matchpathcon_checkmatches(3) SELinux API documentation matchpathcon_checkmatches(3)
NAME
matchpathcon_checkmatches, matchpathcon_filespec_add, matchpathcon_filespec_destroy, matchpathcon_filespec_eval - check and report whether
any specification index has no matches with any inode. Maintenance and statistics on inode associations.
SYNOPSIS
#include <selinux/selinux.h>
void matchpathcon_checkmatches(char *str);
int matchpathcon_filespec_add(ino_t ino, int specind, const char *file);
void matchpathcon_filespec_destroy(void);
void matchpathcon_filespec_eval(void);
DESCRIPTION
matchpathcon_checkmatches checks whether any specification has no matches and reports them. The str argument is used as a prefix for any
warning messages.
matchpathcon_filespec_add maintains an association between an inode ino and a specification index specind, and checks whether a conflicting
specification is already associated with the same inode (e.g. due to multiple hard links). If so, then it uses the latter of the two speci-
fications based on their order in the file context configuration. Returns the specification index used or -1 on error.
matchpathcon_filespec_destroy destroys any inode associations that have been added, e.g. to restart for a new filesystem.
matchpathcon_filespec_eval displays statistics on the hash table usage for the inode associations.
RETURN VALUE
Returns zero on success or -1 otherwise.
SEE ALSO
selinux(8), matchpathcon(3), matchpathcon_index(3), freecon(3), setfilecon(3), setfscreatecon(3)
sds@tycho.nsa.gov 21 November 2009 matchpathcon_checkmatches(3)