setclearance(2)

NAME | SYNOPSIS | DESCRIPTION | RETURN VALUES | ERRORS | SEE ALSO

NAME

setclearance- Set process clearance

SYNOPSIS

cc [flags...] file ... -ltsol [library...]


#include <tsol/label.h>

int setclearance(bclear_t *clearance_p);

DESCRIPTION

setclearance() is used to set the clearance for the calling process provided it has the PRIV_PROC_SETCLR privilege in its set of effective privileges. setclearance() verifies that the information pointed to by clearance_p is formatted correctly, and that the resulting clearance will dominate the sensitivity label of the process.

RETURN VALUES

setclearance() returns:

0

On success.

-1

On failure, and sets errno to indicate the error.

ERRORS

setclearance() fails and does not set the process clearance if any of these conditions prevails:

EFAULT

The clearance_p argument points to an invalid address.

EINVAL

The clearance_p argument does not point to a properly formatted clearance.

The clearance pointed to by clearance_p does not dominate the process sensitivity label.

EPERM

The calling process does not have the necessary privilege (PRIV_PROC_SETCLR) to set the clearance.

SEE ALSO

Trusted Solaris 8 Reference Manual

getclearance(2)

Trusted Solaris 8  Last Revised 21 Feb 1995

NAME | SYNOPSIS | DESCRIPTION | RETURN VALUES | ERRORS | SEE ALSO