All rights reserved.
This software was developed for the FreeBSD Project by Chris
Costello at Safeport Network Services and NAI Labs, the Security
Research Division of Network Associates, Inc. under DARPA/SPAWAR
contract N66001-01-C-8035 ("CBOSS"), as part of the DARPA CHATS
research program.
Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions
are met:
1. Redistributions of source code must retain the above copyright
notice, this list of conditions and the following disclaimer.
2. Redistributions in binary form must reproduce the above copyright
notice, this list of conditions and the following disclaimer in the
documentation and/or other materials provided with the distribution.
3. The name of the author may not be used to endorse or promote
products derived from this software without specific prior written
permission.
THIS SOFTWARE IS PROVIDED BY THE AUTHORS AND CONTRIBUTORS ``AS IS'' AND
ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHORS OR CONTRIBUTORS BE LIABLE
FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
SUCH DAMAGE.
$FreeBSD: head/lib/libc/posix1e/mac_set.3 101242 2002-08-02 21:14:42Z rwatson $
.Dd December 21, 2001 .Dt MAC_SET 3 .Sh NAME .Nm mac_set_file , .Nm mac_set_fd , .Nm mac_set_proc .Nd set the MAC label for a file or process .Sh LIBRARY .Lb libc .Sh SYNOPSIS n sys/mac.h .Ft int .Fn mac_set_file "const char *path_p" "mac_t label" .Ft int .Fn mac_set_fd "int fd" "mac_t label" .Ft int .Fn mac_set_proc "mac_t label" .Sh DESCRIPTION The .Fn mac_set_file and .Fn mac_set_fd functions associate a MAC label specified by .Fa label to the file referenced to by .Fa path_p , or to the file descriptor .Fa fd , respectively. Note this function will fail on socket descriptors. For information on setting MAC labels on socket descriptors see .Xr setsockopt 2 . The .Fn mac_set_proc function associates the MAC label specified by .Fa label to the calling process.
p
A process is allowed to set a label for a file
only if it has MAC write access to the file,
and its effective user id is equal to
the owner of the file,
or has appropriate privileges.
.Sh RETURN VALUES
.Rv -std mac_set_fd mac_set_file mac_set_proc
.Sh ERRORS
l -tag -width Er t Bq Er EACCES MAC write access to the file is denied.
t Bq Er EBADF .Fa fd
is not a valid file descriptor.
t Bq Er EINVAL .Fa label
is not a valid MAC label.
t Bq Er EOPNOTSUPP Setting MAC labels is not supported
by the file referenced by
.Fa fd .
t Bq Er EPERM The calling process had insufficient privelege
to change the MAC label.
t Bq Er EROFS File system for the object being modified
is read only.
t Bq Er ENAMETOOLONG XXX POSIX_NO_TRUNC?
The length of the pathname in
.Fa path_p
exceeds
.Dv PATH_MAX ,
or a component of the pathname
is longer than
.Dv NAME_MAX .
t Bq Er ENOENT The file referenced by
.Fa path_p
does not exist.
t Bq Er ENOTDIR A component of the pathname
referenced by
.Fa path_p
is not a directory.
.Sh SEE_ALSO
.Xr mac 3 ,
.Xr mac_free 3 ,
.Xr mac_text 3 ,
.Xr mac_get 3