semanage_seuser(3)

💖 semanage_seuser — the manual page, but make it cute 💖

okay bestie, pull up a chair 🪑 because we're talking about semanage_seuser(3), aka the Linux UID to SELinux User Management API from the Libsemanage API documentation. yes it's a mouthful. yes it's iconic. let's get into it 💅

---

✨ NAME ✨

semanage_seuser — the Linux UID to SELinux User Management API 🫶

---

✨ SYNOPSIS ✨

#include <semanage/seuser_record.h>
#include <semanage/seusers_policy.h>
#include <semanage/seusers_local.h>

so this object is holding all the properties that go with a Unix user. and here's the tea: normally a whole bunch of Unix users get mapped to the same SELinux user. that's just how it is, no cap. if you want the big-picture overview of the SELinux user API, go read semanage_user(3) 💖

and if you wanna know the details on any one specific function? each one has its own manual page, so go look it up, iykyk ✨

---

🌸 Record API Overview 🌸

these are the record girlies — creating, freeing, keying, cloning, comparing. the whole friend group 💅

• semanage_seuser_create(3) — creates a seuser ✨
• semanage_seuser_free(3) — releases the resources for this seuser 🎀
• semanage_seuser_key_create(3) — creates a key, which you can use to identify a seuser 🔑
• semanage_seuser_key_free(3) — releases the resources for this seuser key 🫶
• semanage_seuser_key_extract(3) — creates a key that matches this seuser 💖
• semanage_seuser_clone(3) — creates an identical seuser (it's a deep-copy clone, so like, a real twin, not a shallow one 💀)
• semanage_seuser_compare(3) — compares this seuser to the key you provided 🦋
• semanage_seuser_compare2(3) — compares this seuser to another seuser 👯

---

🎀 Properties API Overview 🎀

get / set energy. names, senames, MLS ranges. the glow-up section ✨

• semanage_seuser_get_name(3) — returns the name of this seuser 💜
• semanage_user_set_name(3) — sets the name of this seuser 🖊️
• semanage_seuser_get_sename(3) — returns the name of the (SELinux) user that's mapped to this seuser 🌈
• semanage_user_set_sename(3) — sets the name of the (SELinux) user that's mapped to this seuser 🖊️
• semanage_user_get_mlsrange(3) — returns a the range of valid MLS sensitivities and categories for this user 📏
• semanage_user_set_mlsrange(3) — sets the range of valid MLS sensitivities and categories for this user 📐

---

👑 Record Store API Overview 👑

the local store vs the persistent policy. two worlds, one API. main character energy fr fr 💅

• semanage_seuser_modify_local(3) — adds or updates a seuser in the local store ✏️
• semanage_seuser_del_local(3) — deletes a seuser from the local store 🗑️
• semanage_seuser_exists(3) — checks if a seuser is defined in the persistent policy 🔍
• semanage_seuser_exists_local(3) — checks if a seuser is defined in the local store 🔍
• semanage_seuser_query(3) — queries a seuser in the persistent policy 💬
• semanage_seuser_query_local(3) — queries a seuser in the local store 💬
• semanage_seuser_count(3) — counts the number of seusers defined in the persistent policy 🔢
• semanage_seuser_count_local(3) — counts the number of seusers defined in the local store 🔢
• semanage_seuser_iterate(3) — executes a callback for each seuser in the persistent policy 🔁
• semanage_seuser_iterate_local(3) — executes a callback for each seuser in the local store 🔁
• semanage_seuser_list(3) — returns an array containing all seusers in the persistent policy 📋
• semanage_seuser_list_local(3) — returns an array containing all seusers in the local store 📋

lowkey obsessed with how consistent this API is. every single function has a local twin. sibling energy 👯💖

---

and that's the whole page, bestie!! 🌈✨ this absolute banger of a manpage was brought to you by ivg2@cornell.edu, dated 16 March 2006 🎀 — shoutout to the Libsemanage API documentation for the lore, and to you for reading all the way to the end. mwah 💋🫶