matchpathcon_checkmatches(3SELinux API documentatimatchpathcon_checkmatches(3)NAME
matchpathcon_checkmatches, matchpathcon_filespec_add, matchpath‐
con_filespec_destroy, matchpathcon_filespec_eval - check and report
whether any specification index has no matches with any inode. Mainte‐
nance and statistics on inode associations.
SYNOPSIS
#include <selinux/selinux.h>
void matchpathcon_checkmatches(char *str);
int matchpathcon_filespec_add(ino_t ino, int specind, const char
*file);
void matchpathcon_filespec_destroy(void);
void matchpathcon_filespec_eval(void);
DESCRIPTION
matchpathcon_checkmatches checks whether any specification has no
matches and reports them. The str argument is used as a prefix for any
warning messages.
matchpathcon_filespec_add maintains an association between an inode ino
and a specification index specind, and checks whether a conflicting
specification is already associated with the same inode (e.g. due to
multiple hard links). If so, then it uses the latter of the two speci‐
fications based on their order in the file context configuration.
Returns the specification index used or -1 on error.
matchpathcon_filespec_destroy destroys any inode associations that have
been added, e.g. to restart for a new filesystem.
matchpathcon_filespec_eval displays statistics on the hash table usage
for the inode associations.
RETURN VALUE
Returns zero on success or -1 otherwise.
SEE ALSOselinux(8), matchpathcon(3), matchpathcon_index(3), freecon(3), set‐
filecon(3), setfscreatecon(3)sds@tycho.nsa.gov 21 November 2009 matchpathcon_checkmatches(3)
