libselinux: man: Clarify is_selinux_mls_enabled() description

Improve the description by mentioning that if is_selinux_mls_enabled(),
it simply means that the kernel has MLS support and the policy contains
MLS features. To check whether MLS support is enabled on the running
system, use selinux_getpolicytype().

Signed-off-by: David King <dking@redhat.com>
This commit is contained in:
David King 2016-06-20 17:41:54 +02:00 committed by Stephen Smalley
parent 984fd069e2
commit d6413cdbd2

View File

@ -18,7 +18,9 @@ returns 1 if SELinux is running or 0 if it is not.
On error, \-1 is returned.
.BR is_selinux_mls_enabled ()
returns 1 if SELinux is running in MLS mode or 0 if it is not.
returns 1 if SELinux is capable of running in MLS mode or 0 if it is not. To
determine the policy in use on the system, use
.BR selinux_getpolicytype (3).
.
.SH "SEE ALSO"
.BR selinux "(8)"