FormatMountLabel returns a string to be used by the mount command.

FormatMountLabelByType returns a string to be used by the mount command.

Deprecated: The GenLabels function is only to be used during the transition to the official API.

Init initialises the labeling system.

InitLabels returns the process label and file labels to be used within the container.

IsShared checks that the label includes a "shared" mark.

Relabel changes the label of path and all the entries beneath the path.

RelabelNeeded checks whether the user requested a relabel.

ReleaseLabel will remove the reservation of the MCS label.

ReserveLabel will record the fact that the MCS label has already been used.

SetFileCreateLabel tells the kernel the label for all files to be created.

SetFileLabel modifies the "path" label to the specified file label.

Validate checks that the label does not include unexpected options.

ClearLabels will clear all reserved labels Deprecated: use selinux.ClearLabels.

DisableSecOpt returns a security opt that can disable labeling support for future container processes Deprecated: use selinux.DisableSecOpt.

DupSecOpt takes a process label and returns security options that can be used to set duplicate labels on future container processes Deprecated: use selinux.DupSecOpt.

FileLabel returns the label for specified path Deprecated: use selinux.FileLabel.

KeyLabel retrieves the current default kernel keyring label setting Deprecated: use selinux.KeyLabel.

PidLabel will return the label of the process running with the specified pid Deprecated: use selinux.PidLabel.

ProcessLabel returns the process label that the kernel will assign to the next program executed by the current process.

Deprecated: use selinux.ROFileLabel.

SetKeyLabel takes a process label and tells the kernel to assign the label to the next kernel keyring that gets created Deprecated: use selinux.SetKeyLabel.

SetProcessLabel takes a process label and tells the kernel to assign the label to the next program executed by the current process.

SetSocketLabel takes a process label and tells the kernel to assign the label to the next socket that gets created Deprecated: use selinux.SetSocketLabel.

SocketLabel retrieves the current default socket label setting Deprecated: use selinux.SocketLabel.