rpms / selinux-policy

Clone
Source Code
GIT

Blame www/api-docs/kernel_mls.html

c10s-sig-hyperscale c4 c5 c5-plus c6 c6-plus c7 c7-alt c7-atomic c7-beta c8 c8-beta c8s c8s-sig-hyperscale c9 c9-beta c9s-sig-hyperscale
  1.   af3dd8da28a6650cfb84a2bf2b5f0c89a59da4bd
  2.   www
  3.   api-docs
  4.   kernel_mls.html
Blob History Raw
Chris PeBenito 862a1e 
<html>
Chris PeBenito 862a1e 
<head>
Chris PeBenito 862a1e 
<title>
Chris PeBenito 862a1e 
 Security Enhanced Linux Reference Policy
Chris PeBenito 862a1e 
 </title>
Chris PeBenito 862a1e 
<style type="text/css" media="all">@import "style.css";</style>
Chris PeBenito 862a1e 
</head>
Chris PeBenito 862a1e 
<body>
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
		+ 
Chris PeBenito 862a1e 
		admin
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
		+ 
Chris PeBenito 862a1e 
		apps
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
		+ 
Chris PeBenito 862a1e 
		kernel
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 885e75 
			   - 
Chris PeBenito 885e75 
			corecommands
Chris PeBenito 885e75
Chris PeBenito 862a1e 
			   - 
Chris PeBenito 862a1e 
			corenetwork
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
			   - 
Chris PeBenito 862a1e 
			devices
Chris PeBenito 862a1e
Chris PeBenito 885e75 
			   - 
Chris PeBenito 885e75 
			domain
Chris PeBenito 885e75
Chris PeBenito 885e75 
			   - 
Chris PeBenito 885e75 
			files
Chris PeBenito 885e75
Chris PeBenito 862a1e 
			   - 
Chris PeBenito 862a1e 
			filesystem
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
			   - 
Chris PeBenito 862a1e 
			kernel
Chris PeBenito 862a1e
Chris PeBenito af3dd8 
			   - 
Chris PeBenito af3dd8 
			mcs
Chris PeBenito af3dd8
Chris PeBenito 862a1e 
			   - 
Chris PeBenito 862a1e 
			mls
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
			   - 
Chris PeBenito 862a1e 
			selinux
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
			   - 
Chris PeBenito 862a1e 
			storage
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
			   - 
Chris PeBenito 862a1e 
			terminal
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
		+ 
Chris PeBenito 862a1e 
		services
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
		+ 
Chris PeBenito 862a1e 
		system
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
	* Global Booleans 
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
	* Global Tunables 
Chris PeBenito 862a1e

Chris PeBenito 862a1e 
	* Layer Index
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
	* Interface Index
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
	* Template Index
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Layer: kernel
Chris PeBenito 862a1e 
Module: mls
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Description:
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
This module contains interfaces for handling multilevel
Chris PeBenito 862a1e 
security.  The interfaces allow the specified subjects
Chris PeBenito 862a1e 
and objects to be allowed certain privileges in the
Chris PeBenito 862a1e 
MLS rules.
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
This module is required to be included in all policies.
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Interfaces:
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
mls_file_downgrade(
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
		domain
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
	)
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Summary
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Make specified domain MLS trusted
Chris PeBenito 862a1e 
for lowering the level of files.
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Parameters
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Parameter:Description:Optional:
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
domain
Chris PeBenito 862a1e
Chris PeBenito af3dd8
Chris PeBenito 862a1e 
The type of the process performing this action.
Chris PeBenito af3dd8
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
No
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
mls_file_read_up(
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
		domain
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
	)
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Summary
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Make specified domain MLS trusted
Chris PeBenito 862a1e 
for reading from files at higher levels.
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Parameters
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Parameter:Description:Optional:
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
domain
Chris PeBenito 862a1e
Chris PeBenito af3dd8
Chris PeBenito 862a1e 
The type of the process performing this action.
Chris PeBenito af3dd8
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
No
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
mls_file_upgrade(
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
		domain
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
	)
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Summary
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Make specified domain MLS trusted
Chris PeBenito 862a1e 
for raising the level of files.
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Parameters
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Parameter:Description:Optional:
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
domain
Chris PeBenito 862a1e
Chris PeBenito af3dd8
Chris PeBenito 862a1e 
The type of the process performing this action.
Chris PeBenito af3dd8
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
No
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
mls_file_write_down(
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
		domain
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
	)
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Summary
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Make specified domain MLS trusted
Chris PeBenito 862a1e 
for writing to files at lower levels.
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Parameters
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Parameter:Description:Optional:
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
domain
Chris PeBenito 862a1e
Chris PeBenito af3dd8
Chris PeBenito 862a1e 
The type of the process performing this action.
Chris PeBenito af3dd8
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
No
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
mls_process_read_up(
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
		domain
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
	)
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Summary
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Make specified domain MLS trusted
Chris PeBenito 862a1e 
for reading from processes at higher levels.
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Parameters
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Parameter:Description:Optional:
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
domain
Chris PeBenito 862a1e
Chris PeBenito af3dd8
Chris PeBenito 862a1e 
The type of the process performing this action.
Chris PeBenito af3dd8
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
No
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
mls_process_set_level(
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
		domain
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
	)
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Summary
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Make specified domain MLS trusted
Chris PeBenito 862a1e 
for setting the level of processes
Chris PeBenito 862a1e 
it executes.
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Parameters
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Parameter:Description:Optional:
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
domain
Chris PeBenito 862a1e
Chris PeBenito af3dd8
Chris PeBenito 862a1e 
The type of the process performing this action.
Chris PeBenito af3dd8
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
No
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
mls_process_write_down(
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
		domain
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
	)
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Summary
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Make specified domain MLS trusted
Chris PeBenito 862a1e 
for writing to processes at lower levels.
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Parameters
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Parameter:Description:Optional:
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
domain
Chris PeBenito 862a1e
Chris PeBenito af3dd8
Chris PeBenito 862a1e 
The type of the process performing this action.
Chris PeBenito af3dd8
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
No
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
mls_rangetrans_source(
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
		domain
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
	)
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Summary
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Allow the specified domain to do a MLS
Chris PeBenito 862a1e 
range transition that changes
Chris PeBenito 862a1e 
the current level.
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Parameters
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Parameter:Description:Optional:
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
domain
Chris PeBenito 862a1e
Chris PeBenito af3dd8
Chris PeBenito 862a1e 
The type of the process performing this action.
Chris PeBenito af3dd8
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
No
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
mls_rangetrans_target(
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
		domain
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
	)
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Summary
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Make specified domain a target domain
Chris PeBenito 862a1e 
for MLS range transitions that change
Chris PeBenito 862a1e 
the current level.
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Parameters
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Parameter:Description:Optional:
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
domain
Chris PeBenito 862a1e
Chris PeBenito af3dd8
Chris PeBenito 862a1e 
The type of the process performing this action.
Chris PeBenito af3dd8
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
No
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
mls_trusted_object(
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
		domain
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
	)
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Summary
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Make specified object MLS trusted.
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Description
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Make specified object MLS trusted.  This
Chris PeBenito 862a1e 
allows all levels to read and write the
Chris PeBenito 862a1e 
object.
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
This currently only applies to filesystem
Chris PeBenito 862a1e 
objects, for example, files and directories.
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Parameters
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Parameter:Description:Optional:
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
domain
Chris PeBenito 862a1e
Chris PeBenito af3dd8
Chris PeBenito 862a1e 
The type of the object.
Chris PeBenito af3dd8
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
No
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
Return
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e 
</body>
Chris PeBenito 862a1e 
</html>

Powered by Pagure 5.14.1

SSH Hostkey/Fingerprint | Documentation