aboutsummaryrefslogtreecommitdiffstats
path: root/libselinux/man/man3/getsockcreatecon.3
diff options
context:
space:
mode:
Diffstat (limited to 'libselinux/man/man3/getsockcreatecon.3')
-rw-r--r--libselinux/man/man3/getsockcreatecon.345
1 files changed, 27 insertions, 18 deletions
diff --git a/libselinux/man/man3/getsockcreatecon.3 b/libselinux/man/man3/getsockcreatecon.3
index 24f2cc0e..8fb2061e 100644
--- a/libselinux/man/man3/getsockcreatecon.3
+++ b/libselinux/man/man3/getsockcreatecon.3
@@ -1,38 +1,47 @@
-.TH "getsockcreatecon" "3" "24 September 2008" "dwalsh@redhat.com from russell@coker.com.au" "SELinux API documentation"
+.TH "getsockcreatecon" "3" "24 September 2008" "dwalsh@redhat.com" "SELinux API documentation"
.SH "NAME"
-getsockcreatecon, setsockcreatecon \- get or set the SELinux security context used for creating a new labeled sockets.
-
+getsockcreatecon, setsockcreatecon \- get or set the SELinux security context used for creating a new labeled sockets
+.
.SH "SYNOPSIS"
.B #include <selinux/selinux.h>
.sp
.BI "int getsockcreatecon(security_context_t *" con );
-
+.sp
.BI "int setsockcreatecon(security_context_t "context );
-
+.
.SH "DESCRIPTION"
-.B getsockcreatecon
+.BR getsockcreatecon ()
retrieves the context used for creating a new labeled network socket.
-This returned context should be freed with freecon if non-NULL.
-getsockcreatecon sets *con to NULL if no sockcreate context has been explicitly
+This returned context should be freed with
+.BR freecon (3)
+if non-NULL.
+.BR getsockcreatecon ()
+sets *con to NULL if no sockcreate context has been explicitly
set by the program (i.e. using the default policy behavior).
-.B setsockcreatecon
+.BR setsockcreatecon ()
sets the context used for creating a new labeled network sockets
NULL can be passed to
-setsockcreatecon to reset to the default policy behavior.
-The sockcreate context is automatically reset after the next execve, so a
-program doesn't need to explicitly sanitize it upon startup.
-
-setsockcreatecon can be applied prior to library
+.BR setsockcreatecon ()
+to reset to the default policy behavior.
+The sockcreate context is automatically reset after the next
+.BR execve (2),
+so a program doesn't need to explicitly sanitize it upon startup.
+
+.BR setsockcreatecon ()
+can be applied prior to library
functions that internally perform an file creation,
in order to set an file context on the objects.
-
-Note: Signal handlers that perform an setsockcreate must take care to
+.B Note:
+Signal handlers that perform a
+.BR setsockcreatecon ()
+must take care to
save, reset, and restore the sockcreate context to avoid unexpected behavior.
+.
.SH "RETURN VALUE"
-On error -1 is returned.
+On error \-1 is returned.
On success 0 is returned.
-
+.
.SH "SEE ALSO"
.BR selinux "(8), " freecon "(3), " getcon "(3)