libselinux question for httpd

Joe Orton jorton at redhat.com
Thu Nov 3 14:24:29 UTC 2005


On Thu, Nov 03, 2005 at 08:35:56AM -0500, Stephen Smalley wrote:
> On Thu, 2005-11-03 at 09:52 +0000, Joe Orton wrote:
> > Is there is a simple libselinux call I can make in httpd to determine 
> > whether or not the SELinux policy is enabled and applied?
> > 
> > I'd like to add a one-line notice to the default error_log when it is, 
> > to give an obvious tip-off to confused new users.
> 
> is_selinux_enabled() will return > 0 if SELinux is enabled.
> getcon(&con) will set con to the context in which the process is
> running.

Great, thanks.  Is it OK to presume that security_context_t is always a 
char * and just print that string?

joe




More information about the selinux mailing list