Chris PeBenito 862a1e
<html>
Chris PeBenito 862a1e
<head>
Chris PeBenito 862a1e
<title>
Chris PeBenito 862a1e
 Security Enhanced Linux Reference Policy
Chris PeBenito 862a1e
 </title>
Chris PeBenito 862a1e
<style type="text/css" media="all">@import "style.css";</style>
Chris PeBenito 862a1e
</head>
Chris PeBenito 862a1e
<body>
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
	
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		admin
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
	
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		apps
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
	
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		kernel
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			bootloader
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			corenetwork
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			devices
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			filesystem
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			kernel
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			mls
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			selinux
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			storage
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			terminal
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
	
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		services
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
	
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		system
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
	
Chris PeBenito 862a1e
	

Chris PeBenito 862a1e
	* Global Booleans 
Chris PeBenito 862a1e
	

Chris PeBenito 862a1e
	* Global Tunables 
Chris PeBenito 862a1e
	


Chris PeBenito 862a1e
	* Layer Index
Chris PeBenito 862a1e
	

Chris PeBenito 862a1e
	* Interface Index
Chris PeBenito 862a1e
	

Chris PeBenito 862a1e
	* Template Index
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e

Layer: kernel

Chris PeBenito 862a1e

Module: mls

Chris PeBenito 862a1e
Chris PeBenito 862a1e

Description:

Chris PeBenito 862a1e
 
Chris PeBenito 862a1e

Chris PeBenito 862a1e

Chris PeBenito 862a1e
This module contains interfaces for handling multilevel
Chris PeBenito 862a1e
security.  The interfaces allow the specified subjects
Chris PeBenito 862a1e
and objects to be allowed certain privileges in the
Chris PeBenito 862a1e
MLS rules.
Chris PeBenito 862a1e

Chris PeBenito 862a1e

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e

This module is required to be included in all policies.

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e

Interfaces:

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
mls_file_downgrade(
Chris PeBenito 862a1e
	
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		domain
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
	
Chris PeBenito 862a1e
	)
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Summary
Chris PeBenito 862a1e

Chris PeBenito 862a1e
Make specified domain MLS trusted
Chris PeBenito 862a1e
for lowering the level of files.
Chris PeBenito 862a1e

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Parameters
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Parameter:Description:Optional:
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
domain
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
The type of the process performing this action.
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
No
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
mls_file_read_up(
Chris PeBenito 862a1e
	
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		domain
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
	
Chris PeBenito 862a1e
	)
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Summary
Chris PeBenito 862a1e

Chris PeBenito 862a1e
Make specified domain MLS trusted
Chris PeBenito 862a1e
for reading from files at higher levels.
Chris PeBenito 862a1e

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Parameters
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Parameter:Description:Optional:
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
domain
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
The type of the process performing this action.
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
No
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
mls_file_upgrade(
Chris PeBenito 862a1e
	
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		domain
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
	
Chris PeBenito 862a1e
	)
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Summary
Chris PeBenito 862a1e

Chris PeBenito 862a1e
Make specified domain MLS trusted
Chris PeBenito 862a1e
for raising the level of files.
Chris PeBenito 862a1e

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Parameters
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Parameter:Description:Optional:
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
domain
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
The type of the process performing this action.
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
No
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
mls_file_write_down(
Chris PeBenito 862a1e
	
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		domain
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
	
Chris PeBenito 862a1e
	)
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Summary
Chris PeBenito 862a1e

Chris PeBenito 862a1e
Make specified domain MLS trusted
Chris PeBenito 862a1e
for writing to files at lower levels.
Chris PeBenito 862a1e

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Parameters
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Parameter:Description:Optional:
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
domain
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
The type of the process performing this action.
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
No
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
mls_process_read_up(
Chris PeBenito 862a1e
	
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		domain
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
	
Chris PeBenito 862a1e
	)
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Summary
Chris PeBenito 862a1e

Chris PeBenito 862a1e
Make specified domain MLS trusted
Chris PeBenito 862a1e
for reading from processes at higher levels.
Chris PeBenito 862a1e

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Parameters
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Parameter:Description:Optional:
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
domain
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
The type of the process performing this action.
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
No
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
mls_process_set_level(
Chris PeBenito 862a1e
	
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		domain
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
	
Chris PeBenito 862a1e
	)
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Summary
Chris PeBenito 862a1e

Chris PeBenito 862a1e
Make specified domain MLS trusted
Chris PeBenito 862a1e
for setting the level of processes
Chris PeBenito 862a1e
it executes.
Chris PeBenito 862a1e

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Parameters
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Parameter:Description:Optional:
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
domain
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
The type of the process performing this action.
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
No
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
mls_process_write_down(
Chris PeBenito 862a1e
	
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		domain
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
	
Chris PeBenito 862a1e
	)
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Summary
Chris PeBenito 862a1e

Chris PeBenito 862a1e
Make specified domain MLS trusted
Chris PeBenito 862a1e
for writing to processes at lower levels.
Chris PeBenito 862a1e

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Parameters
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Parameter:Description:Optional:
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
domain
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
The type of the process performing this action.
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
No
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
mls_rangetrans_source(
Chris PeBenito 862a1e
	
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		domain
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
	
Chris PeBenito 862a1e
	)
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Summary
Chris PeBenito 862a1e

Chris PeBenito 862a1e
Allow the specified domain to do a MLS
Chris PeBenito 862a1e
range transition that changes
Chris PeBenito 862a1e
the current level.
Chris PeBenito 862a1e

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Parameters
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Parameter:Description:Optional:
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
domain
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
The type of the process performing this action.
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
No
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
mls_rangetrans_target(
Chris PeBenito 862a1e
	
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		domain
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
	
Chris PeBenito 862a1e
	)
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Summary
Chris PeBenito 862a1e

Chris PeBenito 862a1e
Make specified domain a target domain
Chris PeBenito 862a1e
for MLS range transitions that change
Chris PeBenito 862a1e
the current level.
Chris PeBenito 862a1e

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Parameters
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Parameter:Description:Optional:
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
domain
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
The type of the process performing this action.
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
No
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
mls_trusted_object(
Chris PeBenito 862a1e
	
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
		domain
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
	
Chris PeBenito 862a1e
	)
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Summary
Chris PeBenito 862a1e

Chris PeBenito 862a1e
Make specified object MLS trusted.
Chris PeBenito 862a1e

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Description
Chris PeBenito 862a1e

Chris PeBenito 862a1e

Chris PeBenito 862a1e
Make specified object MLS trusted.  This
Chris PeBenito 862a1e
allows all levels to read and write the
Chris PeBenito 862a1e
object.
Chris PeBenito 862a1e

Chris PeBenito 862a1e

Chris PeBenito 862a1e
This currently only applies to filesystem
Chris PeBenito 862a1e
objects, for example, files and directories.
Chris PeBenito 862a1e

Chris PeBenito 862a1e

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Parameters
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Parameter:Description:Optional:
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
domain
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
The type of the object.
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
No
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Return
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
</body>
Chris PeBenito 862a1e
</html>