Hey Emacs! This file is -*- nroff -*- source.

Author: Eamon Walsh (ewalsh@tycho.nsa.gov) 2004
avc_context_to_sid, avc_sid_to_context, avc_get_initial_sid - obtain and manipulate SELinux security ID's . #include <selinux/selinux.h>

#include <selinux/avc.h> "int avc_context_to_sid(char *" ctx ", security_id_t *" sid ");" "int avc_sid_to_context(security_id_t " sid ", char **" ctx ");" "int avc_get_initial_sid(const char *" name ", security_id_t *" sid ");" .

Security ID's (SID's) are opaque representations of security contexts, managed by the userspace AVC. avc_context_to_sid () returns a SID for the given context in the memory referenced by sid . avc_sid_to_context () returns a copy of the context represented by sid in the memory referenced by ctx . The user must free the copy with freecon (3). avc_get_initial_sid () returns a SID for the kernel initial security identifier specified by name . . avc_context_to_sid () and avc_sid_to_context () return zero on success. On error, -1 is returned and errno is set appropriately. .

ENOMEM An attempt to allocate memory failed.

As of libselinux version 2.0.86, SID's are no longer reference counted. A SID will be valid from the time it is first obtained until the next call to avc_destroy (3). The sidget (3) and sidput (3) functions, formerly used to adjust the reference count, are no-ops and are deprecated. . Eamon Walsh <ewalsh@tycho.nsa.gov> . avc_init (3), avc_has_perm (3), avc_cache_stats (3), avc_add_callback (3), getcon (3), freecon (3), selinux (8)