semanage_modify(3)

✨ semanage_modify(3) ✨

okay bestie, welcome to the libsemanage API docs 💖 this is semanage_modify from section 3 of the manual, and she is lowkey the glow-up function of the SELinux management world. buckle up 🎀

---

🌸 NAME 🌸

semanage_modify — SELinux Management API 👑

🦋 SYNOPSIS 🦋

so the tea is: the following modify function is supported for any semanage record. literally any of them. just swap out the function and object name to match whatever record you're working with, iykyk 💅

extern int MODIFY_FUNCTION (
     semanage_handle_t *handle,
     const semanage_OBJECT_key_t *key,
     const semanage_OBJECT_t *data);

💜 DESCRIPTION 💜

🌈 Behavior

here's the vibe: if a matching key is found in the local store, the object you're handing over will replace the one that's currently there. no matching key? then it just gets added to the store instead. either way she's in 🫶

when semanage_commit(3) gets invoked, the changes get permanently written into the local store, and then loaded into policy. periodt.

the validity of the object being added? checked at commit time, not before. adding new objects with respect to policy is allowed — except in the case of booleans. if you try to add new booleans with respect to policy, it will fail at commit time. that's not a vibe. 💀

🎀 Parameters

• the handle is used to track persistent state across semanage calls, and for error reporting 👑
• the key identifies the data object, which will be written into the store 🗝️
• the key and the data are properties of the caller, and are not stored or modified internally — she does not touch them, no cap 🚫

⭐ Requirements

this function requires a semanage connection to be established (peep semanage_connect(3)), and it must be executed in a transaction (peep semanage_begin_transaction(3)). no connection, no transaction, no service 🙈

---

💖 RETURN VALUE 💖

if it fails, -1 is returned, and the semanage error callback gets invoked, describing the error (she will tell you what went wrong, fr fr 😭). otherwise, 0 is returned. slay.

---

🔥 SEE ALSO 🔥

• semanage_handle_create(3)
• semanage_begin_transaction(3)
• semanage_connect(3)
• semanage_commit(3)

---

and that's the whole page, bestie ✨ this icon was brought to you by ivg2@cornell.edu, dated 16 March 2006 — yes she's an elder but she still ate 💅👑🦋🌸💜