getexeccon(3)                       SE Linux API documentation                      getexeccon(3)



NAME
       getexeccon, setexeccon - get or set the SE Linux security context used for executing a new
       process.


SYNOPSIS
       #include 

       int getexeccon(security_context_t *context);
       int setexeccon(security_context_t context);
       int rpm_execcon(unsigned int verified, const char *filename, char  *const  argv[]  ,  char
       *const envp[]);


DESCRIPTION
       getexeccon  retrieves the context used for executing a new process.  This returned context
       should be freed with freecon if non-NULL.  getexeccon sets *con to NULL if no exec context
       has been explicitly set by the program (i.e. using the default policy behavior).

       setexeccon sets the context used for the next execve call.  NULL can be passed to setexec-
       con to reset to the default policy behavior.  The  exec  context  is  automatically  reset
       after the next execve, so a program doesn't need to explicitly sanitize it upon startup.

       setexeccon  can  be  applied prior to library functions that internally perform an execve,
       e.g. execl*, execv*, popen, in order to set an exec context for that operation.

       Note: Signal handlers that perform an execve must take care to save,  reset,  and  restore
       the exec context to avoid unexpected behaviors.

       rpm_execcon Execute a helper for rpm in an appropriate security context.


RETURN VALUE
       On error -1 is returned.

       On success getexeccon and setexeccon returns 0.


SEE ALSO
       freecon(3), getcon(3)





                      1 January 2004                            getexeccon(3)