secconf(2)

NAME | SYNOPSIS | DESCRIPTION | RETURN VALUES | ERRORS | FILES | SEE ALSO | Trusted Solaris Information Label Changes

NAME

secconf- Get security configuration information

SYNOPSIS

cc [flags...] file... -ltsol


#include <tsol/secconf.h>

long secconf(int name);

DESCRIPTION

The secconf() system call provides a method for an application to determine the current value of a configurable security system limit or option.

The name argument represents the system variable to be queried.

int name

_TSOL_CLEAN_WINDOWS

Variable name

tsol_clean_windows

Force cleaning of unused register windows before return from system call (SPARC architecture only).

int name

_TSOL_FLUSH_BUFFERS

Variable name

tsol_flush_buffers

Force flushing of file data blocks before inode updates.

int name

_TSOL_HIDE_UPGRADED_NAMES

Variable name

tsol_hide_upgraded_names

Hide upgrade directory entries.

int name

_TSOL_PRIVS_DEBUG

Variable name

tsol_privs_debug

Enables privilege debugging mode.

RETURN VALUES

secconf() returns:

0

On success.

-1

When name is an invalid value. Also sets errno to indicate the error.

When name is not defined on the system. The value of errno will not be set.

ERRORS

The function will return the following errors:

EINVAL

The parameter name is unknown.

FILES

system(4)

System configuration information file.

SEE ALSO

Trusted Solaris 8 Reference Manual

pathconf(2)

SunOS 5.8 Reference Manual

sysconf(3C)

Trusted Solaris Information Label Changes

Information labels (ILs) are not supported in Trusted Solaris 7 and later releases. Trusted Solaris software interprets any ILs on communications and files from systems running earlier releases as ADMIN_LOW.

Objects still have CMW labels, and CMW labels still include the IL component: IL[SL]; however, the IL component is fixed at ADMIN_LOW.

As a result, Trusted Solaris 7 and later releases have the following characteristics:

• ILs do not display in window labels; SLs (Sensitivity Labels) display alone within brackets.

• ILs do not float.

• Setting an IL on an object has no effect.

• Getting an object's IL will always return ADMIN_LOW.

• Although certain utilities, library functions, and system calls can manipulate IL strings, the resulting ILs cannot be set on any objects.

• Sensitivity labels, not information labels, display on printer banners.

Trusted Solaris 8  Last Revised 30 Sep 1999

NAME | SYNOPSIS | DESCRIPTION | RETURN VALUES | ERRORS | FILES | SEE ALSO | Trusted Solaris Information Label Changes