On 03/07/2016 01:44 PM, Stephen Smalley wrote:
On 03/07/2016 10:41 AM, Richard Haines wrote:





On Saturday, 5 March 2016, 14:48, Richard Haines
<richard_c_hai...@btinternet.com> wrote:




On Friday, 4 March 2016, 21:18, "Roberts, William C"
<william.c.robe...@intel.com> wrote:






How can one obtain the same value as
/sys/fs/selinux/initial_contexts/file
via libsepol?

I’ve been digging around libsepol and its not quite clear to me.

It looks as though the record is here:
                 context_struct_t *a = &((policydb_t
*)pol.db)->ocontexts[OCON_ISID]->context[0];
                 context_struct_t *b = &((policydb_t
*)pol.db)->ocontexts[OCON_ISID]->context[1];

                 printf("%u\n", a->type);
                 printf("%u\n",b->type);

Prints:
185
0

Not sure if this is right, and how to format the context struct to a
string.
I didn’t see any helpers.




I've attached an example, hope it's useful

I've updated the example with more detail and display SID name using
SID value not counter.


Any particular reason you didn't use sepol_sid_to_context()?

I guess context_to_string() on the context structure would work better for your purposes. sepol_sid_to_context() would require loading the sidtab via policydb_load_isids() and setting the internal policydb to the one you loaded via sepol_set_policydb().

_______________________________________________
Selinux mailing list
Selinux@tycho.nsa.gov
To unsubscribe, send email to selinux-le...@tycho.nsa.gov.
To get help, send an email containing "help" to selinux-requ...@tycho.nsa.gov.

Reply via email to