sepol_genbools(3) [debian man page]

sepol_genbools(3)				     SE Linux binary policy API documentation					 sepol_genbools(3)

NAME

       sepol_genbools - Rewrite a binary policy with different boolean settings

SYNOPSIS

       #include <sepol/sepol.h>

       int sepol_genbools(void *data, size_t len, char *boolpath);
       int sepol_genbools_array(void *data, size_t len, char **names, int *values, int nel);

DESCRIPTION

       sepol_genbools  rewrites  a binary policy stored in the memory region described by (data, len) to use the boolean settings specified in the
       file named by boolpath.	The boolean settings are specified by name=value lines where value may be 0 or false to disable or 1  or  true	to
       enable.	The binary policy is rewritten in place in memory.

       sepol_genbools_array does likewise, but obtains the boolean settings from the parallel arrays (names, values) with nel elements each.

RETURN VALUE

       Returns	0 on success or -1 otherwise, with errno set appropriately.  An errno of ENOENT indicates that the boolean file did not exist.	An
       errno of EINVAL indicates that one or more booleans listed in the boolean file was undefined in the policy or had an invalid  value  speci-
       fied; in this case, the binary policy is still rewritten but any invalid boolean settings are ignored.

sds@epoch.ncsc.mil						  11 August 2004						 sepol_genbools(3)

sepol_genusers(3)				     SE Linux binary policy API documentation					 sepol_genusers(3)

NAME

       sepol_genusers - Generate a new binary policy image with a customized user configuration

SYNOPSIS

       #include <sepol/sepol.h>

       int sepol_genusers(void *data, size_t len, const char *usersdir, void *newdata, size_t *newlen);

       void sepol_set_delusers(int on);

DESCRIPTION

       sepol_genusers generates a new binary policy image from an existing binary policy image stored in the memory region described by the start-
       ing address data and the length len and a pair of user configuration files named system.users and local.users from the directory  specified
       by usersdir.  The resulting binary policy is placed into dynamically allocated memory and the variables newdata and newlen are set to refer
       to the new binary image's starting address and length.  The original binary policy image is not modified.

       By default, sepol_genusers will preserve user entries that are defined in the original binary policy image but not defined in the user con-
       figuration  files.   If	such user entries should instead by omitted entirely from the new binary policy image, then the sepol_set_delusers
       function may be called with on set to 1 prior to calling sepol_genusers in order to enable deletion of such users.

RETURN VALUE

       Returns 0 on success or -1 otherwise, with errno set appropriately.  An errno of ENOENT indicates that one or both of the  user	configura-
       tion files did not exist.  An errno of EINVAL indicates that either the original binary policy image or the generated one were invalid.	An
       errno of ENOMEM indicates that insufficient memory was available to process the original binary policy image or to generate the new  policy
       image.  Invalid entries in the user configuration files are skipped with a warning.

sds@tycho.nsa.gov						   15 March 2005						 sepol_genusers(3)