NAME | SYNOPSIS | DESCRIPTION | RETURN VALUES | ERRORS | SEE ALSO
#include <tsol/label.h>int setclearance(bclear_t *clearance_p);
setclearance() is used to set the clearance for the calling process provided it has the PRIV_PROC_SETCLR
privilege in its set of effective privileges. setclearance()
verifies that the information pointed to by clearance_p is formatted correctly, and that the resulting clearance will dominate the sensitivity label of the process.
setclearance() fails and does not set the process clearance if any of these conditions prevails:
The clearance_p argument points to an invalid address.
The clearance_p argument does not point to a properly formatted clearance.
The clearance pointed to by clearance_p does not dominate the process sensitivity label.
The calling process does not have the necessary privilege (PRIV_PROC_SETCLR
) to set the clearance.
NAME | SYNOPSIS | DESCRIPTION | RETURN VALUES | ERRORS | SEE ALSO