NAME

smackaccess - Determine if a rule is permitted by the current Smack policy

SYNOPSIS

smackaccess <subject> <object> <access_type>

DESCRIPTION

smackaccess allows for the caller to test if a process has access to another object and the type of access that is granted.

OPTIONS

subject

The context of the process that will be doing the access request

object

The context of the filesystem object or process that is going to be accessed

access_type

The type of access that will be requested e.g. "rwaxt", which respectively refer to read, write, append, execute and transmute.

RETURN VALUE

On success the result of the test will be printed, 1 indicates that the rule is permitted by the policy and 0 indicates that such an action would fail.

EXIT STATUS

On success smackaccess returns 0 and 1 on failure.