cc [flags...] file... -ltsol [library...]
#include <tsol/label.h> char *getpathbylabel(const char *path, char *resolved_path, size_t bufsize, const m_label_t *sl);
The getpathbylabel() function expands all symbolic links and resolves references to '/./', '/../', extra '/' characters, and stores the zone pathname in the buffer named by resolved_path. The bufsize argument specifies the size in bytes of this buffer. The resulting path will have no symbolic links components, nor any '/./', '/. ./'. This function can only be called from the global zone.
The zone pathname is relative to the sensitivity label sl. To specify a sensitivity label for a zone name which does not exist, the process must assert either the PRIV_FILE_UPGRADE_SL or PRIV_FILE_DOWNGRADE_SL privilege depending on whether the specified sensitivity label dominates or does not dominate the process sensitivity label.
The getpathbylabel() function returns a pointer to the resolved_path on success. Otherwise it returns NULL and sets errno to indicate the error.
The getpathbylabel() function will fail if:
Search permission is denied for a component of the path prefix of path.
resolved_path extends outside the process's allocated address space or beyond bufsize bytes.
path or resolved_path was NULL, current zone is not the global zone, or sl is invalid.
An I/O error occurred while reading from or writing to the file system.
Too many symbolic links were encountered in translating path.
The named file does not exist.
See attributes(5) for descriptions of the following attributes:
The getpathbylabel() function indirectly invokes the readlink(2) system call, and hence inherits the possibility of hanging due to inaccessible file system resources.
The functionality described on this manual page is available only if the system is configured with Trusted Extensions.