1
0
mirror of https://git.FreeBSD.org/src.git synced 2024-12-18 10:35:55 +00:00

Update mac_set.3 to account for new behavior of mac_set_fd() in the

context of sockets, and document EINVAL as a possible failure mode
based on the object selected, not just the label provided.

Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories
This commit is contained in:
Robert Watson 2003-11-16 20:21:21 +00:00
parent 920325ee1d
commit 237a5de859
Notes: svn2git 2020-12-20 02:59:44 +00:00
svn path=/head/; revision=122811

View File

@ -63,15 +63,15 @@ to the file referenced to by
or to the file descriptor or to the file descriptor
.Fa fd , .Fa fd ,
respectively. respectively.
Note that this function will fail on socket descriptors. Note that when a file descriptor references a socket, label operations
For information on on the file descriptor act on the socket, not on the file that may
setting MAC labels on socket descriptors see have been used as a rendezvous when binding the socket.
.Xr setsockopt 2 .
The The
.Fn mac_set_link .Fn mac_set_link
function is the same as function is the same as
.Fn mac_set_file , .Fn mac_set_file ,
except that it does not follow symlinks. except that it does not follow symlinks.
.Pp
The The
.Fn mac_set_proc .Fn mac_set_proc
function associates the MAC label function associates the MAC label
@ -99,7 +99,9 @@ is not a valid file descriptor.
The The
.Fa label .Fa label
argument argument
is not a valid MAC label. is not a valid MAC label, or the object referenced by
.Fa fd
is not appropriate for label operations.
.It Bq Er EOPNOTSUPP .It Bq Er EOPNOTSUPP
Setting MAC labels is not supported Setting MAC labels is not supported
by the file referenced by by the file referenced by