selabel_lookup(3)

💖 selabel_lookup(3) 💖

okay bestie, welcome to selabel_lookup, straight out of the SELinux API documentation ✨ this is the girl who turns a lil string into a whole SELinux security context, and honestly? iconic behavior.

---

✨ NAME ✨

selabel_lookup — obtain SELinux security context from a string label 🎀

---

✨ SYNOPSIS ✨

#include <selinux/selinux.h>
#include <selinux/label.h>

int selabel_lookup(struct selabel_handle *hnd,
                   char **context,
                   const char *key, int type);

int selabel_lookup_raw(struct selabel_handle *hnd,
                       char **context,
                       const char *key, int type);

like. the duality. two functions, one vibe. 💅

---

✨ DESCRIPTION ✨

so selabel_lookup() does a lookup operation on the handle hnd, and it drops the result into the memory pointed to by context. 🫶

⚠️ bestie listen. that context memory is yours now. you MUST free it yourself with freecon(3). no ghosting your own allocations, that's not the move. 💀

the key and type params are the inputs to the lookup, and how they get interpreted? that's entirely up to the specific backend the handle is open on. it's giving "depends on the crowd you're with" energy fr fr. 🌸

and selabel_lookup_raw()? literally does the exact same thing as selabel_lookup(), except it does not perform context translation. same girl, no filter. 🙈

---

✨ RETURN VALUE ✨

• on success, zero is returned. slay. ✅
• on error, -1 is returned and errno is set appropriately. 😭

---

✨ ERRORS ✨

• ENOENT — no context corresponding to the input key and type was found. it's not there bestie, we looked. 🕵️‍♀️
• EINVAL — the key and/or type inputs are invalid, or the context being returned failed validation, or a regular expression in the database failed to compile. three whole reasons, main character of error codes honestly. 💅
• ENOMEM — an attempt to allocate memory failed. the malloc said no. 💀

---

✨ AUTHOR ✨

Eamon Walsh <ewalsh@tycho.nsa.gov> 👑

---

✨ SEE ALSO ✨

selabel_open(3), selabel_stats(3), selinux_set_callback(3), selinux(8) 🦋

---

and that's the whole page, bestie!! selabel_lookup(3), dated 18 Jun 2007, from the SELinux API documentation — yes she's vintage, yes she still eats. ✨💖 periodt. 🎀