Re: [PATCH 1/2] SELinux Context Label based audit filtering

The public interface could even be along the lines of: selinux_get_role_from_sid selinux_get_user_from_sid selinux_get_type_from_sid selinux_get_range_from_sid That is ok; they can be internally implemented via common helper as appropriate. It should return const char *, and preferably return it via argument pointer, returning int as the return value to indicate error status.