Update mac_set.3 to account for new behavior of mac_set_fd() in the
context of sockets, and document EINVAL as a possible failure mode based on the object selected, not just the label provided. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories
This commit is contained in:
parent
920325ee1d
commit
237a5de859
@ -63,15 +63,15 @@ to the file referenced to by
|
||||
or to the file descriptor
|
||||
.Fa fd ,
|
||||
respectively.
|
||||
Note that this function will fail on socket descriptors.
|
||||
For information on
|
||||
setting MAC labels on socket descriptors see
|
||||
.Xr setsockopt 2 .
|
||||
Note that when a file descriptor references a socket, label operations
|
||||
on the file descriptor act on the socket, not on the file that may
|
||||
have been used as a rendezvous when binding the socket.
|
||||
The
|
||||
.Fn mac_set_link
|
||||
function is the same as
|
||||
.Fn mac_set_file ,
|
||||
except that it does not follow symlinks.
|
||||
.Pp
|
||||
The
|
||||
.Fn mac_set_proc
|
||||
function associates the MAC label
|
||||
@ -99,7 +99,9 @@ is not a valid file descriptor.
|
||||
The
|
||||
.Fa label
|
||||
argument
|
||||
is not a valid MAC label.
|
||||
is not a valid MAC label, or the object referenced by
|
||||
.Fa fd
|
||||
is not appropriate for label operations.
|
||||
.It Bq Er EOPNOTSUPP
|
||||
Setting MAC labels is not supported
|
||||
by the file referenced by
|
||||
|
Loading…
Reference in New Issue
Block a user