---

13.64.2 getfilecon

Documentation:
man getfilecon

Gnulib module: selinux-h

Portability problems fixed by Gnulib:

• This function exists only on Linux and is therefore missing on all non-glibc platforms: macOS 14, FreeBSD 14.0, NetBSD 10.0, OpenBSD 6.7, Minix 3.1.8, AIX 7.1, HP-UX 11.31, Solaris 11.4, Cygwin 2.9, mingw, MSVC 14, Android 9.0. On those platforms, this module provides a stub that always sets errno to ENOTSUP and returns ‘-1’.
• On systems with SELinux support, this module provides a wrapper for the getfilecon function that insulates the caller from API-nonconforming behavior. Without this wrapper, getfilecon can return ‘0’ and set the context pointer to NULL, and in another scenario can return ‘10’ and set the context pointer to ‘unlabeled’. This wrapper returns ‘-1’ in each case and sets errno to ENOTSUP and ENODATA respectively. While the conditions that can provoke such behavior are rare, the average caller does not handle them because the possibility of such behavior is not documented.

Portability problems not fixed by Gnulib: