diff --git a/man7/unix.7 b/man7/unix.7 index 298521d4a..42f0b31ee 100644 --- a/man7/unix.7 +++ b/man7/unix.7 @@ -359,14 +359,12 @@ by the policy or by a process with the required permissions. .IP The argument to .BR getsockopt (2) -is a pointer to a -buffer of the specified length in bytes +is a pointer to a buffer of the specified length in bytes into which the security context string will be copied. If the buffer length is less than the length of the security context string, then .BR getsockopt (2) -will return the required length -via +will return the required length via .I optlen and return \-1 and sets .I errno @@ -375,25 +373,25 @@ to The caller should allocate at least .BR NAME_MAX bytes for the buffer initially although this is not guaranteed -to be sufficient. Resizing the buffer to the returned length +to be sufficient. +Resizing the buffer to the returned length and retrying may be necessary. .IP The security context string may include a terminating null character in the returned length, but is not guaranteed to do so: a security context "foo" might be represented as either {'f','o','o'} of length 3 or {'f','o','o','\\0'} of length 4, which are considered to be -interchangeable. It is printable, does not contain non-terminating -null characters, and is in an unspecified encoding (in particular it +interchangeable. +It is printable, does not contain non-terminating null characters, +and is in an unspecified encoding (in particular it is not guaranteed to be ASCII or UTF-8). .IP The use of this option for sockets in the .B AF_UNIX -address family -is supported since Linux 2.6.2 for connected stream sockets and +address family is supported since Linux 2.6.2 for connected stream sockets and since Linux 4.18, .\" commit 0b811db2cb2aabc910e53d34ebb95a15997c33e7 -also for stream and datagram socket pairs created -using +also for stream and datagram socket pairs created using .BR socketpair (2). .\" .SS Autobind feature