mac_set_file, mac_set_fd, mac_set_proc - set the MAC label for a file or process

CONTENTS

Library
Synopsis
Description
Return Values
Errors
See Also
History

.Lb libc

.In sys/mac.h int mac_set_file const char *path mac_t label int mac_set_link const char *path mac_t label int mac_set_fd int fd mac_t label int mac_set_proc mac_t label

The mac_set_file and mac_set_fd functions associate a MAC label specified by label to the file referenced to by path_p, or to the file descriptor fd, respectively. Note that when a file descriptor references a socket, label operations on the file descriptor act on the socket, not on the file that may have been used as a rendezvous when binding the socket. The mac_set_link function is the same as mac_set_file, except that it does not follow symlinks.

The mac_set_proc function associates the MAC label specified by label to the calling process.

A process is allowed to set a label for a file only if it has MAC write access to the file, and its effective user ID is equal to the owner of the file, or has appropriate privileges.

.Rv -std mac_set_fd mac_set_file mac_set_link mac_set_proc

[EACCES]
	MAC write access to the file is denied.
[EBADF]
	The fd argument is not a valid file descriptor.
[EINVAL]
	The label argument is not a valid MAC label, or the object referenced by fd is not appropriate for label operations.
[EOPNOTSUPP]
	Setting MAC labels is not supported by the file referenced by fd.
[EPERM]
	The calling process had insufficient privilege to change the MAC label.
[EROFS]
	File system for the object being modified is read only.
[ENAMETOOLONG]
	The length of the pathname in path_p exceeds PATH_MAX, or a component of the pathname is longer than NAME_MAX.
[ENOENT]
	The file referenced by path_p does not exist.
[ENOTDIR]
	A component of the pathname referenced by path_p is not a directory.

mac(3), mac_free(3), mac_get(3), mac_is_present_np(3), mac_prepare(3), mac_text(3), mac(4), mac(9)

Support for Mandatory Access Control was introduced in
.Fx 5.0 as part of the TrustedBSD Project.

Search for    or go to Top of page |  Section 3 |  Main Index

Visit the GSP FreeBSD Man Page Interface.
Output converted with manServer 1.07.