/usr/bin/getzonepath {sensitivity-label}
getzonepath displays the root pathname of the running labeled zone that corresponds to the specified sensitivity label. The returned pathname is relative to the caller's root pathname, and has the specified sensitivity label.
If the caller is in the global zone, the returned pathname is not traversable unless the caller's processes have the file_dac_search privilege.
If the caller is in a labeled zone, the caller's label must dominate the specified label. Access to files under the returned pathname is restricted to read-only operations.
See attributes(5) for descriptions of the following attributes:
| |||||||||
getzonepath exits with one of the following values:
0
1
2
getzonerootbylabel(3TSOL), attributes(5)
Acquiring a Sensitivity Label in Solaris Trusted Extensions Developer's Guide
The functionality described on this manual page is available only if the system is configured with Trusted Extensions.