avc_compute_create() is used to compute a SID to use for labeling
a new object in a particular class based on a SID pair. This
call is identical to security_compute_create(), but does not
require converting from userspace SID's to contexts and back
again.
avc_compute_member() is used to compute a SID to use for labeling
a polyinstantiated object instance of a particular class based on
a SID pair. This call is identical to security_compute_member(),
but does not require converting from userspace SID's to contexts
and back again.
These functions return a SID for the computed context in the
memory referenced by sid.
ЗНАЧЕНИЕ ВОЗВРАЩАЕМОГО ЗНАЧЕНИЯ
On success, zero is returned. On error, -1 is returned and errno
is set appropriately.
ОШИБКИ
EINVAL The tclass and/or the security contexts referenced by ssid
and tsid are not recognized by the currently loaded
policy.
ENOMEM An attempt to allocate memory failed.
This page is part of the selinux (Security-Enhanced Linux user-
space libraries and tools) project. Information about the
project can be found at
⟨https://github.com/SELinuxProject/selinux/wiki⟩. If you have a
bug report for this manual page, see
⟨https://github.com/SELinuxProject/selinux/wiki/Contributing⟩.
This page was obtained from the project's upstream Git repository
⟨https://github.com/SELinuxProject/selinux⟩ on 2024-06-14. (At
that time, the date of the most recent commit that was found in
the repository was 2023-05-11.) If you discover any rendering
problems in this HTML version of the page, or you believe there
is a better or more up-to-date source for the page, or you have
corrections or improvements to the information in this COLOPHON
(which is not part of the original manual page), send a mail to
man-pages@man7.org
30 Mar 2007 avc_compute_create(3)