Blame refpolicy/policy/modules/kernel/mcs.if
|
Chris PeBenito |
8cf671 |
## <summary>Multicategory security policy</summary>
|
|
Chris PeBenito |
8cf671 |
## <required val="true">
|
|
Chris PeBenito |
8cf671 |
## Contains attributes used in MCS policy.
|
|
Chris PeBenito |
8cf671 |
## </required>
|
|
Chris PeBenito |
8cf671 |
|
|
Chris PeBenito |
8cf671 |
########################################
|
|
Chris PeBenito |
8cf671 |
## <summary>
|
|
Chris PeBenito |
8cf671 |
## This domain is allowed to sigkill and sigstop
|
|
Chris PeBenito |
8cf671 |
## all domains regardless of their MCS level.
|
|
Chris PeBenito |
8cf671 |
## </summary>
|
|
Chris PeBenito |
8cf671 |
## <param name="domain">
|
|
Chris PeBenito |
8cf671 |
## <summary>
|
|
Chris PeBenito |
8cf671 |
## Domain target for user exemption.
|
|
Chris PeBenito |
8cf671 |
## </summary>
|
|
Chris PeBenito |
8cf671 |
## </param>
|
|
Chris PeBenito |
8cf671 |
#
|
|
Chris PeBenito |
8cf671 |
interface(`mcs_killall',`
|
|
Chris PeBenito |
8cf671 |
gen_require(`
|
|
Chris PeBenito |
8cf671 |
attribute mcskillall;
|
|
Chris PeBenito |
8cf671 |
')
|
|
Chris PeBenito |
8cf671 |
|
|
Chris PeBenito |
8cf671 |
typeattribute $1 mcskillall;
|
|
Chris PeBenito |
8cf671 |
')
|
|
Chris PeBenito |
9779f0 |
|
|
Chris PeBenito |
9779f0 |
########################################
|
|
Chris PeBenito |
9779f0 |
## <summary>
|
|
Chris PeBenito |
9779f0 |
## Make specified domain MCS trusted
|
|
Chris PeBenito |
9779f0 |
## for setting any category set for
|
|
Chris PeBenito |
9779f0 |
## the processes it executes.
|
|
Chris PeBenito |
9779f0 |
## </summary>
|
|
Chris PeBenito |
9779f0 |
## <param name="domain">
|
|
Chris PeBenito |
9779f0 |
## <summary>
|
|
Chris PeBenito |
9779f0 |
## Domain target for user exemption.
|
|
Chris PeBenito |
9779f0 |
## </summary>
|
|
Chris PeBenito |
9779f0 |
## </param>
|
|
Chris PeBenito |
9779f0 |
#
|
|
Chris PeBenito |
9779f0 |
interface(`mcs_process_set_categories',`
|
|
Chris PeBenito |
9779f0 |
gen_require(`
|
|
Chris PeBenito |
9779f0 |
attribute mcssetcats;
|
|
Chris PeBenito |
9779f0 |
')
|
|
Chris PeBenito |
9779f0 |
|
|
Chris PeBenito |
9779f0 |
typeattribute $1 mcssetcats;
|
|
Chris PeBenito |
9779f0 |
')
|