The libsecpol library API provides functions for systems that use
security policies.
You can use the
libsecpol functions to perform the following tasks:
- Easily reduce privileges after initialization.
- Spawn child processes with reduced privileges.
- Perform fine-grained permission checking.
- Translate type names to type IDs and vice versa.
You can easily design a program that uses libsecpol to work both with and
without security policies.