System Calls

These system calls get and set the clearance of the calling process. Refer to the getclearance(2) and setclearance(2) man pages.

Every process that sets a clearance is responsible for setting a valid clearance as specified in the label_encodings(4) file, and must pass the correct binary form of the clearance. The text to binary translation functions correct the clearance as much as possible to ensure a correct binary clearance results from the translation. However, you might use the bclearvalid(3TSOL) routine to check that the clearance is valid.

int	getclearance(bclear_t *clearance);
int	setclearance(bclear_t *clearance);