getzonepath

- display root path of the zone corresponding to the specified label

Synopsis

/usr/bin/getzonepath  {sensitivity-label}

Description

getzonepath displays the root pathname of the running labeled zone that corresponds to the specified sensitivity label. The returned pathname is relative to the caller's root pathname, and has the specified sensitivity label.

If the caller is in the global zone, the returned pathname is not traversable unless the caller's processes have the file_dac_search privilege.

If the caller is in a labeled zone, the caller's label must dominate the specified label. Access to files under the returned pathname is restricted to read-only operations.

Attributes

See attributes(5) for descriptions of the following attributes:

Diagnostics

getzonepath exits with one of the following values:

0

Success

1

Usage error

2

Failure; error message is the system error number from getzonerootbylabel(3TSOL)

See Also

getzonerootbylabel(3TSOL), attributes(5)

Acquiring a Sensitivity Label in Solaris Trusted Extensions Developer’s Guide