* Re: libselinux man page changes to make translations easier. [not found] <4694EDC7.9090507@redhat.com> @ 2007-07-23 16:22 ` Stephen Smalley 2007-07-23 17:36 ` Daniel J Walsh 0 siblings, 1 reply; 2+ messages in thread From: Stephen Smalley @ 2007-07-23 16:22 UTC (permalink / raw) To: Daniel J Walsh; +Cc: selinux On Wed, 2007-07-11 at 10:48 -0400, Daniel J Walsh wrote: > plain text document attachment (diff) > diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/avc_add_callback.3 libselinux-2.0.23/man/man3/avc_add_callback.3 > --- nsalibselinux/man/man3/avc_add_callback.3 2007-06-21 05:16:39.000000000 -0400 > +++ libselinux-2.0.23/man/man3/avc_add_callback.3 2007-07-10 12:17:08.000000000 -0400 > @@ -6,26 +6,26 @@ > avc_add_callback \- additional event notification for SELinux userspace object managers. > .SH "SYNOPSIS" > .B #include <selinux/selinux.h> > -.br > + Why? I don't understand how this simplifies translations, and it could change the formatting of the man pages. > .B #include <selinux/avc.h> > .sp > .BI "int avc_add_callback(int (*" callback ")(uint32_t " event , > .in +\w'int avc_add_callback(int (*callback)('u > .BI "security_id_t " ssid , > -.br > + > .BI "security_id_t " tsid , > -.br > + > .BI "security_class_t " tclass , > -.br > + > .BI "access_vector_t " perms , > -.br > + > .BI "access_vector_t *" out_retained ")," > .in > .in +\w'int avc_add_callback('u > .BI "uint32_t " events ", security_id_t " ssid , > -.br > + > .BI "security_id_t " tsid ", security_class_t " tclass , > -.br > + > .BI "access_vector_t " perms ");" > .in > .SH "DESCRIPTION" > diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/avc_cache_stats.3 libselinux-2.0.23/man/man3/avc_cache_stats.3 > --- nsalibselinux/man/man3/avc_cache_stats.3 2007-06-21 05:16:39.000000000 -0400 > +++ libselinux-2.0.23/man/man3/avc_cache_stats.3 2007-07-10 12:17:08.000000000 -0400 > @@ -6,7 +6,7 @@ > avc_cache_stats, avc_av_stats, avc_sid_stats \- obtain userspace SELinux AVC statistics. > .SH "SYNOPSIS" > .B #include <selinux/selinux.h> > -.br > + > .B #include <selinux/avc.h> > .sp > .BI "void avc_av_stats(void);" > diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/avc_compute_create.3 libselinux-2.0.23/man/man3/avc_compute_create.3 > --- nsalibselinux/man/man3/avc_compute_create.3 2007-06-21 05:16:39.000000000 -0400 > +++ libselinux-2.0.23/man/man3/avc_compute_create.3 2007-07-10 12:17:07.000000000 -0400 > @@ -6,7 +6,7 @@ > avc_compute_create \- obtain SELinux label for new object. > .SH "SYNOPSIS" > .B #include <selinux/selinux.h> > -.br > + > .B #include <selinux/avc.h> > .sp > .BI "int avc_compute_create(security_id_t " ssid ", security_id_t " tsid , > diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/avc_context_to_sid.3 libselinux-2.0.23/man/man3/avc_context_to_sid.3 > --- nsalibselinux/man/man3/avc_context_to_sid.3 2007-06-21 05:16:39.000000000 -0400 > +++ libselinux-2.0.23/man/man3/avc_context_to_sid.3 2007-07-10 12:17:07.000000000 -0400 > @@ -6,7 +6,7 @@ > avc_context_to_sid, avc_sid_to_context, sidput, sidget, avc_get_initial_sid \- obtain and manipulate SELinux security ID's. > .SH "SYNOPSIS" > .B #include <selinux/selinux.h> > -.br > + > .B #include <selinux/avc.h> > .sp > .BI "int avc_context_to_sid(security_context_t " ctx ", security_id_t *" sid ");" > diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/avc_has_perm.3 libselinux-2.0.23/man/man3/avc_has_perm.3 > --- nsalibselinux/man/man3/avc_has_perm.3 2007-06-21 05:16:39.000000000 -0400 > +++ libselinux-2.0.23/man/man3/avc_has_perm.3 2007-07-10 12:13:47.000000000 -0400 > @@ -6,7 +6,7 @@ > avc_has_perm, avc_has_perm_noaudit, avc_audit, avc_entry_ref_init \- obtain and audit SELinux access decisions. > .SH "SYNOPSIS" > .B #include <selinux/selinux.h> > -.br > + > .B #include <selinux/avc.h> > .sp > .BI "void avc_entry_ref_init(struct avc_entry_ref *" aeref ");" > @@ -14,21 +14,21 @@ > .BI "int avc_has_perm(security_id_t " ssid ", security_id_t " tsid , > .in +\w'int avc_has_perm('u > .BI "security_class_t " tclass ", access_vector_t " requested , > -.br > + > .BI "struct avc_entry_ref *" aeref ", void *" auditdata ");" > .in > .sp > .BI "int avc_has_perm_noaudit(security_id_t " ssid ", security_id_t " tsid , > .in +\w'int avc_has_perm('u > .BI "security_class_t " tclass ", access_vector_t " requested , > -.br > + > .BI "struct avc_entry_ref *" aeref ", struct av_decision *" avd ");" > .in > .sp > .BI "void avc_audit(security_id_t " ssid ", security_id_t " tsid , > .in +\w'void avc_audit('u > .BI "security_class_t " tclass ", access_vector_t " requested , > -.br > + > .BI "struct av_decision *" avd ", int " result ", void *" auditdata ");" > .in > .SH "DESCRIPTION" > diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/avc_init.3 libselinux-2.0.23/man/man3/avc_init.3 > --- nsalibselinux/man/man3/avc_init.3 2007-06-21 05:16:39.000000000 -0400 > +++ libselinux-2.0.23/man/man3/avc_init.3 2007-07-10 12:13:43.000000000 -0400 > @@ -6,17 +6,17 @@ > avc_init, avc_destroy, avc_reset, avc_cleanup \- userspace SELinux AVC setup and teardown. > .SH "SYNOPSIS" > .B #include <selinux/selinux.h> > -.br > + > .B #include <selinux/avc.h> > .sp > .BI "int avc_init(const char *" msgprefix , > .in +\w'int avc_init('u > .BI "const struct avc_memory_callback *" mem_callbacks , > -.br > + > .BI "const struct avc_log_callback *" log_callbacks , > -.br > + > .BI "const struct avc_thread_callback *" thread_callbacks , > -.br > + > .BI "const struct avc_lock_callback *" lock_callbacks ");" > .in > .sp > diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/context_new.3 libselinux-2.0.23/man/man3/context_new.3 > --- nsalibselinux/man/man3/context_new.3 2007-01-17 11:11:35.000000000 -0500 > +++ libselinux-2.0.23/man/man3/context_new.3 2007-07-10 12:13:40.000000000 -0400 > @@ -4,27 +4,27 @@ > > .SH "SYNOPSIS" > .B #include <selinux/context.h> > -.br > + > .B "context_t context_new(const char *" context_str ); > -.br > + > .B "const char * context_str(context_t " con ); > -.br > + > .B "void context_free(context_t " con ); > -.br > + > .B "const char * context_type_get(context_t " con ); > -.br > + > .B "const char * context_range_get(context_t " con ); > -.br > + > .B "const char * context_role_get(context_t " con ); > -.br > + > .B "const char * context_user_get(context_t " con ); > -.br > + > .B "const char * context_type_set(context_t " con ", const char* " type); > -.br > + > .B "const char * context_range_set(context_t " con ", const char* " range); > -.br > + > .B "const char * context_role_set(context_t " con ", const char* " role ); > -.br > + > .B "const char * context_user_set(context_t " con ", const char* " user ); > > .SH "DESCRIPTION" > diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/freecon.3 libselinux-2.0.23/man/man3/freecon.3 > --- nsalibselinux/man/man3/freecon.3 2007-06-21 05:16:39.000000000 -0400 > +++ libselinux-2.0.23/man/man3/freecon.3 2007-07-10 12:13:55.000000000 -0400 > @@ -5,7 +5,7 @@ > .B #include <selinux/selinux.h> > .sp > .BI "void freecon(security_context_t "con ); > -.br > + > .BI "void freeconary(security_context_t *" con ); > > .SH "DESCRIPTION" > diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/getcon.3 libselinux-2.0.23/man/man3/getcon.3 > --- nsalibselinux/man/man3/getcon.3 2007-06-21 05:16:39.000000000 -0400 > +++ libselinux-2.0.23/man/man3/getcon.3 2007-07-10 12:14:08.000000000 -0400 > @@ -1,21 +1,21 @@ > .TH "getcon" "3" "1 January 2004" "russell@coker.com.au" "SELinux API documentation" > .SH "NAME" > getcon, getprevcon, getpidcon \- get SELinux security context of a process. > -.br > + > getpeercon - get security context of a peer socket. > -.br > + > setcon - set current security context of a process. > .SH "SYNOPSIS" > .B #include <selinux/selinux.h> > .sp > .BI "int getcon(security_context_t *" context ); > -.br > + > .BI "int getprevcon(security_context_t *" context ); > -.br > + > .BI "int getpidcon(pid_t " pid ", security_context_t *" context ); > -.br > + > .BI "int getpeercon(int " fd ", security_context_t *" context); > -.br > + > .BI "int setcon(security_context_t " context); > > .SH "DESCRIPTION" > diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/getexeccon.3 libselinux-2.0.23/man/man3/getexeccon.3 > --- nsalibselinux/man/man3/getexeccon.3 2007-06-21 05:16:39.000000000 -0400 > +++ libselinux-2.0.23/man/man3/getexeccon.3 2007-07-10 12:14:24.000000000 -0400 > @@ -1,16 +1,16 @@ > .TH "getexeccon" "3" "1 January 2004" "russell@coker.com.au" "SELinux API documentation" > .SH "NAME" > getexeccon, setexeccon \- get or set the SELinux security context used for executing a new process. > -.br > + > rpm_execcon \- run a helper for rpm in an appropriate security context > > .SH "SYNOPSIS" > .B #include <selinux/selinux.h> > .sp > .BI "int getexeccon(security_context_t *" context ); > -.br > + > .BI "int setexeccon(security_context_t "context ); > -.br > + > .BI "int rpm_execcon(unsigned int " verified ", const char *" filename ", char *const " argv "[] , char *const " envp "[]); > > .SH "DESCRIPTION" > @@ -26,16 +26,16 @@ > setexeccon to reset to the default policy behavior. > The exec context is automatically reset after the next execve, so a > program doesn't need to explicitly sanitize it upon startup. > -.br > + > > setexeccon can be applied prior to library > functions that internally perform an execve, e.g. execl*, execv*, popen, > in order to set an exec context for that operation. > -.br > + > > Note: Signal handlers that perform an execve must take care to > save, reset, and restore the exec context to avoid unexpected behaviors. > -.br > + > > .B rpm_execcon > runs a helper for rpm in an appropriate security context. The > diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/getfilecon.3 libselinux-2.0.23/man/man3/getfilecon.3 > --- nsalibselinux/man/man3/getfilecon.3 2007-06-21 05:16:39.000000000 -0400 > +++ libselinux-2.0.23/man/man3/getfilecon.3 2007-07-10 12:17:06.000000000 -0400 > @@ -5,9 +5,9 @@ > .B #include <selinux/selinux.h> > .sp > .BI "int getfilecon(const char *" path ", security_context_t *" con ); > -.br > + > .BI "int lgetfilecon(const char *" path ", security_context_t *" con ); > -.br > + > .BI "int fgetfilecon(int "fd ", security_context_t *" con ); > .SH "DESCRIPTION" > .B getfilecon > @@ -22,7 +22,6 @@ > is identical to getfilecon, only the open file pointed to by filedes (as > returned by open(2)) is interrogated in place of path. > > -.br > > The returned context should be freed with freecon if non-NULL. > .SH "RETURN VALUE" > diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/getfscreatecon.3 libselinux-2.0.23/man/man3/getfscreatecon.3 > --- nsalibselinux/man/man3/getfscreatecon.3 2007-06-21 05:16:39.000000000 -0400 > +++ libselinux-2.0.23/man/man3/getfscreatecon.3 2007-07-10 12:17:06.000000000 -0400 > @@ -6,7 +6,7 @@ > .B #include <selinux/selinux.h> > .sp > .BI "int getfscreatecon(security_context_t *" con ); > -.br > + > .BI "int setfscreatecon(security_context_t "context ); > > .SH "DESCRIPTION" > @@ -22,11 +22,11 @@ > setfscreatecon to reset to the default policy behavior. > The fscreate context is automatically reset after the next execve, so a > program doesn't need to explicitly sanitize it upon startup. > -.br > + > setfscreatecon can be applied prior to library > functions that internally perform an file creation, > in order to set an file context on the objects. > -.br > + > > Note: Signal handlers that perform an setfscreate must take care to > save, reset, and restore the fscreate context to avoid unexpected behaviors. > diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/get_ordered_context_list.3 libselinux-2.0.23/man/man3/get_ordered_context_list.3 > --- nsalibselinux/man/man3/get_ordered_context_list.3 2007-06-21 05:16:39.000000000 -0400 > +++ libselinux-2.0.23/man/man3/get_ordered_context_list.3 2007-07-10 12:17:05.000000000 -0400 > @@ -4,7 +4,7 @@ > > .SH "SYNOPSIS" > .B #include <selinux/selinux.h> > -.br > + > .B #include <selinux/get_context_list.h> > .sp > .BI "int get_ordered_context_list(const char *" user ", security_context_t "fromcon ", security_context_t **" list ); > diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/getseuserbyname.3 libselinux-2.0.23/man/man3/getseuserbyname.3 > --- nsalibselinux/man/man3/getseuserbyname.3 2007-06-21 05:16:39.000000000 -0400 > +++ libselinux-2.0.23/man/man3/getseuserbyname.3 2007-07-10 12:17:04.000000000 -0400 > @@ -12,7 +12,7 @@ > then be passed to other libselinux functions such as > get_ordered_context_list_with_level and get_default_context_with_level. > > -.br > + > > The returned SELinux username and level should be freed by the caller > using free. > diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/is_context_customizable.3 libselinux-2.0.23/man/man3/is_context_customizable.3 > --- nsalibselinux/man/man3/is_context_customizable.3 2007-01-17 11:11:35.000000000 -0500 > +++ libselinux-2.0.23/man/man3/is_context_customizable.3 2007-07-10 12:17:04.000000000 -0400 > @@ -8,7 +8,7 @@ > > .SH "DESCRIPTION" > .B is_context_customizable > -.br > + > This function checks whether the type of scon is in the /etc/selinux/SELINUXTYPE/context/customizable_types file. A customizable type is a file context type that > administrators set on files, usually to allow certain domains to share the file content. restorecon and setfiles, by default, leave these context in place. > > diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/matchmediacon.3 libselinux-2.0.23/man/man3/matchmediacon.3 > --- nsalibselinux/man/man3/matchmediacon.3 2007-06-21 05:16:39.000000000 -0400 > +++ libselinux-2.0.23/man/man3/matchmediacon.3 2007-07-10 12:17:03.000000000 -0400 > @@ -6,14 +6,14 @@ > .B #include <selinux/selinux.h> > .sp > .BI "int matchmediacon(const char *" media ", security_context_t *" con);" > -.br > + > > .SH "DESCRIPTION" > -.br > + > .B matchmediacon > matches the specified media type with the media contexts configuration and sets the security context "con" to refer to the resulting context. > .sp > -.br > + > .B Note: > Caller must free returned security context "con" using freecon. > .SH "RETURN VALUE" > diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/matchpathcon.3 libselinux-2.0.23/man/man3/matchpathcon.3 > --- nsalibselinux/man/man3/matchpathcon.3 2007-06-21 05:16:39.000000000 -0400 > +++ libselinux-2.0.23/man/man3/matchpathcon.3 2007-07-10 12:15:33.000000000 -0400 > @@ -6,18 +6,18 @@ > .B #include <selinux/selinux.h> > .sp > .BI "int matchpathcon_init(const char *" path ");" > -.br > + > .BI "int matchpathcon_fini(void);" > -.br > + > .BI "int matchpathcon(const char *" path ", mode_t " mode ", security_context_t *" con); > .sp > -.br > + > .BI "void set_matchpathcon_printf(void (*" f ")(const char *" fmt ", ...));" > -.br > + > .BI "void set_matchpathcon_invalidcon(int (*" f ")(const char *"path ", unsigned " lineno ", char * " context "));" > -.br > + > .BI "void set_matchpathcon_flags(unsigned int " flags ");" > -.br > + > .SH "DESCRIPTION" > .B matchpathcon_init > loads the file contexts configuration specified by > @@ -40,7 +40,7 @@ > suffix are also looked up and loaded if present. These files provide > dynamically generated entries for user home directories and for local > customizations. > -.br > + > .sp > .B matchpathcon_fini > frees the memory allocated by a prior call to > @@ -49,7 +49,7 @@ > .B matchpathcon_init > calls, or to free memory when finished using > .B matchpathcon. > -.br > + > .sp > .B matchpathcon > matches the specified pathname and mode against the file contexts > @@ -72,14 +72,14 @@ > .I path, > defaulting to the active file contexts configuration. > .sp > -.br > + > .B set_matchpathcon_printf > sets the function used by > .B matchpathcon_init > when displaying errors about the file contexts configuration. If not set, > then this defaults to fprintf(stderr, fmt, ...). This can be set to redirect > error reporting to a different destination. > -.br > + > .sp > .B set_matchpathcon_invalidcon > sets the function used by > @@ -100,7 +100,7 @@ > and > .I lineno > in such error messages. > -.br > + > .sp > .B set_matchpathcon_flags > sets flags controlling the operation of > @@ -111,7 +111,7 @@ > .B MATCHPATHCON_BASEONLY > flag is set, then only the base file contexts configuration file > will be processed, not any dynamically generated entries or local customizations. > -.br > + > .sp > .SH "RETURN VALUE" > Returns 0 on success or -1 otherwise. > diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/security_class_to_string.3 libselinux-2.0.23/man/man3/security_class_to_string.3 > --- nsalibselinux/man/man3/security_class_to_string.3 2007-06-21 05:16:39.000000000 -0400 > +++ libselinux-2.0.23/man/man3/security_class_to_string.3 2007-07-10 12:15:16.000000000 -0400 > @@ -8,7 +8,7 @@ > > .SH "SYNOPSIS" > .B #include <selinux/selinux.h> > -.br > + > .B #include <selinux/flask.h> > .sp > .BI "const char * security_class_to_string(security_class_t " tclass ");" > diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/security_compute_av.3 libselinux-2.0.23/man/man3/security_compute_av.3 > --- nsalibselinux/man/man3/security_compute_av.3 2007-06-21 05:16:39.000000000 -0400 > +++ libselinux-2.0.23/man/man3/security_compute_av.3 2007-07-10 12:15:12.000000000 -0400 > @@ -6,7 +6,7 @@ > > .SH "SYNOPSIS" > .B #include <selinux/selinux.h> > -.br > + > .B #include <selinux/flask.h> > .sp > .BI "int security_compute_av(security_context_t "scon ", security_context_t "tcon ", security_class_t "tclass ", access_vector_t "requested ", struct av_decision *" avd ); > diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/security_getenforce.3 libselinux-2.0.23/man/man3/security_getenforce.3 > --- nsalibselinux/man/man3/security_getenforce.3 2007-06-21 05:16:39.000000000 -0400 > +++ libselinux-2.0.23/man/man3/security_getenforce.3 2007-07-10 12:15:08.000000000 -0400 > @@ -5,7 +5,7 @@ > .B #include <selinux/selinux.h> > .sp > .B int security_getenforce(); > -.br > + > .BI "int security_setenforce(int "value ); > > .SH "DESCRIPTION" > diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/security_load_booleans.3 libselinux-2.0.23/man/man3/security_load_booleans.3 > --- nsalibselinux/man/man3/security_load_booleans.3 2007-01-17 11:11:35.000000000 -0500 > +++ libselinux-2.0.23/man/man3/security_load_booleans.3 2007-07-10 12:17:02.000000000 -0400 > @@ -7,15 +7,15 @@ > .B #include <selinux/selinux.h> > .sp > extern int security_load_booleans(char *path); > -.br > + > extern int security_get_boolean_names(char ***names, int *len); > -.br > + > extern int security_get_boolean_pending(const char *name); > -.br > + > extern int security_get_boolean_active(const char *name); > -.br > + > extern int security_set_boolean(const char *name, int value); > -.br > + > extern int security_commit_booleans(void); > > > @@ -29,27 +29,27 @@ > The SELinux API allows for a transaction based update. So you can set several boolean values and the commit them all at once. > > security_load_booleans > -.br > + > Load policy boolean settings. Path may be NULL, in which case the booleans are loaded from the active policy boolean configuration file. > > security_get_boolean_names > -.br > + > Returns a list of boolean names, currently supported by the loaded policy. > > security_set_boolean > -.br > + > Sets the pending value for boolean > > security_get_boolean_pending > -.br > + > Return pending value for boolean > > security_get_boolean_active > -.br > + > Return active value for boolean > > security_commit_booleans > -.br > + > Commit all pending values for the booleans. > > .SH AUTHOR > diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/selabel_lookup.3 libselinux-2.0.23/man/man3/selabel_lookup.3 > --- nsalibselinux/man/man3/selabel_lookup.3 2007-06-21 05:16:39.000000000 -0400 > +++ libselinux-2.0.23/man/man3/selabel_lookup.3 2007-07-10 12:17:01.000000000 -0400 > @@ -6,20 +6,20 @@ > selabel_lookup \- obtain SELinux security context from a string label. > .SH "SYNOPSIS" > .B #include <selinux/selinux.h> > -.br > + > .B #include <selinux/label.h> > .sp > .BI "int selabel_lookup(struct selabel_handle *" hnd , > .in +\w'int selabel_lookup('u > .BI "security_context_t *" context , > -.br > + > .BI "const char *" key ", int " type ");" > .in > .sp > .BI "int selabel_lookup_raw(struct selabel_handle *" hnd , > .in +\w'int selabel_lookup_raw('u > .BI "security_context_t *" context , > -.br > + > .BI "const char *" key ", int " type ");" > > .SH "DESCRIPTION" > diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/selabel_open.3 libselinux-2.0.23/man/man3/selabel_open.3 > --- nsalibselinux/man/man3/selabel_open.3 2007-06-21 05:16:39.000000000 -0400 > +++ libselinux-2.0.23/man/man3/selabel_open.3 2007-07-10 12:17:00.000000000 -0400 > @@ -6,13 +6,13 @@ > selabel_open, selabel_close \- userspace SELinux labeling interface. > .SH "SYNOPSIS" > .B #include <selinux/selinux.h> > -.br > + > .B #include <selinux/label.h> > .sp > .BI "struct selabel_handle *selabel_open(int " backend , > .in +\w'struct selabel_handle *selabel_open('u > .BI "struct selinux_opt *" options , > -.br > + > .BI "unsigned " nopt ");" > .in > .sp > diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/selabel_stats.3 libselinux-2.0.23/man/man3/selabel_stats.3 > --- nsalibselinux/man/man3/selabel_stats.3 2007-06-21 05:16:39.000000000 -0400 > +++ libselinux-2.0.23/man/man3/selabel_stats.3 2007-07-10 12:16:59.000000000 -0400 > @@ -6,7 +6,7 @@ > selabel_stats \- obtain SELinux labeling statistics. > .SH "SYNOPSIS" > .B #include <selinux/selinux.h> > -.br > + > .B #include <selinux/label.h> > .sp > .BI "void selabel_lookup(struct selabel_handle *" hnd ");" > diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/selinux_binary_policy_path.3 libselinux-2.0.23/man/man3/selinux_binary_policy_path.3 > --- nsalibselinux/man/man3/selinux_binary_policy_path.3 2007-01-17 11:11:35.000000000 -0500 > +++ libselinux-2.0.23/man/man3/selinux_binary_policy_path.3 2007-07-10 12:16:08.000000000 -0400 > @@ -10,27 +10,27 @@ > .SH "SYNOPSIS" > .B #include <selinux/selinux.h> > .sp > -.br > + > extern const char *selinux_policy_root(void); > -.br > + > extern const char *selinux_binary_policy_path(void); > -.br > + > extern const char *selinux_failsafe_context_path(void); > -.br > + > extern const char *selinux_removable_context_path(void); > -.br > + > extern const char *selinux_default_context_path(void); > -.br > + > extern const char *selinux_user_contexts_path(void); > -.br > + > extern const char *selinux_file_context_path(void); > -.br > + > extern const char *selinux_media_context_path(void); > -.br > + > extern const char *selinux_securetty_types_path(void); > -.br > + > extern const char *selinux_contexts_path(void); > -.br > + > extern const char *selinux_booleans_path(void); > > > diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/selinux_getenforcemode.3 libselinux-2.0.23/man/man3/selinux_getenforcemode.3 > --- nsalibselinux/man/man3/selinux_getenforcemode.3 2007-06-21 05:16:39.000000000 -0400 > +++ libselinux-2.0.23/man/man3/selinux_getenforcemode.3 2007-07-10 12:16:51.000000000 -0400 > @@ -5,13 +5,13 @@ > .B #include <selinux/selinux.h> > .sp > .B int selinux_getenforcemode(int *enforce); > -.br > + > > .SH "DESCRIPTION" > .B selinux_getenforcemode > Reads the contents of the /etc/selinux/config file to determine how the > system was setup to run SELinux. > -.br > + > Sets the value of enforce to 1 if SELinux should be run in enforcing mode. > Sets the value of enforce to 0 if SELinux should be run in permissive mode. > Sets the value of enforce to -1 if SELinux should be disabled. > diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/selinux_policy_root.3 libselinux-2.0.23/man/man3/selinux_policy_root.3 > --- nsalibselinux/man/man3/selinux_policy_root.3 2007-06-21 05:16:39.000000000 -0400 > +++ libselinux-2.0.23/man/man3/selinux_policy_root.3 2007-07-10 12:16:49.000000000 -0400 > @@ -5,7 +5,7 @@ > .B #include <selinux/selinux.h> > .sp > .B char *selinux_policy_root(); > -.br > + > > .SH "DESCRIPTION" > .B selinux_policy_root > diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/selinux_set_callback.3 libselinux-2.0.23/man/man3/selinux_set_callback.3 > --- nsalibselinux/man/man3/selinux_set_callback.3 2007-06-21 05:16:39.000000000 -0400 > +++ libselinux-2.0.23/man/man3/selinux_set_callback.3 2007-07-10 12:16:48.000000000 -0400 > @@ -39,11 +39,11 @@ > argument indicates the type of message and will be set to one of the following: > > .B SELINUX_ERROR > -.br > + > .B SELINUX_WARNING > -.br > + > .B SELINUX_INFO > -.br > + > .B SELINUX_AVC > > .TP > diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/setfilecon.3 libselinux-2.0.23/man/man3/setfilecon.3 > --- nsalibselinux/man/man3/setfilecon.3 2007-06-21 05:16:39.000000000 -0400 > +++ libselinux-2.0.23/man/man3/setfilecon.3 2007-07-10 12:12:18.000000000 -0400 > @@ -6,9 +6,9 @@ > .B #include <selinux/selinux.h> > .sp > .BI "int setfilecon(const char *" path ", security_context_t "con ); > -.br > + > .BI "int lsetfilecon(const char *" path ", security_context_t "con ); > -.br > + > .BI "int fsetfilecon(int "fd ", security_context_t "con ); > > .SH "DESCRIPTION" > diff --exclude-from=exclude -N -u -r nsalibselinux/man/man5/selabel_file.5 libselinux-2.0.23/man/man5/selabel_file.5 > --- nsalibselinux/man/man5/selabel_file.5 2007-06-21 05:16:39.000000000 -0400 > +++ libselinux-2.0.23/man/man5/selabel_file.5 2007-07-10 12:18:11.000000000 -0400 > @@ -6,13 +6,13 @@ > selabel_file \- userspace SELinux labeling interface: file contexts backend. > .SH "SYNOPSIS" > .B #include <selinux/selinux.h> > -.br > + > .B #include <selinux/label.h> > .sp > .BI "int selabel_lookup(struct selabel_handle *" hnd , > .in +\w'int selabel_lookup('u > .BI "security_context_t *" context , > -.br > + > .BI "const char *" path ", int " mode ");" > > .SH "DESCRIPTION" > diff --exclude-from=exclude -N -u -r nsalibselinux/man/man5/selabel_media.5 libselinux-2.0.23/man/man5/selabel_media.5 > --- nsalibselinux/man/man5/selabel_media.5 2007-06-21 05:16:39.000000000 -0400 > +++ libselinux-2.0.23/man/man5/selabel_media.5 2007-07-10 12:18:11.000000000 -0400 > @@ -6,13 +6,13 @@ > selabel_media \- userspace SELinux labeling interface: media contexts backend. > .SH "SYNOPSIS" > .B #include <selinux/selinux.h> > -.br > + > .B #include <selinux/label.h> > .sp > .BI "int selabel_lookup(struct selabel_handle *" hnd , > .in +\w'int selabel_lookup('u > .BI "security_context_t *" context , > -.br > + > .BI "const char *" device_name ", int " unused ");" > > .SH "DESCRIPTION" > diff --exclude-from=exclude -N -u -r nsalibselinux/man/man5/selabel_x.5 libselinux-2.0.23/man/man5/selabel_x.5 > --- nsalibselinux/man/man5/selabel_x.5 2007-06-21 05:16:39.000000000 -0400 > +++ libselinux-2.0.23/man/man5/selabel_x.5 2007-07-10 12:18:09.000000000 -0400 > @@ -6,13 +6,13 @@ > selabel_x \- userspace SELinux labeling interface: X Window System contexts backend. > .SH "SYNOPSIS" > .B #include <selinux/selinux.h> > -.br > + > .B #include <selinux/label.h> > .sp > .BI "int selabel_lookup(struct selabel_handle *" hnd , > .in +\w'int selabel_lookup('u > .BI "security_context_t *" context , > -.br > + > .BI "const char *" object_name ", int " object_type ");" > > .SH "DESCRIPTION" > diff --exclude-from=exclude -N -u -r nsalibselinux/man/man8/matchpathcon.8 libselinux-2.0.23/man/man8/matchpathcon.8 > --- nsalibselinux/man/man8/matchpathcon.8 2007-06-21 05:16:39.000000000 -0400 > +++ libselinux-2.0.23/man/man8/matchpathcon.8 2007-07-10 11:38:39.000000000 -0400 > @@ -10,16 +10,16 @@ > .SH OPTIONS > .B \-n > Do not display path. > -.br > + > .B \-N > Do not use translations. > -.br > + > .B \-f file_context_file > Use alternate file_context file > -.br > + > .B \-p prefix > Use prefix to speed translations > -.br > + > .B \-V > Verify file context on disk matches defaults > > diff --exclude-from=exclude -N -u -r nsalibselinux/man/man8/selinux.8 libselinux-2.0.23/man/man8/selinux.8 > --- nsalibselinux/man/man8/selinux.8 2006-11-16 17:15:26.000000000 -0500 > +++ libselinux-2.0.23/man/man8/selinux.8 2007-07-10 11:38:21.000000000 -0400 > @@ -62,14 +62,13 @@ > .B system-config-securitylevel > allows customization of these booleans and tunables. > > -.br > Many domains that are protected by SELinux also include selinux man pages explainging how to customize their policy. > > .SH FILE LABELING > > All files, directories, devices ... have a security context/label associated with them. These context are stored in the extended attributes of the file system. > Problems with SELinux often arise from the file system being mislabeled. This can be caused by booting the machine with a non selinux kernel. If you see an error message containing file_t, that is usually a good indicator that you have a serious problem with file system labeling. > -.br > + > The best way to relabel the file system is to create the flag file /.autorelabel and reboot. system-config-securitylevel, also has this capability. The restorcon/fixfiles commands are also available for relabeling files. > > .SH AUTHOR -- Stephen Smalley National Security Agency -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. ^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: libselinux man page changes to make translations easier. 2007-07-23 16:22 ` libselinux man page changes to make translations easier Stephen Smalley @ 2007-07-23 17:36 ` Daniel J Walsh 0 siblings, 0 replies; 2+ messages in thread From: Daniel J Walsh @ 2007-07-23 17:36 UTC (permalink / raw) To: Stephen Smalley; +Cc: selinux Stephen Smalley wrote: > On Wed, 2007-07-11 at 10:48 -0400, Daniel J Walsh wrote: > >> plain text document attachment (diff) >> diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/avc_add_callback.3 libselinux-2.0.23/man/man3/avc_add_callback.3 >> --- nsalibselinux/man/man3/avc_add_callback.3 2007-06-21 05:16:39.000000000 -0400 >> +++ libselinux-2.0.23/man/man3/avc_add_callback.3 2007-07-10 12:17:08.000000000 -0400 >> @@ -6,26 +6,26 @@ >> avc_add_callback \- additional event notification for SELinux userspace object managers. >> .SH "SYNOPSIS" >> .B #include <selinux/selinux.h> >> -.br >> + >> > > Why? I don't understand how this simplifies translations, and it could > change the formatting of the man pages. > > >> .B #include <selinux/avc.h> >> .sp >> .BI "int avc_add_callback(int (*" callback ")(uint32_t " event , >> .in +\w'int avc_add_callback(int (*callback)('u >> .BI "security_id_t " ssid , >> -.br >> + >> .BI "security_id_t " tsid , >> -.br >> + >> .BI "security_class_t " tclass , >> -.br >> + >> .BI "access_vector_t " perms , >> -.br >> + >> .BI "access_vector_t *" out_retained ")," >> .in >> .in +\w'int avc_add_callback('u >> .BI "uint32_t " events ", security_id_t " ssid , >> -.br >> + >> .BI "security_id_t " tsid ", security_class_t " tclass , >> -.br >> + >> .BI "access_vector_t " perms ");" >> .in >> .SH "DESCRIPTION" >> diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/avc_cache_stats.3 libselinux-2.0.23/man/man3/avc_cache_stats.3 >> --- nsalibselinux/man/man3/avc_cache_stats.3 2007-06-21 05:16:39.000000000 -0400 >> +++ libselinux-2.0.23/man/man3/avc_cache_stats.3 2007-07-10 12:17:08.000000000 -0400 >> @@ -6,7 +6,7 @@ >> avc_cache_stats, avc_av_stats, avc_sid_stats \- obtain userspace SELinux AVC statistics. >> .SH "SYNOPSIS" >> .B #include <selinux/selinux.h> >> -.br >> + >> .B #include <selinux/avc.h> >> .sp >> .BI "void avc_av_stats(void);" >> diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/avc_compute_create.3 libselinux-2.0.23/man/man3/avc_compute_create.3 >> --- nsalibselinux/man/man3/avc_compute_create.3 2007-06-21 05:16:39.000000000 -0400 >> +++ libselinux-2.0.23/man/man3/avc_compute_create.3 2007-07-10 12:17:07.000000000 -0400 >> @@ -6,7 +6,7 @@ >> avc_compute_create \- obtain SELinux label for new object. >> .SH "SYNOPSIS" >> .B #include <selinux/selinux.h> >> -.br >> + >> .B #include <selinux/avc.h> >> .sp >> .BI "int avc_compute_create(security_id_t " ssid ", security_id_t " tsid , >> diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/avc_context_to_sid.3 libselinux-2.0.23/man/man3/avc_context_to_sid.3 >> --- nsalibselinux/man/man3/avc_context_to_sid.3 2007-06-21 05:16:39.000000000 -0400 >> +++ libselinux-2.0.23/man/man3/avc_context_to_sid.3 2007-07-10 12:17:07.000000000 -0400 >> @@ -6,7 +6,7 @@ >> avc_context_to_sid, avc_sid_to_context, sidput, sidget, avc_get_initial_sid \- obtain and manipulate SELinux security ID's. >> .SH "SYNOPSIS" >> .B #include <selinux/selinux.h> >> -.br >> + >> .B #include <selinux/avc.h> >> .sp >> .BI "int avc_context_to_sid(security_context_t " ctx ", security_id_t *" sid ");" >> diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/avc_has_perm.3 libselinux-2.0.23/man/man3/avc_has_perm.3 >> --- nsalibselinux/man/man3/avc_has_perm.3 2007-06-21 05:16:39.000000000 -0400 >> +++ libselinux-2.0.23/man/man3/avc_has_perm.3 2007-07-10 12:13:47.000000000 -0400 >> @@ -6,7 +6,7 @@ >> avc_has_perm, avc_has_perm_noaudit, avc_audit, avc_entry_ref_init \- obtain and audit SELinux access decisions. >> .SH "SYNOPSIS" >> .B #include <selinux/selinux.h> >> -.br >> + >> .B #include <selinux/avc.h> >> .sp >> .BI "void avc_entry_ref_init(struct avc_entry_ref *" aeref ");" >> @@ -14,21 +14,21 @@ >> .BI "int avc_has_perm(security_id_t " ssid ", security_id_t " tsid , >> .in +\w'int avc_has_perm('u >> .BI "security_class_t " tclass ", access_vector_t " requested , >> -.br >> + >> .BI "struct avc_entry_ref *" aeref ", void *" auditdata ");" >> .in >> .sp >> .BI "int avc_has_perm_noaudit(security_id_t " ssid ", security_id_t " tsid , >> .in +\w'int avc_has_perm('u >> .BI "security_class_t " tclass ", access_vector_t " requested , >> -.br >> + >> .BI "struct avc_entry_ref *" aeref ", struct av_decision *" avd ");" >> .in >> .sp >> .BI "void avc_audit(security_id_t " ssid ", security_id_t " tsid , >> .in +\w'void avc_audit('u >> .BI "security_class_t " tclass ", access_vector_t " requested , >> -.br >> + >> .BI "struct av_decision *" avd ", int " result ", void *" auditdata ");" >> .in >> .SH "DESCRIPTION" >> diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/avc_init.3 libselinux-2.0.23/man/man3/avc_init.3 >> --- nsalibselinux/man/man3/avc_init.3 2007-06-21 05:16:39.000000000 -0400 >> +++ libselinux-2.0.23/man/man3/avc_init.3 2007-07-10 12:13:43.000000000 -0400 >> @@ -6,17 +6,17 @@ >> avc_init, avc_destroy, avc_reset, avc_cleanup \- userspace SELinux AVC setup and teardown. >> .SH "SYNOPSIS" >> .B #include <selinux/selinux.h> >> -.br >> + >> .B #include <selinux/avc.h> >> .sp >> .BI "int avc_init(const char *" msgprefix , >> .in +\w'int avc_init('u >> .BI "const struct avc_memory_callback *" mem_callbacks , >> -.br >> + >> .BI "const struct avc_log_callback *" log_callbacks , >> -.br >> + >> .BI "const struct avc_thread_callback *" thread_callbacks , >> -.br >> + >> .BI "const struct avc_lock_callback *" lock_callbacks ");" >> .in >> .sp >> diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/context_new.3 libselinux-2.0.23/man/man3/context_new.3 >> --- nsalibselinux/man/man3/context_new.3 2007-01-17 11:11:35.000000000 -0500 >> +++ libselinux-2.0.23/man/man3/context_new.3 2007-07-10 12:13:40.000000000 -0400 >> @@ -4,27 +4,27 @@ >> >> .SH "SYNOPSIS" >> .B #include <selinux/context.h> >> -.br >> + >> .B "context_t context_new(const char *" context_str ); >> -.br >> + >> .B "const char * context_str(context_t " con ); >> -.br >> + >> .B "void context_free(context_t " con ); >> -.br >> + >> .B "const char * context_type_get(context_t " con ); >> -.br >> + >> .B "const char * context_range_get(context_t " con ); >> -.br >> + >> .B "const char * context_role_get(context_t " con ); >> -.br >> + >> .B "const char * context_user_get(context_t " con ); >> -.br >> + >> .B "const char * context_type_set(context_t " con ", const char* " type); >> -.br >> + >> .B "const char * context_range_set(context_t " con ", const char* " range); >> -.br >> + >> .B "const char * context_role_set(context_t " con ", const char* " role ); >> -.br >> + >> .B "const char * context_user_set(context_t " con ", const char* " user ); >> >> .SH "DESCRIPTION" >> diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/freecon.3 libselinux-2.0.23/man/man3/freecon.3 >> --- nsalibselinux/man/man3/freecon.3 2007-06-21 05:16:39.000000000 -0400 >> +++ libselinux-2.0.23/man/man3/freecon.3 2007-07-10 12:13:55.000000000 -0400 >> @@ -5,7 +5,7 @@ >> .B #include <selinux/selinux.h> >> .sp >> .BI "void freecon(security_context_t "con ); >> -.br >> + >> .BI "void freeconary(security_context_t *" con ); >> >> .SH "DESCRIPTION" >> diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/getcon.3 libselinux-2.0.23/man/man3/getcon.3 >> --- nsalibselinux/man/man3/getcon.3 2007-06-21 05:16:39.000000000 -0400 >> +++ libselinux-2.0.23/man/man3/getcon.3 2007-07-10 12:14:08.000000000 -0400 >> @@ -1,21 +1,21 @@ >> .TH "getcon" "3" "1 January 2004" "russell@coker.com.au" "SELinux API documentation" >> .SH "NAME" >> getcon, getprevcon, getpidcon \- get SELinux security context of a process. >> -.br >> + >> getpeercon - get security context of a peer socket. >> -.br >> + >> setcon - set current security context of a process. >> .SH "SYNOPSIS" >> .B #include <selinux/selinux.h> >> .sp >> .BI "int getcon(security_context_t *" context ); >> -.br >> + >> .BI "int getprevcon(security_context_t *" context ); >> -.br >> + >> .BI "int getpidcon(pid_t " pid ", security_context_t *" context ); >> -.br >> + >> .BI "int getpeercon(int " fd ", security_context_t *" context); >> -.br >> + >> .BI "int setcon(security_context_t " context); >> >> .SH "DESCRIPTION" >> diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/getexeccon.3 libselinux-2.0.23/man/man3/getexeccon.3 >> --- nsalibselinux/man/man3/getexeccon.3 2007-06-21 05:16:39.000000000 -0400 >> +++ libselinux-2.0.23/man/man3/getexeccon.3 2007-07-10 12:14:24.000000000 -0400 >> @@ -1,16 +1,16 @@ >> .TH "getexeccon" "3" "1 January 2004" "russell@coker.com.au" "SELinux API documentation" >> .SH "NAME" >> getexeccon, setexeccon \- get or set the SELinux security context used for executing a new process. >> -.br >> + >> rpm_execcon \- run a helper for rpm in an appropriate security context >> >> .SH "SYNOPSIS" >> .B #include <selinux/selinux.h> >> .sp >> .BI "int getexeccon(security_context_t *" context ); >> -.br >> + >> .BI "int setexeccon(security_context_t "context ); >> -.br >> + >> .BI "int rpm_execcon(unsigned int " verified ", const char *" filename ", char *const " argv "[] , char *const " envp "[]); >> >> .SH "DESCRIPTION" >> @@ -26,16 +26,16 @@ >> setexeccon to reset to the default policy behavior. >> The exec context is automatically reset after the next execve, so a >> program doesn't need to explicitly sanitize it upon startup. >> -.br >> + >> >> setexeccon can be applied prior to library >> functions that internally perform an execve, e.g. execl*, execv*, popen, >> in order to set an exec context for that operation. >> -.br >> + >> >> Note: Signal handlers that perform an execve must take care to >> save, reset, and restore the exec context to avoid unexpected behaviors. >> -.br >> + >> >> .B rpm_execcon >> runs a helper for rpm in an appropriate security context. The >> diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/getfilecon.3 libselinux-2.0.23/man/man3/getfilecon.3 >> --- nsalibselinux/man/man3/getfilecon.3 2007-06-21 05:16:39.000000000 -0400 >> +++ libselinux-2.0.23/man/man3/getfilecon.3 2007-07-10 12:17:06.000000000 -0400 >> @@ -5,9 +5,9 @@ >> .B #include <selinux/selinux.h> >> .sp >> .BI "int getfilecon(const char *" path ", security_context_t *" con ); >> -.br >> + >> .BI "int lgetfilecon(const char *" path ", security_context_t *" con ); >> -.br >> + >> .BI "int fgetfilecon(int "fd ", security_context_t *" con ); >> .SH "DESCRIPTION" >> .B getfilecon >> @@ -22,7 +22,6 @@ >> is identical to getfilecon, only the open file pointed to by filedes (as >> returned by open(2)) is interrogated in place of path. >> >> -.br >> >> The returned context should be freed with freecon if non-NULL. >> .SH "RETURN VALUE" >> diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/getfscreatecon.3 libselinux-2.0.23/man/man3/getfscreatecon.3 >> --- nsalibselinux/man/man3/getfscreatecon.3 2007-06-21 05:16:39.000000000 -0400 >> +++ libselinux-2.0.23/man/man3/getfscreatecon.3 2007-07-10 12:17:06.000000000 -0400 >> @@ -6,7 +6,7 @@ >> .B #include <selinux/selinux.h> >> .sp >> .BI "int getfscreatecon(security_context_t *" con ); >> -.br >> + >> .BI "int setfscreatecon(security_context_t "context ); >> >> .SH "DESCRIPTION" >> @@ -22,11 +22,11 @@ >> setfscreatecon to reset to the default policy behavior. >> The fscreate context is automatically reset after the next execve, so a >> program doesn't need to explicitly sanitize it upon startup. >> -.br >> + >> setfscreatecon can be applied prior to library >> functions that internally perform an file creation, >> in order to set an file context on the objects. >> -.br >> + >> >> Note: Signal handlers that perform an setfscreate must take care to >> save, reset, and restore the fscreate context to avoid unexpected behaviors. >> diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/get_ordered_context_list.3 libselinux-2.0.23/man/man3/get_ordered_context_list.3 >> --- nsalibselinux/man/man3/get_ordered_context_list.3 2007-06-21 05:16:39.000000000 -0400 >> +++ libselinux-2.0.23/man/man3/get_ordered_context_list.3 2007-07-10 12:17:05.000000000 -0400 >> @@ -4,7 +4,7 @@ >> >> .SH "SYNOPSIS" >> .B #include <selinux/selinux.h> >> -.br >> + >> .B #include <selinux/get_context_list.h> >> .sp >> .BI "int get_ordered_context_list(const char *" user ", security_context_t "fromcon ", security_context_t **" list ); >> diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/getseuserbyname.3 libselinux-2.0.23/man/man3/getseuserbyname.3 >> --- nsalibselinux/man/man3/getseuserbyname.3 2007-06-21 05:16:39.000000000 -0400 >> +++ libselinux-2.0.23/man/man3/getseuserbyname.3 2007-07-10 12:17:04.000000000 -0400 >> @@ -12,7 +12,7 @@ >> then be passed to other libselinux functions such as >> get_ordered_context_list_with_level and get_default_context_with_level. >> >> -.br >> + >> >> The returned SELinux username and level should be freed by the caller >> using free. >> diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/is_context_customizable.3 libselinux-2.0.23/man/man3/is_context_customizable.3 >> --- nsalibselinux/man/man3/is_context_customizable.3 2007-01-17 11:11:35.000000000 -0500 >> +++ libselinux-2.0.23/man/man3/is_context_customizable.3 2007-07-10 12:17:04.000000000 -0400 >> @@ -8,7 +8,7 @@ >> >> .SH "DESCRIPTION" >> .B is_context_customizable >> -.br >> + >> This function checks whether the type of scon is in the /etc/selinux/SELINUXTYPE/context/customizable_types file. A customizable type is a file context type that >> administrators set on files, usually to allow certain domains to share the file content. restorecon and setfiles, by default, leave these context in place. >> >> diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/matchmediacon.3 libselinux-2.0.23/man/man3/matchmediacon.3 >> --- nsalibselinux/man/man3/matchmediacon.3 2007-06-21 05:16:39.000000000 -0400 >> +++ libselinux-2.0.23/man/man3/matchmediacon.3 2007-07-10 12:17:03.000000000 -0400 >> @@ -6,14 +6,14 @@ >> .B #include <selinux/selinux.h> >> .sp >> .BI "int matchmediacon(const char *" media ", security_context_t *" con);" >> -.br >> + >> >> .SH "DESCRIPTION" >> -.br >> + >> .B matchmediacon >> matches the specified media type with the media contexts configuration and sets the security context "con" to refer to the resulting context. >> .sp >> -.br >> + >> .B Note: >> Caller must free returned security context "con" using freecon. >> .SH "RETURN VALUE" >> diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/matchpathcon.3 libselinux-2.0.23/man/man3/matchpathcon.3 >> --- nsalibselinux/man/man3/matchpathcon.3 2007-06-21 05:16:39.000000000 -0400 >> +++ libselinux-2.0.23/man/man3/matchpathcon.3 2007-07-10 12:15:33.000000000 -0400 >> @@ -6,18 +6,18 @@ >> .B #include <selinux/selinux.h> >> .sp >> .BI "int matchpathcon_init(const char *" path ");" >> -.br >> + >> .BI "int matchpathcon_fini(void);" >> -.br >> + >> .BI "int matchpathcon(const char *" path ", mode_t " mode ", security_context_t *" con); >> .sp >> -.br >> + >> .BI "void set_matchpathcon_printf(void (*" f ")(const char *" fmt ", ...));" >> -.br >> + >> .BI "void set_matchpathcon_invalidcon(int (*" f ")(const char *"path ", unsigned " lineno ", char * " context "));" >> -.br >> + >> .BI "void set_matchpathcon_flags(unsigned int " flags ");" >> -.br >> + >> .SH "DESCRIPTION" >> .B matchpathcon_init >> loads the file contexts configuration specified by >> @@ -40,7 +40,7 @@ >> suffix are also looked up and loaded if present. These files provide >> dynamically generated entries for user home directories and for local >> customizations. >> -.br >> + >> .sp >> .B matchpathcon_fini >> frees the memory allocated by a prior call to >> @@ -49,7 +49,7 @@ >> .B matchpathcon_init >> calls, or to free memory when finished using >> .B matchpathcon. >> -.br >> + >> .sp >> .B matchpathcon >> matches the specified pathname and mode against the file contexts >> @@ -72,14 +72,14 @@ >> .I path, >> defaulting to the active file contexts configuration. >> .sp >> -.br >> + >> .B set_matchpathcon_printf >> sets the function used by >> .B matchpathcon_init >> when displaying errors about the file contexts configuration. If not set, >> then this defaults to fprintf(stderr, fmt, ...). This can be set to redirect >> error reporting to a different destination. >> -.br >> + >> .sp >> .B set_matchpathcon_invalidcon >> sets the function used by >> @@ -100,7 +100,7 @@ >> and >> .I lineno >> in such error messages. >> -.br >> + >> .sp >> .B set_matchpathcon_flags >> sets flags controlling the operation of >> @@ -111,7 +111,7 @@ >> .B MATCHPATHCON_BASEONLY >> flag is set, then only the base file contexts configuration file >> will be processed, not any dynamically generated entries or local customizations. >> -.br >> + >> .sp >> .SH "RETURN VALUE" >> Returns 0 on success or -1 otherwise. >> diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/security_class_to_string.3 libselinux-2.0.23/man/man3/security_class_to_string.3 >> --- nsalibselinux/man/man3/security_class_to_string.3 2007-06-21 05:16:39.000000000 -0400 >> +++ libselinux-2.0.23/man/man3/security_class_to_string.3 2007-07-10 12:15:16.000000000 -0400 >> @@ -8,7 +8,7 @@ >> >> .SH "SYNOPSIS" >> .B #include <selinux/selinux.h> >> -.br >> + >> .B #include <selinux/flask.h> >> .sp >> .BI "const char * security_class_to_string(security_class_t " tclass ");" >> diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/security_compute_av.3 libselinux-2.0.23/man/man3/security_compute_av.3 >> --- nsalibselinux/man/man3/security_compute_av.3 2007-06-21 05:16:39.000000000 -0400 >> +++ libselinux-2.0.23/man/man3/security_compute_av.3 2007-07-10 12:15:12.000000000 -0400 >> @@ -6,7 +6,7 @@ >> >> .SH "SYNOPSIS" >> .B #include <selinux/selinux.h> >> -.br >> + >> .B #include <selinux/flask.h> >> .sp >> .BI "int security_compute_av(security_context_t "scon ", security_context_t "tcon ", security_class_t "tclass ", access_vector_t "requested ", struct av_decision *" avd ); >> diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/security_getenforce.3 libselinux-2.0.23/man/man3/security_getenforce.3 >> --- nsalibselinux/man/man3/security_getenforce.3 2007-06-21 05:16:39.000000000 -0400 >> +++ libselinux-2.0.23/man/man3/security_getenforce.3 2007-07-10 12:15:08.000000000 -0400 >> @@ -5,7 +5,7 @@ >> .B #include <selinux/selinux.h> >> .sp >> .B int security_getenforce(); >> -.br >> + >> .BI "int security_setenforce(int "value ); >> >> .SH "DESCRIPTION" >> diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/security_load_booleans.3 libselinux-2.0.23/man/man3/security_load_booleans.3 >> --- nsalibselinux/man/man3/security_load_booleans.3 2007-01-17 11:11:35.000000000 -0500 >> +++ libselinux-2.0.23/man/man3/security_load_booleans.3 2007-07-10 12:17:02.000000000 -0400 >> @@ -7,15 +7,15 @@ >> .B #include <selinux/selinux.h> >> .sp >> extern int security_load_booleans(char *path); >> -.br >> + >> extern int security_get_boolean_names(char ***names, int *len); >> -.br >> + >> extern int security_get_boolean_pending(const char *name); >> -.br >> + >> extern int security_get_boolean_active(const char *name); >> -.br >> + >> extern int security_set_boolean(const char *name, int value); >> -.br >> + >> extern int security_commit_booleans(void); >> >> >> @@ -29,27 +29,27 @@ >> The SELinux API allows for a transaction based update. So you can set several boolean values and the commit them all at once. >> >> security_load_booleans >> -.br >> + >> Load policy boolean settings. Path may be NULL, in which case the booleans are loaded from the active policy boolean configuration file. >> >> security_get_boolean_names >> -.br >> + >> Returns a list of boolean names, currently supported by the loaded policy. >> >> security_set_boolean >> -.br >> + >> Sets the pending value for boolean >> >> security_get_boolean_pending >> -.br >> + >> Return pending value for boolean >> >> security_get_boolean_active >> -.br >> + >> Return active value for boolean >> >> security_commit_booleans >> -.br >> + >> Commit all pending values for the booleans. >> >> .SH AUTHOR >> diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/selabel_lookup.3 libselinux-2.0.23/man/man3/selabel_lookup.3 >> --- nsalibselinux/man/man3/selabel_lookup.3 2007-06-21 05:16:39.000000000 -0400 >> +++ libselinux-2.0.23/man/man3/selabel_lookup.3 2007-07-10 12:17:01.000000000 -0400 >> @@ -6,20 +6,20 @@ >> selabel_lookup \- obtain SELinux security context from a string label. >> .SH "SYNOPSIS" >> .B #include <selinux/selinux.h> >> -.br >> + >> .B #include <selinux/label.h> >> .sp >> .BI "int selabel_lookup(struct selabel_handle *" hnd , >> .in +\w'int selabel_lookup('u >> .BI "security_context_t *" context , >> -.br >> + >> .BI "const char *" key ", int " type ");" >> .in >> .sp >> .BI "int selabel_lookup_raw(struct selabel_handle *" hnd , >> .in +\w'int selabel_lookup_raw('u >> .BI "security_context_t *" context , >> -.br >> + >> .BI "const char *" key ", int " type ");" >> >> .SH "DESCRIPTION" >> diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/selabel_open.3 libselinux-2.0.23/man/man3/selabel_open.3 >> --- nsalibselinux/man/man3/selabel_open.3 2007-06-21 05:16:39.000000000 -0400 >> +++ libselinux-2.0.23/man/man3/selabel_open.3 2007-07-10 12:17:00.000000000 -0400 >> @@ -6,13 +6,13 @@ >> selabel_open, selabel_close \- userspace SELinux labeling interface. >> .SH "SYNOPSIS" >> .B #include <selinux/selinux.h> >> -.br >> + >> .B #include <selinux/label.h> >> .sp >> .BI "struct selabel_handle *selabel_open(int " backend , >> .in +\w'struct selabel_handle *selabel_open('u >> .BI "struct selinux_opt *" options , >> -.br >> + >> .BI "unsigned " nopt ");" >> .in >> .sp >> diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/selabel_stats.3 libselinux-2.0.23/man/man3/selabel_stats.3 >> --- nsalibselinux/man/man3/selabel_stats.3 2007-06-21 05:16:39.000000000 -0400 >> +++ libselinux-2.0.23/man/man3/selabel_stats.3 2007-07-10 12:16:59.000000000 -0400 >> @@ -6,7 +6,7 @@ >> selabel_stats \- obtain SELinux labeling statistics. >> .SH "SYNOPSIS" >> .B #include <selinux/selinux.h> >> -.br >> + >> .B #include <selinux/label.h> >> .sp >> .BI "void selabel_lookup(struct selabel_handle *" hnd ");" >> diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/selinux_binary_policy_path.3 libselinux-2.0.23/man/man3/selinux_binary_policy_path.3 >> --- nsalibselinux/man/man3/selinux_binary_policy_path.3 2007-01-17 11:11:35.000000000 -0500 >> +++ libselinux-2.0.23/man/man3/selinux_binary_policy_path.3 2007-07-10 12:16:08.000000000 -0400 >> @@ -10,27 +10,27 @@ >> .SH "SYNOPSIS" >> .B #include <selinux/selinux.h> >> .sp >> -.br >> + >> extern const char *selinux_policy_root(void); >> -.br >> + >> extern const char *selinux_binary_policy_path(void); >> -.br >> + >> extern const char *selinux_failsafe_context_path(void); >> -.br >> + >> extern const char *selinux_removable_context_path(void); >> -.br >> + >> extern const char *selinux_default_context_path(void); >> -.br >> + >> extern const char *selinux_user_contexts_path(void); >> -.br >> + >> extern const char *selinux_file_context_path(void); >> -.br >> + >> extern const char *selinux_media_context_path(void); >> -.br >> + >> extern const char *selinux_securetty_types_path(void); >> -.br >> + >> extern const char *selinux_contexts_path(void); >> -.br >> + >> extern const char *selinux_booleans_path(void); >> >> >> diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/selinux_getenforcemode.3 libselinux-2.0.23/man/man3/selinux_getenforcemode.3 >> --- nsalibselinux/man/man3/selinux_getenforcemode.3 2007-06-21 05:16:39.000000000 -0400 >> +++ libselinux-2.0.23/man/man3/selinux_getenforcemode.3 2007-07-10 12:16:51.000000000 -0400 >> @@ -5,13 +5,13 @@ >> .B #include <selinux/selinux.h> >> .sp >> .B int selinux_getenforcemode(int *enforce); >> -.br >> + >> >> .SH "DESCRIPTION" >> .B selinux_getenforcemode >> Reads the contents of the /etc/selinux/config file to determine how the >> system was setup to run SELinux. >> -.br >> + >> Sets the value of enforce to 1 if SELinux should be run in enforcing mode. >> Sets the value of enforce to 0 if SELinux should be run in permissive mode. >> Sets the value of enforce to -1 if SELinux should be disabled. >> diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/selinux_policy_root.3 libselinux-2.0.23/man/man3/selinux_policy_root.3 >> --- nsalibselinux/man/man3/selinux_policy_root.3 2007-06-21 05:16:39.000000000 -0400 >> +++ libselinux-2.0.23/man/man3/selinux_policy_root.3 2007-07-10 12:16:49.000000000 -0400 >> @@ -5,7 +5,7 @@ >> .B #include <selinux/selinux.h> >> .sp >> .B char *selinux_policy_root(); >> -.br >> + >> >> .SH "DESCRIPTION" >> .B selinux_policy_root >> diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/selinux_set_callback.3 libselinux-2.0.23/man/man3/selinux_set_callback.3 >> --- nsalibselinux/man/man3/selinux_set_callback.3 2007-06-21 05:16:39.000000000 -0400 >> +++ libselinux-2.0.23/man/man3/selinux_set_callback.3 2007-07-10 12:16:48.000000000 -0400 >> @@ -39,11 +39,11 @@ >> argument indicates the type of message and will be set to one of the following: >> >> .B SELINUX_ERROR >> -.br >> + >> .B SELINUX_WARNING >> -.br >> + >> .B SELINUX_INFO >> -.br >> + >> .B SELINUX_AVC >> >> .TP >> diff --exclude-from=exclude -N -u -r nsalibselinux/man/man3/setfilecon.3 libselinux-2.0.23/man/man3/setfilecon.3 >> --- nsalibselinux/man/man3/setfilecon.3 2007-06-21 05:16:39.000000000 -0400 >> +++ libselinux-2.0.23/man/man3/setfilecon.3 2007-07-10 12:12:18.000000000 -0400 >> @@ -6,9 +6,9 @@ >> .B #include <selinux/selinux.h> >> .sp >> .BI "int setfilecon(const char *" path ", security_context_t "con ); >> -.br >> + >> .BI "int lsetfilecon(const char *" path ", security_context_t "con ); >> -.br >> + >> .BI "int fsetfilecon(int "fd ", security_context_t "con ); >> >> .SH "DESCRIPTION" >> diff --exclude-from=exclude -N -u -r nsalibselinux/man/man5/selabel_file.5 libselinux-2.0.23/man/man5/selabel_file.5 >> --- nsalibselinux/man/man5/selabel_file.5 2007-06-21 05:16:39.000000000 -0400 >> +++ libselinux-2.0.23/man/man5/selabel_file.5 2007-07-10 12:18:11.000000000 -0400 >> @@ -6,13 +6,13 @@ >> selabel_file \- userspace SELinux labeling interface: file contexts backend. >> .SH "SYNOPSIS" >> .B #include <selinux/selinux.h> >> -.br >> + >> .B #include <selinux/label.h> >> .sp >> .BI "int selabel_lookup(struct selabel_handle *" hnd , >> .in +\w'int selabel_lookup('u >> .BI "security_context_t *" context , >> -.br >> + >> .BI "const char *" path ", int " mode ");" >> >> .SH "DESCRIPTION" >> diff --exclude-from=exclude -N -u -r nsalibselinux/man/man5/selabel_media.5 libselinux-2.0.23/man/man5/selabel_media.5 >> --- nsalibselinux/man/man5/selabel_media.5 2007-06-21 05:16:39.000000000 -0400 >> +++ libselinux-2.0.23/man/man5/selabel_media.5 2007-07-10 12:18:11.000000000 -0400 >> @@ -6,13 +6,13 @@ >> selabel_media \- userspace SELinux labeling interface: media contexts backend. >> .SH "SYNOPSIS" >> .B #include <selinux/selinux.h> >> -.br >> + >> .B #include <selinux/label.h> >> .sp >> .BI "int selabel_lookup(struct selabel_handle *" hnd , >> .in +\w'int selabel_lookup('u >> .BI "security_context_t *" context , >> -.br >> + >> .BI "const char *" device_name ", int " unused ");" >> >> .SH "DESCRIPTION" >> diff --exclude-from=exclude -N -u -r nsalibselinux/man/man5/selabel_x.5 libselinux-2.0.23/man/man5/selabel_x.5 >> --- nsalibselinux/man/man5/selabel_x.5 2007-06-21 05:16:39.000000000 -0400 >> +++ libselinux-2.0.23/man/man5/selabel_x.5 2007-07-10 12:18:09.000000000 -0400 >> @@ -6,13 +6,13 @@ >> selabel_x \- userspace SELinux labeling interface: X Window System contexts backend. >> .SH "SYNOPSIS" >> .B #include <selinux/selinux.h> >> -.br >> + >> .B #include <selinux/label.h> >> .sp >> .BI "int selabel_lookup(struct selabel_handle *" hnd , >> .in +\w'int selabel_lookup('u >> .BI "security_context_t *" context , >> -.br >> + >> .BI "const char *" object_name ", int " object_type ");" >> >> .SH "DESCRIPTION" >> diff --exclude-from=exclude -N -u -r nsalibselinux/man/man8/matchpathcon.8 libselinux-2.0.23/man/man8/matchpathcon.8 >> --- nsalibselinux/man/man8/matchpathcon.8 2007-06-21 05:16:39.000000000 -0400 >> +++ libselinux-2.0.23/man/man8/matchpathcon.8 2007-07-10 11:38:39.000000000 -0400 >> @@ -10,16 +10,16 @@ >> .SH OPTIONS >> .B \-n >> Do not display path. >> -.br >> + >> .B \-N >> Do not use translations. >> -.br >> + >> .B \-f file_context_file >> Use alternate file_context file >> -.br >> + >> .B \-p prefix >> Use prefix to speed translations >> -.br >> + >> .B \-V >> Verify file context on disk matches defaults >> >> diff --exclude-from=exclude -N -u -r nsalibselinux/man/man8/selinux.8 libselinux-2.0.23/man/man8/selinux.8 >> --- nsalibselinux/man/man8/selinux.8 2006-11-16 17:15:26.000000000 -0500 >> +++ libselinux-2.0.23/man/man8/selinux.8 2007-07-10 11:38:21.000000000 -0400 >> @@ -62,14 +62,13 @@ >> .B system-config-securitylevel >> allows customization of these booleans and tunables. >> >> -.br >> Many domains that are protected by SELinux also include selinux man pages explainging how to customize their policy. >> >> .SH FILE LABELING >> >> All files, directories, devices ... have a security context/label associated with them. These context are stored in the extended attributes of the file system. >> Problems with SELinux often arise from the file system being mislabeled. This can be caused by booting the machine with a non selinux kernel. If you see an error message containing file_t, that is usually a good indicator that you have a serious problem with file system labeling. >> -.br >> + >> The best way to relabel the file system is to create the flag file /.autorelabel and reboot. system-config-securitylevel, also has this capability. The restorcon/fixfiles commands are also available for relabeling files. >> >> .SH AUTHOR >> https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=221208 -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. ^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2007-07-23 17:36 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
[not found] <4694EDC7.9090507@redhat.com>
2007-07-23 16:22 ` libselinux man page changes to make translations easier Stephen Smalley
2007-07-23 17:36 ` Daniel J Walsh
This is an external index of several public inboxes, see mirroring instructions on how to clone and mirror all data and code used by this external index.