Skip site navigation (1)Skip section navigation (2)

FreeBSD Manual Pages

  
 
  

home | help 
MAC_SET(3)		 BSD Library Functions Manual		    MAC_SET(3)

NAME
     mac_set_file, mac_set_fd, mac_set_proc -- set the MAC label for a file or
     process

LIBRARY
     Standard C	Library	(libc, -lc)

SYNOPSIS
     #include <sys/mac.h>

     int
     mac_set_file(const	char *path, mac_t label);

     int
     mac_set_link(const	char *path, mac_t label);

     int
     mac_set_fd(int fd,	mac_t label);

     int
     mac_set_proc(mac_t	label);

DESCRIPTION
     The mac_set_file()	and mac_set_fd() functions associate a MAC label spec-
     ified by label to the file	referenced to by path_p, or to the file	de-
     scriptor fd, respectively.	 Note that this	function will fail on socket
     descriptors.  For information on setting MAC labels on socket descriptors
     see setsockopt(2).	 The mac_set_link() function is	the same as
     mac_set_file(), except that it does not follow symlinks.  The
     mac_set_proc() function associates	the MAC	label specified	by label to
     the calling process.

     A process is allowed to set a label for a file only if it has MAC write
     access to the file, and its effective user	ID is equal to the owner of
     the file, or has appropriate privileges.

RETURN VALUES
     The mac_set_fd(), mac_set_file(), mac_set_link(), and mac_set_proc()
     functions return the value	0 if successful; otherwise the value -1	is re-
     turned and	the global variable errno is set to indicate the error.

ERRORS
     [EACCES]		MAC write access to the	file is	denied.

     [EBADF]		The fd argument	is not a valid file descriptor.

     [EINVAL]		The label argument is not a valid MAC label.

     [EOPNOTSUPP]	Setting	MAC labels is not supported by the file	refer-
			enced by fd.

     [EPERM]		The calling process had	insufficient privilege to
			change the MAC label.

     [EROFS]		File system for	the object being modified is read
			only.

     [ENAMETOOLONG]	The length of the pathname in path_p exceeds PATH_MAX,
			or a component of the pathname is longer than
			NAME_MAX.

     [ENOENT]		The file referenced by path_p does not exist.

     [ENOTDIR]		A component of the pathname referenced by path_p is
			not a directory.

SEE ALSO
     mac(3), mac_free(3), mac_get(3), mac_is_present_np(3), mac_prepare(3),
     mac_text(3), mac(4), mac(9)

BSD			       January 14, 2003				   BSD
NAME | LIBRARY | SYNOPSIS | DESCRIPTION | RETURN VALUES | ERRORS | SEE ALSO

Want to link to this manual page? Use this URL:
<https://man.freebsd.org/cgi/man.cgi?query=mac_set&sektion=3&manpath=FreeBSD+5.0-RELEASE>

home | help