semanage_bool_modify_local(3) [centos man page]

semanage_modify(3)					   Libsemanage API documentation					semanage_modify(3)

NAME

       semanage_modify - SELinux Management API

SYNOPSIS

       The following modify function is supported for any semanage record.
       Replace the function and object name as necessary.

       extern int MODIFY_FUNCTION (
	    semanage_handle_t *handle,
	    const semanage_OBJECT_key_t *key,
	    const semanage_OBJECT_t *data);

DESCRIPTION

       Behavior:
	      If  a matching key is found in the local store, the provided object will replace the current one. Otherwise, it will be added to the
	      store. When semanage_commit(3) is invoked, changes will be permanently written into the local store, and then  loaded  into  policy.
	      Validity	of  the  object being added is checked at commit time. Adding new objects with respect to policy is allowed, except in the
	      case of booleans. Attempt to add new booleans with respect to policy will fail at commit time.

       Parameters:
	      The handle is used to track persistent state across semanage calls, and for error reporting. The key  identifies	the  data  object,
	      which will be written into the store. The key are data are properties of the caller, and are not stored or modified internally.

       Requirements:
	      This  function  requires	an semanage connection to be established (see semanage_connect(3) ), and must be executed in a transaction
	      (see semanage_begin_transaction(3) ).

RETURN VALUE

       In case of failure, -1 is returned, and the semanage error callback is invoked, describing the error.  Otherwise 0 is returned.

SEE ALSO

       semanage_handle_create(3), semanage_begin_transaction(3), semanage_connect(3), semanage_commit(3).

ivg2@cornell.edu						   16 March 2006						semanage_modify(3)

semanage_iterate(3)					   Libsemanage API documentation				       semanage_iterate(3)

NAME

       semanage_iterate - SELinux Management API

SYNOPSIS

       The following iterate function is supported for any semanage record.
       Replace the function and object name as necessary.

       extern int ITERATE_FUNCTION (
	    semanage_handle_t *handle,
	    int (*handler) (
			  const semanage_OBJECT_t *object,
			  void *varg),
	    void *handler_arg);

DESCRIPTION

       Behavior:
	      The  iterate  function  will  execute  the specified handler over all objects in the selected location. An arbitrary argument can be
	      passed into the handler function along with each object.

	      The object passed in is property of the libsemanage library, and may not be modified or preserved  -  use  semanage_OBJECT_clone	if
	      that is necessary.

	      The  handler  code  may  not invoke any semanage write requests for the same object type (i.e. modifying the underlying store is not
	      allowed). The iterate function is reentrant only while inside a transaction (see semanage_begin_transaction ). It  is  not  safe	to
	      execute  other semanage read or write requests within iterate if not inside a transaction. The handler may return -1 to signal error
	      exit, 0 to signal continue, and 1 to signal successful exit early (the iterate function will stop accordingly).

       Parameters:
	      The handle is used to track persistent state across semanage calls, and for error reporting. The handler is the function to execute,
	      with handler_arg as its second parameter, and each object as its first parameter.

       Requirements:
	      This function requires an semanage connection to be established (see semanage_connect(3) )

RETURN VALUE

       In  case of failure, -1 is returned, and the semanage error callback is invoked, describing the error.  Otherwise a non-negative integer is
       returned (a commit number). The same number will be returned by all other semanage object read calls until the next commit.

SEE ALSO

       semanage_handle_create(3), semanage_connect(3),

ivg2@cornell.edu						   15 March 2006					       semanage_iterate(3)