cppcheck-py 2.19.0__py3-none-win32.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (84) hide show
  1. cppcheck/__init__.py +55 -0
  2. cppcheck/cppcheck-2.19.0.tar.gz +0 -0
  3. cppcheck/data/addons/__init__.py +0 -0
  4. cppcheck/data/addons/cppcheck.py +41 -0
  5. cppcheck/data/addons/cppcheckdata.py +1727 -0
  6. cppcheck/data/addons/findcasts.py +32 -0
  7. cppcheck/data/addons/misc.py +163 -0
  8. cppcheck/data/addons/misra.py +5153 -0
  9. cppcheck/data/addons/misra_9.py +559 -0
  10. cppcheck/data/addons/naming.py +92 -0
  11. cppcheck/data/addons/namingng.py +420 -0
  12. cppcheck/data/addons/runaddon.py +16 -0
  13. cppcheck/data/addons/threadsafety.py +350 -0
  14. cppcheck/data/addons/y2038.py +602 -0
  15. cppcheck/data/cfg/avr.cfg +402 -0
  16. cppcheck/data/cfg/bento4.cfg +142 -0
  17. cppcheck/data/cfg/boost.cfg +1284 -0
  18. cppcheck/data/cfg/bsd.cfg +567 -0
  19. cppcheck/data/cfg/cairo.cfg +89 -0
  20. cppcheck/data/cfg/cppcheck-lib.cfg +72 -0
  21. cppcheck/data/cfg/cppunit.cfg +48 -0
  22. cppcheck/data/cfg/dpdk.cfg +11 -0
  23. cppcheck/data/cfg/embedded_sql.cfg +4 -0
  24. cppcheck/data/cfg/emscripten.cfg +108 -0
  25. cppcheck/data/cfg/ginac.cfg +12848 -0
  26. cppcheck/data/cfg/gnu.cfg +1738 -0
  27. cppcheck/data/cfg/googletest.cfg +62 -0
  28. cppcheck/data/cfg/gtk.cfg +23082 -0
  29. cppcheck/data/cfg/icu.cfg +221 -0
  30. cppcheck/data/cfg/kde.cfg +92 -0
  31. cppcheck/data/cfg/libcerror.cfg +203 -0
  32. cppcheck/data/cfg/libcurl.cfg +487 -0
  33. cppcheck/data/cfg/libsigc++.cfg +36 -0
  34. cppcheck/data/cfg/lua.cfg +316 -0
  35. cppcheck/data/cfg/mfc.cfg +271 -0
  36. cppcheck/data/cfg/microsoft_atl.cfg +40 -0
  37. cppcheck/data/cfg/microsoft_sal.cfg +490 -0
  38. cppcheck/data/cfg/microsoft_unittest.cfg +20 -0
  39. cppcheck/data/cfg/motif.cfg +318 -0
  40. cppcheck/data/cfg/nspr.cfg +38 -0
  41. cppcheck/data/cfg/ntl.cfg +6907 -0
  42. cppcheck/data/cfg/opencv2.cfg +132 -0
  43. cppcheck/data/cfg/opengl.cfg +581 -0
  44. cppcheck/data/cfg/openmp.cfg +157 -0
  45. cppcheck/data/cfg/openssl.cfg +174 -0
  46. cppcheck/data/cfg/pcre.cfg +165 -0
  47. cppcheck/data/cfg/posix.cfg +6445 -0
  48. cppcheck/data/cfg/protobuf.cfg +10 -0
  49. cppcheck/data/cfg/python.cfg +674 -0
  50. cppcheck/data/cfg/qt.cfg +5502 -0
  51. cppcheck/data/cfg/ruby.cfg +142 -0
  52. cppcheck/data/cfg/sdl.cfg +354 -0
  53. cppcheck/data/cfg/selinux.cfg +3621 -0
  54. cppcheck/data/cfg/sfml.cfg +301 -0
  55. cppcheck/data/cfg/sqlite3.cfg +1571 -0
  56. cppcheck/data/cfg/std.cfg +9205 -0
  57. cppcheck/data/cfg/tinyxml2.cfg +37 -0
  58. cppcheck/data/cfg/vcl.cfg +4 -0
  59. cppcheck/data/cfg/windows.cfg +17237 -0
  60. cppcheck/data/cfg/wxsqlite3.cfg +1955 -0
  61. cppcheck/data/cfg/wxsvg.cfg +16905 -0
  62. cppcheck/data/cfg/wxwidgets.cfg +17245 -0
  63. cppcheck/data/cfg/zephyr.cfg +113 -0
  64. cppcheck/data/cfg/zlib.cfg +1450 -0
  65. cppcheck/data/cppcheck-htmlreport +1157 -0
  66. cppcheck/data/cppcheck.exe +0 -0
  67. cppcheck/data/platforms/aix_ppc64.xml +18 -0
  68. cppcheck/data/platforms/arm32-wchar_t2.xml +18 -0
  69. cppcheck/data/platforms/arm32-wchar_t4.xml +18 -0
  70. cppcheck/data/platforms/arm64-wchar_t2.xml +18 -0
  71. cppcheck/data/platforms/arm64-wchar_t4.xml +18 -0
  72. cppcheck/data/platforms/avr8.xml +18 -0
  73. cppcheck/data/platforms/cray_sv1.xml +18 -0
  74. cppcheck/data/platforms/elbrus-e1cp.xml +18 -0
  75. cppcheck/data/platforms/mips32.xml +18 -0
  76. cppcheck/data/platforms/msp430_eabi_large_datamodel.xml +18 -0
  77. cppcheck/data/platforms/pic16.xml +18 -0
  78. cppcheck/data/platforms/pic8-enhanced.xml +18 -0
  79. cppcheck/data/platforms/pic8.xml +18 -0
  80. cppcheck_py-2.19.0.dist-info/METADATA +76 -0
  81. cppcheck_py-2.19.0.dist-info/RECORD +84 -0
  82. cppcheck_py-2.19.0.dist-info/WHEEL +5 -0
  83. cppcheck_py-2.19.0.dist-info/entry_points.txt +4 -0
  84. cppcheck_py-2.19.0.dist-info/licenses/LICENSE.md +191 -0
cppcheck/data/cfg/selinux.cfg ADDED
@@ -0,0 +1,3621 @@
1
+ <?xml version="1.0"?>
2
+ <def format="2">
3
+ <!-- <selinux/restorecon.h> -->
4
+ <!-- https://man7.org/linux/man-pages/man3/selinux_restorecon.3.html -->
5
+ <!-- int selinux_restorecon(const char *pathname, unsigned int restorecon_flags); -->
6
+ <function name="selinux_restorecon">
7
+ <returnValue type="int"/>
8
+ <noreturn>false</noreturn>
9
+ <use-retval/>
10
+ <leak-ignore/>
11
+ <arg nr="1" direction="in">
12
+ <not-null/>
13
+ <not-uninit/>
14
+ <strz/>
15
+ </arg>
16
+ <arg nr="2" direction="in">
17
+ <not-uninit/>
18
+ <not-bool/>
19
+ </arg>
20
+ </function>
21
+ <!-- int selinux_restorecon_parallel(const char *pathname, unsigned int restorecon_flags, size_t nthreads); -->
22
+ <function name="selinux_restorecon_parallel">
23
+ <returnValue type="int"/>
24
+ <noreturn>false</noreturn>
25
+ <use-retval/>
26
+ <leak-ignore/>
27
+ <arg nr="1" direction="in">
28
+ <not-null/>
29
+ <not-uninit/>
30
+ <strz/>
31
+ </arg>
32
+ <arg nr="2" direction="in">
33
+ <not-uninit/>
34
+ <not-bool/>
35
+ </arg>
36
+ <arg nr="3" direction="in">
37
+ <not-uninit/>
38
+ <not-bool/>
39
+ </arg>
40
+ </function>
41
+ <define name="SELINUX_RESTORECON_IGNORE_DIGEST" value="0x00001"/>
42
+ <define name="SELINUX_RESTORECON_NOCHANGE" value="0x00002"/>
43
+ <define name="SELINUX_RESTORECON_SET_SPECFILE_CTX" value="0x00004"/>
44
+ <define name="SELINUX_RESTORECON_RECURSE" value="0x00008"/>
45
+ <define name="SELINUX_RESTORECON_VERBOSE" value="0x00010"/>
46
+ <define name="SELINUX_RESTORECON_PROGRESS" value="0x00020"/>
47
+ <define name="SELINUX_RESTORECON_REALPATH" value="0x00040"/>
48
+ <define name="SELINUX_RESTORECON_XDEV" value="0x00080"/>
49
+ <define name="SELINUX_RESTORECON_ADD_ASSOC" value="0x00100"/>
50
+ <define name="SELINUX_RESTORECON_ABORT_ON_ERROR" value="0x00200"/>
51
+ <define name="SELINUX_RESTORECON_SYSLOG_CHANGES" value="0x00400"/>
52
+ <define name="SELINUX_RESTORECON_LOG_MATCHES" value="0x00800"/>
53
+ <define name="SELINUX_RESTORECON_IGNORE_NOENTRY" value="0x01000"/>
54
+ <define name="SELINUX_RESTORECON_IGNORE_MOUNTS" value="0x02000"/>
55
+ <define name="SELINUX_RESTORECON_MASS_RELABEL" value="0x04000"/>
56
+ <define name="SELINUX_RESTORECON_SKIP_DIGEST" value="0x08000"/>
57
+ <define name="SELINUX_RESTORECON_CONFLICT_ERROR" value="0x10000"/>
58
+ <define name="SELINUX_RESTORECON_COUNT_ERRORS" value="0x20000"/>
59
+ <!-- https://man7.org/linux/man-pages/man3/selinux_restorecon_set_sehandle.3.html -->
60
+ <!-- void selinux_restorecon_set_sehandle(struct selabel_handle *hndl); -->
61
+ <function name="selinux_restorecon_set_sehandle">
62
+ <returnValue type="void"/>
63
+ <noreturn>false</noreturn>
64
+ <leak-ignore/>
65
+ <arg nr="1" direction="in">
66
+ <not-uninit/>
67
+ <not-bool/>
68
+ </arg>
69
+ </function>
70
+ <!-- https://man7.org/linux/man-pages/man3/selinux_restorecon_default_handle.3.html -->
71
+ <!-- struct selabel_handle *selinux_restorecon_default_handle(void); -->
72
+ <function name="selinux_restorecon_default_handle">
73
+ <returnValue type="struct selabel_handle *"/>
74
+ <noreturn>false</noreturn>
75
+ <use-retval/>
76
+ <leak-ignore/>
77
+ </function>
78
+ <!-- https://man7.org/linux/man-pages/man3/selinux_restorecon_set_exclude_list.3.html -->
79
+ <!-- void selinux_restorecon_set_exclude_list(const char **exclude_list); -->
80
+ <function name="selinux_restorecon_set_exclude_list">
81
+ <returnValue type="void"/>
82
+ <noreturn>false</noreturn>
83
+ <leak-ignore/>
84
+ <arg nr="1" direction="in">
85
+ <not-null/>
86
+ <not-uninit/>
87
+ <not-bool/>
88
+ </arg>
89
+ </function>
90
+ <!-- https://man7.org/linux/man-pages/man3/selinux_restorecon_set_alt_rootpath.3.html -->
91
+ <!-- int selinux_restorecon_set_alt_rootpath(const char *alt_rootpath); -->
92
+ <function name="selinux_restorecon_set_alt_rootpath">
93
+ <returnValue type="int"/>
94
+ <noreturn>false</noreturn>
95
+ <use-retval/>
96
+ <leak-ignore/>
97
+ <arg nr="1" direction="in">
98
+ <not-null/>
99
+ <not-uninit/>
100
+ <strz/>
101
+ </arg>
102
+ </function>
103
+ <!-- https://man7.org/linux/man-pages/man3/selinux_restorecon_get_skipped_errors.3.html -->
104
+ <!-- long unsigned selinux_restorecon_get_skipped_errors(void); -->
105
+ <function name="selinux_restorecon_get_skipped_errors">
106
+ <returnValue type="unsigned long"/>
107
+ <noreturn>false</noreturn>
108
+ <use-retval/>
109
+ <leak-ignore/>
110
+ </function>
111
+ <!-- https://man7.org/linux/man-pages/man3/selinux_restorecon_xattr.3.html -->
112
+ <!-- int selinux_restorecon_xattr(const char *pathname, unsigned int xattr_flags, struct dir_xattr ***xattr_list); -->
113
+ <function name="selinux_restorecon_xattr">
114
+ <returnValue type="int"/>
115
+ <noreturn>false</noreturn>
116
+ <use-retval/>
117
+ <leak-ignore/>
118
+ <arg nr="1" direction="in">
119
+ <not-null/>
120
+ <not-uninit/>
121
+ <strz/>
122
+ </arg>
123
+ <arg nr="2" direction="in">
124
+ <not-uninit/>
125
+ <not-bool/>
126
+ </arg>
127
+ <arg nr="3" direction="out">
128
+ <not-null/>
129
+ <not-uninit/>
130
+ <not-bool/>
131
+ </arg>
132
+ </function>
133
+ <define name="SELINUX_RESTORECON_XATTR_RECURSE" value="0x0001"/>
134
+ <define name="SELINUX_RESTORECON_XATTR_DELETE_NONMATCH_DIGESTS" value="0x0002"/>
135
+ <define name="SELINUX_RESTORECON_XATTR_DELETE_ALL_DIGESTS" value="0x0004"/>
136
+ <define name="SELINUX_RESTORECON_XATTR_IGNORE_MOUNTS" value="0x0008"/>
137
+ <!-- <selinux/get_default_type.h> -->
138
+ <!-- https://man7.org/linux/man-pages/man3/selinux_binary_policy_path.3.html -->
139
+ <!-- const char *selinux_default_type_path(void); -->
140
+ <function name="selinux_default_type_path">
141
+ <returnValue type="const char *"/>
142
+ <noreturn>false</noreturn>
143
+ <use-retval/>
144
+ <leak-ignore/>
145
+ </function>
146
+ <!-- https://man7.org/linux/man-pages/man3/get_ordered_context_list.3.html -->
147
+ <!-- int get_default_type(const char *role, char **type); -->
148
+ <function name="get_default_type">
149
+ <returnValue type="int"/>
150
+ <noreturn>false</noreturn>
151
+ <use-retval/>
152
+ <leak-ignore/>
153
+ <arg nr="1" direction="in">
154
+ <not-null/>
155
+ <not-uninit/>
156
+ <strz/>
157
+ </arg>
158
+ <arg nr="2" direction="out">
159
+ <not-null/>
160
+ </arg>
161
+ </function>
162
+ <memory>
163
+ <alloc init="true" arg="2">get_default_type</alloc>
164
+ <dealloc>free</dealloc>
165
+ </memory>
166
+ <!-- <selinux/label.h> -->
167
+ <!-- https://man7.org/linux/man-pages/man3/selabel_open.3.html -->
168
+ <podtype name="selabel_handle"/>
169
+ <!-- struct selabel_handle *selabel_open(unsigned int backend, const struct selinux_opt *opts, unsigned nopts); -->
170
+ <function name="selabel_open">
171
+ <returnValue type="struct selabel_handle *"/>
172
+ <noreturn>false</noreturn>
173
+ <use-retval/>
174
+ <leak-ignore/>
175
+ <arg nr="1" direction="in">
176
+ <not-uninit/>
177
+ <not-bool/>
178
+ <valid>0:5</valid>
179
+ </arg>
180
+ <arg nr="2" direction="in">
181
+ <not-uninit/>
182
+ <minsize type="argvalue" arg="3"/>
183
+ </arg>
184
+ <arg nr="3" direction="in">
185
+ <not-uninit/>
186
+ <not-bool/>
187
+ </arg>
188
+ </function>
189
+ <define name="SELABEL_CTX_FILE" value="0"/>
190
+ <define name="SELABEL_CTX_MEDIA" value="1"/>
191
+ <define name="SELABEL_CTX_X" value="2"/>
192
+ <define name="SELABEL_CTX_DB" value="3"/>
193
+ <define name="SELABEL_CTX_ANDROID_PROP" value="4"/>
194
+ <define name="SELABEL_CTX_ANDROID_SERVICE" value="5"/>
195
+ <define name="SELABEL_OPT_UNUSED" value="0"/>
196
+ <define name="SELABEL_OPT_VALIDATE" value="1"/>
197
+ <define name="SELABEL_OPT_BASEONLY" value="2"/>
198
+ <define name="SELABEL_OPT_PATH" value="3"/>
199
+ <define name="SELABEL_OPT_SUBSET" value="4"/>
200
+ <define name="SELABEL_OPT_DIGEST" value="5"/>
201
+ <define name="SELABEL_NOPT" value="6"/>
202
+ <!-- void selabel_close(struct selabel_handle *handle); -->
203
+ <function name="selabel_close">
204
+ <returnValue type="void"/>
205
+ <noreturn>false</noreturn>
206
+ <arg nr="1" direction="in">
207
+ <not-uninit/>
208
+ <not-null/>
209
+ </arg>
210
+ </function>
211
+ <resource>
212
+ <alloc init="true">selabel_open</alloc>
213
+ <dealloc>selabel_close</dealloc>
214
+ </resource>
215
+ <!-- https://man7.org/linux/man-pages/man3/selabel_lookup.3.html -->
216
+ <!-- int selabel_lookup(struct selabel_handle *handle, char **con, const char *key, int type); -->
217
+ <function name="selabel_lookup">
218
+ <returnValue type="int"/>
219
+ <noreturn>false</noreturn>
220
+ <use-retval/>
221
+ <leak-ignore/>
222
+ <arg nr="1" direction="inout">
223
+ <not-uninit/>
224
+ <not-null/>
225
+ </arg>
226
+ <arg nr="2" direction="out">
227
+ <not-null/>
228
+ </arg>
229
+ <arg nr="3" direction="in">
230
+ <not-null/>
231
+ <not-uninit/>
232
+ <strz/>
233
+ </arg>
234
+ <arg nr="4" direction="in">
235
+ <not-uninit/>
236
+ <not-bool/>
237
+ </arg>
238
+ </function>
239
+ <memory>
240
+ <alloc init="true" arg="2">selabel_lookup</alloc>
241
+ <dealloc>freecon</dealloc>
242
+ </memory>
243
+ <!-- int selabel_lookup_raw(struct selabel_handle *handle, char **con, const char *key, int type); -->
244
+ <function name="selabel_lookup_raw">
245
+ <returnValue type="int"/>
246
+ <noreturn>false</noreturn>
247
+ <use-retval/>
248
+ <leak-ignore/>
249
+ <arg nr="1" direction="in">
250
+ <not-uninit/>
251
+ <not-null/>
252
+ </arg>
253
+ <arg nr="2" direction="out">
254
+ <not-null/>
255
+ </arg>
256
+ <arg nr="3" direction="in">
257
+ <not-null/>
258
+ <not-uninit/>
259
+ <strz/>
260
+ </arg>
261
+ <arg nr="4" direction="in">
262
+ <not-uninit/>
263
+ <not-bool/>
264
+ </arg>
265
+ </function>
266
+ <memory>
267
+ <alloc init="true" arg="2">selabel_lookup_raw</alloc>
268
+ <dealloc>freecon</dealloc>
269
+ </memory>
270
+ <!-- https://man7.org/linux/man-pages/man3/selabel_partial_match.3.html -->
271
+ <!-- bool selabel_partial_match(struct selabel_handle *handle, const char *key); -->
272
+ <function name="selabel_lookup_raw">
273
+ <returnValue type="bool"/>
274
+ <noreturn>false</noreturn>
275
+ <use-retval/>
276
+ <leak-ignore/>
277
+ <arg nr="1" direction="in">
278
+ <not-uninit/>
279
+ <not-null/>
280
+ </arg>
281
+ <arg nr="2" direction="in">
282
+ <not-null/>
283
+ <not-uninit/>
284
+ <strz/>
285
+ </arg>
286
+ </function>
287
+ <!-- https://man7.org/linux/man-pages/man3/selabel_get_digests_all_partial_matches.3.html -->
288
+ <!-- bool selabel_get_digests_all_partial_matches(struct selabel_handle *rec, const char *key, uint8_t **calculated_digest, uint8_t **xattr_digest, size_t *digest_len); -->
289
+ <function name="selabel_get_digests_all_partial_matches">
290
+ <returnValue type="bool"/>
291
+ <noreturn>false</noreturn>
292
+ <use-retval/>
293
+ <leak-ignore/>
294
+ <arg nr="1" direction="in">
295
+ <not-uninit/>
296
+ <not-null/>
297
+ </arg>
298
+ <arg nr="2" direction="in">
299
+ <not-uninit/>
300
+ <not-null/>
301
+ <strz/>
302
+ </arg>
303
+ <arg nr="3" direction="out">
304
+ <not-null/>
305
+ </arg>
306
+ <arg nr="4" direction="out">
307
+ <not-null/>
308
+ </arg>
309
+ <arg nr="5" direction="out">
310
+ <not-null/>
311
+ </arg>
312
+ </function>
313
+ <memory>
314
+ <alloc init="true" arg="3">selabel_get_digests_all_partial_matches</alloc>
315
+ <dealloc>free</dealloc>
316
+ </memory>
317
+ <memory>
318
+ <alloc init="true" arg="4">selabel_get_digests_all_partial_matches</alloc>
319
+ <dealloc>free</dealloc>
320
+ </memory>
321
+ <!-- bool selabel_hash_all_partial_matches(struct selabel_handle *rec, const char *key, uint8_t* digest); -->
322
+ <function name="selabel_hash_all_partial_matches">
323
+ <returnValue type="bool"/>
324
+ <noreturn>false</noreturn>
325
+ <use-retval/>
326
+ <leak-ignore/>
327
+ <arg nr="1" direction="in">
328
+ <not-uninit/>
329
+ <not-null/>
330
+ </arg>
331
+ <arg nr="2" direction="in">
332
+ <not-uninit/>
333
+ <not-null/>
334
+ <strz/>
335
+ </arg>
336
+ <arg nr="3" direction="out">
337
+ <not-null/>
338
+ </arg>
339
+ </function>
340
+ <!-- https://man7.org/linux/man-pages/man3/selabel_lookup_best_match.3.html -->
341
+ <!-- int selabel_lookup_best_match(struct selabel_handle *rec, char **con, const char *key, const char **aliases, int type); -->
342
+ <function name="selabel_lookup_best_match">
343
+ <returnValue type="int"/>
344
+ <noreturn>false</noreturn>
345
+ <use-retval/>
346
+ <leak-ignore/>
347
+ <arg nr="1" direction="in">
348
+ <not-uninit/>
349
+ <not-null/>
350
+ </arg>
351
+ <arg nr="2" direction="out">
352
+ <not-null/>
353
+ </arg>
354
+ <arg nr="3" direction="in">
355
+ <not-uninit/>
356
+ <not-null/>
357
+ <strz/>
358
+ </arg>
359
+ <arg nr="4" direction="in">
360
+ <not-uninit/>
361
+ </arg>
362
+ <arg nr="5" direction="in">
363
+ <not-uninit/>
364
+ <not-bool/>
365
+ </arg>
366
+ </function>
367
+ <memory>
368
+ <alloc init="true" arg="2">selabel_lookup_best_match</alloc>
369
+ <dealloc>freecon</dealloc>
370
+ </memory>
371
+ <!-- int selabel_lookup_best_match_raw(struct selabel_handle *rec, char **con, const char *key, const char **aliases, int type); -->
372
+ <function name="selabel_lookup_best_match_raw">
373
+ <returnValue type="int"/>
374
+ <noreturn>false</noreturn>
375
+ <use-retval/>
376
+ <leak-ignore/>
377
+ <arg nr="1" direction="in">
378
+ <not-uninit/>
379
+ <not-null/>
380
+ </arg>
381
+ <arg nr="2" direction="out">
382
+ <not-null/>
383
+ </arg>
384
+ <arg nr="3" direction="in">
385
+ <not-uninit/>
386
+ <not-null/>
387
+ <strz/>
388
+ </arg>
389
+ <arg nr="4" direction="in">
390
+ <not-uninit/>
391
+ </arg>
392
+ <arg nr="5" direction="in">
393
+ <not-uninit/>
394
+ <not-bool/>
395
+ </arg>
396
+ </function>
397
+ <memory>
398
+ <alloc init="true" arg="2">selabel_lookup_best_match_raw</alloc>
399
+ <dealloc>freecon</dealloc>
400
+ </memory>
401
+ <!-- https://man7.org/linux/man-pages/man3/selabel_digest.3.html -->
402
+ <!-- int selabel_digest(struct selabel_handle *rec, unsigned char **digest, size_t *digest_len, char ***specfiles, size_t *num_specfiles); -->
403
+ <function name="selabel_digest">
404
+ <returnValue type="int"/>
405
+ <noreturn>false</noreturn>
406
+ <use-retval/>
407
+ <leak-ignore/>
408
+ <arg nr="1" direction="in">
409
+ <not-uninit/>
410
+ <not-null/>
411
+ </arg>
412
+ <arg nr="2" direction="out">
413
+ <not-null/>
414
+ </arg>
415
+ <arg nr="3" direction="out">
416
+ <not-null/>
417
+ </arg>
418
+ <arg nr="4" direction="out">
419
+ <not-null/>
420
+ </arg>
421
+ <arg nr="5" direction="out">
422
+ <not-null/>
423
+ </arg>
424
+ </function>
425
+ <!-- enum selabel_cmp_result selabel_cmp(const struct selabel_handle *h1, const struct selabel_handle *h2); -->
426
+ <function name="selabel_cmp">
427
+ <returnValue type="enum selabel_cmp_result"/>
428
+ <noreturn>false</noreturn>
429
+ <use-retval/>
430
+ <leak-ignore/>
431
+ <arg nr="1" direction="in">
432
+ <not-uninit/>
433
+ <not-null/>
434
+ </arg>
435
+ <arg nr="2" direction="in">
436
+ <not-uninit/>
437
+ <not-null/>
438
+ </arg>
439
+ </function>
440
+ <!-- https://man7.org/linux/man-pages/man3/selabel_stats.3.html -->
441
+ <!-- void selabel_stats(struct selabel_handle *handle); -->
442
+ <function name="selabel_stats">
443
+ <returnValue type="void"/>
444
+ <noreturn>false</noreturn>
445
+ <leak-ignore/>
446
+ <arg nr="1" direction="in">
447
+ <not-uninit/>
448
+ <not-null/>
449
+ </arg>
450
+ </function>
451
+ <!-- https://man7.org/linux/man-pages/man5/selabel_x.5.html -->
452
+ <define name="SELABEL_X_PROP" value="1"/>
453
+ <define name="SELABEL_X_EXT" value="2"/>
454
+ <define name="SELABEL_X_CLIENT" value="3"/>
455
+ <define name="SELABEL_X_EVENT" value="4"/>
456
+ <define name="SELABEL_X_SELN" value="5"/>
457
+ <define name="SELABEL_X_POLYPROP" value="6"/>
458
+ <define name="SELABEL_X_POLYSELN" value="7"/>
459
+ <!-- https://man7.org/linux/man-pages/man5/selabel_db.5.html -->
460
+ <define name="SELABEL_DB_DATABASE" value="1"/>
461
+ <define name="SELABEL_DB_SCHEMA" value="2"/>
462
+ <define name="SELABEL_DB_TABLE" value="3"/>
463
+ <define name="SELABEL_DB_COLUMN" value="4"/>
464
+ <define name="SELABEL_DB_SEQUENCE" value="5"/>
465
+ <define name="SELABEL_DB_VIEW" value="6"/>
466
+ <define name="SELABEL_DB_PROCEDURE" value="7"/>
467
+ <define name="SELABEL_DB_BLOB" value="8"/>
468
+ <define name="SELABEL_DB_TUPLE" value="9"/>
469
+ <define name="SELABEL_DB_LANGUAGE" value="10"/>
470
+ <define name="SELABEL_DB_EXCEPTION" value="11"/>
471
+ <define name="SELABEL_DB_DATATYPE" value="12"/>
472
+ <!-- <selinux/context.h> -->
473
+ <!-- https://man7.org/linux/man-pages/man3/context_new.3.html -->
474
+ <podtype name="context_t"/>
475
+ <!-- context_t context_new(const char *str); -->
476
+ <function name="context_new">
477
+ <returnValue type="context_new"/>
478
+ <noreturn>false</noreturn>
479
+ <use-retval/>
480
+ <leak-ignore/>
481
+ <arg nr="1" direction="in">
482
+ <not-null/>
483
+ <not-uninit/>
484
+ <strz/>
485
+ </arg>
486
+ </function>
487
+ <!-- const char *context_str(context_t con); -->
488
+ <function name="context_str">
489
+ <returnValue type="const char *"/>
490
+ <noreturn>false</noreturn>
491
+ <use-retval/>
492
+ <leak-ignore/>
493
+ <arg nr="1" direction="in">
494
+ <not-null/>
495
+ <not-uninit/>
496
+ </arg>
497
+ </function>
498
+ <!-- void context_free(context_t con); -->
499
+ <function name="context_free">
500
+ <returnValue type="void"/>
501
+ <noreturn>false</noreturn>
502
+ <arg nr="1" direction="in">
503
+ <not-uninit/>
504
+ </arg>
505
+ </function>
506
+ <memory>
507
+ <alloc init="true">context_new</alloc>
508
+ <dealloc>context_free</dealloc>
509
+ </memory>
510
+ <!-- const char *context_type_get(context_t con); -->
511
+ <function name="context_type_get">
512
+ <returnValue type="const char *"/>
513
+ <noreturn>false</noreturn>
514
+ <use-retval/>
515
+ <leak-ignore/>
516
+ <arg nr="1" direction="in">
517
+ <not-null/>
518
+ <not-uninit/>
519
+ </arg>
520
+ </function>
521
+ <!-- const char *context_range_get(context_t con); -->
522
+ <function name="context_range_get">
523
+ <returnValue type="const char *"/>
524
+ <noreturn>false</noreturn>
525
+ <use-retval/>
526
+ <leak-ignore/>
527
+ <arg nr="1" direction="in">
528
+ <not-null/>
529
+ <not-uninit/>
530
+ </arg>
531
+ </function>
532
+ <!-- const char *context_role_get(context_t con); -->
533
+ <function name="context_role_get">
534
+ <returnValue type="const char *"/>
535
+ <noreturn>false</noreturn>
536
+ <use-retval/>
537
+ <leak-ignore/>
538
+ <arg nr="1" direction="in">
539
+ <not-null/>
540
+ <not-uninit/>
541
+ </arg>
542
+ </function>
543
+ <!-- const char *context_user_get(context_t con); -->
544
+ <function name="context_user_get">
545
+ <returnValue type="const char *"/>
546
+ <noreturn>false</noreturn>
547
+ <use-retval/>
548
+ <leak-ignore/>
549
+ <arg nr="1" direction="in">
550
+ <not-null/>
551
+ <not-uninit/>
552
+ </arg>
553
+ </function>
554
+ <!-- int context_type_set(context_t con, const char *type); -->
555
+ <function name="context_type_set">
556
+ <returnValue type="int"/>
557
+ <noreturn>false</noreturn>
558
+ <use-retval/>
559
+ <leak-ignore/>
560
+ <arg nr="1" direction="inout">
561
+ <not-null/>
562
+ <not-uninit/>
563
+ </arg>
564
+ <arg nr="2" direction="in">
565
+ <not-null/>
566
+ <not-uninit/>
567
+ <strz/>
568
+ </arg>
569
+ </function>
570
+ <!-- int context_range_set(context_t con, const char *type); -->
571
+ <function name="context_range_set">
572
+ <returnValue type="int"/>
573
+ <noreturn>false</noreturn>
574
+ <use-retval/>
575
+ <leak-ignore/>
576
+ <arg nr="1" direction="inout">
577
+ <not-null/>
578
+ <not-uninit/>
579
+ </arg>
580
+ <arg nr="2" direction="in">
581
+ <not-null/>
582
+ <not-uninit/>
583
+ <strz/>
584
+ </arg>
585
+ </function>
586
+ <!-- int context_role_set(context_t con, const char *type); -->
587
+ <function name="context_role_set">
588
+ <returnValue type="int"/>
589
+ <noreturn>false</noreturn>
590
+ <use-retval/>
591
+ <leak-ignore/>
592
+ <arg nr="1" direction="inout">
593
+ <not-null/>
594
+ <not-uninit/>
595
+ </arg>
596
+ <arg nr="2" direction="in">
597
+ <not-null/>
598
+ <not-uninit/>
599
+ <strz/>
600
+ </arg>
601
+ </function>
602
+ <!-- int context_user_set(context_t con, const char *type); -->
603
+ <function name="context_user_set">
604
+ <returnValue type="int"/>
605
+ <noreturn>false</noreturn>
606
+ <use-retval/>
607
+ <leak-ignore/>
608
+ <arg nr="1" direction="inout">
609
+ <not-null/>
610
+ <not-uninit/>
611
+ </arg>
612
+ <arg nr="2" direction="in">
613
+ <not-null/>
614
+ <not-uninit/>
615
+ <strz/>
616
+ </arg>
617
+ </function>
618
+ <!-- <selinux/get_context_list.h> -->
619
+ <define name="SELINUX_DEFAULTUSER" value="&quot;user_u&quot;"/>
620
+ <!-- https://man7.org/linux/man-pages/man3/get_ordered_context_list.3.html -->
621
+ <!-- int get_ordered_context_list(const char *user, const char *fromcon, char *** list); -->
622
+ <function name="get_ordered_context_list">
623
+ <returnValue type="int"/>
624
+ <noreturn>false</noreturn>
625
+ <use-retval/>
626
+ <leak-ignore/>
627
+ <arg nr="1" direction="in">
628
+ <not-null/>
629
+ <not-uninit/>
630
+ <strz/>
631
+ </arg>
632
+ <arg nr="2" direction="in">
633
+ <not-uninit/>
634
+ <strz/>
635
+ </arg>
636
+ <arg nr="3" direction="out">
637
+ <not-null/>
638
+ </arg>
639
+ </function>
640
+ <memory>
641
+ <alloc init="true" arg="3">get_ordered_context_list</alloc>
642
+ <dealloc>freeconary</dealloc>
643
+ </memory>
644
+ <!-- int get_ordered_context_list_with_level(const char *user, const char *level, const char *fromcon, char *** list); -->
645
+ <function name="get_ordered_context_list_with_level">
646
+ <returnValue type="int"/>
647
+ <noreturn>false</noreturn>
648
+ <use-retval/>
649
+ <leak-ignore/>
650
+ <arg nr="1" direction="in">
651
+ <not-null/>
652
+ <not-uninit/>
653
+ <strz/>
654
+ </arg>
655
+ <arg nr="2" direction="in">
656
+ <not-uninit/>
657
+ <strz/>
658
+ </arg>
659
+ <arg nr="3" direction="in">
660
+ <not-uninit/>
661
+ <strz/>
662
+ </arg>
663
+ <arg nr="4" direction="out">
664
+ <not-null/>
665
+ </arg>
666
+ </function>
667
+ <memory>
668
+ <alloc init="true" arg="4">get_ordered_context_list_with_level</alloc>
669
+ <dealloc>freeconary</dealloc>
670
+ </memory>
671
+ <!-- int get_default_context(const char *user, const char *fromcon, char ** newcon); -->
672
+ <function name="get_default_context">
673
+ <returnValue type="int"/>
674
+ <noreturn>false</noreturn>
675
+ <use-retval/>
676
+ <leak-ignore/>
677
+ <arg nr="1" direction="in">
678
+ <not-null/>
679
+ <not-uninit/>
680
+ <strz/>
681
+ </arg>
682
+ <arg nr="2" direction="in">
683
+ <not-uninit/>
684
+ <strz/>
685
+ </arg>
686
+ <arg nr="3" direction="out">
687
+ <not-null/>
688
+ </arg>
689
+ </function>
690
+ <memory>
691
+ <alloc init="true" arg="3">get_default_context</alloc>
692
+ <dealloc>freecon</dealloc>
693
+ </memory>
694
+ <!-- int get_default_context_with_level(const char *user, const char *level, const char *fromcon, char ** newcon); -->
695
+ <function name="get_default_context_with_level">
696
+ <returnValue type="int"/>
697
+ <noreturn>false</noreturn>
698
+ <use-retval/>
699
+ <leak-ignore/>
700
+ <arg nr="1" direction="in">
701
+ <not-null/>
702
+ <not-uninit/>
703
+ <strz/>
704
+ </arg>
705
+ <arg nr="2" direction="in">
706
+ <not-uninit/>
707
+ <strz/>
708
+ </arg>
709
+ <arg nr="3" direction="in">
710
+ <not-uninit/>
711
+ <strz/>
712
+ </arg>
713
+ <arg nr="4" direction="out">
714
+ <not-null/>
715
+ </arg>
716
+ </function>
717
+ <memory>
718
+ <alloc init="true" arg="4">get_default_context_with_level</alloc>
719
+ <dealloc>freecon</dealloc>
720
+ </memory>
721
+ <!-- int get_default_context_with_role(const char *user, const char *role, const char *fromcon, char ** newcon); -->
722
+ <function name="get_default_context_with_role">
723
+ <returnValue type="int"/>
724
+ <noreturn>false</noreturn>
725
+ <use-retval/>
726
+ <leak-ignore/>
727
+ <arg nr="1" direction="in">
728
+ <not-null/>
729
+ <not-uninit/>
730
+ <strz/>
731
+ </arg>
732
+ <arg nr="2" direction="in">
733
+ <not-null/>
734
+ <not-uninit/>
735
+ <strz/>
736
+ </arg>
737
+ <arg nr="3" direction="in">
738
+ <not-uninit/>
739
+ <strz/>
740
+ </arg>
741
+ <arg nr="4" direction="out">
742
+ <not-null/>
743
+ </arg>
744
+ </function>
745
+ <memory>
746
+ <alloc init="true" arg="4">get_default_context_with_role</alloc>
747
+ <dealloc>freecon</dealloc>
748
+ </memory>
749
+ <!-- int get_default_context_with_rolelevel(const char *user, const char *role, const char *level, const char *fromcon, char ** newcon); -->
750
+ <function name="get_default_context_with_rolelevel">
751
+ <returnValue type="int"/>
752
+ <noreturn>false</noreturn>
753
+ <use-retval/>
754
+ <leak-ignore/>
755
+ <arg nr="1" direction="in">
756
+ <not-null/>
757
+ <not-uninit/>
758
+ <strz/>
759
+ </arg>
760
+ <arg nr="2" direction="in">
761
+ <not-null/>
762
+ <not-uninit/>
763
+ <strz/>
764
+ </arg>
765
+ <arg nr="3" direction="in">
766
+ <not-uninit/>
767
+ <strz/>
768
+ </arg>
769
+ <arg nr="4" direction="in">
770
+ <not-uninit/>
771
+ <strz/>
772
+ </arg>
773
+ <arg nr="5" direction="out">
774
+ <not-null/>
775
+ </arg>
776
+ </function>
777
+ <memory>
778
+ <alloc init="true" arg="5">get_default_context_with_rolelevel</alloc>
779
+ <dealloc>freecon</dealloc>
780
+ </memory>
781
+ <!-- int query_user_context(char ** list, char ** newcon); -->
782
+ <function name="query_user_context">
783
+ <returnValue type="int"/>
784
+ <noreturn>false</noreturn>
785
+ <use-retval/>
786
+ <leak-ignore/>
787
+ <arg nr="1" direction="in">
788
+ <not-null/>
789
+ <not-uninit/>
790
+ </arg>
791
+ <arg nr="2" direction="out">
792
+ <not-null/>
793
+ </arg>
794
+ </function>
795
+ <memory>
796
+ <alloc init="true" arg="2">query_user_context</alloc>
797
+ <dealloc>freecon</dealloc>
798
+ </memory>
799
+ <!-- int manual_user_enter_context(const char *user, char ** newcon); -->
800
+ <function name="manual_user_enter_context">
801
+ <returnValue type="int"/>
802
+ <noreturn>false</noreturn>
803
+ <use-retval/>
804
+ <leak-ignore/>
805
+ <arg nr="1" direction="in">
806
+ <not-null/>
807
+ <not-uninit/>
808
+ <strz/>
809
+ </arg>
810
+ <arg nr="2" direction="out">
811
+ <not-null/>
812
+ </arg>
813
+ </function>
814
+ <memory>
815
+ <alloc init="true" arg="2">manual_user_enter_context</alloc>
816
+ <dealloc>freecon</dealloc>
817
+ </memory>
818
+ <!-- <selinux/avc.h> -->
819
+ <podtype name="security_id"/>
820
+ <define name="SECSID_WILD" value="NULL"/>
821
+ <define name="AVC_OPT_UNUSED" value="0"/>
822
+ <define name="AVC_OPT_SETENFORCE" value="1"/>
823
+ <define name="AVC_CALLBACK_GRANT" value="1"/>
824
+ <define name="AVC_CALLBACK_TRY_REVOKE" value="2"/>
825
+ <define name="AVC_CALLBACK_REVOKE" value="4"/>
826
+ <define name="AVC_CALLBACK_RESET" value="8"/>
827
+ <define name="AVC_CALLBACK_AUDITALLOW_ENABLE" value="16"/>
828
+ <define name="AVC_CALLBACK_AUDITALLOW_DISABLE" value="32"/>
829
+ <define name="AVC_CALLBACK_AUDITDENY_ENABLE" value="64"/>
830
+ <define name="AVC_CALLBACK_AUDITDENY_DISABLE" value="128"/>
831
+ <define name="AVC_CACHE_STATS" value="1"/>
832
+ <!-- https://man7.org/linux/man-pages/man3/avc_context_to_sid.3.html -->
833
+ <!-- int avc_sid_to_context(security_id_t sid, char ** ctx); -->
834
+ <function name="avc_sid_to_context">
835
+ <returnValue type="int"/>
836
+ <noreturn>false</noreturn>
837
+ <use-retval/>
838
+ <leak-ignore/>
839
+ <arg nr="1" direction="in">
840
+ <not-uninit/>
841
+ </arg>
842
+ <arg nr="2" direction="out">
843
+ <not-null/>
844
+ </arg>
845
+ </function>
846
+ <memory>
847
+ <alloc init="true" arg="2">avc_sid_to_context</alloc>
848
+ <dealloc>freecon</dealloc>
849
+ </memory>
850
+ <!-- int avc_sid_to_context_raw(security_id_t sid, char ** ctx); -->
851
+ <function name="avc_sid_to_context_raw">
852
+ <returnValue type="int"/>
853
+ <noreturn>false</noreturn>
854
+ <use-retval/>
855
+ <leak-ignore/>
856
+ <arg nr="1" direction="in">
857
+ <not-uninit/>
858
+ <not-bool/>
859
+ </arg>
860
+ <arg nr="2" direction="out">
861
+ <not-null/>
862
+ </arg>
863
+ </function>
864
+ <memory>
865
+ <alloc init="true" arg="2">avc_sid_to_context</alloc>
866
+ <dealloc>freecon</dealloc>
867
+ </memory>
868
+ <!-- int avc_context_to_sid(const char * ctx, security_id_t * sid); -->
869
+ <function name="avc_context_to_sid">
870
+ <returnValue type="int"/>
871
+ <noreturn>false</noreturn>
872
+ <use-retval/>
873
+ <leak-ignore/>
874
+ <arg nr="1" direction="in">
875
+ <not-uninit/>
876
+ <not-null/>
877
+ <strz/>
878
+ </arg>
879
+ <arg nr="2" direction="out">
880
+ <not-null/>
881
+ </arg>
882
+ </function>
883
+ <!-- int avc_context_to_sid_raw(const char * ctx, security_id_t * sid); -->
884
+ <function name="avc_context_to_sid_raw">
885
+ <returnValue type="int"/>
886
+ <noreturn>false</noreturn>
887
+ <use-retval/>
888
+ <leak-ignore/>
889
+ <arg nr="1" direction="in">
890
+ <not-uninit/>
891
+ <not-null/>
892
+ <strz/>
893
+ </arg>
894
+ <arg nr="2" direction="out">
895
+ <not-null/>
896
+ </arg>
897
+ </function>
898
+ <!-- int avc_get_initial_sid(const char *name, security_id_t * sid); -->
899
+ <function name="avc_get_initial_sid">
900
+ <returnValue type="int"/>
901
+ <noreturn>false</noreturn>
902
+ <use-retval/>
903
+ <leak-ignore/>
904
+ <arg nr="1" direction="in">
905
+ <not-uninit/>
906
+ <not-null/>
907
+ <strz/>
908
+ </arg>
909
+ <arg nr="2" direction="out">
910
+ <not-null/>
911
+ </arg>
912
+ </function>
913
+ <!-- int sidget(security_id_t sid); -->
914
+ <function name="sidget">
915
+ <returnValue type="int"/>
916
+ <noreturn>false</noreturn>
917
+ <use-retval/>
918
+ <leak-ignore/>
919
+ <arg nr="1" direction="in">
920
+ <not-uninit/>
921
+ <not-bool/>
922
+ </arg>
923
+ </function>
924
+ <!-- int sidput(security_id_t sid); -->
925
+ <function name="sidput">
926
+ <returnValue type="int"/>
927
+ <noreturn>false</noreturn>
928
+ <use-retval/>
929
+ <leak-ignore/>
930
+ <arg nr="1" direction="in">
931
+ <not-uninit/>
932
+ <not-bool/>
933
+ </arg>
934
+ </function>
935
+ <!-- https://man7.org/linux/man-pages/man3/avc_init.3.html -->
936
+ <!-- int avc_init(const char *msgprefix, const struct avc_memory_callback *mem_callbacks, const struct avc_log_callback *log_callbacks, const struct avc_thread_callback *thread_callbacks,
937
+ const struct avc_lock_callback *lock_callbacks) -->
938
+ <function name="avc_init">
939
+ <returnValue type="int"/>
940
+ <noreturn>false</noreturn>
941
+ <use-retval/>
942
+ <leak-ignore/>
943
+ <arg nr="1" direction="in">
944
+ <not-uninit/>
945
+ <strz/>
946
+ </arg>
947
+ <arg nr="2" direction="in">
948
+ <not-uninit/>
949
+ <not-bool/>
950
+ </arg>
951
+ <arg nr="3" direction="in">
952
+ <not-uninit/>
953
+ <not-bool/>
954
+ </arg>
955
+ <arg nr="4" direction="in">
956
+ <not-uninit/>
957
+ <not-bool/>
958
+ </arg>
959
+ <arg nr="5" direction="in">
960
+ <not-uninit/>
961
+ <not-bool/>
962
+ </arg>
963
+ </function>
964
+ <!-- https://man7.org/linux/man-pages/man3/avc_open.3.html -->
965
+ <!-- int avc_open(struct selinux_opt *opts, unsigned nopts); -->
966
+ <function name="avc_open">
967
+ <returnValue type="int"/>
968
+ <noreturn>false</noreturn>
969
+ <use-retval/>
970
+ <leak-ignore/>
971
+ <arg nr="1" direction="in">
972
+ <not-uninit/>
973
+ <not-bool/>
974
+ <minsize type="argvalue" arg="2"/>
975
+ </arg>
976
+ <arg nr="2" direction="in">
977
+ <not-uninit/>
978
+ <not-bool/>
979
+ </arg>
980
+ </function>
981
+ <!-- void avc_cleanup(void); -->
982
+ <function name="avc_cleanup">
983
+ <returnValue type="void"/>
984
+ <noreturn>false</noreturn>
985
+ <leak-ignore/>
986
+ </function>
987
+ <!-- int avc_reset(void); -->
988
+ <function name="avc_reset">
989
+ <returnValue type="int"/>
990
+ <noreturn>false</noreturn>
991
+ <use-retval/>
992
+ <leak-ignore/>
993
+ </function>
994
+ <!-- void avc_destroy(void); -->
995
+ <function name="avc_destroy">
996
+ <returnValue type="void"/>
997
+ <noreturn>false</noreturn>
998
+ <leak-ignore/>
999
+ </function>
1000
+ <!-- https://man7.org/linux/man-pages/man3/avc_has_perm.3.html -->
1001
+ <!-- int avc_has_perm_noaudit(security_id_t ssid, security_id_t tsid, security_class_t tclass, access_vector_t requested, struct avc_entry_ref *aeref, struct av_decision *avd); -->
1002
+ <function name="avc_has_perm_noaudit">
1003
+ <returnValue type="int"/>
1004
+ <noreturn>false</noreturn>
1005
+ <use-retval/>
1006
+ <leak-ignore/>
1007
+ <arg nr="1" direction="in">
1008
+ <not-uninit/>
1009
+ <not-bool/>
1010
+ </arg>
1011
+ <arg nr="2" direction="in">
1012
+ <not-uninit/>
1013
+ <not-bool/>
1014
+ </arg>
1015
+ <arg nr="3" direction="in">
1016
+ <not-uninit/>
1017
+ <not-bool/>
1018
+ </arg>
1019
+ <arg nr="4" direction="in">
1020
+ <not-uninit/>
1021
+ <not-bool/>
1022
+ </arg>
1023
+ <arg nr="5" direction="inout">
1024
+ <not-uninit/>
1025
+ <not-bool/>
1026
+ </arg>
1027
+ <arg nr="6" direction="inout">
1028
+ <not-uninit/>
1029
+ <not-bool/>
1030
+ </arg>
1031
+ </function>
1032
+ <!-- int avc_has_perm(security_id_t ssid, security_id_t tsid, security_class_t tclass, access_vector_t requested, struct avc_entry_ref *aeref, void *auditdata); -->
1033
+ <function name="avc_has_perm">
1034
+ <returnValue type="int"/>
1035
+ <noreturn>false</noreturn>
1036
+ <use-retval/>
1037
+ <leak-ignore/>
1038
+ <arg nr="1" direction="in">
1039
+ <not-uninit/>
1040
+ <not-bool/>
1041
+ </arg>
1042
+ <arg nr="2" direction="in">
1043
+ <not-uninit/>
1044
+ <not-bool/>
1045
+ </arg>
1046
+ <arg nr="3" direction="in">
1047
+ <not-uninit/>
1048
+ <not-bool/>
1049
+ </arg>
1050
+ <arg nr="4" direction="in">
1051
+ <not-uninit/>
1052
+ <not-bool/>
1053
+ </arg>
1054
+ <arg nr="5" direction="inout">
1055
+ <not-uninit/>
1056
+ <not-bool/>
1057
+ </arg>
1058
+ <arg nr="6" direction="inout">
1059
+ <not-uninit/>
1060
+ <not-bool/>
1061
+ </arg>
1062
+ </function>
1063
+ <!-- void avc_audit(security_id_t ssid, security_id_t tsid, security_class_t tclass, access_vector_t requested, struct av_decision *avd, int result, void *auditdata); -->
1064
+ <function name="avc_audit">
1065
+ <returnValue type="void"/>
1066
+ <noreturn>false</noreturn>
1067
+ <leak-ignore/>
1068
+ <arg nr="1" direction="in">
1069
+ <not-uninit/>
1070
+ <not-bool/>
1071
+ </arg>
1072
+ <arg nr="2" direction="in">
1073
+ <not-uninit/>
1074
+ <not-bool/>
1075
+ </arg>
1076
+ <arg nr="3" direction="in">
1077
+ <not-uninit/>
1078
+ <not-bool/>
1079
+ </arg>
1080
+ <arg nr="4" direction="in">
1081
+ <not-uninit/>
1082
+ <not-bool/>
1083
+ </arg>
1084
+ <arg nr="5" direction="inout">
1085
+ <not-uninit/>
1086
+ <not-bool/>
1087
+ </arg>
1088
+ <arg nr="6" direction="in">
1089
+ <not-uninit/>
1090
+ <not-bool/>
1091
+ </arg>
1092
+ <arg nr="7" direction="inout">
1093
+ <not-uninit/>
1094
+ <not-bool/>
1095
+ </arg>
1096
+ </function>
1097
+ <!-- https://man7.org/linux/man-pages/man3/avc_compute_create.3.html -->
1098
+ <!-- int avc_compute_create(security_id_t ssid, security_id_t tsid, security_class_t tclass, security_id_t * newsid); -->
1099
+ <function name="avc_compute_create">
1100
+ <returnValue type="int"/>
1101
+ <noreturn>false</noreturn>
1102
+ <use-retval/>
1103
+ <leak-ignore/>
1104
+ <arg nr="1" direction="in">
1105
+ <not-uninit/>
1106
+ <not-bool/>
1107
+ </arg>
1108
+ <arg nr="2" direction="in">
1109
+ <not-uninit/>
1110
+ <not-bool/>
1111
+ </arg>
1112
+ <arg nr="3" direction="in">
1113
+ <not-uninit/>
1114
+ <not-bool/>
1115
+ </arg>
1116
+ <arg nr="4" direction="out">
1117
+ <not-null/>
1118
+ </arg>
1119
+ </function>
1120
+ <!-- int avc_compute_member(security_id_t ssid, security_id_t tsid, security_class_t tclass, security_id_t * newsid); -->
1121
+ <function name="avc_compute_member">
1122
+ <returnValue type="int"/>
1123
+ <noreturn>false</noreturn>
1124
+ <use-retval/>
1125
+ <leak-ignore/>
1126
+ <arg nr="1" direction="in">
1127
+ <not-uninit/>
1128
+ <not-bool/>
1129
+ </arg>
1130
+ <arg nr="2" direction="in">
1131
+ <not-uninit/>
1132
+ <not-bool/>
1133
+ </arg>
1134
+ <arg nr="3" direction="in">
1135
+ <not-uninit/>
1136
+ <not-bool/>
1137
+ </arg>
1138
+ <arg nr="4" direction="out">
1139
+ <not-null/>
1140
+ </arg>
1141
+ </function>
1142
+ <!-- https://man7.org/linux/man-pages/man3/avc_add_callback.3.html -->
1143
+ <!-- int avc_add_callback(int (*callback) (uint32_t event, security_id_t ssid, security_id_t tsid, security_class_t tclass, access_vector_t perms, access_vector_t * out_retained), uint32_t events, security_id_t ssid, security_id_t tsid, security_class_t tclass,
1144
+ access_vector_t perms); -->
1145
+ <function name="avc_add_callback">
1146
+ <returnValue type="int"/>
1147
+ <noreturn>false</noreturn>
1148
+ <use-retval/>
1149
+ <leak-ignore/>
1150
+ <arg nr="1" direction="in">
1151
+ <not-uninit/>
1152
+ <not-bool/>
1153
+ </arg>
1154
+ <arg nr="2" direction="in">
1155
+ <not-uninit/>
1156
+ <not-bool/>
1157
+ </arg>
1158
+ <arg nr="3" direction="in">
1159
+ <not-uninit/>
1160
+ <not-bool/>
1161
+ </arg>
1162
+ <arg nr="4" direction="in">
1163
+ <not-uninit/>
1164
+ <not-bool/>
1165
+ </arg>
1166
+ <arg nr="5" direction="in">
1167
+ <not-uninit/>
1168
+ <not-bool/>
1169
+ </arg>
1170
+ <arg nr="6" direction="in">
1171
+ <not-uninit/>
1172
+ <not-bool/>
1173
+ </arg>
1174
+ </function>
1175
+ <!-- https://man7.org/linux/man-pages/man3/avc_cache_stats.3.html -->
1176
+ <!-- void avc_cache_stats(struct avc_cache_stats *stats); -->
1177
+ <function name="avc_cache_stats">
1178
+ <returnValue type="void"/>
1179
+ <noreturn>false</noreturn>
1180
+ <leak-ignore/>
1181
+ <arg nr="1" direction="out">
1182
+ <not-null/>
1183
+ <not-bool/>
1184
+ </arg>
1185
+ </function>
1186
+ <!-- void avc_av_stats(void); -->
1187
+ <function name="avc_av_stats">
1188
+ <returnValue type="void"/>
1189
+ <noreturn>false</noreturn>
1190
+ <leak-ignore/>
1191
+ </function>
1192
+ <!-- void avc_sid_stats(void); -->
1193
+ <function name="avc_sid_stats">
1194
+ <returnValue type="void"/>
1195
+ <noreturn>false</noreturn>
1196
+ <leak-ignore/>
1197
+ </function>
1198
+ <!-- https://man7.org/linux/man-pages/man3/avc_netlink_loop.3.html -->
1199
+ <!-- int avc_netlink_open(int blocking); -->
1200
+ <function name="avc_netlink_open">
1201
+ <returnValue type="int"/>
1202
+ <noreturn>false</noreturn>
1203
+ <use-retval/>
1204
+ <leak-ignore/>
1205
+ <arg nr="1" direction="in">
1206
+ <not-uninit/>
1207
+ <valid>0,1</valid>
1208
+ </arg>
1209
+ </function>
1210
+ <!-- void avc_netlink_loop(void); -->
1211
+ <function name="avc_netlink_loop">
1212
+ <returnValue type="void"/>
1213
+ <noreturn>false</noreturn>
1214
+ <leak-ignore/>
1215
+ </function>
1216
+ <!-- void avc_netlink_close(void); -->
1217
+ <function name="avc_netlink_close">
1218
+ <returnValue type="void"/>
1219
+ <noreturn>false</noreturn>
1220
+ <leak-ignore/>
1221
+ </function>
1222
+ <!-- int avc_netlink_acquire_fd(void); -->
1223
+ <function name="avc_netlink_acquire_fd">
1224
+ <returnValue type="int"/>
1225
+ <noreturn>false</noreturn>
1226
+ <use-retval/>
1227
+ <leak-ignore/>
1228
+ </function>
1229
+ <!-- void avc_netlink_release_fd(void); -->
1230
+ <function name="avc_netlink_release_fd">
1231
+ <returnValue type="void"/>
1232
+ <noreturn>false</noreturn>
1233
+ <leak-ignore/>
1234
+ </function>
1235
+ <!-- int avc_netlink_check_nb(void); -->
1236
+ <function name="avc_netlink_check_nb">
1237
+ <returnValue type="int"/>
1238
+ <noreturn>false</noreturn>
1239
+ <use-retval/>
1240
+ <leak-ignore/>
1241
+ </function>
1242
+ <!-- https://man7.org/linux/man-pages/man3/selinux_status_open.3.html -->
1243
+ <!-- int selinux_status_open(int fallback); -->
1244
+ <function name="selinux_status_open">
1245
+ <returnValue type="int"/>
1246
+ <noreturn>false</noreturn>
1247
+ <use-retval/>
1248
+ <leak-ignore/>
1249
+ <arg nr="1" direction="in">
1250
+ <not-uninit/>
1251
+ <valid>0,1</valid>
1252
+ </arg>
1253
+ </function>
1254
+ <!-- void selinux_status_close(void); -->
1255
+ <function name="selinux_status_close">
1256
+ <noreturn>false</noreturn>
1257
+ </function>
1258
+ <!-- TODO: somehow model hidden resource
1259
+ <resource>
1260
+ <alloc init="true">selinux_status_open</alloc>
1261
+ <dealloc>selinux_status_close</dealloc>
1262
+ </resource> -->
1263
+ <!-- int selinux_status_updated(void); -->
1264
+ <function name="selinux_status_updated">
1265
+ <returnValue type="int"/>
1266
+ <noreturn>false</noreturn>
1267
+ <use-retval/>
1268
+ <leak-ignore/>
1269
+ </function>
1270
+ <!-- int selinux_status_getenforce(void); -->
1271
+ <function name="selinux_status_getenforce">
1272
+ <returnValue type="int"/>
1273
+ <noreturn>false</noreturn>
1274
+ <use-retval/>
1275
+ <leak-ignore/>
1276
+ </function>
1277
+ <!-- int selinux_status_policyload(void); -->
1278
+ <function name="selinux_status_policyload">
1279
+ <returnValue type="int"/>
1280
+ <noreturn>false</noreturn>
1281
+ <use-retval/>
1282
+ <leak-ignore/>
1283
+ </function>
1284
+ <!-- int selinux_status_deny_unknown(void); -->
1285
+ <function name="selinux_status_deny_unknown">
1286
+ <returnValue type="int"/>
1287
+ <noreturn>false</noreturn>
1288
+ <use-retval/>
1289
+ <leak-ignore/>
1290
+ </function>
1291
+ <!-- <selinux/selinux.h> -->
1292
+ <podtype name="security_context_t"/>
1293
+ <podtype name="access_vector_t"/>
1294
+ <podtype name="security_class_t"/>
1295
+ <podtype name="av_decision"/>
1296
+ <podtype name="selinux_opt"/>
1297
+ <podtype name="selinux_callback"/>
1298
+ <podtype name="SELboolean"/>
1299
+ <podtype name="security_class_mapping"/>
1300
+ <define name="SELINUX_AVD_FLAGS_PERMISSIVE" value="0x0001"/>
1301
+ <define name="SELINUX_CB_LOG" value="0"/>
1302
+ <define name="SELINUX_CB_AUDIT" value="1"/>
1303
+ <define name="SELINUX_CB_VALIDATE" value="2"/>
1304
+ <define name="SELINUX_CB_SETENFORCE" value="3"/>
1305
+ <define name="SELINUX_CB_POLICYLOAD" value="4"/>
1306
+ <define name="SELINUX_ERROR" value="0"/>
1307
+ <define name="SELINUX_WARNING" value="1"/>
1308
+ <define name="SELINUX_INFO" value="2"/>
1309
+ <define name="SELINUX_AVC" value="3"/>
1310
+ <define name="SELINUX_POLICYLOAD" value="4"/>
1311
+ <define name="SELINUX_SETENFORCE" value="5"/>
1312
+ <define name="SELINUX_TRANS_DIR" value="&quot;/var/run/setrans&quot;"/>
1313
+ <define name="MATCHPATHCON_BASEONLY" value="1"/>
1314
+ <define name="MATCHPATHCON_NOTRANS" value="2"/>
1315
+ <define name="MATCHPATHCON_VALIDATE" value="4"/>
1316
+ <!-- https://man7.org/linux/man-pages/man3/is_selinux_enabled.3.html -->
1317
+ <!-- int is_selinux_enabled(void); -->
1318
+ <function name="is_selinux_enabled">
1319
+ <returnValue type="int"/>
1320
+ <noreturn>false</noreturn>
1321
+ <use-retval/>
1322
+ <leak-ignore/>
1323
+ </function>
1324
+ <!-- int is_selinux_mls_enabled(void); -->
1325
+ <function name="is_selinux_mls_enabled">
1326
+ <returnValue type="int"/>
1327
+ <noreturn>false</noreturn>
1328
+ <use-retval/>
1329
+ <leak-ignore/>
1330
+ </function>
1331
+ <!-- https://man7.org/linux/man-pages/man3/getcon.3.html -->
1332
+ <!-- void freecon(char * con); -->
1333
+ <function name="freecon">
1334
+ <returnValue type="void"/>
1335
+ <noreturn>false</noreturn>
1336
+ <arg nr="1" direction="in">
1337
+ <not-uninit/>
1338
+ </arg>
1339
+ </function>
1340
+ <!-- void freeconary(char ** con); -->
1341
+ <function name="freeconary">
1342
+ <returnValue type="void"/>
1343
+ <noreturn>false</noreturn>
1344
+ <arg nr="1" direction="in">
1345
+ <not-uninit/>
1346
+ </arg>
1347
+ </function>
1348
+ <!-- int getcon(char ** con); -->
1349
+ <function name="getcon">
1350
+ <returnValue type="int"/>
1351
+ <noreturn>false</noreturn>
1352
+ <use-retval/>
1353
+ <leak-ignore/>
1354
+ <arg nr="1" direction="out">
1355
+ <not-null/>
1356
+ </arg>
1357
+ </function>
1358
+ <memory>
1359
+ <alloc init="true" arg="1">getcon</alloc>
1360
+ <dealloc>freecon</dealloc>
1361
+ </memory>
1362
+ <!-- int getcon_raw(char ** con); -->
1363
+ <function name="getcon_raw">
1364
+ <returnValue type="int"/>
1365
+ <noreturn>false</noreturn>
1366
+ <use-retval/>
1367
+ <leak-ignore/>
1368
+ <arg nr="1" direction="out">
1369
+ <not-null/>
1370
+ </arg>
1371
+ </function>
1372
+ <memory>
1373
+ <alloc init="true" arg="1">getcon_raw</alloc>
1374
+ <dealloc>freecon</dealloc>
1375
+ </memory>
1376
+ <!-- int getprevcon(char ** con); -->
1377
+ <function name="getprevcon">
1378
+ <returnValue type="int"/>
1379
+ <noreturn>false</noreturn>
1380
+ <use-retval/>
1381
+ <leak-ignore/>
1382
+ <arg nr="1" direction="out">
1383
+ <not-null/>
1384
+ </arg>
1385
+ </function>
1386
+ <memory>
1387
+ <alloc init="true" arg="1">getprevcon</alloc>
1388
+ <dealloc>freecon</dealloc>
1389
+ </memory>
1390
+ <!-- int getprevcon_raw(char ** con); -->
1391
+ <function name="getprevcon_raw">
1392
+ <returnValue type="int"/>
1393
+ <noreturn>false</noreturn>
1394
+ <use-retval/>
1395
+ <leak-ignore/>
1396
+ <arg nr="1" direction="out">
1397
+ <not-null/>
1398
+ </arg>
1399
+ </function>
1400
+ <memory>
1401
+ <alloc init="true" arg="1">getprevcon_raw</alloc>
1402
+ <dealloc>freecon</dealloc>
1403
+ </memory>
1404
+ <!-- int getexeccon(char ** con); -->
1405
+ <function name="getexeccon">
1406
+ <returnValue type="int"/>
1407
+ <noreturn>false</noreturn>
1408
+ <use-retval/>
1409
+ <leak-ignore/>
1410
+ <arg nr="1" direction="out">
1411
+ <not-null/>
1412
+ </arg>
1413
+ </function>
1414
+ <memory>
1415
+ <alloc init="true" arg="1">getexeccon</alloc>
1416
+ <dealloc>freecon</dealloc>
1417
+ </memory>
1418
+ <!-- int getexeccon_raw(char ** con); -->
1419
+ <function name="getexeccon_raw">
1420
+ <returnValue type="int"/>
1421
+ <noreturn>false</noreturn>
1422
+ <use-retval/>
1423
+ <leak-ignore/>
1424
+ <arg nr="1" direction="out">
1425
+ <not-null/>
1426
+ </arg>
1427
+ </function>
1428
+ <memory>
1429
+ <alloc init="true" arg="1">getexeccon_raw</alloc>
1430
+ <dealloc>freecon</dealloc>
1431
+ </memory>
1432
+ <!-- int getpidcon(pid_t pid, char ** con); -->
1433
+ <function name="getpidcon">
1434
+ <returnValue type="int"/>
1435
+ <noreturn>false</noreturn>
1436
+ <use-retval/>
1437
+ <leak-ignore/>
1438
+ <arg nr="1" direction="in">
1439
+ <not-uninit/>
1440
+ <not-bool/>
1441
+ </arg>
1442
+ <arg nr="2" direction="out">
1443
+ <not-null/>
1444
+ </arg>
1445
+ </function>
1446
+ <memory>
1447
+ <alloc init="true" arg="2">getpidcon</alloc>
1448
+ <dealloc>freecon</dealloc>
1449
+ </memory>
1450
+ <!-- int getpidcon_raw(pid_t pid, char ** con); -->
1451
+ <function name="getpidcon_raw">
1452
+ <returnValue type="int"/>
1453
+ <noreturn>false</noreturn>
1454
+ <use-retval/>
1455
+ <leak-ignore/>
1456
+ <arg nr="1" direction="in">
1457
+ <not-uninit/>
1458
+ <not-bool/>
1459
+ </arg>
1460
+ <arg nr="2" direction="out">
1461
+ <not-null/>
1462
+ </arg>
1463
+ </function>
1464
+ <memory>
1465
+ <alloc init="true" arg="2">getpidcon_raw</alloc>
1466
+ <dealloc>freecon</dealloc>
1467
+ </memory>
1468
+ <!-- int getpidprevcon(pid_t pid, char ** con); -->
1469
+ <function name="getpidprevcon">
1470
+ <returnValue type="int"/>
1471
+ <noreturn>false</noreturn>
1472
+ <use-retval/>
1473
+ <leak-ignore/>
1474
+ <arg nr="1" direction="in">
1475
+ <not-uninit/>
1476
+ <not-bool/>
1477
+ </arg>
1478
+ <arg nr="2" direction="out">
1479
+ <not-null/>
1480
+ </arg>
1481
+ </function>
1482
+ <memory>
1483
+ <alloc init="true" arg="2">getpidprevcon</alloc>
1484
+ <dealloc>freecon</dealloc>
1485
+ </memory>
1486
+ <!-- int getpidprevcon_raw(pid_t pid, char ** con); -->
1487
+ <function name="getpidprevcon_raw">
1488
+ <returnValue type="int"/>
1489
+ <noreturn>false</noreturn>
1490
+ <use-retval/>
1491
+ <leak-ignore/>
1492
+ <arg nr="1" direction="in">
1493
+ <not-uninit/>
1494
+ <not-bool/>
1495
+ </arg>
1496
+ <arg nr="2" direction="out">
1497
+ <not-null/>
1498
+ </arg>
1499
+ </function>
1500
+ <memory>
1501
+ <alloc init="true" arg="2">getpidprevcon_raw</alloc>
1502
+ <dealloc>freecon</dealloc>
1503
+ </memory>
1504
+ <!-- int setcon(const char * con); -->
1505
+ <function name="setcon">
1506
+ <returnValue type="int"/>
1507
+ <noreturn>false</noreturn>
1508
+ <use-retval/>
1509
+ <leak-ignore/>
1510
+ <arg nr="1" direction="in">
1511
+ <not-null/>
1512
+ <not-uninit/>
1513
+ <strz/>
1514
+ </arg>
1515
+ </function>
1516
+ <!-- int setcon_raw(const char * con); -->
1517
+ <function name="setcon_raw">
1518
+ <returnValue type="int"/>
1519
+ <noreturn>false</noreturn>
1520
+ <use-retval/>
1521
+ <leak-ignore/>
1522
+ <arg nr="1" direction="in">
1523
+ <not-null/>
1524
+ <not-uninit/>
1525
+ <strz/>
1526
+ </arg>
1527
+ </function>
1528
+ <!-- int setexeccon(const char * con); -->
1529
+ <function name="setexeccon">
1530
+ <returnValue type="int"/>
1531
+ <noreturn>false</noreturn>
1532
+ <use-retval/>
1533
+ <leak-ignore/>
1534
+ <arg nr="1" direction="in">
1535
+ <not-uninit/>
1536
+ <strz/>
1537
+ </arg>
1538
+ </function>
1539
+ <!-- int setexeccon_raw(const char * con); -->
1540
+ <function name="setexeccon_raw">
1541
+ <returnValue type="int"/>
1542
+ <noreturn>false</noreturn>
1543
+ <use-retval/>
1544
+ <leak-ignore/>
1545
+ <arg nr="1" direction="in">
1546
+ <not-uninit/>
1547
+ <strz/>
1548
+ </arg>
1549
+ </function>
1550
+ <!-- int setexecfilecon(const char *filename, const char *fallback_type); -->
1551
+ <function name="setexecfilecon">
1552
+ <returnValue type="int"/>
1553
+ <noreturn>false</noreturn>
1554
+ <use-retval/>
1555
+ <leak-ignore/>
1556
+ <arg nr="1" direction="in">
1557
+ <not-uninit/>
1558
+ <not-null/>
1559
+ <strz/>
1560
+ </arg>
1561
+ <arg nr="2" direction="in">
1562
+ <not-uninit/>
1563
+ <not-null/>
1564
+ <strz/>
1565
+ </arg>
1566
+ </function>
1567
+ <!-- int getfscreatecon(char ** con); -->
1568
+ <function name="getfscreatecon">
1569
+ <returnValue type="int"/>
1570
+ <noreturn>false</noreturn>
1571
+ <use-retval/>
1572
+ <leak-ignore/>
1573
+ <arg nr="1" direction="out">
1574
+ <not-null/>
1575
+ </arg>
1576
+ </function>
1577
+ <memory>
1578
+ <alloc init="true" arg="1">getfscreatecon</alloc>
1579
+ <dealloc>freecon</dealloc>
1580
+ </memory>
1581
+ <!-- int getfscreatecon_raw(char ** con); -->
1582
+ <function name="getfscreatecon_raw">
1583
+ <returnValue type="int"/>
1584
+ <noreturn>false</noreturn>
1585
+ <use-retval/>
1586
+ <leak-ignore/>
1587
+ <arg nr="1" direction="out">
1588
+ <not-null/>
1589
+ </arg>
1590
+ </function>
1591
+ <memory>
1592
+ <alloc init="true" arg="1">getfscreatecon_raw</alloc>
1593
+ <dealloc>freecon</dealloc>
1594
+ </memory>
1595
+ <!-- int setfscreatecon(const char * con); -->
1596
+ <function name="setfscreatecon">
1597
+ <returnValue type="int"/>
1598
+ <noreturn>false</noreturn>
1599
+ <use-retval/>
1600
+ <leak-ignore/>
1601
+ <arg nr="1" direction="in">
1602
+ <not-uninit/>
1603
+ <strz/>
1604
+ </arg>
1605
+ </function>
1606
+ <!-- int setfscreatecon_raw(const char * con); -->
1607
+ <function name="setfscreatecon_raw">
1608
+ <returnValue type="int"/>
1609
+ <noreturn>false</noreturn>
1610
+ <use-retval/>
1611
+ <leak-ignore/>
1612
+ <arg nr="1" direction="in">
1613
+ <not-uninit/>
1614
+ <strz/>
1615
+ </arg>
1616
+ </function>
1617
+ <!-- int getkeycreatecon(char ** con); -->
1618
+ <function name="getkeycreatecon">
1619
+ <returnValue type="int"/>
1620
+ <noreturn>false</noreturn>
1621
+ <use-retval/>
1622
+ <leak-ignore/>
1623
+ <arg nr="1" direction="out">
1624
+ <not-null/>
1625
+ </arg>
1626
+ </function>
1627
+ <memory>
1628
+ <alloc init="true" arg="1">getkeycreatecon</alloc>
1629
+ <dealloc>freecon</dealloc>
1630
+ </memory>
1631
+ <!-- int getkeycreatecon_raw(char ** con); -->
1632
+ <function name="getkeycreatecon_raw">
1633
+ <returnValue type="int"/>
1634
+ <noreturn>false</noreturn>
1635
+ <use-retval/>
1636
+ <leak-ignore/>
1637
+ <arg nr="1" direction="out">
1638
+ <not-null/>
1639
+ </arg>
1640
+ </function>
1641
+ <memory>
1642
+ <alloc init="true" arg="1">getkeycreatecon_raw</alloc>
1643
+ <dealloc>freecon</dealloc>
1644
+ </memory>
1645
+ <!-- int setkeycreatecon(const char * con); -->
1646
+ <function name="setkeycreatecon">
1647
+ <returnValue type="int"/>
1648
+ <noreturn>false</noreturn>
1649
+ <use-retval/>
1650
+ <leak-ignore/>
1651
+ <arg nr="1" direction="in">
1652
+ <not-uninit/>
1653
+ <strz/>
1654
+ </arg>
1655
+ </function>
1656
+ <!-- int setkeycreatecon_raw(const char * con); -->
1657
+ <function name="setkeycreatecon_raw">
1658
+ <returnValue type="int"/>
1659
+ <noreturn>false</noreturn>
1660
+ <use-retval/>
1661
+ <leak-ignore/>
1662
+ <arg nr="1" direction="in">
1663
+ <not-uninit/>
1664
+ <strz/>
1665
+ </arg>
1666
+ </function>
1667
+ <!-- int getsockcreatecon(char ** con); -->
1668
+ <function name="getsockcreatecon">
1669
+ <returnValue type="int"/>
1670
+ <noreturn>false</noreturn>
1671
+ <use-retval/>
1672
+ <leak-ignore/>
1673
+ <arg nr="1" direction="out">
1674
+ <not-null/>
1675
+ </arg>
1676
+ </function>
1677
+ <memory>
1678
+ <alloc init="true" arg="1">getsockcreatecon</alloc>
1679
+ <dealloc>freecon</dealloc>
1680
+ </memory>
1681
+ <!-- int getsockcreatecon_raw(char ** con); -->
1682
+ <function name="getsockcreatecon_raw">
1683
+ <returnValue type="int"/>
1684
+ <noreturn>false</noreturn>
1685
+ <use-retval/>
1686
+ <leak-ignore/>
1687
+ <arg nr="1" direction="out">
1688
+ <not-null/>
1689
+ </arg>
1690
+ </function>
1691
+ <memory>
1692
+ <alloc init="true" arg="1">getsockcreatecon_raw</alloc>
1693
+ <dealloc>freecon</dealloc>
1694
+ </memory>
1695
+ <!-- int setsockcreatecon(const char * con); -->
1696
+ <function name="setsockcreatecon">
1697
+ <returnValue type="int"/>
1698
+ <noreturn>false</noreturn>
1699
+ <use-retval/>
1700
+ <leak-ignore/>
1701
+ <arg nr="1" direction="in">
1702
+ <not-uninit/>
1703
+ <strz/>
1704
+ </arg>
1705
+ </function>
1706
+ <!-- int setsockcreatecon_raw(const char * con); -->
1707
+ <function name="setsockcreatecon_raw">
1708
+ <returnValue type="int"/>
1709
+ <noreturn>false</noreturn>
1710
+ <use-retval/>
1711
+ <leak-ignore/>
1712
+ <arg nr="1" direction="in">
1713
+ <not-uninit/>
1714
+ <strz/>
1715
+ </arg>
1716
+ </function>
1717
+ <!-- int getpeercon(int fd, char ** con); -->
1718
+ <function name="getpeercon">
1719
+ <returnValue type="int"/>
1720
+ <noreturn>false</noreturn>
1721
+ <use-retval/>
1722
+ <leak-ignore/>
1723
+ <arg nr="1" direction="in">
1724
+ <not-uninit/>
1725
+ <not-bool/>
1726
+ <valid>0:</valid>
1727
+ </arg>
1728
+ <arg nr="2" direction="out">
1729
+ <not-null/>
1730
+ </arg>
1731
+ </function>
1732
+ <memory>
1733
+ <alloc init="true" arg="2">getpeercon</alloc>
1734
+ <dealloc>freecon</dealloc>
1735
+ </memory>
1736
+ <!-- int getpeercon_raw(int fd, char ** con); -->
1737
+ <function name="getpeercon_raw">
1738
+ <returnValue type="int"/>
1739
+ <noreturn>false</noreturn>
1740
+ <use-retval/>
1741
+ <leak-ignore/>
1742
+ <arg nr="1" direction="in">
1743
+ <not-uninit/>
1744
+ <not-bool/>
1745
+ <valid>0:</valid>
1746
+ </arg>
1747
+ <arg nr="2" direction="out">
1748
+ <not-null/>
1749
+ </arg>
1750
+ </function>
1751
+ <memory>
1752
+ <alloc init="true" arg="2">getpeercon_raw</alloc>
1753
+ <dealloc>freecon</dealloc>
1754
+ </memory>
1755
+ <!-- https://man7.org/linux/man-pages/man3/getfilecon.3.html -->
1756
+ <!-- int getfilecon(const char *path, char ** con); -->
1757
+ <function name="getfilecon">
1758
+ <returnValue type="int"/>
1759
+ <noreturn>false</noreturn>
1760
+ <use-retval/>
1761
+ <leak-ignore/>
1762
+ <arg nr="1" direction="in">
1763
+ <not-uninit/>
1764
+ <not-null/>
1765
+ <strz/>
1766
+ </arg>
1767
+ <arg nr="2" direction="out">
1768
+ <not-null/>
1769
+ </arg>
1770
+ </function>
1771
+ <memory>
1772
+ <alloc init="true" arg="2">getfilecon</alloc>
1773
+ <dealloc>freecon</dealloc>
1774
+ </memory>
1775
+ <!-- int getfilecon_raw(const char *path, char ** con); -->
1776
+ <function name="getfilecon_raw">
1777
+ <returnValue type="int"/>
1778
+ <noreturn>false</noreturn>
1779
+ <use-retval/>
1780
+ <leak-ignore/>
1781
+ <arg nr="1" direction="in">
1782
+ <not-uninit/>
1783
+ <not-null/>
1784
+ <strz/>
1785
+ </arg>
1786
+ <arg nr="2" direction="out">
1787
+ <not-null/>
1788
+ </arg>
1789
+ </function>
1790
+ <memory>
1791
+ <alloc init="true" arg="2">getfilecon_raw</alloc>
1792
+ <dealloc>freecon</dealloc>
1793
+ </memory>
1794
+ <!-- int lgetfilecon(const char *path, char ** con); -->
1795
+ <function name="lgetfilecon">
1796
+ <returnValue type="int"/>
1797
+ <noreturn>false</noreturn>
1798
+ <use-retval/>
1799
+ <leak-ignore/>
1800
+ <arg nr="1" direction="in">
1801
+ <not-uninit/>
1802
+ <not-null/>
1803
+ <strz/>
1804
+ </arg>
1805
+ <arg nr="2" direction="out">
1806
+ <not-null/>
1807
+ </arg>
1808
+ </function>
1809
+ <memory>
1810
+ <alloc init="true" arg="2">lgetfilecon</alloc>
1811
+ <dealloc>freecon</dealloc>
1812
+ </memory>
1813
+ <!-- int lgetfilecon_raw(const char *path, char ** con); -->
1814
+ <function name="lgetfilecon_raw">
1815
+ <returnValue type="int"/>
1816
+ <noreturn>false</noreturn>
1817
+ <use-retval/>
1818
+ <leak-ignore/>
1819
+ <arg nr="1" direction="in">
1820
+ <not-uninit/>
1821
+ <not-null/>
1822
+ <strz/>
1823
+ </arg>
1824
+ <arg nr="2" direction="out">
1825
+ <not-null/>
1826
+ </arg>
1827
+ </function>
1828
+ <memory>
1829
+ <alloc init="true" arg="2">lgetfilecon_raw</alloc>
1830
+ <dealloc>freecon</dealloc>
1831
+ </memory>
1832
+ <!-- int fgetfilecon(int fd, char ** con); -->
1833
+ <function name="fgetfilecon">
1834
+ <returnValue type="int"/>
1835
+ <noreturn>false</noreturn>
1836
+ <use-retval/>
1837
+ <leak-ignore/>
1838
+ <arg nr="1" direction="in">
1839
+ <not-uninit/>
1840
+ <not-bool/>
1841
+ <valid>0:</valid>
1842
+ </arg>
1843
+ <arg nr="2" direction="out">
1844
+ <not-null/>
1845
+ </arg>
1846
+ </function>
1847
+ <memory>
1848
+ <alloc init="true" arg="2">fgetfilecon</alloc>
1849
+ <dealloc>freecon</dealloc>
1850
+ </memory>
1851
+ <!-- int fgetfilecon_raw(int fd, char ** con); -->
1852
+ <function name="fgetfilecon_raw">
1853
+ <returnValue type="int"/>
1854
+ <noreturn>false</noreturn>
1855
+ <use-retval/>
1856
+ <leak-ignore/>
1857
+ <arg nr="1" direction="in">
1858
+ <not-uninit/>
1859
+ <not-bool/>
1860
+ <valid>0:</valid>
1861
+ </arg>
1862
+ <arg nr="2" direction="out">
1863
+ <not-null/>
1864
+ </arg>
1865
+ </function>
1866
+ <memory>
1867
+ <alloc init="true" arg="2">fgetfilecon_raw</alloc>
1868
+ <dealloc>freecon</dealloc>
1869
+ </memory>
1870
+ <!-- https://man7.org/linux/man-pages/man3/setfilecon.3.html -->
1871
+ <!-- int setfilecon(const char *path, const char * con); -->
1872
+ <function name="setfilecon">
1873
+ <returnValue type="int"/>
1874
+ <noreturn>false</noreturn>
1875
+ <use-retval/>
1876
+ <leak-ignore/>
1877
+ <arg nr="1" direction="in">
1878
+ <not-null/>
1879
+ <not-uninit/>
1880
+ <strz/>
1881
+ </arg>
1882
+ <arg nr="2" direction="in">
1883
+ <not-null/>
1884
+ <not-uninit/>
1885
+ <strz/>
1886
+ </arg>
1887
+ </function>
1888
+ <!-- int setfilecon_raw(const char *path, const char * con); -->
1889
+ <function name="setfilecon_raw">
1890
+ <returnValue type="int"/>
1891
+ <noreturn>false</noreturn>
1892
+ <use-retval/>
1893
+ <leak-ignore/>
1894
+ <arg nr="1" direction="in">
1895
+ <not-null/>
1896
+ <not-uninit/>
1897
+ <strz/>
1898
+ </arg>
1899
+ <arg nr="2" direction="in">
1900
+ <not-null/>
1901
+ <not-uninit/>
1902
+ <strz/>
1903
+ </arg>
1904
+ </function>
1905
+ <!-- int lsetfilecon(const char *path, const char * con); -->
1906
+ <function name="lsetfilecon">
1907
+ <returnValue type="int"/>
1908
+ <noreturn>false</noreturn>
1909
+ <use-retval/>
1910
+ <leak-ignore/>
1911
+ <arg nr="1" direction="in">
1912
+ <not-null/>
1913
+ <not-uninit/>
1914
+ <strz/>
1915
+ </arg>
1916
+ <arg nr="2" direction="in">
1917
+ <not-null/>
1918
+ <not-uninit/>
1919
+ <strz/>
1920
+ </arg>
1921
+ </function>
1922
+ <!-- int lsetfilecon_raw(const char *path, const char * con); -->
1923
+ <function name="lsetfilecon_raw">
1924
+ <returnValue type="int"/>
1925
+ <noreturn>false</noreturn>
1926
+ <use-retval/>
1927
+ <leak-ignore/>
1928
+ <arg nr="1" direction="in">
1929
+ <not-null/>
1930
+ <not-uninit/>
1931
+ <strz/>
1932
+ </arg>
1933
+ <arg nr="2" direction="in">
1934
+ <not-null/>
1935
+ <not-uninit/>
1936
+ <strz/>
1937
+ </arg>
1938
+ </function>
1939
+ <!-- int fsetfilecon(int fd, const char * con); -->
1940
+ <function name="fsetfilecon">
1941
+ <returnValue type="int"/>
1942
+ <noreturn>false</noreturn>
1943
+ <use-retval/>
1944
+ <leak-ignore/>
1945
+ <arg nr="1" direction="in">
1946
+ <not-uninit/>
1947
+ <valid>0:</valid>
1948
+ </arg>
1949
+ <arg nr="2" direction="in">
1950
+ <not-null/>
1951
+ <not-uninit/>
1952
+ <strz/>
1953
+ </arg>
1954
+ </function>
1955
+ <!-- int fsetfilecon_raw(int fd, const char * con); -->
1956
+ <function name="fsetfilecon_raw">
1957
+ <returnValue type="int"/>
1958
+ <noreturn>false</noreturn>
1959
+ <use-retval/>
1960
+ <leak-ignore/>
1961
+ <arg nr="1" direction="in">
1962
+ <not-uninit/>
1963
+ <valid>0:</valid>
1964
+ </arg>
1965
+ <arg nr="2" direction="in">
1966
+ <not-null/>
1967
+ <not-uninit/>
1968
+ <strz/>
1969
+ </arg>
1970
+ </function>
1971
+ <!-- union selinux_callback selinux_get_callback(int type); -->
1972
+ <function name="selinux_get_callback">
1973
+ <returnValue type="union selinux_callback"/>
1974
+ <noreturn>false</noreturn>
1975
+ <use-retval/>
1976
+ <leak-ignore/>
1977
+ <arg nr="1" direction="in">
1978
+ <not-uninit/>
1979
+ <not-bool/>
1980
+ <valid>0:4</valid>
1981
+ </arg>
1982
+ </function>
1983
+ <!-- void selinux_set_callback(int type, union selinux_callback cb); -->
1984
+ <function name="selinux_set_callback">
1985
+ <returnValue type="void"/>
1986
+ <noreturn>false</noreturn>
1987
+ <leak-ignore/>
1988
+ <arg nr="1" direction="in">
1989
+ <not-uninit/>
1990
+ <not-bool/>
1991
+ <valid>0:4</valid>
1992
+ </arg>
1993
+ <arg nr="2" direction="in">
1994
+ <not-uninit/>
1995
+ </arg>
1996
+ </function>
1997
+ <!-- https://man7.org/linux/man-pages/man3/security_compute_av.3.html -->
1998
+ <!-- int security_compute_av(const char * scon, const char * tcon, security_class_t tclass, access_vector_t requested, struct av_decision *avd); -->
1999
+ <function name="security_compute_av">
2000
+ <returnValue type="int"/>
2001
+ <noreturn>false</noreturn>
2002
+ <use-retval/>
2003
+ <leak-ignore/>
2004
+ <arg nr="1" direction="in">
2005
+ <not-null/>
2006
+ <not-uninit/>
2007
+ <strz/>
2008
+ </arg>
2009
+ <arg nr="2" direction="in">
2010
+ <not-null/>
2011
+ <not-uninit/>
2012
+ <strz/>
2013
+ </arg>
2014
+ <arg nr="3" direction="in">
2015
+ <not-uninit/>
2016
+ <not-bool/>
2017
+ </arg>
2018
+ <arg nr="4" direction="in">
2019
+ <not-uninit/>
2020
+ <not-bool/>
2021
+ </arg>
2022
+ <arg nr="5" direction="out">
2023
+ </arg>
2024
+ </function>
2025
+ <!-- int security_compute_av_raw(const char * scon, const char * tcon, security_class_t tclass, access_vector_t requested, struct av_decision *avd); -->
2026
+ <function name="security_compute_av_raw">
2027
+ <returnValue type="int"/>
2028
+ <noreturn>false</noreturn>
2029
+ <use-retval/>
2030
+ <leak-ignore/>
2031
+ <arg nr="1" direction="in">
2032
+ <not-null/>
2033
+ <not-uninit/>
2034
+ <strz/>
2035
+ </arg>
2036
+ <arg nr="2" direction="in">
2037
+ <not-null/>
2038
+ <not-uninit/>
2039
+ <strz/>
2040
+ </arg>
2041
+ <arg nr="3" direction="in">
2042
+ <not-uninit/>
2043
+ <not-bool/>
2044
+ </arg>
2045
+ <arg nr="4" direction="in">
2046
+ <not-uninit/>
2047
+ <not-bool/>
2048
+ </arg>
2049
+ <arg nr="5" direction="out">
2050
+ </arg>
2051
+ </function>
2052
+ <!-- int security_compute_av_flags(const char * scon, const char * tcon, security_class_t tclass, access_vector_t requested, struct av_decision *avd); -->
2053
+ <function name="security_compute_av_flags">
2054
+ <returnValue type="int"/>
2055
+ <noreturn>false</noreturn>
2056
+ <use-retval/>
2057
+ <leak-ignore/>
2058
+ <arg nr="1" direction="in">
2059
+ <not-null/>
2060
+ <not-uninit/>
2061
+ <strz/>
2062
+ </arg>
2063
+ <arg nr="2" direction="in">
2064
+ <not-null/>
2065
+ <not-uninit/>
2066
+ <strz/>
2067
+ </arg>
2068
+ <arg nr="3" direction="in">
2069
+ <not-uninit/>
2070
+ <not-bool/>
2071
+ </arg>
2072
+ <arg nr="4" direction="in">
2073
+ <not-uninit/>
2074
+ <not-bool/>
2075
+ </arg>
2076
+ <arg nr="5" direction="out">
2077
+ </arg>
2078
+ </function>
2079
+ <!-- int security_compute_av_flags_raw(const char * scon, const char * tcon, security_class_t tclass, access_vector_t requested, struct av_decision *avd); -->
2080
+ <function name="security_compute_av_flags_raw">
2081
+ <returnValue type="int"/>
2082
+ <noreturn>false</noreturn>
2083
+ <use-retval/>
2084
+ <leak-ignore/>
2085
+ <arg nr="1" direction="in">
2086
+ <not-null/>
2087
+ <not-uninit/>
2088
+ <strz/>
2089
+ </arg>
2090
+ <arg nr="2" direction="in">
2091
+ <not-null/>
2092
+ <not-uninit/>
2093
+ <strz/>
2094
+ </arg>
2095
+ <arg nr="3" direction="in">
2096
+ <not-uninit/>
2097
+ <not-bool/>
2098
+ </arg>
2099
+ <arg nr="4" direction="in">
2100
+ <not-uninit/>
2101
+ <not-bool/>
2102
+ </arg>
2103
+ <arg nr="5" direction="out">
2104
+ </arg>
2105
+ </function>
2106
+ <!-- int security_compute_create(const char * scon, const char * tcon, security_class_t tclass, char ** newcon); -->
2107
+ <function name="security_compute_create">
2108
+ <returnValue type="int"/>
2109
+ <noreturn>false</noreturn>
2110
+ <use-retval/>
2111
+ <leak-ignore/>
2112
+ <arg nr="1" direction="in">
2113
+ <not-null/>
2114
+ <not-uninit/>
2115
+ <strz/>
2116
+ </arg>
2117
+ <arg nr="2" direction="in">
2118
+ <not-null/>
2119
+ <not-uninit/>
2120
+ <strz/>
2121
+ </arg>
2122
+ <arg nr="3" direction="in">
2123
+ <not-uninit/>
2124
+ <not-bool/>
2125
+ </arg>
2126
+ <arg nr="4" direction="out">
2127
+ <not-null/>
2128
+ </arg>
2129
+ </function>
2130
+ <memory>
2131
+ <alloc init="true" arg="4">security_compute_create</alloc>
2132
+ <dealloc>freecon</dealloc>
2133
+ </memory>
2134
+ <!-- int security_compute_create_raw(const char * scon, const char * tcon, security_class_t tclass, char ** newcon); -->
2135
+ <function name="security_compute_create_raw">
2136
+ <returnValue type="int"/>
2137
+ <noreturn>false</noreturn>
2138
+ <use-retval/>
2139
+ <leak-ignore/>
2140
+ <arg nr="1" direction="in">
2141
+ <not-null/>
2142
+ <not-uninit/>
2143
+ <strz/>
2144
+ </arg>
2145
+ <arg nr="2" direction="in">
2146
+ <not-null/>
2147
+ <not-uninit/>
2148
+ <strz/>
2149
+ </arg>
2150
+ <arg nr="3" direction="in">
2151
+ <not-uninit/>
2152
+ <not-bool/>
2153
+ </arg>
2154
+ <arg nr="4" direction="out">
2155
+ <not-null/>
2156
+ </arg>
2157
+ </function>
2158
+ <memory>
2159
+ <alloc init="true" arg="4">security_compute_create_raw</alloc>
2160
+ <dealloc>freecon</dealloc>
2161
+ </memory>
2162
+ <!-- int security_compute_create_name(const char * scon, const char * tcon, security_class_t tclass, const char *objname, char ** newcon); -->
2163
+ <function name="security_compute_create_name">
2164
+ <returnValue type="int"/>
2165
+ <noreturn>false</noreturn>
2166
+ <use-retval/>
2167
+ <leak-ignore/>
2168
+ <arg nr="1" direction="in">
2169
+ <not-null/>
2170
+ <not-uninit/>
2171
+ <strz/>
2172
+ </arg>
2173
+ <arg nr="2" direction="in">
2174
+ <not-null/>
2175
+ <not-uninit/>
2176
+ <strz/>
2177
+ </arg>
2178
+ <arg nr="3" direction="in">
2179
+ <not-uninit/>
2180
+ <not-bool/>
2181
+ </arg>
2182
+ <arg nr="4" direction="in">
2183
+ <not-uninit/>
2184
+ <strz/>
2185
+ </arg>
2186
+ <arg nr="5" direction="out">
2187
+ <not-null/>
2188
+ </arg>
2189
+ </function>
2190
+ <memory>
2191
+ <alloc init="true" arg="5">security_compute_create_name</alloc>
2192
+ <dealloc>freecon</dealloc>
2193
+ </memory>
2194
+ <!-- int security_compute_create_name_raw(const char * scon, const char * tcon, security_class_t tclass, const char *objname, char ** newcon); -->
2195
+ <function name="security_compute_create_name_raw">
2196
+ <returnValue type="int"/>
2197
+ <noreturn>false</noreturn>
2198
+ <use-retval/>
2199
+ <leak-ignore/>
2200
+ <arg nr="1" direction="in">
2201
+ <not-null/>
2202
+ <not-uninit/>
2203
+ <strz/>
2204
+ </arg>
2205
+ <arg nr="2" direction="in">
2206
+ <not-null/>
2207
+ <not-uninit/>
2208
+ <strz/>
2209
+ </arg>
2210
+ <arg nr="3" direction="in">
2211
+ <not-uninit/>
2212
+ <not-bool/>
2213
+ </arg>
2214
+ <arg nr="4" direction="in">
2215
+ <not-uninit/>
2216
+ <strz/>
2217
+ </arg>
2218
+ <arg nr="5" direction="out">
2219
+ <not-null/>
2220
+ </arg>
2221
+ </function>
2222
+ <memory>
2223
+ <alloc init="true" arg="5">security_compute_create_name_raw</alloc>
2224
+ <dealloc>freecon</dealloc>
2225
+ </memory>
2226
+ <!-- int security_compute_relabel(const char * scon, const char * tcon, security_class_t tclass, char ** newcon); -->
2227
+ <function name="security_compute_relabel">
2228
+ <returnValue type="int"/>
2229
+ <noreturn>false</noreturn>
2230
+ <use-retval/>
2231
+ <leak-ignore/>
2232
+ <arg nr="1" direction="in">
2233
+ <not-null/>
2234
+ <not-uninit/>
2235
+ <strz/>
2236
+ </arg>
2237
+ <arg nr="2" direction="in">
2238
+ <not-null/>
2239
+ <not-uninit/>
2240
+ <strz/>
2241
+ </arg>
2242
+ <arg nr="3" direction="in">
2243
+ <not-uninit/>
2244
+ <not-bool/>
2245
+ </arg>
2246
+ <arg nr="4" direction="out">
2247
+ <not-null/>
2248
+ </arg>
2249
+ </function>
2250
+ <memory>
2251
+ <alloc init="true" arg="4">security_compute_relabel</alloc>
2252
+ <dealloc>freecon</dealloc>
2253
+ </memory>
2254
+ <!-- int security_compute_relabel_raw(const char * scon, const char * tcon, security_class_t tclass, char ** newcon); -->
2255
+ <function name="security_compute_relabel_raw">
2256
+ <returnValue type="int"/>
2257
+ <noreturn>false</noreturn>
2258
+ <use-retval/>
2259
+ <leak-ignore/>
2260
+ <arg nr="1" direction="in">
2261
+ <not-null/>
2262
+ <not-uninit/>
2263
+ <strz/>
2264
+ </arg>
2265
+ <arg nr="2" direction="in">
2266
+ <not-null/>
2267
+ <not-uninit/>
2268
+ <strz/>
2269
+ </arg>
2270
+ <arg nr="3" direction="in">
2271
+ <not-uninit/>
2272
+ <not-bool/>
2273
+ </arg>
2274
+ <arg nr="4" direction="out">
2275
+ <not-null/>
2276
+ </arg>
2277
+ </function>
2278
+ <memory>
2279
+ <alloc init="true" arg="4">security_compute_relabel</alloc>
2280
+ <dealloc>freecon</dealloc>
2281
+ </memory>
2282
+ <!-- int security_compute_member(const char * scon, const char * tcon, security_class_t tclass, char ** newcon); -->
2283
+ <function name="security_compute_member">
2284
+ <returnValue type="int"/>
2285
+ <noreturn>false</noreturn>
2286
+ <use-retval/>
2287
+ <leak-ignore/>
2288
+ <arg nr="1" direction="in">
2289
+ <not-null/>
2290
+ <not-uninit/>
2291
+ <strz/>
2292
+ </arg>
2293
+ <arg nr="2" direction="in">
2294
+ <not-null/>
2295
+ <not-uninit/>
2296
+ <strz/>
2297
+ </arg>
2298
+ <arg nr="3" direction="in">
2299
+ <not-uninit/>
2300
+ <not-bool/>
2301
+ </arg>
2302
+ <arg nr="4" direction="out">
2303
+ <not-null/>
2304
+ </arg>
2305
+ </function>
2306
+ <memory>
2307
+ <alloc init="true" arg="4">security_compute_member</alloc>
2308
+ <dealloc>freecon</dealloc>
2309
+ </memory>
2310
+ <!-- int security_compute_member_raw(const char * scon, const char * tcon, security_class_t tclass, char ** newcon); -->
2311
+ <function name="security_compute_member_raw">
2312
+ <returnValue type="int"/>
2313
+ <noreturn>false</noreturn>
2314
+ <use-retval/>
2315
+ <leak-ignore/>
2316
+ <arg nr="1" direction="in">
2317
+ <not-null/>
2318
+ <not-uninit/>
2319
+ <strz/>
2320
+ </arg>
2321
+ <arg nr="2" direction="in">
2322
+ <not-null/>
2323
+ <not-uninit/>
2324
+ <strz/>
2325
+ </arg>
2326
+ <arg nr="3" direction="in">
2327
+ <not-uninit/>
2328
+ <not-bool/>
2329
+ </arg>
2330
+ <arg nr="4" direction="out">
2331
+ <not-null/>
2332
+ </arg>
2333
+ </function>
2334
+ <memory>
2335
+ <alloc init="true" arg="4">security_compute_member_raw</alloc>
2336
+ <dealloc>freecon</dealloc>
2337
+ </memory>
2338
+ <!-- int security_compute_user(const char * scon, const char *username, char *** con); -->
2339
+ <function name="security_compute_user">
2340
+ <returnValue type="int"/>
2341
+ <noreturn>false</noreturn>
2342
+ <use-retval/>
2343
+ <leak-ignore/>
2344
+ <arg nr="1" direction="in">
2345
+ <not-null/>
2346
+ <not-uninit/>
2347
+ <strz/>
2348
+ </arg>
2349
+ <arg nr="2" direction="in">
2350
+ <not-null/>
2351
+ <not-uninit/>
2352
+ <strz/>
2353
+ </arg>
2354
+ <arg nr="3" direction="out">
2355
+ <not-null/>
2356
+ </arg>
2357
+ </function>
2358
+ <memory>
2359
+ <alloc init="true" arg="3">security_compute_user</alloc>
2360
+ <dealloc>freeconary</dealloc>
2361
+ </memory>
2362
+ <!-- int security_compute_user_raw(const char * scon, const char *username, char *** con); -->
2363
+ <function name="security_compute_user_raw">
2364
+ <returnValue type="int"/>
2365
+ <noreturn>false</noreturn>
2366
+ <use-retval/>
2367
+ <leak-ignore/>
2368
+ <arg nr="1" direction="in">
2369
+ <not-null/>
2370
+ <not-uninit/>
2371
+ <strz/>
2372
+ </arg>
2373
+ <arg nr="2" direction="in">
2374
+ <not-null/>
2375
+ <not-uninit/>
2376
+ <strz/>
2377
+ </arg>
2378
+ <arg nr="3" direction="out">
2379
+ <not-null/>
2380
+ </arg>
2381
+ </function>
2382
+ <memory>
2383
+ <alloc init="true" arg="3">security_compute_user_raw</alloc>
2384
+ <dealloc>freeconary</dealloc>
2385
+ </memory>
2386
+ <!-- int security_validatetrans(const char *scon, const char *tcon, security_class_t tclass, const char *newcon); -->
2387
+ <function name="security_validatetrans">
2388
+ <returnValue type="int"/>
2389
+ <noreturn>false</noreturn>
2390
+ <use-retval/>
2391
+ <leak-ignore/>
2392
+ <arg nr="1" direction="in">
2393
+ <not-null/>
2394
+ <not-uninit/>
2395
+ <strz/>
2396
+ </arg>
2397
+ <arg nr="2" direction="in">
2398
+ <not-null/>
2399
+ <not-uninit/>
2400
+ <strz/>
2401
+ </arg>
2402
+ <arg nr="3" direction="in">
2403
+ <not-uninit/>
2404
+ <not-bool/>
2405
+ </arg>
2406
+ <arg nr="4" direction="in">
2407
+ <not-null/>
2408
+ <not-uninit/>
2409
+ <strz/>
2410
+ </arg>
2411
+ </function>
2412
+ <!-- int security_validatetrans_raw(const char *scon, const char *tcon, security_class_t tclass, const char *newcon); -->
2413
+ <function name="security_validatetrans_raw">
2414
+ <returnValue type="int"/>
2415
+ <noreturn>false</noreturn>
2416
+ <use-retval/>
2417
+ <leak-ignore/>
2418
+ <arg nr="1" direction="in">
2419
+ <not-null/>
2420
+ <not-uninit/>
2421
+ <strz/>
2422
+ </arg>
2423
+ <arg nr="2" direction="in">
2424
+ <not-null/>
2425
+ <not-uninit/>
2426
+ <strz/>
2427
+ </arg>
2428
+ <arg nr="3" direction="in">
2429
+ <not-uninit/>
2430
+ <not-bool/>
2431
+ </arg>
2432
+ <arg nr="4" direction="in">
2433
+ <not-null/>
2434
+ <not-uninit/>
2435
+ <strz/>
2436
+ </arg>
2437
+ </function>
2438
+ <!-- int selinux_check_access(const char * scon, const char * tcon, const char *tclass, const char *perm, void *auditdata); -->
2439
+ <function name="selinux_check_access">
2440
+ <returnValue type="int"/>
2441
+ <noreturn>false</noreturn>
2442
+ <use-retval/>
2443
+ <leak-ignore/>
2444
+ <arg nr="1" direction="in">
2445
+ <not-null/>
2446
+ <not-uninit/>
2447
+ <strz/>
2448
+ </arg>
2449
+ <arg nr="2" direction="in">
2450
+ <not-null/>
2451
+ <not-uninit/>
2452
+ <strz/>
2453
+ </arg>
2454
+ <arg nr="3" direction="in">
2455
+ <not-null/>
2456
+ <not-uninit/>
2457
+ <strz/>
2458
+ </arg>
2459
+ <arg nr="4" direction="in">
2460
+ <not-null/>
2461
+ <not-uninit/>
2462
+ <strz/>
2463
+ </arg>
2464
+ <arg nr="5" direction="in">
2465
+ <not-uninit/>
2466
+ </arg>
2467
+ </function>
2468
+ <!-- int selinux_check_passwd_access(access_vector_t requested) -->
2469
+ <function name="selinux_check_passwd_access">
2470
+ <returnValue type="int"/>
2471
+ <noreturn>false</noreturn>
2472
+ <use-retval/>
2473
+ <leak-ignore/>
2474
+ <arg nr="1" direction="in">
2475
+ <not-uninit/>
2476
+ <not-bool/>
2477
+ </arg>
2478
+ </function>
2479
+ <!-- int checkPasswdAccess(access_vector_t requested) -->
2480
+ <function name="checkPasswdAccess">
2481
+ <returnValue type="int"/>
2482
+ <noreturn>false</noreturn>
2483
+ <use-retval/>
2484
+ <leak-ignore/>
2485
+ <arg nr="1" direction="in">
2486
+ <not-uninit/>
2487
+ <not-bool/>
2488
+ </arg>
2489
+ </function>
2490
+ <!-- int security_get_initial_context(const char *name, char ** con); -->
2491
+ <function name="security_get_initial_context">
2492
+ <returnValue type="int"/>
2493
+ <noreturn>false</noreturn>
2494
+ <use-retval/>
2495
+ <leak-ignore/>
2496
+ <arg nr="1" direction="in">
2497
+ <not-null/>
2498
+ <not-uninit/>
2499
+ <strz/>
2500
+ </arg>
2501
+ <arg nr="2" direction="out">
2502
+ <not-null/>
2503
+ </arg>
2504
+ </function>
2505
+ <memory>
2506
+ <alloc init="true" arg="2">security_get_initial_context</alloc>
2507
+ <dealloc>freecon</dealloc>
2508
+ </memory>
2509
+ <!-- int security_get_initial_context_raw(const char *name, char ** con); -->
2510
+ <function name="security_get_initial_context_raw">
2511
+ <returnValue type="int"/>
2512
+ <noreturn>false</noreturn>
2513
+ <use-retval/>
2514
+ <leak-ignore/>
2515
+ <arg nr="1" direction="in">
2516
+ <not-null/>
2517
+ <not-uninit/>
2518
+ <strz/>
2519
+ </arg>
2520
+ <arg nr="2" direction="out">
2521
+ <not-null/>
2522
+ </arg>
2523
+ </function>
2524
+ <memory>
2525
+ <alloc init="true" arg="2">security_get_initial_context_raw</alloc>
2526
+ <dealloc>freecon</dealloc>
2527
+ </memory>
2528
+ <!-- https://man7.org/linux/man-pages/man3/security_load_policy.3.html -->
2529
+ <!-- int security_load_policy(const void *data, size_t len); -->
2530
+ <function name="security_load_policy">
2531
+ <returnValue type="int"/>
2532
+ <noreturn>false</noreturn>
2533
+ <use-retval/>
2534
+ <leak-ignore/>
2535
+ <arg nr="1" direction="in">
2536
+ <not-null/>
2537
+ <not-uninit/>
2538
+ <minsize type="argvalue" arg="2"/>
2539
+ </arg>
2540
+ <arg nr="2" direction="in">
2541
+ <not-uninit/>
2542
+ <not-bool/>
2543
+ </arg>
2544
+ </function>
2545
+ <!-- int selinux_mkload_policy(int preservebools); -->
2546
+ <function name="selinux_mkload_policy">
2547
+ <returnValue type="int"/>
2548
+ <noreturn>false</noreturn>
2549
+ <use-retval/>
2550
+ <leak-ignore/>
2551
+ <arg nr="1" direction="in">
2552
+ <not-uninit/>
2553
+ <not-bool/>
2554
+ <valid>0,1</valid>
2555
+ </arg>
2556
+ </function>
2557
+ <!-- int selinux_init_load_policy(int *enforce); -->
2558
+ <function name="selinux_init_load_policy">
2559
+ <returnValue type="int"/>
2560
+ <noreturn>false</noreturn>
2561
+ <use-retval/>
2562
+ <leak-ignore/>
2563
+ <arg nr="1" direction="out">
2564
+ <not-null/>
2565
+ </arg>
2566
+ </function>
2567
+ <!-- https://man7.org/linux/man-pages/man3/security_load_booleans.3.html -->
2568
+ <!-- int security_set_boolean_list(size_t boolcnt, SELboolean * boollist, int permanent); -->
2569
+ <function name="security_set_boolean_list">
2570
+ <returnValue type="int"/>
2571
+ <noreturn>false</noreturn>
2572
+ <use-retval/>
2573
+ <leak-ignore/>
2574
+ <arg nr="1" direction="in">
2575
+ <not-uninit/>
2576
+ <not-bool/>
2577
+ </arg>
2578
+ <arg nr="2" direction="in">
2579
+ <not-uninit/>
2580
+ <not-null/>
2581
+ <minsize type="argvalue" arg="1"/>
2582
+ </arg>
2583
+ <arg nr="3" direction="in">
2584
+ <not-uninit/>
2585
+ <not-bool/>
2586
+ <valid>0</valid>
2587
+ </arg>
2588
+ </function>
2589
+ <!-- int security_get_boolean_names(char ***names, int *len); -->
2590
+ <function name="security_get_boolean_names">
2591
+ <returnValue type="int"/>
2592
+ <noreturn>false</noreturn>
2593
+ <use-retval/>
2594
+ <leak-ignore/>
2595
+ <arg nr="1" direction="out">
2596
+ <not-null/>
2597
+ </arg>
2598
+ <arg nr="2" direction="out">
2599
+ <not-null/>
2600
+ </arg>
2601
+ </function>
2602
+ <memory>
2603
+ <alloc init="true" arg="1">security_get_boolean_names</alloc>
2604
+ <dealloc>free</dealloc>
2605
+ </memory>
2606
+ <!-- int security_get_boolean_pending(const char *name); -->
2607
+ <function name="security_get_boolean_pending">
2608
+ <returnValue type="int"/>
2609
+ <noreturn>false</noreturn>
2610
+ <use-retval/>
2611
+ <leak-ignore/>
2612
+ <arg nr="1" direction="in">
2613
+ <not-null/>
2614
+ <not-uninit/>
2615
+ <strz/>
2616
+ </arg>
2617
+ </function>
2618
+ <!-- int security_get_boolean_active(const char *name); -->
2619
+ <function name="security_get_boolean_active">
2620
+ <returnValue type="int"/>
2621
+ <noreturn>false</noreturn>
2622
+ <use-retval/>
2623
+ <leak-ignore/>
2624
+ <arg nr="1" direction="in">
2625
+ <not-null/>
2626
+ <not-uninit/>
2627
+ <strz/>
2628
+ </arg>
2629
+ </function>
2630
+ <!-- int security_set_boolean(const char *name, int value); -->
2631
+ <function name="security_set_boolean">
2632
+ <returnValue type="int"/>
2633
+ <noreturn>false</noreturn>
2634
+ <use-retval/>
2635
+ <leak-ignore/>
2636
+ <arg nr="1" direction="in">
2637
+ <not-null/>
2638
+ <not-uninit/>
2639
+ <strz/>
2640
+ </arg>
2641
+ <arg nr="2" direction="in">
2642
+ <not-uninit/>
2643
+ <valid>0,1</valid>
2644
+ </arg>
2645
+ </function>
2646
+ <!-- int security_commit_booleans(void); -->
2647
+ <function name="security_commit_booleans">
2648
+ <returnValue type="int"/>
2649
+ <noreturn>false</noreturn>
2650
+ <use-retval/>
2651
+ <leak-ignore/>
2652
+ </function>
2653
+ <!-- int security_load_booleans(char *path) -->
2654
+ <function name="security_load_booleans">
2655
+ <returnValue type="int"/>
2656
+ <noreturn>false</noreturn>
2657
+ <use-retval/>
2658
+ <leak-ignore/>
2659
+ <arg nr="1" direction="in">
2660
+ <not-null/>
2661
+ <not-uninit/>
2662
+ <strz/>
2663
+ </arg>
2664
+ </function>
2665
+ <!-- https://man7.org/linux/man-pages/man3/security_check_context.3.html -->
2666
+ <!-- int security_check_context(const char * con); -->
2667
+ <function name="security_check_context">
2668
+ <returnValue type="int"/>
2669
+ <noreturn>false</noreturn>
2670
+ <use-retval/>
2671
+ <leak-ignore/>
2672
+ <arg nr="1" direction="in">
2673
+ <not-null/>
2674
+ <not-uninit/>
2675
+ <strz/>
2676
+ </arg>
2677
+ </function>
2678
+ <!-- int security_check_context_raw(const char * con); -->
2679
+ <function name="security_check_context_raw">
2680
+ <returnValue type="int"/>
2681
+ <noreturn>false</noreturn>
2682
+ <use-retval/>
2683
+ <leak-ignore/>
2684
+ <arg nr="1" direction="in">
2685
+ <not-null/>
2686
+ <not-uninit/>
2687
+ <strz/>
2688
+ </arg>
2689
+ </function>
2690
+ <!-- int security_canonicalize_context(const char * con, char ** canoncon); -->
2691
+ <function name="security_canonicalize_context">
2692
+ <returnValue type="int"/>
2693
+ <noreturn>false</noreturn>
2694
+ <use-retval/>
2695
+ <leak-ignore/>
2696
+ <arg nr="1" direction="in">
2697
+ <not-null/>
2698
+ <not-uninit/>
2699
+ <strz/>
2700
+ </arg>
2701
+ <arg nr="2" direction="out">
2702
+ <not-null/>
2703
+ </arg>
2704
+ </function>
2705
+ <memory>
2706
+ <alloc init="true" arg="2">security_canonicalize_context</alloc>
2707
+ <dealloc>freecon</dealloc>
2708
+ </memory>
2709
+ <!-- int security_canonicalize_context_raw(const char * con, char ** canoncon); -->
2710
+ <function name="security_canonicalize_context_raw">
2711
+ <returnValue type="int"/>
2712
+ <noreturn>false</noreturn>
2713
+ <use-retval/>
2714
+ <leak-ignore/>
2715
+ <arg nr="1" direction="in">
2716
+ <not-null/>
2717
+ <not-uninit/>
2718
+ <strz/>
2719
+ </arg>
2720
+ <arg nr="2" direction="out">
2721
+ <not-null/>
2722
+ </arg>
2723
+ </function>
2724
+ <memory>
2725
+ <alloc init="true" arg="2">security_canonicalize_context</alloc>
2726
+ <dealloc>freecon</dealloc>
2727
+ </memory>
2728
+ <!-- https://man7.org/linux/man-pages/man3/security_getenforce.3.html -->
2729
+ <!-- int security_getenforce(void); -->
2730
+ <function name="security_getenforce">
2731
+ <returnValue type="int"/>
2732
+ <noreturn>false</noreturn>
2733
+ <use-retval/>
2734
+ <leak-ignore/>
2735
+ </function>
2736
+ <!-- int security_setenforce(int value); -->
2737
+ <function name="security_setenforce">
2738
+ <returnValue type="int"/>
2739
+ <noreturn>false</noreturn>
2740
+ <use-retval/>
2741
+ <leak-ignore/>
2742
+ <arg nr="1" direction="in">
2743
+ <not-uninit/>
2744
+ <valid>0,1</valid>
2745
+ </arg>
2746
+ </function>
2747
+ <!-- int security_reject_unknown(void); -->
2748
+ <function name="security_reject_unknown">
2749
+ <returnValue type="int"/>
2750
+ <noreturn>false</noreturn>
2751
+ <use-retval/>
2752
+ <leak-ignore/>
2753
+ </function>
2754
+ <!-- int security_deny_unknown(void); -->
2755
+ <function name="security_deny_unknown">
2756
+ <returnValue type="int"/>
2757
+ <noreturn>false</noreturn>
2758
+ <use-retval/>
2759
+ <leak-ignore/>
2760
+ </function>
2761
+ <!-- int security_get_checkreqprot(void); -->
2762
+ <function name="security_get_checkreqprot">
2763
+ <returnValue type="int"/>
2764
+ <noreturn>false</noreturn>
2765
+ <use-retval/>
2766
+ <leak-ignore/>
2767
+ </function>
2768
+ <!-- https://man7.org/linux/man-pages/man3/security_disable.3.html -->
2769
+ <!-- int security_disable(void); -->
2770
+ <function name="security_disable">
2771
+ <returnValue type="int"/>
2772
+ <noreturn>false</noreturn>
2773
+ <use-retval/>
2774
+ <leak-ignore/>
2775
+ <warn severity="warning">Disabling SELinux at runtime is deprecated and may not be supported on modern Linux kernels.</warn>
2776
+ </function>
2777
+ <!-- https://man7.org/linux/man-pages/man3/security_policyvers.3.html -->
2778
+ <!-- int security_policyvers(void); -->
2779
+ <function name="security_policyvers">
2780
+ <returnValue type="int"/>
2781
+ <noreturn>false</noreturn>
2782
+ <use-retval/>
2783
+ <leak-ignore/>
2784
+ </function>
2785
+ <!-- https://man7.org/linux/man-pages/man3/selinux_set_mapping.3.html -->
2786
+ <!-- int selinux_set_mapping(const struct security_class_mapping *map); -->
2787
+ <function name="selinux_set_mapping">
2788
+ <returnValue type="int"/>
2789
+ <noreturn>false</noreturn>
2790
+ <use-retval/>
2791
+ <leak-ignore/>
2792
+ <arg nr="1" direction="in">
2793
+ <not-null/>
2794
+ <not-uninit/>
2795
+ <not-bool/>
2796
+ </arg>
2797
+ </function>
2798
+ <!-- https://man7.org/linux/man-pages/man3/security_class_to_string.3.html -->
2799
+ <!-- security_class_t mode_to_security_class(mode_t mode); -->
2800
+ <function name="mode_to_security_class">
2801
+ <returnValue type="security_class_t"/>
2802
+ <noreturn>false</noreturn>
2803
+ <use-retval/>
2804
+ <leak-ignore/>
2805
+ <arg nr="1" direction="in">
2806
+ <not-uninit/>
2807
+ <not-bool/>
2808
+ </arg>
2809
+ </function>
2810
+ <!-- security_class_t string_to_security_class(const char *name); -->
2811
+ <function name="string_to_security_class">
2812
+ <returnValue type="security_class_t"/>
2813
+ <noreturn>false</noreturn>
2814
+ <use-retval/>
2815
+ <leak-ignore/>
2816
+ <arg nr="1" direction="in">
2817
+ <not-uninit/>
2818
+ <not-null/>
2819
+ <strz/>
2820
+ </arg>
2821
+ </function>
2822
+ <!-- const char *security_class_to_string(security_class_t cls); -->
2823
+ <function name="security_class_to_string">
2824
+ <returnValue type="const char *"/>
2825
+ <noreturn>false</noreturn>
2826
+ <use-retval/>
2827
+ <leak-ignore/>
2828
+ <arg nr="1" direction="in">
2829
+ <not-uninit/>
2830
+ <not-bool/>
2831
+ </arg>
2832
+ </function>
2833
+ <!-- const char *security_av_perm_to_string(security_class_t tclass, access_vector_t perm); -->
2834
+ <function name="security_av_perm_to_string">
2835
+ <returnValue type="const char *"/>
2836
+ <noreturn>false</noreturn>
2837
+ <use-retval/>
2838
+ <leak-ignore/>
2839
+ <arg nr="1" direction="in">
2840
+ <not-uninit/>
2841
+ <not-bool/>
2842
+ </arg>
2843
+ <arg nr="2" direction="in">
2844
+ <not-uninit/>
2845
+ <not-bool/>
2846
+ </arg>
2847
+ </function>
2848
+ <!-- access_vector_t string_to_av_perm(security_class_t tclass, const char *name); -->
2849
+ <function name="string_to_av_perm">
2850
+ <returnValue type="access_vector_t"/>
2851
+ <noreturn>false</noreturn>
2852
+ <use-retval/>
2853
+ <leak-ignore/>
2854
+ <arg nr="1" direction="in">
2855
+ <not-uninit/>
2856
+ <not-bool/>
2857
+ </arg>
2858
+ <arg nr="2" direction="in">
2859
+ <not-uninit/>
2860
+ <not-null/>
2861
+ <strz/>
2862
+ </arg>
2863
+ </function>
2864
+ <!-- int security_av_string(security_class_t tclass, access_vector_t av, char **result); -->
2865
+ <function name="security_av_string">
2866
+ <returnValue type="int"/>
2867
+ <noreturn>false</noreturn>
2868
+ <use-retval/>
2869
+ <leak-ignore/>
2870
+ <arg nr="1" direction="in">
2871
+ <not-uninit/>
2872
+ <not-bool/>
2873
+ </arg>
2874
+ <arg nr="2" direction="in">
2875
+ <not-uninit/>
2876
+ <not-bool/>
2877
+ </arg>
2878
+ <arg nr="3" direction="out">
2879
+ <not-null/>
2880
+ </arg>
2881
+ </function>
2882
+ <memory>
2883
+ <alloc init="true" arg="3">security_av_string</alloc>
2884
+ <dealloc>free</dealloc>
2885
+ </memory>
2886
+ <!-- void print_access_vector(security_class_t tclass, access_vector_t av); -->
2887
+ <function name="print_access_vector">
2888
+ <returnValue type="void"/>
2889
+ <noreturn>false</noreturn>
2890
+ <leak-ignore/>
2891
+ <arg nr="1" direction="in">
2892
+ <not-uninit/>
2893
+ <not-bool/>
2894
+ </arg>
2895
+ <arg nr="2" direction="in">
2896
+ <not-uninit/>
2897
+ <not-bool/>
2898
+ </arg>
2899
+ </function>
2900
+ <!-- void selinux_flush_class_cache(void); -->
2901
+ <function name="selinux_flush_class_cache">
2902
+ <returnValue type="void"/>
2903
+ <noreturn>false</noreturn>
2904
+ <leak-ignore/>
2905
+ </function>
2906
+ <!-- https://man7.org/linux/man-pages/man3/set_matchpathcon_flags.3.html -->
2907
+ <!-- void set_matchpathcon_printf(void (*f) (const char *fmt, ...)); -->
2908
+ <function name="set_matchpathcon_printf">
2909
+ <returnValue type="void"/>
2910
+ <noreturn>false</noreturn>
2911
+ <leak-ignore/>
2912
+ <arg nr="1" direction="in">
2913
+ <not-uninit/>
2914
+ <not-bool/>
2915
+ </arg>
2916
+ </function>
2917
+ <!-- void set_matchpathcon_invalidcon(int (*f) (const char *path, unsigned lineno, char *context)); -->
2918
+ <function name="set_matchpathcon_invalidcon">
2919
+ <returnValue type="void"/>
2920
+ <noreturn>false</noreturn>
2921
+ <leak-ignore/>
2922
+ <arg nr="1" direction="in">
2923
+ <not-uninit/>
2924
+ <not-bool/>
2925
+ </arg>
2926
+ </function>
2927
+ <!-- void set_matchpathcon_flags(unsigned int flags); -->
2928
+ <function name="set_matchpathcon_flags">
2929
+ <returnValue type="void"/>
2930
+ <noreturn>false</noreturn>
2931
+ <leak-ignore/>
2932
+ <arg nr="1" direction="in">
2933
+ <not-uninit/>
2934
+ <not-bool/>
2935
+ <valid>0:7</valid>
2936
+ </arg>
2937
+ </function>
2938
+ <!-- void set_matchpathcon_canoncon(int (*f) (const char *path, unsigned lineno, char **context)); -->
2939
+ <function name="set_matchpathcon_canoncon">
2940
+ <returnValue type="void"/>
2941
+ <noreturn>false</noreturn>
2942
+ <leak-ignore/>
2943
+ <arg nr="1" direction="in">
2944
+ <not-uninit/>
2945
+ <not-bool/>
2946
+ </arg>
2947
+ </function>
2948
+ <!-- https://man7.org/linux/man-pages/man3/matchpathcon.3.html -->
2949
+ <!-- int matchpathcon_init(const char *path) -->
2950
+ <function name="matchpathcon_init">
2951
+ <returnValue type="int"/>
2952
+ <noreturn>false</noreturn>
2953
+ <use-retval/>
2954
+ <leak-ignore/>
2955
+ <arg nr="1" direction="in">
2956
+ <not-uninit/>
2957
+ <strz/>
2958
+ </arg>
2959
+ </function>
2960
+ <!-- int matchpathcon_init_prefix(const char *path, const char *prefix); -->
2961
+ <function name="matchpathcon_init_prefix">
2962
+ <returnValue type="int"/>
2963
+ <noreturn>false</noreturn>
2964
+ <use-retval/>
2965
+ <leak-ignore/>
2966
+ <arg nr="1" direction="in">
2967
+ <not-uninit/>
2968
+ <strz/>
2969
+ </arg>
2970
+ <arg nr="2" direction="in">
2971
+ <not-uninit/>
2972
+ <strz/>
2973
+ </arg>
2974
+ </function>
2975
+ <!-- void matchpathcon_fini(void) -->
2976
+ <function name="matchpathcon_fini">
2977
+ <returnValue type="void"/>
2978
+ <noreturn>false</noreturn>
2979
+ <leak-ignore/>
2980
+ </function>
2981
+ <!-- int realpath_not_final(const char *name, char *resolved_path); -->
2982
+ <function name="realpath_not_final">
2983
+ <returnValue type="int"/>
2984
+ <noreturn>false</noreturn>
2985
+ <use-retval/>
2986
+ <leak-ignore/>
2987
+ <arg nr="1" direction="in">
2988
+ <not-uninit/>
2989
+ <not-null/>
2990
+ <strz/>
2991
+ </arg>
2992
+ <arg nr="2" direction="out">
2993
+ <not-null/>
2994
+ <minsize type="value" value="4097" baseType="char"/>
2995
+ </arg>
2996
+ </function>
2997
+ <!-- int matchpathcon(const char *path, mode_t mode, char ** con) -->
2998
+ <function name="matchpathcon">
2999
+ <returnValue type="int"/>
3000
+ <noreturn>false</noreturn>
3001
+ <use-retval/>
3002
+ <leak-ignore/>
3003
+ <arg nr="1" direction="in">
3004
+ <not-uninit/>
3005
+ <not-null/>
3006
+ <strz/>
3007
+ </arg>
3008
+ <arg nr="2" direction="in">
3009
+ <not-uninit/>
3010
+ <not-bool/>
3011
+ </arg>
3012
+ <arg nr="3" direction="out">
3013
+ <not-null/>
3014
+ </arg>
3015
+ </function>
3016
+ <memory>
3017
+ <alloc init="true" arg="3">matchpathcon</alloc>
3018
+ <dealloc>freecon</dealloc>
3019
+ </memory>
3020
+ <!-- int matchpathcon_index(const char *path, mode_t mode, char ** con) -->
3021
+ <function name="matchpathcon_index">
3022
+ <returnValue type="int"/>
3023
+ <noreturn>false</noreturn>
3024
+ <use-retval/>
3025
+ <leak-ignore/>
3026
+ <arg nr="1" direction="in">
3027
+ <not-uninit/>
3028
+ <not-null/>
3029
+ <strz/>
3030
+ </arg>
3031
+ <arg nr="2" direction="in">
3032
+ <not-uninit/>
3033
+ <not-bool/>
3034
+ </arg>
3035
+ <arg nr="3" direction="out">
3036
+ <not-null/>
3037
+ </arg>
3038
+ </function>
3039
+ <memory>
3040
+ <alloc init="true" arg="3">matchpathcon_index</alloc>
3041
+ <dealloc>freecon</dealloc>
3042
+ </memory>
3043
+ <!-- https://man7.org/linux/man-pages/man3/matchpathcon_checkmatches.3.html -->
3044
+ <!-- int matchpathcon_filespec_add(ino_t ino, int specind, const char *file); -->
3045
+ <function name="matchpathcon_filespec_add">
3046
+ <returnValue type="int"/>
3047
+ <noreturn>false</noreturn>
3048
+ <use-retval/>
3049
+ <leak-ignore/>
3050
+ <arg nr="1" direction="in">
3051
+ <not-uninit/>
3052
+ <not-bool/>
3053
+ </arg>
3054
+ <arg nr="2" direction="in">
3055
+ <not-uninit/>
3056
+ <not-bool/>
3057
+ </arg>
3058
+ <arg nr="3" direction="in">
3059
+ <not-null/>
3060
+ <not-uninit/>
3061
+ <strz/>
3062
+ </arg>
3063
+ </function>
3064
+ <!-- void matchpathcon_filespec_destroy(void); -->
3065
+ <function name="matchpathcon_filespec_destroy">
3066
+ <returnValue type="void"/>
3067
+ <noreturn>false</noreturn>
3068
+ <leak-ignore/>
3069
+ </function>
3070
+ <!-- void matchpathcon_filespec_eval(void); -->
3071
+ <function name="matchpathcon_filespec_eval">
3072
+ <returnValue type="void"/>
3073
+ <noreturn>false</noreturn>
3074
+ <leak-ignore/>
3075
+ </function>
3076
+ <!-- void matchpathcon_checkmatches(char *str); -->
3077
+ <function name="matchpathcon_checkmatches">
3078
+ <returnValue type="void"/>
3079
+ <noreturn>false</noreturn>
3080
+ <leak-ignore/>
3081
+ <arg nr="1" direction="in">
3082
+ <!-- unused parameter -->
3083
+ </arg>
3084
+ </function>
3085
+ <!-- https://man7.org/linux/man-pages/man3/matchmediacon.3.html -->
3086
+ <!-- int matchmediacon(const char *media, char ** con); -->
3087
+ <function name="matchmediacon">
3088
+ <returnValue type="int"/>
3089
+ <noreturn>false</noreturn>
3090
+ <use-retval/>
3091
+ <leak-ignore/>
3092
+ <arg nr="1" direction="in">
3093
+ <not-uninit/>
3094
+ <not-null/>
3095
+ <strz/>
3096
+ </arg>
3097
+ <arg nr="2" direction="out">
3098
+ <not-uninit/>
3099
+ </arg>
3100
+ </function>
3101
+ <memory>
3102
+ <alloc init="true" arg="2">matchmediacon</alloc>
3103
+ <dealloc>freecon</dealloc>
3104
+ </memory>
3105
+ <!-- https://man7.org/linux/man-pages/man3/selinux_getenforcemode.3.html -->
3106
+ <!-- int selinux_getenforcemode(int *enforce); -->
3107
+ <function name="selinux_getenforcemode">
3108
+ <returnValue type="int"/>
3109
+ <noreturn>false</noreturn>
3110
+ <use-retval/>
3111
+ <leak-ignore/>
3112
+ <arg nr="1" direction="out">
3113
+ <not-null/>
3114
+ </arg>
3115
+ </function>
3116
+ <!-- https://man7.org/linux/man-pages/man3/selinux_boolean_sub.3.html -->
3117
+ <!-- char *selinux_boolean_sub(const char *boolean_name); -->
3118
+ <function name="selinux_boolean_sub">
3119
+ <returnValue type="char *"/>
3120
+ <noreturn>false</noreturn>
3121
+ <use-retval/>
3122
+ <leak-ignore/>
3123
+ <arg nr="1" direction="in">
3124
+ <not-uninit/>
3125
+ <not-null/>
3126
+ <strz/>
3127
+ </arg>
3128
+ </function>
3129
+ <memory>
3130
+ <alloc init="true">selinux_boolean_sub</alloc>
3131
+ <dealloc>free</dealloc>
3132
+ </memory>
3133
+ <!-- https://man7.org/linux/man-pages/man3/selinux_getpolicytype.3.html -->
3134
+ <!-- int selinux_getpolicytype(char **policytype); -->
3135
+ <function name="selinux_getpolicytype">
3136
+ <returnValue type="int"/>
3137
+ <noreturn>false</noreturn>
3138
+ <use-retval/>
3139
+ <leak-ignore/>
3140
+ <arg nr="1" direction="out">
3141
+ <not-null/>
3142
+ </arg>
3143
+ </function>
3144
+ <memory>
3145
+ <alloc init="true" arg="1">selinux_getpolicytype</alloc>
3146
+ <dealloc>free</dealloc>
3147
+ </memory>
3148
+ <!-- https://man7.org/linux/man-pages/man3/selinux_policy_root.3.html -->
3149
+ <!-- const char *selinux_policy_root(void); -->
3150
+ <function name="selinux_policy_root">
3151
+ <returnValue type="const char *"/>
3152
+ <noreturn>false</noreturn>
3153
+ <use-retval/>
3154
+ <leak-ignore/>
3155
+ </function>
3156
+ <!-- int selinux_set_policy_root(const char *rootpath); -->
3157
+ <function name="selinux_set_policy_root">
3158
+ <returnValue type="int"/>
3159
+ <noreturn>false</noreturn>
3160
+ <use-retval/>
3161
+ <leak-ignore/>
3162
+ <arg nr="1" direction="in">
3163
+ <not-null/>
3164
+ <not-uninit/>
3165
+ <strz/>
3166
+ </arg>
3167
+ </function>
3168
+ <!-- https://man7.org/linux/man-pages/man3/selinux_binary_policy_path.3.html -->
3169
+ <!-- const char *selinux_current_policy_path(void); -->
3170
+ <function name="selinux_current_policy_path">
3171
+ <returnValue type="const char *"/>
3172
+ <noreturn>false</noreturn>
3173
+ <use-retval/>
3174
+ <leak-ignore/>
3175
+ </function>
3176
+ <!-- const char *selinux_binary_policy_path(void); -->
3177
+ <function name="selinux_binary_policy_path">
3178
+ <returnValue type="const char *"/>
3179
+ <noreturn>false</noreturn>
3180
+ <use-retval/>
3181
+ <leak-ignore/>
3182
+ </function>
3183
+ <!-- const char *selinux_failsafe_context_path(void); -->
3184
+ <function name="selinux_failsafe_context_path">
3185
+ <returnValue type="const char *"/>
3186
+ <noreturn>false</noreturn>
3187
+ <use-retval/>
3188
+ <leak-ignore/>
3189
+ </function>
3190
+ <!-- const char *selinux_removable_context_path(void); -->
3191
+ <function name="selinux_removable_context_path">
3192
+ <returnValue type="const char *"/>
3193
+ <noreturn>false</noreturn>
3194
+ <use-retval/>
3195
+ <leak-ignore/>
3196
+ </function>
3197
+ <!-- const char *selinux_default_context_path(void); -->
3198
+ <function name="selinux_default_context_path">
3199
+ <returnValue type="const char *"/>
3200
+ <noreturn>false</noreturn>
3201
+ <use-retval/>
3202
+ <leak-ignore/>
3203
+ </function>
3204
+ <!-- const char *selinux_user_contexts_path(void); -->
3205
+ <function name="selinux_user_contexts_path">
3206
+ <returnValue type="const char *"/>
3207
+ <noreturn>false</noreturn>
3208
+ <use-retval/>
3209
+ <leak-ignore/>
3210
+ </function>
3211
+ <!-- const char *selinux_file_context_path(void); -->
3212
+ <function name="selinux_file_context_path">
3213
+ <returnValue type="const char *"/>
3214
+ <noreturn>false</noreturn>
3215
+ <use-retval/>
3216
+ <leak-ignore/>
3217
+ </function>
3218
+ <!-- const char *selinux_file_context_homedir_path(void); -->
3219
+ <function name="selinux_file_context_homedir_path">
3220
+ <returnValue type="const char *"/>
3221
+ <noreturn>false</noreturn>
3222
+ <use-retval/>
3223
+ <leak-ignore/>
3224
+ </function>
3225
+ <!-- const char *selinux_file_context_local_path(void); -->
3226
+ <function name="selinux_file_context_local_path">
3227
+ <returnValue type="const char *"/>
3228
+ <noreturn>false</noreturn>
3229
+ <use-retval/>
3230
+ <leak-ignore/>
3231
+ </function>
3232
+ <!-- const char *selinux_file_context_subs_path(void); -->
3233
+ <function name="selinux_file_context_subs_path">
3234
+ <returnValue type="const char *"/>
3235
+ <noreturn>false</noreturn>
3236
+ <use-retval/>
3237
+ <leak-ignore/>
3238
+ </function>
3239
+ <!-- const char *selinux_file_context_subs_dist_path(void); -->
3240
+ <function name="selinux_file_context_subs_dist_path">
3241
+ <returnValue type="const char *"/>
3242
+ <noreturn>false</noreturn>
3243
+ <use-retval/>
3244
+ <leak-ignore/>
3245
+ </function>
3246
+ <!-- const char *selinux_homedir_context_path(void); -->
3247
+ <function name="selinux_homedir_context_path">
3248
+ <returnValue type="const char *"/>
3249
+ <noreturn>false</noreturn>
3250
+ <use-retval/>
3251
+ <leak-ignore/>
3252
+ </function>
3253
+ <!-- const char *selinux_media_context_path(void); -->
3254
+ <function name="selinux_media_context_path">
3255
+ <returnValue type="const char *"/>
3256
+ <noreturn>false</noreturn>
3257
+ <use-retval/>
3258
+ <leak-ignore/>
3259
+ </function>
3260
+ <!-- const char *selinux_virtual_domain_context_path(void); -->
3261
+ <function name="selinux_virtual_domain_context_path">
3262
+ <returnValue type="const char *"/>
3263
+ <noreturn>false</noreturn>
3264
+ <use-retval/>
3265
+ <leak-ignore/>
3266
+ </function>
3267
+ <!-- const char *selinux_virtual_image_context_path(void); -->
3268
+ <function name="selinux_virtual_image_context_path">
3269
+ <returnValue type="const char *"/>
3270
+ <noreturn>false</noreturn>
3271
+ <use-retval/>
3272
+ <leak-ignore/>
3273
+ </function>
3274
+ <!-- const char *selinux_lxc_contexts_path(void); -->
3275
+ <function name="selinux_lxc_contexts_path">
3276
+ <returnValue type="const char *"/>
3277
+ <noreturn>false</noreturn>
3278
+ <use-retval/>
3279
+ <leak-ignore/>
3280
+ </function>
3281
+ <!-- const char *selinux_x_context_path(void); -->
3282
+ <function name="selinux_x_context_path">
3283
+ <returnValue type="const char *"/>
3284
+ <noreturn>false</noreturn>
3285
+ <use-retval/>
3286
+ <leak-ignore/>
3287
+ </function>
3288
+ <!-- const char *selinux_sepgsql_context_path(void); -->
3289
+ <function name="selinux_sepgsql_context_path">
3290
+ <returnValue type="const char *"/>
3291
+ <noreturn>false</noreturn>
3292
+ <use-retval/>
3293
+ <leak-ignore/>
3294
+ </function>
3295
+ <!-- const char *selinux_openrc_contexts_path(void); -->
3296
+ <function name="selinux_openrc_contexts_path">
3297
+ <returnValue type="const char *"/>
3298
+ <noreturn>false</noreturn>
3299
+ <use-retval/>
3300
+ <leak-ignore/>
3301
+ </function>
3302
+ <!-- const char *selinux_openssh_contexts_path(void); -->
3303
+ <function name="selinux_openssh_contexts_path">
3304
+ <returnValue type="const char *"/>
3305
+ <noreturn>false</noreturn>
3306
+ <use-retval/>
3307
+ <leak-ignore/>
3308
+ </function>
3309
+ <!-- const char *selinux_snapperd_contexts_path(void); -->
3310
+ <function name="selinux_snapperd_contexts_path">
3311
+ <returnValue type="const char *"/>
3312
+ <noreturn>false</noreturn>
3313
+ <use-retval/>
3314
+ <leak-ignore/>
3315
+ </function>
3316
+ <!-- const char *selinux_systemd_contexts_path(void); -->
3317
+ <function name="selinux_systemd_contexts_path">
3318
+ <returnValue type="const char *"/>
3319
+ <noreturn>false</noreturn>
3320
+ <use-retval/>
3321
+ <leak-ignore/>
3322
+ </function>
3323
+ <!-- const char *selinux_contexts_path(void); -->
3324
+ <function name="selinux_contexts_path">
3325
+ <returnValue type="const char *"/>
3326
+ <noreturn>false</noreturn>
3327
+ <use-retval/>
3328
+ <leak-ignore/>
3329
+ </function>
3330
+ <!-- const char *selinux_securetty_types_path(void); -->
3331
+ <function name="selinux_securetty_types_path">
3332
+ <returnValue type="const char *"/>
3333
+ <noreturn>false</noreturn>
3334
+ <use-retval/>
3335
+ <leak-ignore/>
3336
+ </function>
3337
+ <!-- const char *selinux_booleans_subs_path(void); -->
3338
+ <function name="selinux_booleans_subs_path">
3339
+ <returnValue type="const char *"/>
3340
+ <noreturn>false</noreturn>
3341
+ <use-retval/>
3342
+ <leak-ignore/>
3343
+ </function>
3344
+ <!-- const char *selinux_booleans_path(void); -->
3345
+ <function name="selinux_booleans_path">
3346
+ <returnValue type="const char *"/>
3347
+ <noreturn>false</noreturn>
3348
+ <use-retval/>
3349
+ <leak-ignore/>
3350
+ </function>
3351
+ <!-- const char *selinux_customizable_types_path(void); -->
3352
+ <function name="selinux_customizable_types_path">
3353
+ <returnValue type="const char *"/>
3354
+ <noreturn>false</noreturn>
3355
+ <use-retval/>
3356
+ <leak-ignore/>
3357
+ </function>
3358
+ <!-- const char *selinux_users_path(void); -->
3359
+ <function name="selinux_users_path">
3360
+ <returnValue type="const char *"/>
3361
+ <noreturn>false</noreturn>
3362
+ <use-retval/>
3363
+ <leak-ignore/>
3364
+ </function>
3365
+ <!-- const char *selinux_usersconf_path(void); -->
3366
+ <function name="selinux_usersconf_path">
3367
+ <returnValue type="const char *"/>
3368
+ <noreturn>false</noreturn>
3369
+ <use-retval/>
3370
+ <leak-ignore/>
3371
+ </function>
3372
+ <!-- const char *selinux_translations_path(void); -->
3373
+ <function name="selinux_translations_path">
3374
+ <returnValue type="const char *"/>
3375
+ <noreturn>false</noreturn>
3376
+ <use-retval/>
3377
+ <leak-ignore/>
3378
+ </function>
3379
+ <!-- const char *selinux_colors_path(void); -->
3380
+ <function name="selinux_colors_path">
3381
+ <returnValue type="const char *"/>
3382
+ <noreturn>false</noreturn>
3383
+ <use-retval/>
3384
+ <leak-ignore/>
3385
+ </function>
3386
+ <!-- const char *selinux_netfilter_context_path(void); -->
3387
+ <function name="selinux_netfilter_context_path">
3388
+ <returnValue type="const char *"/>
3389
+ <noreturn>false</noreturn>
3390
+ <use-retval/>
3391
+ <leak-ignore/>
3392
+ </function>
3393
+ <!-- const char *selinux_path(void); -->
3394
+ <function name="selinux_path">
3395
+ <returnValue type="const char *"/>
3396
+ <noreturn>false</noreturn>
3397
+ <use-retval/>
3398
+ <leak-ignore/>
3399
+ </function>
3400
+ <!-- https://man7.org/linux/man-pages/man3/selinux_check_securetty_context.3.html -->
3401
+ <!-- int selinux_check_securetty_context(const char * tty_context); -->
3402
+ <function name="selinux_check_securetty_context">
3403
+ <returnValue type="int"/>
3404
+ <noreturn>false</noreturn>
3405
+ <use-retval/>
3406
+ <leak-ignore/>
3407
+ <arg nr="1" direction="in">
3408
+ <not-null/>
3409
+ <not-uninit/>
3410
+ <strz/>
3411
+ </arg>
3412
+ </function>
3413
+ <!-- https://man7.org/linux/man-pages/man3/init_selinuxmnt.3.html -->
3414
+ <!-- void set_selinuxmnt(const char *mnt); -->
3415
+ <function name="set_selinuxmnt">
3416
+ <returnValue type="void"/>
3417
+ <noreturn>false</noreturn>
3418
+ <leak-ignore/>
3419
+ <arg nr="1" direction="in">
3420
+ <not-null/>
3421
+ <not-uninit/>
3422
+ <strz/>
3423
+ </arg>
3424
+ </function>
3425
+ <!-- void fini_selinuxmnt(void); -->
3426
+ <function name="fini_selinuxmnt">
3427
+ <returnValue type="void"/>
3428
+ <noreturn>false</noreturn>
3429
+ <leak-ignore/>
3430
+ </function>
3431
+ <!-- int selinuxfs_exists(void); -->
3432
+ <function name="selinuxfs_exists">
3433
+ <returnValue type="int"/>
3434
+ <noreturn>false</noreturn>
3435
+ <use-retval/>
3436
+ <leak-ignore/>
3437
+ </function>
3438
+ <!-- https://man7.org/linux/man-pages/man3/is_context_customizable.3.html -->
3439
+ <!-- int is_context_customizable(const char * scontext); -->
3440
+ <function name="is_context_customizable">
3441
+ <returnValue type="int"/>
3442
+ <noreturn>false</noreturn>
3443
+ <use-retval/>
3444
+ <leak-ignore/>
3445
+ <arg nr="1" direction="in">
3446
+ <not-null/>
3447
+ <not-uninit/>
3448
+ <strz/>
3449
+ </arg>
3450
+ </function>
3451
+ <!-- https://man7.org/linux/man-pages/man3/selinux_raw_context_to_color.3.html -->
3452
+ <!-- int selinux_raw_context_to_color(const char * raw, char **color_str); -->
3453
+ <function name="selinux_raw_context_to_color">
3454
+ <returnValue type="int"/>
3455
+ <noreturn>false</noreturn>
3456
+ <use-retval/>
3457
+ <leak-ignore/>
3458
+ <arg nr="1" direction="in">
3459
+ <not-null/>
3460
+ <not-uninit/>
3461
+ <strz/>
3462
+ </arg>
3463
+ <arg nr="2" direction="out">
3464
+ <not-null/>
3465
+ </arg>
3466
+ </function>
3467
+ <memory>
3468
+ <alloc init="true" arg="2">selinux_raw_context_to_color</alloc>
3469
+ <dealloc>free</dealloc>
3470
+ </memory>
3471
+ <!-- int selinux_trans_to_raw_context(const char * trans, char ** rawp); -->
3472
+ <function name="selinux_trans_to_raw_context">
3473
+ <returnValue type="int"/>
3474
+ <noreturn>false</noreturn>
3475
+ <use-retval/>
3476
+ <leak-ignore/>
3477
+ <arg nr="1" direction="in">
3478
+ <not-null/>
3479
+ <not-uninit/>
3480
+ <strz/>
3481
+ </arg>
3482
+ <arg nr="2" direction="out">
3483
+ <not-null/>
3484
+ </arg>
3485
+ </function>
3486
+ <memory>
3487
+ <alloc init="true" arg="2">selinux_trans_to_raw_context</alloc>
3488
+ <dealloc>free</dealloc>
3489
+ </memory>
3490
+ <!-- int selinux_raw_to_trans_context(const char * raw, char ** transp); -->
3491
+ <function name="selinux_raw_to_trans_context">
3492
+ <returnValue type="int"/>
3493
+ <noreturn>false</noreturn>
3494
+ <use-retval/>
3495
+ <leak-ignore/>
3496
+ <arg nr="1" direction="in">
3497
+ <not-null/>
3498
+ <not-uninit/>
3499
+ <strz/>
3500
+ </arg>
3501
+ <arg nr="2" direction="out">
3502
+ <not-null/>
3503
+ </arg>
3504
+ </function>
3505
+ <memory>
3506
+ <alloc init="true" arg="2">selinux_raw_to_trans_context</alloc>
3507
+ <dealloc>free</dealloc>
3508
+ </memory>
3509
+ <!-- https://man7.org/linux/man-pages/man3/getseuserbyname.3.html -->
3510
+ <!-- int getseuserbyname(const char *linuxuser, char **seuser, char **level); -->
3511
+ <function name="getseuserbyname">
3512
+ <returnValue type="int"/>
3513
+ <noreturn>false</noreturn>
3514
+ <use-retval/>
3515
+ <leak-ignore/>
3516
+ <arg nr="1" direction="in">
3517
+ <not-null/>
3518
+ <not-uninit/>
3519
+ <strz/>
3520
+ </arg>
3521
+ <arg nr="2" direction="out">
3522
+ <not-null/>
3523
+ </arg>
3524
+ <arg nr="3" direction="out">
3525
+ <not-null/>
3526
+ </arg>
3527
+ </function>
3528
+ <memory>
3529
+ <alloc init="true" arg="2">getseuserbyname</alloc>
3530
+ <dealloc>free</dealloc>
3531
+ </memory>
3532
+ <memory>
3533
+ <alloc init="true" arg="3">getseuserbyname</alloc>
3534
+ <dealloc>free</dealloc>
3535
+ </memory>
3536
+ <!-- int getseuser(const char *username, const char *service, char **r_seuser, char **r_level); -->
3537
+ <function name="getseuser">
3538
+ <returnValue type="int"/>
3539
+ <noreturn>false</noreturn>
3540
+ <use-retval/>
3541
+ <leak-ignore/>
3542
+ <arg nr="1" direction="in">
3543
+ <not-null/>
3544
+ <not-uninit/>
3545
+ <strz/>
3546
+ </arg>
3547
+ <arg nr="2" direction="in">
3548
+ <not-uninit/>
3549
+ <strz/>
3550
+ </arg>
3551
+ <arg nr="3" direction="out">
3552
+ <not-null/>
3553
+ </arg>
3554
+ <arg nr="4" direction="out">
3555
+ <not-null/>
3556
+ </arg>
3557
+ </function>
3558
+ <memory>
3559
+ <alloc init="true" arg="3">getseuser</alloc>
3560
+ <dealloc>free</dealloc>
3561
+ </memory>
3562
+ <memory>
3563
+ <alloc init="true" arg="4">getseuser</alloc>
3564
+ <dealloc>free</dealloc>
3565
+ </memory>
3566
+ <!-- https://man7.org/linux/man-pages/man3/selinux_file_context_cmp.3.html -->
3567
+ <!-- int selinux_file_context_cmp(const char * a, const char * b); -->
3568
+ <function name="selinux_file_context_cmp">
3569
+ <returnValue type="int"/>
3570
+ <noreturn>false</noreturn>
3571
+ <use-retval/>
3572
+ <leak-ignore/>
3573
+ <arg nr="1" direction="in">
3574
+ <not-null/>
3575
+ <not-uninit/>
3576
+ <strz/>
3577
+ </arg>
3578
+ <arg nr="2" direction="in">
3579
+ <not-null/>
3580
+ <not-uninit/>
3581
+ <strz/>
3582
+ </arg>
3583
+ </function>
3584
+ <!-- https://man7.org/linux/man-pages/man3/selinux_file_context_verify.3.html -->
3585
+ <!-- int selinux_file_context_verify(const char *path, mode_t mode); -->
3586
+ <function name="selinux_file_context_verify">
3587
+ <returnValue type="int"/>
3588
+ <noreturn>false</noreturn>
3589
+ <use-retval/>
3590
+ <leak-ignore/>
3591
+ <arg nr="1" direction="in">
3592
+ <not-null/>
3593
+ <not-uninit/>
3594
+ <strz/>
3595
+ </arg>
3596
+ <arg nr="2" direction="in">
3597
+ <not-uninit/>
3598
+ <not-bool/>
3599
+ </arg>
3600
+ </function>
3601
+ <!-- https://man7.org/linux/man-pages/man3/selinux_lsetfilecon_default.3.html -->
3602
+ <!-- int selinux_lsetfilecon_default(const char *path); -->
3603
+ <function name="selinux_lsetfilecon_default">
3604
+ <returnValue type="int"/>
3605
+ <noreturn>false</noreturn>
3606
+ <use-retval/>
3607
+ <leak-ignore/>
3608
+ <arg nr="1" direction="in">
3609
+ <not-null/>
3610
+ <not-uninit/>
3611
+ <strz/>
3612
+ </arg>
3613
+ </function>
3614
+ <!-- void selinux_reset_config(void); -->
3615
+ <function name="selinux_reset_config">
3616
+ <returnValue type="void"/>
3617
+ <noreturn>false</noreturn>
3618
+ <leak-ignore/>
3619
+ <warn severity="warning">This function is not thread safe. Be very sure that no other threads are calling into libselinux when this is called.</warn>
3620
+ </function>
3621
+ </def>