Chris PeBenito 26deab
<html>
Chris PeBenito 26deab
<head>
Chris PeBenito 26deab
<title>
Chris PeBenito 26deab
 Security Enhanced Linux Reference Policy
Chris PeBenito 26deab
 </title>
Chris PeBenito 26deab
<style type="text/css" media="all">@import "style.css";</style>
Chris PeBenito 26deab
</head>
Chris PeBenito 26deab
<body>
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
	
Chris PeBenito 26deab
		
Chris PeBenito 26deab
		admin
Chris PeBenito 26deab
		
Chris PeBenito 26deab
		
Chris PeBenito 26deab
		
Chris PeBenito 26deab
	
Chris PeBenito 26deab
		
Chris PeBenito 26deab
		apps
Chris PeBenito 26deab
		
Chris PeBenito 26deab
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			cdrecord
Chris PeBenito 26deab
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			gpg
Chris PeBenito 26deab
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			irc
Chris PeBenito 26deab
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			java
Chris PeBenito 26deab
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			loadkeys
Chris PeBenito 26deab
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			lockdev
Chris PeBenito 26deab
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			screen
Chris PeBenito 26deab
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			slocate
Chris PeBenito 26deab
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			webalizer
Chris PeBenito 26deab
		
Chris PeBenito 26deab
		
Chris PeBenito 26deab
	
Chris PeBenito 26deab
		
Chris PeBenito 26deab
		kernel
Chris PeBenito 26deab
		
Chris PeBenito 26deab
		
Chris PeBenito 26deab
		
Chris PeBenito 26deab
	
Chris PeBenito 26deab
		
Chris PeBenito 26deab
		services
Chris PeBenito 26deab
		
Chris PeBenito 26deab
		
Chris PeBenito 26deab
		
Chris PeBenito 26deab
	
Chris PeBenito 26deab
		
Chris PeBenito 26deab
		system
Chris PeBenito 26deab
		
Chris PeBenito 26deab
		
Chris PeBenito 26deab
		
Chris PeBenito 26deab
	
Chris PeBenito 26deab
	

Chris PeBenito 26deab
	* Global Booleans 
Chris PeBenito 26deab
	

Chris PeBenito 26deab
	* Global Tunables 
Chris PeBenito 26deab
	


Chris PeBenito 26deab
	* Layer Index
Chris PeBenito 26deab
	

Chris PeBenito 26deab
	* Interface Index
Chris PeBenito 26deab
	

Chris PeBenito 26deab
	* Template Index
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab

Layer: apps

Chris PeBenito 26deab

Module: lockdev

Chris PeBenito 26deab
Chris PeBenito 26deab

Description:

Chris PeBenito 26deab
Chris PeBenito 26deab

device locking policy for lockdev

Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab

Templates:

Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
lockdev_per_userdomain_template(
Chris PeBenito 26deab
	
Chris PeBenito 26deab
		
Chris PeBenito 26deab
		
Chris PeBenito 26deab
		
Chris PeBenito 26deab
		userdomain_prefix
Chris PeBenito 26deab
		
Chris PeBenito 26deab
	
Chris PeBenito 26deab
		
Chris PeBenito 26deab
			,
Chris PeBenito 26deab
		
Chris PeBenito 26deab
		
Chris PeBenito 26deab
		
Chris PeBenito 26deab
		user_domain
Chris PeBenito 26deab
		
Chris PeBenito 26deab
	
Chris PeBenito 26deab
		
Chris PeBenito 26deab
			,
Chris PeBenito 26deab
		
Chris PeBenito 26deab
		
Chris PeBenito 26deab
		
Chris PeBenito 26deab
		user_role
Chris PeBenito 26deab
		
Chris PeBenito 26deab
	
Chris PeBenito 26deab
	)
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
Summary
Chris PeBenito 26deab

Chris PeBenito 26deab
The per user domain template for the lockdev module.
Chris PeBenito 26deab

Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
Description
Chris PeBenito 26deab

Chris PeBenito 26deab

Chris PeBenito 26deab
This template creates derived domains which are used
Chris PeBenito 26deab
for lockdev. A derived type is also created to protect
Chris PeBenito 26deab
the user's device locks.
Chris PeBenito 26deab

Chris PeBenito 26deab

Chris PeBenito 26deab
This template is invoked automatically for each user, and
Chris PeBenito 26deab
generally does not need to be invoked directly
Chris PeBenito 26deab
by policy writers.
Chris PeBenito 26deab

Chris PeBenito 26deab

Chris PeBenito 26deab
Chris PeBenito 26deab
Parameters
Chris PeBenito 26deab
Chris PeBenito 26deab
Parameter:Description:Optional:
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
userdomain_prefix
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
The prefix of the user domain (e.g., user
Chris PeBenito 26deab
is the prefix for user_t).
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
No
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
user_domain
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
The type of the user domain.
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
No
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
user_role
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
The role associated with the user domain.
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
No
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
Return
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
</body>
Chris PeBenito 26deab
</html>