void mac_selinux_create_socket_clear(void) {
#ifdef HAVE_SELINUX
PROTECT_ERRNO;
if (!mac_selinux_use())
return;
setsockcreatecon_raw(NULL);
#endif
}
static void
clear_selinux_label (void)
{
#ifdef HAVE_LIBSELINUX
if (selinux_label) {
if (setsockcreatecon_raw (NULL) == -1) {
perror ("selinux-label: setsockcreatecon_raw(NULL)");
exit (EXIT_FAILURE);
}
}
#endif
}
static void
set_selinux_label (void)
{
if (selinux_label) {
#ifdef HAVE_LIBSELINUX
if (setsockcreatecon_raw (selinux_label) == -1) {
perror ("selinux-label: setsockcreatecon_raw");
exit (EXIT_FAILURE);
}
#else
fprintf (stderr,
"%s: --selinux-label option used, but "
"this binary was compiled without SELinux support\n",
program_name);
exit (EXIT_FAILURE);
#endif
}
}
