centos man page for sepol_genbools

sepol_genbools(3)				     SE Linux binary policy API documentation					 sepol_genbools(3)

NAME
       sepol_genbools - Rewrite a binary policy with different boolean settings

SYNOPSIS
       #include <sepol/sepol.h>

       int sepol_genbools(void *data, size_t len, char *boolpath);
       int sepol_genbools_array(void *data, size_t len, char **names, int *values, int nel);

DESCRIPTION
       sepol_genbools  rewrites  a binary policy stored in the memory region described by (data, len) to use the boolean settings specified in the
       file named by boolpath.	The boolean settings are specified by name=value lines where value may be 0 or false to disable or 1  or  true	to
       enable.	The binary policy is rewritten in place in memory.

       sepol_genbools_array does likewise, but obtains the boolean settings from the parallel arrays (names, values) with nel elements each.

RETURN VALUE
       Returns	0 on success or -1 otherwise, with errno set appropriately.  An errno of ENOENT indicates that the boolean file did not exist.	An
       errno of EINVAL indicates that one or more booleans listed in the boolean file was undefined in the policy or had an invalid  value  speci-
       fied; in this case, the binary policy is still rewritten but any invalid boolean settings are ignored.

sds@epoch.ncsc.mil						  11 August 2004						 sepol_genbools(3)