get_ordered_context_list(3) SELinux get_ordered_context_list(3)
NAME
get_ordered_context_list, get_ordered_context_list_with_level, get_default_context,
get_default_context_with_level, get_default_context_with_role, get_default_con-
text_with_rolelevel, query_user_context, manual_user_enter_context, get_default_role -
determine SELinux context(s) for user sessions
SYNOPSIS
#include <selinux/selinux.h>
#include <selinux/get_context_list.h>
int get_ordered_context_list(const char *user, char * fromcon, char ***list);
int get_ordered_context_list_with_level(const char *user, const char *level, char * from-
con, char ***list);
int get_default_context(const char *user, char * fromcon, char **newcon);
int get_default_context_with_level(const char *user, const char *level, char * fromcon,
char **newcon);
int get_default_context_with_role(const char *user, const char *role, char * fromcon, char
**newcon);
int get_default_context_with_rolelevel(const char *user, const char *level, const char
*role, char * fromcon, char **newcon);
int query_user_context(char **list, char **newcon);
int manual_user_enter_context(const char *user, char **newcon);
int get_default_type(const char *role, char **type);
DESCRIPTION
get_ordered_context_list() invokes the security_compute_user(3) function to obtain the
list of contexts for the specified user that are reachable from the specified fromcon con-
text. The function then orders the resulting list based on the global
/etc/selinux/{SELINUXTYPE}/contexts/default_contexts file and the per-user
/etc/selinux/{SELINUXTYPE}/contexts/users/<username> file if it exists. The fromcon
parameter may be NULL to indicate that the current context should be used. The function
returns the number of contexts in the list, or -1 upon errors. The list must be freed
using the freeconary(3) function.
get_ordered_context_list_with_level() invokes the get_ordered_context_list() function and
applies the specified level.
get_default_context() is the same as get_ordered_context_list() but only returns a single
context which has to be freed with freecon(3).
get_default_context_with_level() invokes the get_default_context() function and applies
the specified level.
get_default_context_with_role() is the same as get_default_context() but only returns a
context with the specified role, returning -1 if no such context is reachable for the
user.
get_default_context_with_rolelevel() invokes the get_default_context_with_role() function
and applies the specified level.
query_user_context() takes a list of contexts, queries the user via stdin/stdout as to
which context they want, and returns a new context as selected by the user (which has to
be freed with freecon(3)).
manual_user_enter_context() allows the user to manually enter a context as a fallback if a
list of authorized contexts could not be obtained. Caller must free via freecon(3).
get_default_type() Get the default type (domain) for role and set type to refer to it,
which has to be freed with free.
RETURN VALUE
get_ordered_context_list() and get_ordered_context_list_with_level() return the number of
contexts in the list upon success or -1 upon errors. The other functions return 0 for
success or -1 for errors.
SEE ALSO
selinux(8), freeconary(3), freecon(3), security_compute_av(3), getseuserbyname(3)
russell AT coker.au 1 January 2004 get_ordered_context_list(3)
Generated by $Id: phpMan.php,v 4.55 2007/09/05 04:42:51 chedong Exp $ Author: Che Dong
On Apache/2.4.6 (CentOS)
Under GNU General Public License
2025-06-23 22:12 @127.0.0.1 CrawledBy Wget/1.21.2