Encapsulates the result of a permissions calculation, between
source & target domains, for a specific class. Decisions describe
which permissions are allowed, and whether permissions should be
audit-logged when allowed, and when denied.
Security context, a variable-length string associated with each SELinux object in the
system. Contains mandatory user:role:type components and an optional
[:range] component.
Encapsulates the result of an extended permissions calculation, between source & target
domains, for a specific class, a specific kind of extended permissions, and for a specific
xperm prefix byte. Decisions describe which 16-bit xperms are allowed, and whether xperms
should be audit-logged when allowed, and when denied.
Parses binary_policy by value; that is, copies underlying binary data out in addition to
building up parser output structures. This function returns
(unvalidated_parser_output, binary_policy) on success, or an error if parsing failed. Note
that the second component of the success case contains precisely the same bytes as the input.
This function depends on a uniformity of interface between the “by value” and “by reference”
strategies, but also requires an unvalidated_parser_output type that is independent of the
binary_policy lifetime. Taken together, these requirements demand the “move-in + move-out”
interface for binary_policy.