Skip site navigation (1)Skip section navigation (2)

FreeBSD Manual Pages

  
 
  

home | help 
MAC_PREPARE(3)		     Library Functions Manual		  MAC_PREPARE(3)

NAME
     mac_prepare,	     mac_prepare_type,		 mac_prepare_file_label,
     mac_prepare_ifnet_label, mac_prepare_process_label -- allocate  appropriate
     storage for mac_t

SYNOPSIS
     #include <sys/mac.h>

     int
     mac_prepare(mac_t *mac, const char *elements);

     int
     mac_prepare_type(mac_t *mac, const char *name);

     int
     mac_prepare_file_label(mac_t *mac);

     int
     mac_prepare_ifnet_label(mac_t *mac);

     int
     mac_prepare_process_label(mac_t *mac);

DESCRIPTION
     The  mac_prepare  family  of  functions allocates the appropriate amount of
     storage and initializes *mac for use by mac_get(3).  When the resulting la-
     bel is passed into the mac_get(3) functions, the  kernel  will  attempt  to
     fill in the label elements specified when the label was prepared.	Elements
     are  specified  in a nul-terminated string, using commas to delimit fields.
     Element names may be prefixed with the `?' character  to  indicate  that  a
     failure by the kernel to retrieve that element should not be considered fa-
     tal.

     The  mac_prepare()  function accepts a list of policy names as a parameter,
     and allocates the storage to fit those label elements accordingly.  The re-
     maining functions in the family make use  of  system  defaults  defined  in
     mac.conf(5)  instead of an explicit elements argument, deriving the default
     from the specified object type.

     mac_prepare_type() allocates the storage to fit an object label of the type
     specified by the name  argument.	The  mac_prepare_file_label(),	mac_pre-
     pare_ifnet_label(),  and  mac_prepare_process_label() functions are equiva-
     lent  to  invocations  of	mac_prepare_type()  with  arguments  of  "file",
     "ifnet", and "process" respectively.

RETURN VALUES
     Upon successful completion, the value 0 is returned; otherwise the value -1
     is returned and the global variable errno is set to indicate the error.

SEE ALSO
     mac(3),  mac_free(3),  mac_get(3),  mac_is_present(3),  mac_set(3), mac(4),
     mac.conf(5), maclabel(7)

STANDARDS
     POSIX.1e is described in IEEE POSIX.1e draft 17.

HISTORY
     Support for Mandatory Access Control was introduced in FreeBSD 5.0 as  part
     of the TrustedBSD Project.  Support for generic object types first appeared
     in FreeBSD 5.2.

FreeBSD ports 15.quarterly     September 21, 2023		  MAC_PREPARE(3)

Want to link to this manual page? Use this URL:
<https://man.freebsd.org/cgi/man.cgi?query=mac_prepare&sektion=3&manpath=FreeBSD+15.1-RELEASE+and+Ports.quarterly>

home | help