#define MAC_DENY 0b001 #define MAC_DENY_AND_SCREAM 0b010 #define MAC_KILL 0b100 int set_mac_enforcement(unsigned long request);
This syscall sets the action to take for enforcement on MAC issues as explained in Mandatory access control (MAC).
The syscall returns 0
on success or -1
on failure, with the
following errno:
EACCES
: MAC was locked.