|
BSDE_GET_RULE(3)
Contents
|
bsde_get_rule, bsde_set_rule, bsde_delete_rule -- file system firewall
rules list management
File System Firewall Interface Library (libugidfw, -lugidfw)
#include <ugidfw.h>
int
bsde_get_rule(int rulenum, struct mac_bsdextended_rule *rule,
size_t errlen, char *errstr);
int
bsde_set_rule(int rulenum, struct mac_bsdextended_rule *rule,
size_t errlen, char *errstr);
int
bsde_delete_rule(int rulenum, size_t errlen, char *errstr);
The bsde_get_rule() function fills in *rule with the rule numbered
rulenum. If an error occurs, *errstr is filled in with the error string
(up to errlen characters, including the terminating NUL).
The bsde_set_rule() function fills the slot numbered rulenum with the
specified rule (in struct mac_bsdextended_rule form, either from
bsde_get_rule() or bsde_parse_rule(3)). If an error occurs, *errstr is
filled with the error string (up to errlen characters, including the terminating
NUL).
The bsde_delete_rule() function deletes the rule numbered rulenum. If an
error occurs, *errstr is filled with the error string (up to errlen characters,
including the terminating NUL).
The bsde_get_rule(), bsde_set_rule(), and bsde_delete_rule() functions
return 0 if successful; otherwise the value -1 is returned and the value
of *errstr is filled in as documented in DESCRIPTION.
bsde_get_rule_count(3), bsde_get_rule_slots(3), bsde_parse_rule(3),
bsde_parse_rule_string(3), bsde_rule_to_string(3), libugidfw(3),
mac_bsdextended(4), ugidfw(8)
This software was contributed to the FreeBSD Project by Network Associates
Labs, the Security Research Division of Network Associates Inc.
under DARPA/SPAWAR contract N66001-01-C-8035 (``CBOSS''), as part of the
DARPA CHATS research program.
FreeBSD 5.2.1 January 7, 2003 FreeBSD 5.2.1 [ Back ] |