1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
|
.TH semanage_user 3 "16 March 2006" "ivg2@cornell.edu" "Libsemanage API documentation"
.SH "NAME"
semanage_user \- SELinux User Management API
.SH "SYNOPSIS"
.B #include <semanage/user_record.h>
.br
.B #include <semanage/users_policy.h>
.br
.B #include <semanage/users_local.h>
.PP
This object contains properties associated with a SELinux user.
Typically many Unix users are mapped to the same SELinux user. See
.BR semanage_seuser "(3)"
for overview of the Unix user API.
.PP
For details on a specific function, see its manual page.
.SH "Record API Overview"
.HP
.BR semanage_user_create "(3)" \-
.br
create a user
.HP
.BR semanage_user_free "(3)" \-
.br
release resources for this user
.HP
.BR semanage_user_key_create "(3)" \-
.br
create a key, which can be used to identify a user
.HP
.BR semanage_user_key_free "(3)" \-
.br
release resources for this user key
.HP
.BR semanage_user_key_extract "(3)" \-
.br
create a key matching this user
.HP
.BR semanage_user_clone "(3)" \-
.br
create an identical user (deep-copy clone)
.HP
.BR semanage_user_compare "(3)" \-
.br
compare this user to the provided key
.HP
.BR semanage_user_compare2 "(3)" \-
.br
compare this user to another
.SH "Properties API Overview"
.HP
.BR semanage_user_get_name "(3)" \-
.br
return the name of this user
.HP
.BR semanage_user_set_name "(3)" \-
.br
set the name of this user
.HP
.BR semanage_user_get_prefix "(3)" \-
.br
return the labeling prefix for this user, used to control the contexts of user directories
.HP
.BR semanage_user_set_prefix "(3)" \-
.br
set the labeling prefix for this user
.HP
.BR semanage_user_get_mlslevel "(3)" \-
.br
return the default MLS level, which is assigned to this user at login time
.HP
.BR semanage_user_set_mlslevel "(3)" \-
.br
set the default MLS level
.HP
.BR semanage_user_get_mlsrange "(3)" \-
.br
return the range of valid MLS sensitivities and categories for this user
.HP
.BR semanage_user_set_mlsrange "(3)" \-
.br
set the range of valid MLS sensitivities and categories for this user
.HP
.BR semanage_user_add_role "(3)" \-
.br
add a role to the user's list of valid roles
.HP
.BR semanage_user_del_role "(3)" \-
.br
remove a role from the user's list of valid roles
.HP
.BR semanage_user_has_role "(3)" \-
.br
check if a role is valid for this user
.HP
.BR semanage_user_get_num_roles "(3)" \-
.br
return the number of valid roles for this user
.HP
.BR semanage_user_get_roles "(3)" \-
.br
return an array containing the roles for this user
.HP
.BR semanage_user_set_roles "(3)" \-
set the roles for this user
.SH "Record Store API Overview"
.HP
.BR semanage_user_modify_local "(3)" \-
.br
add or update a user in the local store
.HP
.BR semanage_user_del_local "(3)" \-
.br
delete a user from the local store
.HP
.BR semanage_user_exists "(3)" \-
.br
check if a user is defined in the persistent policy
.HP
.BR semanage_user_exists_local "(3)" \-
.br
check if a user is defined in the local store
.HP
.BR semanage_user_query "(3)" \-
.br
query a user in the persistent policy
.HP
.BR semanage_user_query_local "(3)" \-
.br
query a user in the local store
.HP
.BR semanage_user_count "(3)" \-
.br
count the number of users defined in the persistent policy
.HP
.BR semanage_user_count_local "(3)" \-
.br
count the number of users defined in the local store
.HP
.BR semanage_user_iterate "(3)" \-
.br
execute a callback for each user in the persistent policy
.HP
.BR semanage_user_iterate_local "(3)" \-
.br
execute a callback for each user in the local store
.HP
.BR semanage_user_list "(3)" \-
.br
return an array containing all users in the persistent policy
.HP
.BR semanage_user_list_local "(3)" \-
.br
return an array containing all users in the local store
|
