9eb9c93275
In attempting to enable building various part of Android with -Wall -Werror, we found that the const security_context_t declarations in libselinux are incorrect; const char * was intended, but const security_context_t translates to char * const and triggers warnings on passing const char * from the caller. Easiest fix is to replace them all with const char *. And while we are at it, just get rid of all usage of security_context_t itself as it adds no value - there is no true encapsulation of the security context strings and callers already directly use string functions on them. typedef left to permit building legacy users until such a time as all are updated. This is a port of Change-Id I2f9df7bb9f575f76024c3e5f5b660345da2931a7 from Android, augmented to deal with all of the other code in upstream libselinux and updating the man pages too. Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov> Acked-by: Eric Paris <eparis@redhat.com>
24 lines
870 B
Groff
24 lines
870 B
Groff
.TH "is_context_customizable" "3" "10 January 2005" "dwalsh@redhat.com" "SELinux API documentation"
|
|
.SH "NAME"
|
|
is_context_customizable \- check whether SELinux context type is customizable by the administrator
|
|
.
|
|
.SH "SYNOPSIS"
|
|
.B #include <selinux/selinux.h>
|
|
.sp
|
|
.BI "int is_context_customizable(char * " scon );
|
|
.
|
|
.SH "DESCRIPTION"
|
|
This function checks whether the type of scon is in the
|
|
.I /etc/selinux/{SELINUXTYPE}/context/customizable_types
|
|
file. A customizable type is a file context type that
|
|
administrators set on files, usually to allow certain domains to share the file content. restorecon and setfiles, by default, leave these context in place.
|
|
.
|
|
.SH "RETURN VALUE"
|
|
Returns 1 if security context is customizable or 0 if it is not.
|
|
Returns \-1 on error.
|
|
.
|
|
.SH "FILE"
|
|
.I /etc/selinux/{SELINUXTYPE}/context/customizable_types
|
|
.
|
|
.SH "SEE ALSO"
|
|
.BR selinux "(8)"
|