selinux

Documentation

Index

• Constants
• func Chcon(fpath string, scon string, recurse bool) error
• func CopyLevel(src, dest string) (string, error)
• func DisableSecOpt() []string
• func DupSecOpt(src string) []string
• func FreeLxcContexts(scon string)
• func GetLxcContexts() (processLabel string, fileLabel string, err error)
• func Getcon() (string, error)
• func Getexeccon() (string, error)
• func Getfilecon(path string) (string, error)
• func Getfscreatecon() (string, error)
• func Getpidcon(pid int) (string, error)
• func IntToMcs(id int, catRange uint32) string
• func ReserveLabel(scon string)
• func SecurityCheckContext(val string) error
• func SelinuxEnabled() bool
• func SelinuxGetEnforce() int
• func SelinuxGetEnforceMode() int
• func SetDisabled()
• func SetMCSDir(arg string) error
• func Setexeccon(scon string) error
• func Setfilecon(path string, scon string) error
• func Setfscreatecon(scon string) error
• type SELinuxContext
  • func NewContext(scon string) SELinuxContext
  • func (c SELinuxContext) Get() string
• type SelinuxError
  • func (e *SelinuxError) Error() string

Constants

const (
	Enforcing  = 1
	Permissive = 0
	Disabled   = -1
)

const (
	InvalidContext = iota
)

Functions

func Chcon

func Chcon(fpath string, scon string, recurse bool) error

Change the fpath file object to the SELinux label scon. If the fpath is a directory and recurse is true Chcon will walk the directory tree setting the label

func CopyLevel

func CopyLevel(src, dest string) (string, error)

func DisableSecOpt

func DisableSecOpt() []string

DisableSecOpt returns a security opt that can be used to disabling SELinux labeling support for future container processes

func DupSecOpt

func DupSecOpt(src string) []string

DupSecOpt takes an SELinux process label and returns security options that can will set the SELinux Type and Level for future container processes

func FreeLxcContexts

func FreeLxcContexts(scon string)

func GetLxcContexts

func GetLxcContexts() (processLabel string, fileLabel string, err error)

func Getcon

func Getcon() (string, error)

Getcon returns the SELinux label of the current process thread, or an error.

func Getexeccon

func Getexeccon() (string, error)

func Getfilecon

func Getfilecon(path string) (string, error)

Getfilecon returns the SELinux label for this path or returns an error.

func Getfscreatecon

func Getfscreatecon() (string, error)

func Getpidcon

func Getpidcon(pid int) (string, error)

Getpidcon returns the SELinux label of the given pid, or an error.

func IntToMcs

func IntToMcs(id int, catRange uint32) string

func ReserveLabel

func ReserveLabel(scon string)

func SecurityCheckContext

func SecurityCheckContext(val string) error

func SelinuxEnabled

func SelinuxEnabled() bool

SelinuxEnabled returns whether selinux is currently enabled.

func SelinuxGetEnforce

func SelinuxGetEnforce() int

func SelinuxGetEnforceMode

func SelinuxGetEnforceMode() int

func SetDisabled

func SetDisabled()

SetDisabled disables selinux support for the package

func SetMCSDir

func SetMCSDir(arg string) error

Set the directory used for storage of used MCS contexts

func Setexeccon

func Setexeccon(scon string) error

func Setfilecon

func Setfilecon(path string, scon string) error

Setfilecon sets the SELinux label for this path or returns an error.

func Setfscreatecon

func Setfscreatecon(scon string) error

Types

type SELinuxContext

type SELinuxContext map[string]string

func NewContext

func NewContext(scon string) SELinuxContext

func (SELinuxContext) Get

func (c SELinuxContext) Get() string

type SelinuxError

type SelinuxError struct {
	Errno int
	Prob  string
}

func (*SelinuxError) Error

func (e *SelinuxError) Error() string