01:30 -04:00
selabel_stats.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
selinux_binary_policy_path.3 This patch allows selabel_*() interfaces to provide an expected security context 2010-03-15 19:01:30 -04:00
selinux_booleans_path.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
selinux_check_passwd_access.3 Author: Guido Trentalancia 2009-11-27 14:44:41 -05:00
selinux_check_securetty_context.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
selinux_contexts_path.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
selinux_default_context_path.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
selinux_default_type_path.3 Author: Daniel J Walsh 2008-09-29 15:55:18 -04:00
selinux_failsafe_context_path.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
selinux_file_context_cmp.3 Author: Guido Trentalancia 2009-11-27 14:44:41 -05:00
selinux_file_context_homedir_path.3 Author: Daniel J Walsh 2008-09-29 15:55:18 -04:00
selinux_file_context_local_path.3 Author: Daniel J Walsh 2008-09-29 15:55:18 -04:00
selinux_file_context_path.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
selinux_file_context_verify.3 Author: Guido Trentalancia 2009-11-27 14:44:41 -05:00
selinux_getenforcemode.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
selinux_getpolicytype.3 Author: Daniel J Walsh 2008-09-29 15:55:18 -04:00
selinux_homedir_context_path.3 Author: Daniel J Walsh 2008-09-29 15:55:18 -04:00
selinux_lsetfilecon_default.3 Author: Guido Trentalancia 2009-11-27 14:44:41 -05:00
selinux_media_context_path.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
selinux_netfilter_context_path.3 Author: Daniel J Walsh 2008-09-29 15:55:18 -04:00
selinux_path.3 Author: Daniel J Walsh 2008-09-29 15:55:18 -04:00
selinux_policy_root.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
selinux_removable_context_path.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
selinux_securetty_types_path.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
selinux_set_callback.3 The attached patch enables userspace object managers to handle notification 2009-04-07 22:08:48 -04:00
selinux_set_mapping.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
selinux_status_close.3 libselinux: add selinux_status_* interfaces for /selinux/status 2011-03-01 11:21:19 -05:00
selinux_status_deny_unknown.3 libselinux: add selinux_status_* interfaces for /selinux/status 2011-03-01 11:21:19 -05:00
selinux_status_getenforce.3 libselinux: add selinux_status_* interfaces for /selinux/status 2011-03-01 11:21:19 -05:00
selinux_status_open.3 libselinux: add selinux_status_* interfaces for /selinux/status 2011-03-01 11:21:19 -05:00
selinux_status_policyload.3 libselinux: add selinux_status_* interfaces for /selinux/status 2011-03-01 11:21:19 -05:00
selinux_status_updated.3 libselinux: add selinux_status_* interfaces for /selinux/status 2011-03-01 11:21:19 -05:00
selinux_user_contexts_path.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
selinux_usersconf_path.3 Author: Daniel J Walsh 2008-09-29 15:55:18 -04:00
selinux_x_context_path.3 Author: Daniel J Walsh 2008-09-29 15:55:18 -04:00
set_matchpathcon_flags.3 Author: Guido Trentalancia 2009-11-27 14:44:41 -05:00
set_matchpathcon_invalidcon.3 Author: Guido Trentalancia 2009-11-27 14:44:41 -05:00
set_matchpathcon_printf.3 Author: Guido Trentalancia 2009-11-27 14:44:41 -05:00
set_selinuxmnt.3 Author: Guido Trentalancia 2009-11-27 14:44:41 -05:00
setcon.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
setexeccon.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
setfilecon.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
setfscreatecon.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
setkeycreatecon.3 Author: Daniel J Walsh 2008-09-29 15:12:38 -04:00
setsockcreatecon.3 Author: Daniel J Walsh 2008-09-29 15:55:18 -04:00
sidget.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
sidput.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
string_to_av_perm.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00
string_to_security_class.3 initial import from svn trunk revision 2950 2008-08-19 15:30:36 -04:00