blinset(3TSOL)

NAME | SYNOPSIS | DESCRIPTION | RETURN VALUES | FILES | ATTRIBUTES | SEE ALSO | NOTES | BUGS

NAME

blinset- Check binary label for inclusion in set

SYNOPSIS

cc [flag...] file ... -ltsol [library...]


#include <tsol/label.h>
typedef label_set_identifier {
             int type;
             char *name;
} set_id;

int blinset(const bslabel_t *label,const set_id *id));

DESCRIPTION

The calling process must have PRIV_SYS_TRANS_LABEL in its set of effective privileges to perform tests on labels that dominate the current processes' sensitivity label.

label is examined to determine if it is an element of the label set id. The set_id type field contains a manifest constant defining the type of set to be examined. The set_id name field contains the name of the particular set of type type. The following types and names are defined:

SYSTEM_ACCREDITATION_RANGE

The system's accreditation range as defined in the label_encodings file. The name field is ignored and need not be specified.

USER_ACCREDITATION_RANGE

The user accreditation range as defined in the label_encodings file. The name field is ignored and need not be specified.

Other type and name values are reserved for future implementation.

RETURN VALUES

blinset() returns:

1

If the label is contained in the specified set.

0

If the label is not in the specified set, is not a valid sensitivity label, or is not dominated by the process sensitivity label and the process does not have PRIV_SYS_TRANS_LABEL in its set of effective privileges.

-1

If the specified set is inaccessible.

FILES

/etc/security/tsol/label_encodings

The label encodings file contains the classification names, words, constraints, and values for the defined labels of this system.

ATTRIBUTES

See attributes(5) for descriptions of the following attributes:

ATTRIBUTE TYPE	ATTRIBUTE VALUE
Availability	SUNWtsu
MT-Level	MT-Safe

SEE ALSO

Trusted Solaris 8 Reference Manual

bcltobanner(3TSOL), blcompare(3TSOL), bltype(3TSOL), labelinfo(3TSOL), sbltos(3TSOL), label_encodings(4)

Trusted Solaris Developer's Guide and the Trusted Solaris administrator's document set

SunOS 5.8 Reference Manual

attributes(5)

NOTES

The ADMIN_HIGH and ADMIN_LOW labels are accepted even if the remainder of the system's accreditation range is inaccessible.

BUGS

The only sets available are the System Accreditation Range and User Accreditation Range.

Trusted Solaris 8  Last Revised 02 Jun 1998

NAME | SYNOPSIS | DESCRIPTION | RETURN VALUES | FILES | ATTRIBUTES | SEE ALSO | NOTES | BUGS