libselinux-devel - Development files for the SELinux runtime library

avc_add_callback - additional event notification for SELinux userspace object managers

avc_cache_stats, avc_av_stats, avc_sid_stats - obtain userspace SELinux AVC statistics

avc_compute_create, avc_compute_member - obtain SELinux label for new object

avc_context_to_sid, avc_sid_to_context, avc_get_initial_sid - obtain and manipulate SELinux security ID’s

avc_has_perm, avc_has_perm_noaudit, avc_audit, avc_entry_ref_init - obtain and audit SELinux access decisions

avc_init - legacy userspace SELinux AVC setup

avc_netlink_open, avc_netlink_close, avc_netlink_acquire_fd, avc_netlink_release_fd, avc_netlink_check_nb, avc_netlink_loop - SELinux netlink processing

avc_open, avc_destroy, avc_reset, avc_cleanup - userspace SELinux AVC setup and teardown

context_new, context_str, context_free, context_type_get, context_type_set, context_range_get, context_range_set,context_role_get, context_role_set, context_user_get, context_user_set - Routines to manipulate SELinux security contexts

getcon, getprevcon, getpidcon - get SELinux security context of a process freecon, freeconary - free memory associated with SELinux security contexts getpeercon - get security context of a peer socket setcon - set current security context of a process

getexeccon, setexeccon - get or set the SELinux security context used for executing a new process rpm_execcon - run a helper for rpm in an appropriate security context

getfilecon, fgetfilecon, lgetfilecon - get SELinux security context of a file

getfscreatecon, setfscreatecon - get or set the SELinux security context used for creating a new file system object

getkeycreatecon, setkeycreatecon - get or set the SELinux security context used for creating a new kernel keyrings

getseuserbyname - get SELinux username and level for a given Linux username

getsockcreatecon, setsockcreatecon - get or set the SELinux security context used for creating a new labeled sockets

init_selinuxmnt - initialize the global variable selinux_mnt

is_context_customizable - check whether SELinux context type is customizable by the administrator

is_selinux_mls_enabled - check whether SELinux is enabled for (Multi Level Security) MLS

matchmediacon - get the default SELinux security context for the specified mediatype from the policy

matchpathcon, matchpathcon_index - get the default SELinux security context for the specified path from the file contexts configuration

matchpathcon_checkmatches, matchpathcon_filespec_add, matchpathcon_filespec_destroy, matchpathcon_filespec_eval - check and report whether any specification index has no matches with any inode. Maintenance and statistics on inode associations

security_check_context - check the validity of a SELinux context

security_disable - disable the SELinux kernel code at runtime

security_getenforce, security_setenforce, security_deny_unknown, security_reject_unknown, security_get_checkreqprot - get or set the enforcing state of SELinux

security_set_boolean, security_commit_booleans, security_get_boolean_names, security_get_boolean_active, security_get_boolean_pending - routines for manipulating SELinux boolean values

security_load_policy - load a new SELinux policy

security_policyvers - get the version of the SELinux policy

selabel_digest - Return digest of specfiles and list of files used

selabel_get_digests_all_partial_matches - retrieve the partial matches digest and the xattr digest that applies to the supplied path - Only supported on file backend.

selabel_lookup - obtain SELinux security context from a string label

selabel_lookup_best_match - obtain a best match SELinux security context - Only supported on file backend.

selabel_open, selabel_close - userspace SELinux labeling interface

selabel_partial_match - determine whether a direct or partial match is possible on a file path - Only supported on file backend.

selabel_stats - obtain SELinux labeling statistics

selinux_boolean_sub - Search the translated name for a boolean_name record

selinux_check_securetty_context - check whether a SELinux tty security context is defined as a securetty context

selinux_colors_path - Return a path to the active SELinux policy color configuration file

selinux_file_context_cmp - Compare two SELinux security contexts excluding the ’user’ component

selinux_file_context_verify - Compare the SELinux security context on disk to the default security context required by the policy file contexts file

selinux_getenforcemode - get the enforcing state of SELinux

selinux_getpolicytype - get the type of SELinux policy running on the system

selinux_lsetfilecon_default - set the file context to the system defaults

selinux_policy_root - return the path of the SELinux policy files for this machine selinux_set_policy_root - Set an alternate SELinux root path for the SELinux policy files for this machine.

selinux_raw_context_to_color - Return RGB color string for an SELinux security context

selinux_restorecon - restore file(s) default SELinux security contexts

selinux_restorecon_default_handle - sets default parameters for selinux_restorecon(3)

selinux_restorecon_set_alt_rootpath - set an alternate rootpath.

selinux_restorecon_set_exclude_list - set list of directories to be excluded from relabeling.

selinux_restorecon_set_sehandle - set a labeling handle for use by selinux_restorecon(3)

selinux_restorecon_xattr - manage default security.sehash extended attribute entries added by selinux_restorecon(3), setfiles(8) or restorecon(8).

selinux_set_callback - userspace SELinux callback facilities

selinux_set_mapping - establish dynamic object class and permission mapping

selinux_status_open, selinux_status_close, selinux_status_updated, selinux_status_getenforce, selinux_status_policyload and selinux_status_deny_unknown - reference the SELinux kernel status without invocation of system calls

setfilecon, fsetfilecon, lsetfilecon - set SELinux security context of a file

set_matchpathcon_flags, set_matchpathcon_invalidcon, set_matchpathcon_printf - set flags controlling the operation of matchpathcon or matchpathcon_index and configure the behaviour of validity checking and error displaying