GETZONEPATH(1) User Commands GETZONEPATH(1)

NAME

getzonepath - display root path of the zone corresponding to the
specified label

SYNOPSIS

/usr/bin/getzonepath {sensitivity-label}

DESCRIPTION

getzonepath displays the root pathname of the running labeled zone
that corresponds to the specified sensitivity label. The returned
pathname is relative to the caller's root pathname, and has the
specified sensitivity label.


If the caller is in the global zone, the returned pathname is not
traversable unless the caller's processes have the file_dac_search
privilege.


If the caller is in a labeled zone, the caller's label must dominate
the specified label. Access to files under the returned pathname is
restricted to read-only operations.

ATTRIBUTES

See attributes(7) for descriptions of the following attributes:


+---------------+-----------------+
|ATTRIBUTE TYPE | ATTRIBUTE VALUE |
+---------------+-----------------+
|Stability | Committed |
+---------------+-----------------+

DIAGNOSTICS

getzonepath exits with one of the following values:

0
Success


1
Usage error


2
Failure; error message is the system error number from
getzonerootbylabel(3TSOL)

SEE ALSO

getzonerootbylabel(3TSOL), attributes(7)


Acquiring a Sensitivity Label in Solaris Trusted Extensions
Developer's Guide

NOTES

The functionality described on this manual page is available only if
the system is configured with Trusted Extensions.

July 20, 2007 GETZONEPATH(1)