308 lines
4.8 KiB
HTML
308 lines
4.8 KiB
HTML
|
<html>
|
||
|
|
<head>
|
||
|
|
<title>
|
||
|
|
Security Enhanced Linux Reference Policy
|
||
|
|
</title>
|
||
|
|
<style type="text/css" media="all">@import "style.css";</style>
|
||
|
|
</head>
|
||
|
|
<body>
|
||
|
|
<div id="Header">Security Enhanced Linux Reference Policy</div>
|
||
|
|
<div id='Menu'>
|
||
|
|
|
||
|
|
<a href="admin.html">+
|
||
|
|
admin</a></br/>
|
||
|
|
<div id='subitem'>
|
||
|
|
|
||
|
|
</div>
|
||
|
|
|
||
|
|
<a href="apps.html">+
|
||
|
|
apps</a></br/>
|
||
|
|
<div id='subitem'>
|
||
|
|
|
||
|
|
- <a href='apps_cdrecord.html'>
|
||
|
|
cdrecord</a><br/>
|
||
|
|
|
||
|
|
- <a href='apps_gpg.html'>
|
||
|
|
gpg</a><br/>
|
||
|
|
|
||
|
|
- <a href='apps_irc.html'>
|
||
|
|
irc</a><br/>
|
||
|
|
|
||
|
|
- <a href='apps_java.html'>
|
||
|
|
java</a><br/>
|
||
|
|
|
||
|
|
- <a href='apps_loadkeys.html'>
|
||
|
|
loadkeys</a><br/>
|
||
|
|
|
||
|
|
- <a href='apps_lockdev.html'>
|
||
|
|
lockdev</a><br/>
|
||
|
|
|
||
|
|
- <a href='apps_mono.html'>
|
||
|
|
mono</a><br/>
|
||
|
|
|
||
|
|
- <a href='apps_screen.html'>
|
||
|
|
screen</a><br/>
|
||
|
|
|
||
|
|
- <a href='apps_slocate.html'>
|
||
|
|
slocate</a><br/>
|
||
|
|
|
||
|
|
- <a href='apps_tvtime.html'>
|
||
|
|
tvtime</a><br/>
|
||
|
|
|
||
|
|
- <a href='apps_uml.html'>
|
||
|
|
uml</a><br/>
|
||
|
|
|
||
|
|
- <a href='apps_userhelper.html'>
|
||
|
|
userhelper</a><br/>
|
||
|
|
|
||
|
|
- <a href='apps_usernetctl.html'>
|
||
|
|
usernetctl</a><br/>
|
||
|
|
|
||
|
|
- <a href='apps_webalizer.html'>
|
||
|
|
webalizer</a><br/>
|
||
|
|
|
||
|
|
- <a href='apps_wine.html'>
|
||
|
|
wine</a><br/>
|
||
|
|
|
||
|
|
</div>
|
||
|
|
|
||
|
|
<a href="kernel.html">+
|
||
|
|
kernel</a></br/>
|
||
|
|
<div id='subitem'>
|
||
|
|
|
||
|
|
</div>
|
||
|
|
|
||
|
|
<a href="services.html">+
|
||
|
|
services</a></br/>
|
||
|
|
<div id='subitem'>
|
||
|
|
|
||
|
|
</div>
|
||
|
|
|
||
|
|
<a href="system.html">+
|
||
|
|
system</a></br/>
|
||
|
|
<div id='subitem'>
|
||
|
|
|
||
|
|
</div>
|
||
|
|
|
||
|
|
<br/><p/>
|
||
|
|
<a href="global_booleans.html">* Global Booleans </a>
|
||
|
|
<br/><p/>
|
||
|
|
<a href="global_tunables.html">* Global Tunables </a>
|
||
|
|
<p/><br/><p/>
|
||
|
|
<a href="index.html">* Layer Index</a>
|
||
|
|
<br/><p/>
|
||
|
|
<a href="interfaces.html">* Interface Index</a>
|
||
|
|
<br/><p/>
|
||
|
|
<a href="templates.html">* Template Index</a>
|
||
|
|
</div>
|
||
|
|
|
||
|
|
<div id="Content">
|
||
|
|
<a name="top":></a>
|
||
|
|
<h1>Layer: apps</h1><p/>
|
||
|
|
<h2>Module: userhelper</h2><p/>
|
||
|
|
|
||
|
|
<a href=#interfaces>Interfaces</a>
|
||
|
|
<a href=#templates>Templates</a>
|
||
|
|
|
||
|
|
<h3>Description:</h3>
|
||
|
|
|
||
|
|
<p><p>SELinux utility to run a shell with a new role</p></p>
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
<a name="interfaces"></a>
|
||
|
|
<h3>Interfaces: </h3>
|
||
|
|
|
||
|
|
<a name="link_userhelper_dontaudit_search_config"></a>
|
||
|
|
<div id="interface">
|
||
|
|
|
||
|
|
|
||
|
|
<div id="codeblock">
|
||
|
|
|
||
|
|
<b>userhelper_dontaudit_search_config</b>(
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
domain
|
||
|
|
|
||
|
|
|
||
|
|
)<br>
|
||
|
|
</div>
|
||
|
|
<div id="description">
|
||
|
|
|
||
|
|
<h5>Summary</h5>
|
||
|
|
<p>
|
||
|
|
Do not audit attempts to search
|
||
|
|
the userhelper configuration directory.
|
||
|
|
</p>
|
||
|
|
|
||
|
|
|
||
|
|
<h5>Parameters</h5>
|
||
|
|
<table border="1" cellspacing="0" cellpadding="3" width="80%">
|
||
|
|
<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
|
||
|
|
|
||
|
|
<tr><td>
|
||
|
|
domain
|
||
|
|
</td><td>
|
||
|
|
<p>
|
||
|
|
Domain to not audit.
|
||
|
|
</p>
|
||
|
|
</td><td>
|
||
|
|
No
|
||
|
|
</td></tr>
|
||
|
|
|
||
|
|
</table>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
|
||
|
|
<a name="link_userhelper_search_config"></a>
|
||
|
|
<div id="interface">
|
||
|
|
|
||
|
|
|
||
|
|
<div id="codeblock">
|
||
|
|
|
||
|
|
<b>userhelper_search_config</b>(
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
domain
|
||
|
|
|
||
|
|
|
||
|
|
)<br>
|
||
|
|
</div>
|
||
|
|
<div id="description">
|
||
|
|
|
||
|
|
<h5>Summary</h5>
|
||
|
|
<p>
|
||
|
|
Search the userhelper configuration directory.
|
||
|
|
</p>
|
||
|
|
|
||
|
|
|
||
|
|
<h5>Parameters</h5>
|
||
|
|
<table border="1" cellspacing="0" cellpadding="3" width="80%">
|
||
|
|
<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
|
||
|
|
|
||
|
|
<tr><td>
|
||
|
|
domain
|
||
|
|
</td><td>
|
||
|
|
<p>
|
||
|
|
Domain allowed access.
|
||
|
|
</p>
|
||
|
|
</td><td>
|
||
|
|
No
|
||
|
|
</td></tr>
|
||
|
|
|
||
|
|
</table>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
|
||
|
|
|
||
|
|
<a href=#top>Return</a>
|
||
|
|
|
||
|
|
|
||
|
|
<a name="templates"></a>
|
||
|
|
<h3>Templates: </h3>
|
||
|
|
|
||
|
|
<a name="link_userhelper_per_userdomain_template"></a>
|
||
|
|
<div id="template">
|
||
|
|
|
||
|
|
|
||
|
|
<div id="codeblock">
|
||
|
|
|
||
|
|
<b>userhelper_per_userdomain_template</b>(
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
userdomain_prefix
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
,
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
user_domain
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
,
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
user_role
|
||
|
|
|
||
|
|
|
||
|
|
)<br>
|
||
|
|
</div>
|
||
|
|
<div id="description">
|
||
|
|
|
||
|
|
<h5>Summary</h5>
|
||
|
|
<p>
|
||
|
|
The per user domain template for the userhelper module.
|
||
|
|
</p>
|
||
|
|
|
||
|
|
|
||
|
|
<h5>Description</h5>
|
||
|
|
<p>
|
||
|
|
</p><p>
|
||
|
|
This template creates a derived domains which are used
|
||
|
|
for userhelper.
|
||
|
|
</p><p>
|
||
|
|
</p><p>
|
||
|
|
This template is invoked automatically for each user, and
|
||
|
|
generally does not need to be invoked directly
|
||
|
|
by policy writers.
|
||
|
|
</p><p>
|
||
|
|
</p>
|
||
|
|
|
||
|
|
<h5>Parameters</h5>
|
||
|
|
<table border="1" cellspacing="0" cellpadding="3" width="80%">
|
||
|
|
<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
|
||
|
|
|
||
|
|
<tr><td>
|
||
|
|
userdomain_prefix
|
||
|
|
</td><td>
|
||
|
|
<p>
|
||
|
|
The prefix of the user domain (e.g., user
|
||
|
|
is the prefix for user_t).
|
||
|
|
</p>
|
||
|
|
</td><td>
|
||
|
|
No
|
||
|
|
</td></tr>
|
||
|
|
|
||
|
|
<tr><td>
|
||
|
|
user_domain
|
||
|
|
</td><td>
|
||
|
|
<p>
|
||
|
|
The type of the user domain.
|
||
|
|
</p>
|
||
|
|
</td><td>
|
||
|
|
No
|
||
|
|
</td></tr>
|
||
|
|
|
||
|
|
<tr><td>
|
||
|
|
user_role
|
||
|
|
</td><td>
|
||
|
|
<p>
|
||
|
|
The role associated with the user domain.
|
||
|
|
</p>
|
||
|
|
</td><td>
|
||
|
|
No
|
||
|
|
</td></tr>
|
||
|
|
|
||
|
|
</table>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
|
||
|
|
|
||
|
|
<a href=#top>Return</a>
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
</div>
|
||
|
|
</body>
|
||
|
|
</html>
|