GSP
Quick Navigator

Search Site

Linux VPS
A - Starter
B - Basic
C - Preferred
D - Commercial
MPS - Dedicated
Previous VPSs
* Sign Up! *

Support
Contact Us
Online Help
Handbooks
Domain Status
Man Pages

FAQ
Virtual Servers
Pricing
Billing
Technical

Network
Facilities
Connectivity
Topology Map

Miscellaneous
Server Agreement
Year 2038
Credits
 

USA Flag

 

 

Man Pages


Manual Reference Pages  - MAC_SET (3)

NAME

mac_set_file, mac_set_fd, mac_set_proc - set the MAC label for a file or process

CONTENTS

Library
Synopsis
Description
Return Values
Errors
See Also
History

LIBRARY


.Lb libc

SYNOPSIS


.In sys/mac.h int mac_set_file const char *path mac_t label int mac_set_link const char *path mac_t label int mac_set_fd int fd mac_t label int mac_set_proc mac_t label

DESCRIPTION

The mac_set_file and mac_set_fd functions associate a MAC label specified by label to the file referenced to by path_p, or to the file descriptor fd, respectively. Note that when a file descriptor references a socket, label operations on the file descriptor act on the socket, not on the file that may have been used as a rendezvous when binding the socket. The mac_set_link function is the same as mac_set_file, except that it does not follow symlinks.

The mac_set_proc function associates the MAC label specified by label to the calling process.

A process is allowed to set a label for a file only if it has MAC write access to the file, and its effective user ID is equal to the owner of the file, or has appropriate privileges.

RETURN VALUES


.Rv -std mac_set_fd mac_set_file mac_set_link mac_set_proc

ERRORS

[EACCES]
  MAC write access to the file is denied.
[EBADF]
  The fd argument is not a valid file descriptor.
[EINVAL]
  The label argument is not a valid MAC label, or the object referenced by fd is not appropriate for label operations.
[EOPNOTSUPP]
  Setting MAC labels is not supported by the file referenced by fd.
[EPERM]
  The calling process had insufficient privilege to change the MAC label.
[EROFS]
  File system for the object being modified is read only.
[ENAMETOOLONG]
  The length of the pathname in path_p exceeds PATH_MAX, or a component of the pathname is longer than NAME_MAX.
[ENOENT]
  The file referenced by path_p does not exist.
[ENOTDIR]
  A component of the pathname referenced by path_p is not a directory.

SEE ALSO

mac(3), mac_free(3), mac_get(3), mac_is_present_np(3), mac_prepare(3), mac_text(3), mac(4), mac(9)

HISTORY

Support for Mandatory Access Control was introduced in
.Fx 5.0 as part of the TrustedBSD Project.
Search for    or go to Top of page |  Section 3 |  Main Index


January 14, 2003 MAC_SET (3)

Powered by GSP Visit the GSP FreeBSD Man Page Interface.
Output converted with manServer 1.07.