diff --git a/libraries/libapparmor/doc/aa_find_mountpoint.pod b/libraries/libapparmor/doc/aa_find_mountpoint.pod index 28f25f4bc..98fa27651 100644 --- a/libraries/libapparmor/doc/aa_find_mountpoint.pod +++ b/libraries/libapparmor/doc/aa_find_mountpoint.pod @@ -22,24 +22,36 @@ =head1 NAME +aa_is_enabled - determine if apparmor is available + aa_find_mountpoint - find where the apparmor interface filesystem is mounted =head1 SYNOPSIS B<#include Esys/apparmor.hE> +B + B Link with B<-lapparmor> when compiling. =head1 DESCRIPTION +The aa_is_enabled function returns true (1) if apparmor is enabled. If it +isn't it sets the errno to reflect the reason it is not enabled and returns 0. + The aa_find_mountpoint function finds where the apparmor filesystem is mounted on the system, and returns a string containing the mount path. It is the caller's responsibility to free(3) the returned path. =head1 RETURN VALUE +B +On success 1 is returned. On error, 0 is returned, and errno(3) is set +appropriately. + +B On success zero is returned. On error, -1 is returned, and errno(3) is set appropriately. @@ -47,6 +59,36 @@ appropriately. =over 4 +B + +=item B + +AppArmor extensions to the system are not available. + +=item B + +AppArmor is available on the system but has been disabled at boot. + +=item B + +AppArmor is available (and maybe even enforcing policy) but the interface is +not available. + +=item B + +Insufficient memory was available. + +=item B + +Did not have sufficient permissions to determine if AppArmor is enabled. + +=item B + ++Did not have sufficient permissions to determine if AppArmor is enabled. + + +B + =item B Insufficient memory was available. diff --git a/libraries/libapparmor/doc/aa_getcon.pod b/libraries/libapparmor/doc/aa_getcon.pod index 258e0b680..7ca816343 100644 --- a/libraries/libapparmor/doc/aa_getcon.pod +++ b/libraries/libapparmor/doc/aa_getcon.pod @@ -33,7 +33,7 @@ aa_getpeercon - get the confinement of a socket's other end (peer) B<#include Esys/apparmor.hE> B + char **mode);> B @@ -93,6 +93,10 @@ Access to the specified I was denied. The specified I does not exist or is not visible. +=item B + +The confinement data is to large to fit in the supplied buffer. + =back =head1 BUGS