Skip site navigation (1)Skip section navigation (2)

FreeBSD Manual Pages

  
 
  

home | help 
MAC_SET(3)		     Library Functions Manual		      MAC_SET(3)

NAME
     mac_set_file,  mac_set_fd,  mac_set_proc -- set the MAC label for a file or
     process

LIBRARY
     Standard C Library (libc, -lc)

SYNOPSIS
     #include <sys/mac.h>

     int
     mac_set_file(const char *path, mac_t label);

     int
     mac_set_link(const char *path, mac_t label);

     int
     mac_set_fd(int fd, mac_t label);

     int
     mac_set_proc(mac_t label);

DESCRIPTION
     The mac_set_file() and mac_set_fd() functions associate a MAC label  speci-
     fied  by label to the file referenced to by path_p, or to the file descrip-
     tor fd, respectively.  Note  that	when  a  file  descriptor  references  a
     socket,  label  operations on the file descriptor act on the socket, not on
     the file that may have been used as a rendezvous when binding  the  socket.
     The  mac_set_link()  function is the same as mac_set_file(), except that it
     does not follow symlinks.

     The mac_set_proc() function associates the MAC label specified by label  to
     the calling process.

     A process is allowed to set a label for a file only if it has MAC write ac-
     cess  to  the  file, and its effective user ID is equal to the owner of the
     file, or has appropriate privileges.

RETURN VALUES
     The mac_set_fd(), mac_set_file(), mac_set_link(), and mac_set_proc()  func-
     tions  return the value 0 if successful; otherwise the value -1 is returned
     and the global variable errno is set to indicate the error.

ERRORS
     [EACCES]		MAC write access to the file is denied.

     [EBADF]		The fd argument is not a valid file descriptor.

     [EINVAL]		The label argument is not a valid MAC label, or the  ob-
			ject referenced by fd is not appropriate for label oper-
			ations.

     [EOPNOTSUPP]	Setting  MAC  labels is not supported by the file refer-
			enced by fd.

     [EPERM]		The calling process had insufficient privilege to change
			the MAC label.

     [EROFS]		File system for the object being modified is read only.

     [ENAMETOOLONG]	The length of the pathname in path_p  exceeds  PATH_MAX,
			or a component of the pathname is longer than NAME_MAX.

     [ENOENT]		The file referenced by path_p does not exist.

     [ENOTDIR]		A  component of the pathname referenced by path_p is not
			a directory.

SEE ALSO
     mac(3),   mac_free(3),   mac_get(3),   mac_is_present(3),	 mac_prepare(3),
     mac_text(3), posix1e(3), mac(4), mac(9)

HISTORY
     Support  for Mandatory Access Control was introduced in FreeBSD 5.0 as part
     of the TrustedBSD Project.

FreeBSD ports 15.quarterly	January 14, 2003		      MAC_SET(3)

Want to link to this manual page? Use this URL:
<https://man.freebsd.org/cgi/man.cgi?query=mac_set_proc&sektion=3&manpath=FreeBSD+15.1-RELEASE+and+Ports.quarterly>

home | help