matchpathcon() for arbitrary subjects

[Matt Anderson <mra@hp.com>]

I'm trying to get the CUPS print server to print to a file on the file
system.  In order to do this in a usable way I want to be able to query
the SELinux security server as to what the type of a file would be for a
given directory.  This is essentially what matchpathcon() does, and I
can get that to work.

The part I'm having trouble with is I'm making this call from cupsd with
the context of system_u:system_r:cupsd_t:SystemHigh and getting a
response for that type.  I'd like to make the call from that context,
but asking the server what the result would be for a given user's
context (such as user_u:user_r:user_lpr_t:SystemLow) is this possible
with some other existing function?

-matt

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.