get_ordered_context_listSection: SE Linux API documentation (3)Updated: 1 January 2004 |
NAME
get_ordered_context_list, get_default_context, query_user_context - determine context(s) for user login sessionsSYNOPSIS
#include <selinux/selinux.h>#include <selinux/get_context_list.h>
int get_ordered_context_list(const char *user, security_context_t fromcon, security_context_t **list);
int get_default_context(const char *user, security_context_t fromcon, security_context_t *newcon);
int query_user_context(security_context_t *list, security_context_t *newcon);
int manual_user_enter_context(const char *user, security_context_t *newcon);
DESCRIPTION
get_ordered_context_list queries the SE Linux policy database in the kernel and some configuration files to determine an ordered list of contexts that may be used for login sessions. The list must be freed with freeconary. The possible roles and domains will be read from /etc/security/default_contexts and .default_contexts in the home directory of the user in question.get_default_context is the same as get_ordered_context_list but only returns a single context which has to be freed with freecon.
query_user_context takes a list of contexts, queries the user via stdin/stdout as to which context they want, and returns a new context as selected by the user (which has to be freed with freecon).
manual_user_enter_context allows the user to manually enter a context as a fallback if a list of authorized contexts could not be obtained. Caller must free via freecon.
RETURN VALUE
0 for success and on error -1 is returned.SEE ALSO
freeconary(3), freecon(3), security_compute_av(3)