aboutsummaryrefslogtreecommitdiffstats
path: root/libselinux/man/man3/getfscreatecon.3
diff options
context:
space:
mode:
Diffstat (limited to 'libselinux/man/man3/getfscreatecon.3')
-rw-r--r--libselinux/man/man3/getfscreatecon.343
1 files changed, 26 insertions, 17 deletions
diff --git a/libselinux/man/man3/getfscreatecon.3 b/libselinux/man/man3/getfscreatecon.3
index 474aa281..1b0f3d16 100644
--- a/libselinux/man/man3/getfscreatecon.3
+++ b/libselinux/man/man3/getfscreatecon.3
@@ -1,38 +1,47 @@
.TH "getfscreatecon" "3" "1 January 2004" "russell@coker.com.au" "SELinux API documentation"
.SH "NAME"
-getfscreatecon, setfscreatecon \- get or set the SELinux security context used for creating a new file system object.
-
+getfscreatecon, setfscreatecon \- get or set the SELinux security context used for creating a new file system object
+.
.SH "SYNOPSIS"
.B #include <selinux/selinux.h>
.sp
.BI "int getfscreatecon(security_context_t *" con );
-
+.sp
.BI "int setfscreatecon(security_context_t "context );
-
+.
.SH "DESCRIPTION"
-.B getfscreatecon
+.BR getfscreatecon ()
retrieves the context used for creating a new file system object.
-This returned context should be freed with freecon if non-NULL.
-getfscreatecon sets *con to NULL if no fscreate context has been explicitly
+This returned context should be freed with
+.BR freecon (3)
+if non-NULL.
+.BR getfscreatecon ()
+sets *con to NULL if no fscreate context has been explicitly
set by the program (i.e. using the default policy behavior).
-.B setfscreatecon
+.BR setfscreatecon ()
sets the context used for creating a new file system object.
NULL can be passed to
-setfscreatecon to reset to the default policy behavior.
-The fscreate context is automatically reset after the next execve, so a
-program doesn't need to explicitly sanitize it upon startup.
-
-setfscreatecon can be applied prior to library
+.BR setfscreatecon ()
+to reset to the default policy behavior.
+The fscreate context is automatically reset after the next
+.BR execve (2),
+so a program doesn't need to explicitly sanitize it upon startup.
+
+.BR setfscreatecon ()
+can be applied prior to library
functions that internally perform an file creation,
in order to set an file context on the objects.
-
-Note: Signal handlers that perform an setfscreate must take care to
+.B Note:
+Signal handlers that perform a
+.BR setfscreatecon ()
+must take care to
save, reset, and restore the fscreate context to avoid unexpected behavior.
+.
.SH "RETURN VALUE"
-On error -1 is returned.
+On error \-1 is returned.
On success 0 is returned.
-
+.
.SH "SEE ALSO"
.BR selinux "(8), " freecon "(3), " getcon "(3), " getexeccon "(3)"