avc_context_to_sid(3)               SELinux API documentation               avc_context_to_sid(3)



NAME
       avc_context_to_sid,   avc_sid_to_context,  avc_get_initial_sid  -  obtain  and  manipulate
       SELinux security ID's

SYNOPSIS
       #include <selinux/selinux.h>
       #include <selinux/avc.h>

       int avc_context_to_sid(char * ctx, security_id_t *sid);

       int avc_sid_to_context(security_id_t sid, char **ctx);

       int avc_get_initial_sid(const char *name, security_id_t *sid);

DESCRIPTION
       Security ID's (SID's) are opaque representations of  security  contexts,  managed  by  the
       userspace AVC.

       avc_context_to_sid() returns a SID for the given context in the memory referenced by sid.

       avc_sid_to_context() returns a copy of the context represented by sid in the memory refer‐
       enced by ctx.  The user must free the copy with freecon(3).

       avc_get_initial_sid() returns a SID for the kernel initial security  identifier  specified
       by name.

RETURN VALUE
       avc_context_to_sid()  and  avc_sid_to_context()  return  zero on success.  On error, -1 is
       returned and errno is set appropriately.

ERRORS
       ENOMEM An attempt to allocate memory failed.

NOTES
       As of libselinux version 2.0.86, SID's are no longer reference counted.   A  SID  will  be
       valid  from the time it is first obtained until the next call to avc_destroy(3).  The sid‐
       get(3) and sidput(3) functions, formerly used to adjust the reference  count,  are  no-ops
       and are deprecated.

AUTHOR
       Eamon Walsh <ewalsh AT tycho.gov>

SEE ALSO
       avc_init(3), avc_has_perm(3), avc_cache_stats(3), avc_add_callback(3), getcon(3),
       freecon(3), selinux(8)



                                           27 May 2004                      avc_context_to_sid(3)