NAME

       semanage_iterate - SELinux Management API

SYNOPSIS

       The following iterate function is supported for any semanage record.
       Replace the function and object name as necessary.

       extern int ITERATE_FUNCTION (
            semanage_handle_t *handle,
            int (*handler) (
                          const semanage_OBJECT_t *object,
                          void *varg),
            void *handler_arg);

DESCRIPTION

       Behavior:
              The  iterate  function  will  execute the specified handler over all objects in the
              selected location. An arbitrary argument can be passed into  the  handler  function
              along with each object.

              The  object  passed  in  is  property  of  the  libsemanage library, and may not be
              modified or preserved - use semanage_OBJECT_clone if that is necessary.

              The handler code may not invoke any semanage write requests  for  the  same  object
              type  (i.e. modifying the underlying store is not allowed). The iterate function is
              reentrant only while inside a transaction (see semanage_begin_transaction ). It  is
              not  safe  to  execute  other semanage read or write requests within iterate if not
              inside a transaction. The handler may return -1 to signal error exit, 0  to  signal
              continue,  and  1  to  signal successful exit early (the iterate function will stop
              accordingly).

       Parameters:
              The handle is used to track persistent state across semanage calls, and  for  error
              reporting.  The  handler is the function to execute, with handler_arg as its second
              parameter, and each object as its first parameter.

       Requirements:
              This  function  requires  an   semanage   connection   to   be   established   (see
              semanage_connect(3) )

RETURN VALUE

       In case of failure, -1 is returned, and the semanage error callback is invoked, describing
       the error.  Otherwise a non-negative integer is  returned  (a  commit  number).  The  same
       number will be returned by all other semanage object read calls until the next commit.

SEE ALSO

       semanage_handle_create(3), semanage_connect(3),