is_context_customizable(3)

✨ is_context_customizable ✨

okay bestie, welcome to the SELinux API docs, and today's main character is is_context_customizable(3) — she's a lil function that checks whether a SELinux context type is customizable by the administrator 🎀

---

🌸 NAME 🌸

is_context_customizable — check whether SELinux context type is customizable by the administrator

---

🦋 SYNOPSIS 🦋

#include <selinux/selinux.h>

int is_context_customizable(const char *scon);

---

💖 DESCRIPTION 💖

so basically, this function checks whether the type of scon lives inside the /etc/selinux/{SELINUXTYPE}/context/customizable_types file. that's it, that's the whole vibe check 💅

and like, what even is a customizable type? a customizable type is a file context type that administrators set on files — usually so that certain domains can share the file content 🫶 lowkey iconic behaviour.

also important: restorecon and setfiles, by default, leave these context in place. so if you were wondering why your custom label didn't get nuked, it's giving by design, bestie 😌

---

👑 RETURN VALUE 👑

• returns 1 if security context is customizable ✨
• returns 0 if it is not 🙈
• returns -1 on error 😭

---

🎀 FILE 🎀

/etc/selinux/{SELINUXTYPE}/context/customizable_types

---

🌈 SEE ALSO 🌈

• selinux(8)

---

ngl, if you're messing with SELinux contexts, go read selinux(8) too — she's the mother of the whole situation 💜

---

and that's the page fr fr 🌸 written by dwalsh@redhat.com, dated 10 January 2005, and it's part of the SELinux API documentation — mwah, slay, periodt 💅💖