SEPOL_CHECK_CONTEXT(3)

💖 sepol_check_context — the vibe check for security contexts 💖

okay bestie, welcome to the SE Linux binary policy API documentation, section 3 of the manual (yes, that's the sepol_...context(3) girlies 🫶). pull up a chair, grab a strawberry, and let's talk about checking whether your security context is actually valid. 🍓✨

✨ NAME ✨

sepol_check_context — checking the validity of a security context against a binary policy, fr fr. 👑

🌸 SYNOPSIS 🌸

#include <sepol/sepol.h>

int sepol_check_context(const char *context);

int sepol_set_policydb_from_file(FILE *fp);

two functions, one header, zero drama. iconic. 💅

🦋 DESCRIPTION 🦋

so sepol_check_context does exactly what it says on the tin: it checks the validity of a security context against a binary policy. and like, not any policy — specifically one that was previously loaded from a file via sepol_set_policydb_from_file. no cap, that's the whole setup. 🎀

who's using this?? bestie, it's what setfiles -c uses to validate a file contexts configuration against the binary policy when you do policy builds. that's its moment. its main character era. 🌈

⚠️ okay important psa: if you're trying to validate a context against the active policy on a SELinux system, this is not the function you want. go use security_check_context from libselinux instead. iykyk. 💀

⭐ RETURN VALUE ⭐

• returns 0 on success 🥳
• returns -1 with errno set otherwise 😭

that's it. that's the whole vibe check.

💜 sign-off 💜

this little baddie was brought to you by stephen.smalley.work@gmail.com, dated 15 March 2005 — old enough to be a whole legend, still serving. periodt. 🧚✨