mirror of
https://github.com/SELinuxProject/selinux
synced 2025-01-24 06:12:46 +00:00
9eb9c93275
In attempting to enable building various part of Android with -Wall -Werror, we found that the const security_context_t declarations in libselinux are incorrect; const char * was intended, but const security_context_t translates to char * const and triggers warnings on passing const char * from the caller. Easiest fix is to replace them all with const char *. And while we are at it, just get rid of all usage of security_context_t itself as it adds no value - there is no true encapsulation of the security context strings and callers already directly use string functions on them. typedef left to permit building legacy users until such a time as all are updated. This is a port of Change-Id I2f9df7bb9f575f76024c3e5f5b660345da2931a7 from Android, augmented to deal with all of the other code in upstream libselinux and updating the man pages too. Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov> Acked-by: Eric Paris <eparis@redhat.com>
67 lines
1.7 KiB
Groff
67 lines
1.7 KiB
Groff
.TH "setfilecon" "3" "1 January 2004" "russell@coker.com.au" "SELinux API documentation"
|
|
.SH "NAME"
|
|
setfilecon, fsetfilecon, lsetfilecon \- set SELinux security context of a file
|
|
.
|
|
.SH "SYNOPSIS"
|
|
.B #include <selinux/selinux.h>
|
|
.sp
|
|
.BI "int setfilecon(const char *" path ", char * "con );
|
|
.sp
|
|
.BI "int setfilecon_raw(const char *" path ", char * "con );
|
|
.sp
|
|
.BI "int lsetfilecon(const char *" path ", char * "con );
|
|
.sp
|
|
.BI "int lsetfilecon_raw(const char *" path ", char * "con );
|
|
.sp
|
|
.BI "int fsetfilecon(int "fd ", char * "con );
|
|
.sp
|
|
.BI "int fsetfilecon_raw(int "fd ", char * "con );
|
|
.
|
|
.SH "DESCRIPTION"
|
|
.BR setfilecon ()
|
|
sets the security context of the file system object.
|
|
|
|
.BR lsetfilecon ()
|
|
is identical to setfilecon, except in the case of a symbolic link, where the
|
|
link itself has it's context set, not the file that it refers to.
|
|
|
|
.BR fsetfilecon ()
|
|
is identical to setfilecon, only the open file pointed to by filedes (as
|
|
returned by
|
|
.BR open (2))
|
|
has it's context set in place of path.
|
|
|
|
.BR setfilecon_raw (),
|
|
.BR lsetfilecon_raw (),
|
|
and
|
|
.BR fsetfilecon_raw ()
|
|
behave identically to their non-raw counterparts but do not perform context
|
|
translation.
|
|
.
|
|
.SH "RETURN VALUE"
|
|
On success, zero is returned. On failure, \-1 is returned and
|
|
.I errno
|
|
is set appropriately.
|
|
.
|
|
.SH "ERRORS"
|
|
If there is insufficient space remaining to store the extended
|
|
attribute,
|
|
.I errno
|
|
is set to either
|
|
.BR ENOSPC ,
|
|
or
|
|
.B EDQUOT
|
|
if quota enforcement was the cause.
|
|
|
|
If extended attributes are not supported by the filesystem, or are disabled,
|
|
.I errno
|
|
is set to
|
|
.BR ENOTSUP .
|
|
|
|
The errors documented for the
|
|
.BR stat (2)
|
|
system call are also applicable here.
|
|
.
|
|
.SH "SEE ALSO"
|
|
.BR selinux "(3), " freecon "(3), " getfilecon "(3), " setfscreatecon "(3)"
|