NAME¶

sepol_check_context - Check the validity of a security context against a binary policy.

SYNOPSIS¶

#include <sepol/sepol.h>

int sepol_check_context(const char *context);

int sepol_set_policydb_from_file(FILE *fp);

DESCRIPTION¶

sepol_check_context checks the validity of a security context against a binary policy previously loaded from a file via sepol_set_policydb_from_file. It is used by setfiles -c to validate a file contexts configuration against the binary policy upon policy builds. For validating a context against the active policy on a SELinux system, use security_check_context from libselinux instead.

RETURN VALUE¶

Returns 0 on success or -1 with errno set otherwise.