ostree_sepolicy_new ()

OstreeSePolicy *
ostree_sepolicy_new (GFile *path,
                     GCancellable *cancellable,
                     GError **error);

ostree_sepolicy_new_at ()

OstreeSePolicy *
ostree_sepolicy_new_at (int rootfs_dfd,
                        GCancellable *cancellable,
                        GError **error);

Since: 2017.4

ostree_sepolicy_new_from_commit ()

OstreeSePolicy *
ostree_sepolicy_new_from_commit (OstreeRepo *repo,
                                 const char *rev,
                                 GCancellable *cancellable,
                                 GError **error);

Extract the SELinux policy from a commit object via a partial checkout. This is useful for labeling derived content as separate commits.

This function is the backend of ostree_repo_commit_modifier_set_sepolicy_from_commit().

ostree_sepolicy_get_path ()

GFile *
ostree_sepolicy_get_path (OstreeSePolicy *self);

This API should be considered deprecated, because it's supported for policy objects to be created from file-descriptor relative paths, which may not be globally accessible.

ostree_sepolicy_get_name ()

const char *
ostree_sepolicy_get_name (OstreeSePolicy *self);

ostree_sepolicy_get_label ()

gboolean
ostree_sepolicy_get_label (OstreeSePolicy *self,
                           const char *relpath,
                           guint32 unix_mode,
                           char **out_label,
                           GCancellable *cancellable,
                           GError **error);

Store in out_label the security context for the given relpath and mode unix_mode . If the policy does not specify a label, NULL will be returned.

ostree_sepolicy_get_csum ()

const char *
ostree_sepolicy_get_csum (OstreeSePolicy *self);

Since: 2016.5

ostree_sepolicy_restorecon ()

gboolean
ostree_sepolicy_restorecon (OstreeSePolicy *self,
                            const char *path,
                            GFileInfo *info,
                            GFile *target,
                            OstreeSePolicyRestoreconFlags flags,
                            char **out_new_label,
                            GCancellable *cancellable,
                            GError **error);

Reset the security context of target based on the SELinux policy.

ostree_sepolicy_setfscreatecon ()

gboolean
ostree_sepolicy_setfscreatecon (OstreeSePolicy *self,
                                const char *path,
                                guint32 mode,
                                GError **error);

ostree_sepolicy_fscreatecon_cleanup ()

void
ostree_sepolicy_fscreatecon_cleanup (void **unused);

Cleanup function for ostree_sepolicy_setfscreatecon().

OstreeSePolicy

typedef struct OstreeSePolicy OstreeSePolicy;

enum OstreeSePolicyRestoreconFlags