MAC_GET_FILE(3C)MAC_GET_FILE(3C)NAME
mac_get_file, mac_set_file - get or set the MAC label for a pathname
SYNOPSIS
#include <sys/mac.h>
mac_t mac_get_file(const char *path);
int mac_set_file(const char *path, mac_t macp);
DESCRIPTIONmac_get_file returns a mac_t, a pointer to an allocated struct mac_label
associated with the pathname pointed to by path. If _POSIX_MAC is in
effect, then the process must have MAC read access to the object.
mac_set_file sets the MAC label of the specified pathname. The MAC label
is first checked for validity by mac_valid(3c). The effective UID of the
process must match the owner of the object or the process must have
appropriate privilege to set the MAC label of path. If _POSIX_CAP is in
effect, then the appropriate capability must include CAP_FOWNER. In
addition, if _POSIX_MAC is in effect, then the process must have MAC
write access to the object.
RETURN VALUESmac_get_file a pointer to an allocated mac_t if successful, NULL
otherwise. The storage should be freed with a call to mac_free with the
returned pointer as an argument when it is no longer needed.
mac_set_file returns 0 if successful, -1 otherwise.
ERRORS
mac_get_file:
EACCESS Search permission is denied for a component of the path
prefix or the object exists and the process does not have
appropriate access rights.
ENAMETOLONG The pathname or one of its components is too long.
ENOENT The named object does not exist or path points to an
empty string.
ENOMEM allocation of the mac_t failed.
ENOSYS MAC support is not available (not installed).
ENOTDIR A component of the path prefix is not a directory.
mac_set_file:
EACCESS Search permission is denied for a component of the path
prefix or the object exists and the process does not have
appropriate access rights.
Page 1
MAC_GET_FILE(3C)MAC_GET_FILE(3C)
EINVAL macp points to an invalid MAC label.
ENAMETOLONG The pathname or one of its components is too long.
ENOENT The named object does not exist or path points to an
empty string.
ENOSPC The file system is full or some other resource needed for
the MAC storage is not available.
ENOSYS MAC support is not available (not installed).
ENOTDIR A component of the path prefix is not a directory.
EPERM The process does not have appropriate privilege to
perform the operation to set the MAC.
EROFS This function requires modification of a file system
which is currently read-only.
Page 2
