|
|
Model-Based Assurance of Security Controls
|
|
create_file_securely(3) Library Functions Manual create_file_securely(3) NAME
create_file_securely - Create a file in the authentication database (Enhanced Security) LIBRARY
Security library - libsecurity.so SYNOPSIS
#include <sys/security.h> #include <prot.h> int create_file_securely( char *file, int decibels, char *purpose); PARAMETERS
*file The file parameter is the pathname to create. decibels The decibels parameter is AUTH_SILENT, AUTH_LIMITED, or AUTH_VERBOSE. Using AUTH_SILENT blocks signals. The AUTH_LIMITED constant allows a limited amount of dialog. Using AUTH_VERBOSE specifies that the routine should try to wait until the file can be created (up to 100 tries, 1 second apart). The values for decibels are as follows: 0 AUTH_SILENT 1 AUTH_LIMITED 2 AUTH_VERBOSE purpose The purpose parameter is a tag for the audit log entry created by the audit daemon when a file cannot be created. DESCRIPTION
The create_file_securely routine creates a file as specified in the file control database, /etc/auth/system/files. It is more flexible than coding the discretionary attributes of the file, and a further assurance that the file being created is in accordance with security concerns. If the path to the file being created does not exist, create_file_securely attempts to create the path. If each directory in the path is not defined in the file control database, create_file_securely fails and returns CFS_NO_FILE_CONTROL_ENTRY. RETURN VALUES
The create_file_securely routine returns the following values: 0 CFS_GOOD_RETURN 1 CFS_CAN_NOT_OPEN_FILE 2 CFS_NO_FILE_CONTROL_ENTRY 3 FS_CAN_NOT_CHG_MODE 4 CFS_CAN_NOT_CHG_OWNER_GROUP FILES
The file control database. RELATED INFORMATION
Files: files(4) delim off create_file_securely(3)
