cc [flags...] file... -ltsol [library...]
#include <tsol/label.h> char *getpathbylabel(const char *path, char *resolved_path, size_t bufsize, const m_label_t *sl);
The getpathbylabel() function expands all symbolic links and resolves references to '/./', '/../', extra '/' characters, and stores the zone pathname in the buffer named by resolved_path. The bufsize argument specifies the size in bytes of this buffer. The resulting path will have no symbolic links components, nor any '/./', '/../'. This function can only be called from the global zone.
The zone pathname is relative to the sensitivity label sl. To specify a sensitivity label for a zone name which does not exist, the process must assert either the PRIV_FILE_UPGRADE_SL or PRIV_FILE_DOWNGRADE_SL privilege depending on whether the specified sensitivity label dominates or does not dominate the process sensitivity label.
The getpathbylabel() function returns a pointer to the resolved_path on success. Otherwise it returns NULL and sets errno to indicate the error.
The getpathbylabel() function will fail if:
See attributes(5) for descriptions of the following attributes:
readlink(2), getzonerootbyid(3TSOL), libtsol(3LIB), attributes(5), labels(5)
The getpathbylabel() function indirectly invokes the readlink(2) system call, and hence inherits the possibility of hanging due to inaccessible file system resources.
The functionality described on this manual page is available only if the system is configured with Trusted Extensions.