matchpathcon_checkmatches(3SELinux API documentatimatchpathcon_checkmatches(3)
NAME
matchpathcon_checkmatches, matchpathcon_filespec_add, matchpath-
con_filespec_destroy, matchpathcon_filespec_eval - check and report
whether any specification index has no matches with any inode. Mainte-
nance and statistics on inode associations
SYNOPSIS
#include <selinux/selinux.h>
void matchpathcon_checkmatches(char *str);
int matchpathcon_filespec_add(ino_t ino, int specind, const char
*file);
void matchpathcon_filespec_destroy(void);
void matchpathcon_filespec_eval(void);
DESCRIPTION
matchpathcon_checkmatches() checks whether any specification has no
matches and reports them. The str argument is used as a prefix for any
warning messages.
matchpathcon_filespec_add() maintains an association between an inode
ino and a specification index specind, and checks whether a conflicting
specification is already associated with the same inode (e.g. due to
multiple hard links). If so, then it uses the latter of the two speci-
fications based on their order in the file context configuration.
Returns the specification index used or -1 on error.
matchpathcon_filespec_destroy() destroys any inode associations that
have been added, e.g. to restart for a new filesystem.
matchpathcon_filespec_eval() displays statistics on the hash table
usage for the inode associations.
RETURN VALUE
Returns zero on success or -1 otherwise.
SEE ALSO
selinux(8), matchpathcon(3), matchpathcon_index(3), freecon(3),
setfilecon(3), setfscreatecon(3)
sds AT tycho.gov 21 November 2009 matchpathcon_checkmatches(3)