GETZONEPATH(1) User Commands GETZONEPATH(1)


NAME


getzonepath - display root path of the zone corresponding to the
specified label

SYNOPSIS


/usr/bin/getzonepath {sensitivity-label}


DESCRIPTION


getzonepath displays the root pathname of the running labeled zone that
corresponds to the specified sensitivity label. The returned pathname is
relative to the caller's root pathname, and has the specified sensitivity
label.


If the caller is in the global zone, the returned pathname is not
traversable unless the caller's processes have the file_dac_search
privilege.


If the caller is in a labeled zone, the caller's label must dominate the
specified label. Access to files under the returned pathname is
restricted to read-only operations.

ATTRIBUTES


See attributes(7) for descriptions of the following attributes:


+---------------+-----------------+
|ATTRIBUTE TYPE | ATTRIBUTE VALUE |
+---------------+-----------------+
|Stability | Committed |
+---------------+-----------------+

DIAGNOSTICS


getzonepath exits with one of the following values:

0
Success


1
Usage error


2
Failure; error message is the system error number from
getzonerootbylabel(3TSOL)


SEE ALSO


getzonerootbylabel(3TSOL), attributes(7)


Acquiring a Sensitivity Label in Solaris Trusted Extensions Developer's
Guide

NOTES


The functionality described on this manual page is available only if the
system is configured with Trusted Extensions.


July 20, 2007 GETZONEPATH(1)