1matchpathcon_checkmatches(3)SELinux API documentatiomnatchpathcon_checkmatches(3)
2
3
4
6 matchpathcon_checkmatches, matchpathcon_filespec_add, matchpath‐
7 con_filespec_destroy, matchpathcon_filespec_eval - check and report
8 whether any specification index has no matches with any inode. Mainte‐
9 nance and statistics on inode associations
10
12 #include <selinux/selinux.h>
13
14 void matchpathcon_checkmatches(char *str);
15
16 int matchpathcon_filespec_add(ino_t ino, int specind, const char
17 *file);
18
19 void matchpathcon_filespec_destroy(void);
20
21 void matchpathcon_filespec_eval(void);
22
24 matchpathcon_checkmatches() checks whether any specification has no
25 matches and reports them. The str argument is used as a prefix for any
26 warning messages.
27
28 matchpathcon_filespec_add() maintains an association between an inode
29 ino and a specification index specind, and checks whether a conflicting
30 specification is already associated with the same inode (e.g. due to
31 multiple hard links). If so, then it uses the latter of the two speci‐
32 fications based on their order in the file context configuration.
33 Returns the specification index used or -1 on error.
34
35 matchpathcon_filespec_destroy() destroys any inode associations that
36 have been added, e.g. to restart for a new filesystem.
37
38 matchpathcon_filespec_eval() displays statistics on the hash table
39 usage for the inode associations.
40
42 Returns zero on success or -1 otherwise.
43
45 selinux(8), matchpathcon(3), matchpathcon_index(3), freecon(3),
46 setfilecon(3), setfscreatecon(3)
47
48
49
50sds@tycho.nsa.gov 21 November 2009 matchpathcon_checkmatches(3)