selinux

package
v1.0.5 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Aug 24, 2015 License: Apache-2.0, Apache-2.0 Imports: 13 Imported by: 0

Documentation

Index

Constants

View Source
const (
	Enforcing  = 1
	Permissive = 0
	Disabled   = -1
)

Variables

This section is empty.

Functions

func Chcon added in v0.4.2

func Chcon(fpath string, scon string, recurse bool) error

Change the fpath file object to the SELinux label scon. If the fpath is a directory and recurse is true Chcon will walk the directory tree setting the label

func CopyLevel

func CopyLevel(src, dest string) (string, error)

func DisableSecOpt added in v0.4.2

func DisableSecOpt() []string

DisableSecOpt returns a security opt that can be used to disabling SELinux labeling support for future container processes

func DupSecOpt added in v0.4.2

func DupSecOpt(src string) []string

DupSecOpt takes an SELinux process label and returns security options that can will set the SELinux Type and Level for future container processes

func FreeLxcContexts

func FreeLxcContexts(scon string)

func GetLxcContexts

func GetLxcContexts() (processLabel string, fileLabel string)

func Getcon added in v0.4.2

func Getcon() (string, error)

Getcon returns the SELinux label of the current process thread, or an error.

func Getexeccon

func Getexeccon() (string, error)

func Getfilecon added in v0.4.2

func Getfilecon(path string) (string, error)

Getfilecon returns the SELinux label for this path or returns an error.

func Getfscreatecon

func Getfscreatecon() (string, error)

func Getpidcon

func Getpidcon(pid int) (string, error)

Getpidcon returns the SELinux label of the given pid, or an error.

func IntToMcs

func IntToMcs(id int, catRange uint32) string

func ReserveLabel

func ReserveLabel(scon string)

func SecurityCheckContext

func SecurityCheckContext(val string) error

func SelinuxEnabled

func SelinuxEnabled() bool

SelinuxEnabled returns whether selinux is currently enabled.

func SelinuxGetEnforce

func SelinuxGetEnforce() int

func SelinuxGetEnforceMode

func SelinuxGetEnforceMode() int

func SetDisabled

func SetDisabled()

SetDisabled disables selinux support for the package

func Setexeccon

func Setexeccon(scon string) error

func Setfilecon

func Setfilecon(path string, scon string) error

Setfilecon sets the SELinux label for this path or returns an error.

func Setfscreatecon

func Setfscreatecon(scon string) error

Types

type SELinuxContext

type SELinuxContext map[string]string

func NewContext

func NewContext(scon string) SELinuxContext

func (SELinuxContext) Get

func (c SELinuxContext) Get() string

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL