From patchwork Mon Jun 20 15:41:54 2016 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Petr Lautrbach X-Patchwork-Id: 9187837 Return-Path: Received: from mail.wl.linuxfoundation.org (pdx-wl-mail.web.codeaurora.org [172.30.200.125]) by pdx-korg-patchwork.web.codeaurora.org (Postfix) with ESMTP id 3343F6075E for ; Mon, 20 Jun 2016 15:44:49 +0000 (UTC) Received: from mail.wl.linuxfoundation.org (localhost [127.0.0.1]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id 1A41D23B23 for ; Mon, 20 Jun 2016 15:44:49 +0000 (UTC) Received: by mail.wl.linuxfoundation.org (Postfix, from userid 486) id 0EB002793B; Mon, 20 Jun 2016 15:44:49 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on pdx-wl-mail.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-1.9 required=2.0 tests=BAYES_00 autolearn=ham version=3.3.1 Received: from emsm-gh1-uea10.nsa.gov (smtp.nsa.gov [8.44.101.8]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.wl.linuxfoundation.org (Postfix) with ESMTPS id 7C70823B23 for ; Mon, 20 Jun 2016 15:44:48 +0000 (UTC) X-IronPort-AV: E=Sophos;i="5.26,499,1459814400"; d="scan'208";a="14820073" IronPort-PHdr: =?us-ascii?q?9a23=3A8m3srhLe5IkkIKNR/tmcpTZWNBhigK39O0sv0rFi?= =?us-ascii?q?tYgULfvxwZ3uMQTl6Ol3ixeRBMOAu6MC2red7PGocFdDyKjCmUhKSIZLWR4BhJ?= =?us-ascii?q?detC0bK+nBN3fGKuX3ZTcxBsVIWQwt1Xi6NU9IBJS2PAWK8TWM5DIfUi/yKRBy?= =?us-ascii?q?brysXNWC3oLmiqvtqtX6WEZhunmUWftKNhK4rAHc5IE9oLBJDeIP8CbPuWZCYO?= =?us-ascii?q?9MxGlldhq5lhf44dqsrtY4q3wD89pozcNLUL37cqIkVvQYSW1+ayFm2dfv/SXn?= =?us-ascii?q?YUPPoyJEEzZerh0dGAXB7RfnTr/toyD6sax7wyDcMsroHp4uXjH316p3UlfMgT?= =?us-ascii?q?obLTQw+2Gf3tR0hb9HuhiojwZyz47dfMeeM/8oLfCVRs8TWWcUBpUZbCdGGI7p?= =?us-ascii?q?KtJWV+c=3D?= X-IPAS-Result: =?us-ascii?q?A2HTBADBDmhX/wHyM5BdHAEBgyCBU7Y3hiMihzVMAQEBAQE?= =?us-ascii?q?BAgJiJ4IxghsCBAECNxQgCwMDCQEBFwghCAgDAS0MCREOCwUYBIgPwFQBCgEBA?= =?us-ascii?q?QEihieIXQIRAWiFDwWYdo4qAolahUZIjy9Ug3JsiQQPF4EeAQEB?= Received: from unknown (HELO tarius.tycho.ncsc.mil) ([144.51.242.1]) by emsm-gh1-uea10.nsa.gov with ESMTP; 20 Jun 2016 15:44:46 +0000 Received: from prometheus.infosec.tycho.ncsc.mil (prometheus [192.168.25.40]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id u5KFgi0O032240; Mon, 20 Jun 2016 11:44:13 -0400 Received: from tarius.tycho.ncsc.mil (tarius.infosec.tycho.ncsc.mil [144.51.242.1]) by prometheus.infosec.tycho.ncsc.mil (8.15.2/8.15.2) with ESMTP id u5KFghUR092995 for ; Mon, 20 Jun 2016 11:42:43 -0400 Received: from goalie.tycho.ncsc.mil (goalie [144.51.242.250]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id u5KFghE8032238 for ; Mon, 20 Jun 2016 11:42:43 -0400 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A1CwAQAjDmhXhxy3hNFdHQGEc6d0jkKCJYQJhhcCgTNMAQEBAQEBEwEBAQoLCQkhhHsCAQN5ECAxPRoZiDDAUQEBCCeGJ4hdfIUPBZh2jioCjyBIjy+CbYFZOjKJBIFEAQEB X-IPAS-Result: A1CwAQAjDmhXhxy3hNFdHQGEc6d0jkKCJYQJhhcCgTNMAQEBAQEBEwEBAQoLCQkhhHsCAQN5ECAxPRoZiDDAUQEBCCeGJ4hdfIUPBZh2jioCjyBIjy+CbYFZOjKJBIFEAQEB X-IronPort-AV: E=Sophos;i="5.26,499,1459828800"; d="scan'208";a="5527441" Received: from emsm-gh1-uea11.corp.nsa.gov (HELO emsm-gh1-uea11.nsa.gov) ([10.208.41.37]) by goalie.tycho.ncsc.mil with ESMTP; 20 Jun 2016 11:42:44 -0400 IronPort-PHdr: =?us-ascii?q?9a23=3AHQzYGx/Z3N8R6/9uRHKM819IXTAuvvDOBiVQ1KB9?= =?us-ascii?q?1ekcTK2v8tzYMVDF4r011RmSDdSduq8P1LuempujcFJDyK7JiGoFfp1IWk1Nou?= =?us-ascii?q?QttCtkPvS4D1bmJuXhdS0wEZcKflZk+3amLRodQ56mNBXsq3G/pQQfBg/4fVIs?= =?us-ascii?q?YL+lS8iD0o/ohqibwN76XUZhvHKFe7R8LRG7/036l/I9ps9cEJs30QbDuXBSeu?= =?us-ascii?q?5blitCLFOXmAvgtI/rpMYwuwwZgf8q9tZBXKPmZOx4COUAVHV1e1wysdbmsRjF?= =?us-ascii?q?UBun+moXUmJQlAFBRQfC8kLURJD05xP3qvA1/CCHIdf8RLs0EWC66652VAXigQ?= =?us-ascii?q?8dOjI5+X2Rgct12vEI6Cm9rgByltaHKLqeM+BzK+aEJYsX?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0HTAQCWDmhXhxy3hNFdHQGEc6d0jkKCJ?= =?us-ascii?q?YQJhhcCgTNMAQEBAQEBAgIPAQEBCgsJCSEvgjGCGwIBA3kQIDE9GhmIMMBTAQE?= =?us-ascii?q?IAiWGJ4hdfIUPBZh2jioCjyBIjy+CbYFZOjKJBIFEAQEB?= X-IPAS-Result: =?us-ascii?q?A0HTAQCWDmhXhxy3hNFdHQGEc6d0jkKCJYQJhhcCgTNMAQE?= =?us-ascii?q?BAQEBAgIPAQEBCgsJCSEvgjGCGwIBA3kQIDE9GhmIMMBTAQEIAiWGJ4hdfIUPB?= =?us-ascii?q?Zh2jioCjyBIjy+CbYFZOjKJBIFEAQEB?= X-IronPort-AV: E=Sophos;i="5.26,499,1459814400"; d="scan'208";a="17042202" Received: from mx1.redhat.com ([209.132.183.28]) by emsm-gh1-uea11.nsa.gov with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 20 Jun 2016 15:42:17 +0000 Received: from int-mx14.intmail.prod.int.phx2.redhat.com (int-mx14.intmail.prod.int.phx2.redhat.com [10.5.11.27]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1.redhat.com (Postfix) with ESMTPS id 5F0AD1176AD for ; Mon, 20 Jun 2016 15:42:16 +0000 (UTC) Received: from hulk.com ([10.40.3.79]) by int-mx14.intmail.prod.int.phx2.redhat.com (8.14.4/8.14.4) with ESMTP id u5KFgEUC022102; Mon, 20 Jun 2016 11:42:15 -0400 From: Petr Lautrbach To: selinux@tycho.nsa.gov Subject: [PATCH 2/2] libselinux: man: Clarify is_selinux_mls_enabled() description Date: Mon, 20 Jun 2016 17:41:54 +0200 Message-Id: <1466437314-9813-2-git-send-email-plautrba@redhat.com> In-Reply-To: <1466437314-9813-1-git-send-email-plautrba@redhat.com> References: <1466437314-9813-1-git-send-email-plautrba@redhat.com> X-Scanned-By: MIMEDefang 2.68 on 10.5.11.27 X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.5.16 (mx1.redhat.com [10.5.110.38]); Mon, 20 Jun 2016 15:42:16 +0000 (UTC) X-BeenThere: selinux@tycho.nsa.gov X-Mailman-Version: 2.1.20 Precedence: list List-Id: "Security-Enhanced Linux \(SELinux\) mailing list" List-Post: List-Help: Cc: David King MIME-Version: 1.0 Errors-To: selinux-bounces@tycho.nsa.gov Sender: "Selinux" X-Virus-Scanned: ClamAV using ClamSMTP From: David King Improve the description by mentioning that if is_selinux_mls_enabled(), it simply means that the kernel has MLS support and the policy contains MLS features. To check whether MLS support is enabled on the running system, use selinux_getpolicytype(). Signed-off-by: David King --- libselinux/man/man3/is_selinux_enabled.3 | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/libselinux/man/man3/is_selinux_enabled.3 b/libselinux/man/man3/is_selinux_enabled.3 index b2df562..df62c22 100644 --- a/libselinux/man/man3/is_selinux_enabled.3 +++ b/libselinux/man/man3/is_selinux_enabled.3 @@ -18,7 +18,9 @@ returns 1 if SELinux is running or 0 if it is not. On error, \-1 is returned. .BR is_selinux_mls_enabled () -returns 1 if SELinux is running in MLS mode or 0 if it is not. +returns 1 if SELinux is capable of running in MLS mode or 0 if it is not. To +determine the policy in use on the system, use +.BR selinux_getpolicytype (3). . .SH "SEE ALSO" .BR selinux "(8)"