Layer: kernel

Module: filesystem

Description:

Policy for filesystems.

Interfaces:

fs_associate(
	
		file_type
		
	)

Description

Associate the specified file type to persistent filesystems with extended attributes. This allows a file of this type to be created on a filesystem such as ext3, JFS, and XFS.

Parameters

Parameter:	Description:	Optional:
file_type	The type of the to be associated.	No

fs_associate_noxattr(
	
		file_type
		
	)

Description

Associate the specified file type to filesystems which lack extended attributes support. This allows a file of this type to be created on a filesystem such as FAT32, and NFS.

Parameters

Parameter:	Description:	Optional:
file_type	The type of the to be associated.	No

fs_associate_tmpfs(
	
		type
		
	)

Description

Allow the type to associate to tmpfs filesystems.

Parameters

Parameter:	Description:	Optional:
type	The type of the object to be associated.	No

fs_dontaudit_getattr_xattr_fs(
	
		domain
		
	)

Description

Do not audit attempts to get the attributes of a persistent filesystem which has extended attributes, such as ext3, JFS, or XFS.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain to not audit.	No

fs_execute_cifs_files(
	
		domain
		
	)

Description

Execute files on a CIFS or SMB network filesystem, in the caller domain.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain executing the files.	No

fs_execute_nfs_files(
	
		domain
		
	)

Description

Execute files on a NFS filesystem.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain executing the files.	No

fs_get_all_fs_quotas(
	
		domain
		
	)

Description

Get the quotas of all filesystems.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain getting quotas.	No

fs_getattr_all_fs(
	
		domain
		
	)

Description

Get the attributes of all persistent filesystems.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain doing the getattr on the filesystem.	No

fs_getattr_autofs(
	
		domain
		
	)

Description

Get the attributes of an automount pseudo filesystem.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain doing the getattr on the filesystem.	No

fs_getattr_cifs(
	
		domain
		
	)

Description

Get the attributes of a CIFS or SMB network filesystem.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain doing the getattr on the filesystem.	No

fs_getattr_dos_fs(
	
		domain
		
	)

Description

Get the attributes of a DOS filesystem, such as FAT32 or NTFS.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain doing the getattr on the filesystem.	No

fs_getattr_nfs(
	
		domain
		
	)

Description

Get the attributes of a NFS filesystem.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain doing the getattr on the filesystem.	No

fs_getattr_nfsd_fs(
	
		domain
		
	)

Description

Get the attributes of a NFS server pseudo filesystem.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain doing the getattr on the filesystem.	No

fs_getattr_ramfs(
	
		domain
		
	)

Description

Get the attributes of a RAM filesystem.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain doing the getattr on the filesystem.	No

fs_getattr_romfs(
	
		domain
		
	)

Description

Get the attributes of a ROM filesystem.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain doing the getattr on the filesystem.	No

fs_getattr_rpc_pipefs(
	
		domain
		
	)

Description

Get the attributes of a RPC pipe filesystem.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain doing the getattr on the filesystem.	No

fs_getattr_tmpfs(
	
		domain
		
	)

Description

Get the attributes of a tmpfs filesystem.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain doing the getattr on the filesystem.	No

fs_getattr_xattr_fs(
	
		domain
		
	)

Description

Get the attributes of a persistent filesystem which has extended attributes, such as ext3, JFS, or XFS.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain doing the getattr on the filesystem.	No

fs_make_fs(
	
		domain
		
	)

Description

Transform specified type into a filesystem type.

Parameters

Parameter:	Description:	Optional:
domain	The type of the process performing this action.	No

fs_make_noxattr_fs(
	
		domain
		
	)

Description

Transform specified type into a filesystem type which does not have extended attribute support.

Parameters

Parameter:	Description:	Optional:
domain	The type of the process performing this action.	No

fs_manage_cifs_dirs(
	
		domain
		
	)

Description

Create, read, write, and delete directories on a CIFS or SMB network filesystem.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain managing the directories.	No

fs_manage_cifs_files(
	
		domain
		
	)

Description

Create, read, write, and delete files on a CIFS or SMB network filesystem.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain managing the files.	No

fs_manage_cifs_named_pipes(
	
		domain
		
	)

Description

Create, read, write, and delete named pipes on a CIFS or SMB network filesystem.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain managing the pipes.	No

fs_manage_cifs_named_sockets(
	
		domain
		
	)

Description

Create, read, write, and delete named sockets on a CIFS or SMB network filesystem.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain managing the sockets.	No

fs_manage_cifs_symlinks(
	
		domain
		
	)

Description

Create, read, write, and delete symbolic links on a CIFS or SMB network filesystem.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain managing the symbolic links.	No

fs_manage_nfs_dirs(
	
		domain
		
	)

Description

Create, read, write, and delete directories on a NFS filesystem.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain managing the directories.	No

fs_manage_nfs_files(
	
		domain
		
	)

Description

Create, read, write, and delete files on a NFS filesystem.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain managing the files.	No

fs_manage_nfs_named_pipes(
	
		domain
		
	)

Description

Create, read, write, and delete named pipes on a NFS filesystem.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain managing the pipes.	No

fs_manage_nfs_named_sockets(
	
		domain
		
	)

Description

Create, read, write, and delete named sockets on a NFS filesystem.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain managing the sockets.	No

fs_manage_nfs_symlinks(
	
		domain
		
	)

Description

Create, read, write, and delete symbolic links on a CIFS or SMB network filesystem.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain managing the symbolic links.	No

fs_manage_tmpfs_block_devices(
	
		domain
		
	)

Description

Read and write, create and delete block nodes on tmpfs filesystems.

Parameters

Parameter:	Description:	Optional:
domain	The type of the process performing this action.	No

fs_manage_tmpfs_character_devices(
	
		domain
		
	)

Description

Read and write, create and delete character nodes on tmpfs filesystems.

Parameters

Parameter:	Description:	Optional:
domain	The type of the process performing this action.	No

fs_mount_all_fs(
	
		domain
		
	)

Description

Mount all filesystems.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain mounting the filesystem.	No

fs_mount_autofs(
	
		domain
		
	)

Description

Mount an automount pseudo filesystem.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain mounting the filesystem.	No

fs_mount_cifs(
	
		domain
		
	)

Description

Mount a CIFS or SMB network filesystem.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain mounting the filesystem.	No

fs_mount_dos_fs(
	
		domain
		
	)

Description

Mount a DOS filesystem, such as FAT32 or NTFS.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain mounting the filesystem.	No

fs_mount_iso9660_fs(
	
		domain
		
	)

Description

Mount an iso9660 filesystem, which is usually used on CDs.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain mounting the filesystem.	No

fs_mount_iso9660_fs(
	
		domain
		
	)

Description

Get the attributes of an iso9660 filesystem, which is usually used on CDs.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain doing the getattr on the filesystem.	No

fs_mount_nfs(
	
		domain
		
	)

Description

Mount a NFS filesystem.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain mounting the filesystem.	No

fs_mount_nfs(
	
		domain
		
	)

Description

Unmount a NFS filesystem.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain unmounting the filesystem.	No

fs_mount_nfsd_fs(
	
		domain
		
	)

Description

Mount a NFS server pseudo filesystem.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain mounting the filesystem.	No

fs_mount_ramfs(
	
		domain
		
	)

Description

Mount a RAM filesystem.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain mounting the filesystem.	No

fs_mount_romfs(
	
		domain
		
	)

Description

Mount a ROM filesystem.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain mounting the filesystem.	No

fs_mount_rpc_pipefs(
	
		domain
		
	)

Description

Mount a RPC pipe filesystem.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain mounting the filesystem.	No

fs_mount_tmpfs(
	
		domain
		
	)

Description

Mount a tmpfs filesystem.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain mounting the filesystem.	No

fs_mount_xattr_fs(
	
		domain
		
	)

Description

Mount a persistent filesystem which has extended attributes, such as ext3, JFS, or XFS.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain mounting the filesystem.	No

fs_register_binary_executable_type(
	
		domain
		
	)

Description

Register an interpreter for new binary file types, using the kernel binfmt_misc support. A common use for this is to register a JVM as an interpreter for Java byte code. Registered binaries can be directly executed on a command line without specifying the interpreter.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain registering the interpreter.	No

fs_relabel_tmpfs_block_devices(
	
		domain
		
	)

Description

Relabel block nodes on tmpfs filesystems.

Parameters

Parameter:	Description:	Optional:
domain	The type of the process performing this action.	No

fs_relabel_tmpfs_character_devices(
	
		domain
		
	)

Description

Relabel character nodes on tmpfs filesystems.

Parameters

Parameter:	Description:	Optional:
domain	The type of the process performing this action.	No

fs_relabelfrom_dos_fs(
	
		domain
		
	)

Description

Allow changing of the label of a DOS filesystem using the context= mount option.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain mounting the filesystem.	No

fs_relabelfrom_xattr_fs(
	
		domain
		
	)

Description

Allow changing of the label of a filesystem with extended attributes using the context= mount option.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain mounting the filesystem.	No

fs_remount_all_fs(
	
		domain
		
	)

Description

Remount all filesystems. This allows some mount options to be changed.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain mounting the filesystem.	No

fs_remount_autofs(
	
		domain
		
	)

Description

Remount an automount pseudo filesystem This allows some mount options to be changed.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain remounting the filesystem.	No

fs_remount_cifs(
	
		domain
		
	)

Description

Remount a CIFS or SMB network filesystem. This allows some mount options to be changed.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain mounting the filesystem.	No

fs_remount_dos_fs(
	
		domain
		
	)

Description

Remount a DOS filesystem, such as FAT32 or NTFS. This allows some mount options to be changed.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain remounting the filesystem.	No

fs_remount_iso9660_fs(
	
		domain
		
	)

Description

Remount an iso9660 filesystem, which is usually used on CDs. This allows some mount options to be changed.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain remounting the filesystem.	No

fs_remount_nfs(
	
		domain
		
	)

Description

Remount a NFS filesystem. This allows some mount options to be changed.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain remounting the filesystem.	No

fs_remount_nfsd_fs(
	
		domain
		
	)

Description

Mount a NFS server pseudo filesystem. This allows some mount options to be changed.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain remounting the filesystem.	No

fs_remount_ramfs(
	
		domain
		
	)

Description

Remount a RAM filesystem. This allows some mount options to be changed.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain remounting the filesystem.	No

fs_remount_romfs(
	
		domain
		
	)

Description

Remount a ROM filesystem. This allows some mount options to be changed.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain remounting the filesystem.	No

fs_remount_rpc_pipefs(
	
		domain
		
	)

Description

Remount a RPC pipe filesystem. This allows some mount option to be changed.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain remounting the filesystem.	No

fs_remount_tmpfs(
	
		domain
		
	)

Description

Remount a tmpfs filesystem.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain remounting the filesystem.	No

fs_remount_xattr_fs(
	
		domain
		
	)

Description

Remount a persistent filesystem which has extended attributes, such as ext3, JFS, or XFS. This allows some mount options to be changed.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain remounting the filesystem.	No

fs_set_all_quotas(
	
		domain
		
	)

Description

Set the quotas of all filesystems.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain setting quotas.	No

fs_unmount_all_fs(
	
		domain
		
	)

Description

Unmount all filesystems.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain unmounting the filesystem.	No

fs_unmount_autofs(
	
		domain
		
	)

Description

Unmount an automount pseudo filesystem.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain unmounting the filesystem.	No

fs_unmount_cifs(
	
		domain
		
	)

Description

Unmount a CIFS or SMB network filesystem.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain mounting the filesystem.	No

fs_unmount_dos_fs(
	
		domain
		
	)

Description

Unmount a DOS filesystem, such as FAT32 or NTFS.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain unmounting the filesystem.	No

fs_unmount_iso9660_fs(
	
		domain
		
	)

Description

Unmount an iso9660 filesystem, which is usually used on CDs.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain unmounting the filesystem.	No

fs_unmount_nfsd_fs(
	
		domain
		
	)

Description

Unmount a NFS server pseudo filesystem.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain unmounting the filesystem.	No

fs_unmount_ramfs(
	
		domain
		
	)

Description

Unmount a RAM filesystem.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain unmounting the filesystem.	No

fs_unmount_romfs(
	
		domain
		
	)

Description

Unmount a ROM filesystem.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain unmounting the filesystem.	No

fs_unmount_rpc_pipefs(
	
		domain
		
	)

Description

Unmount a RPC pipe filesystem.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain unmounting the filesystem.	No

fs_unmount_tmpfs(
	
		domain
		
	)

Description

Unmount a tmpfs filesystem.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain unmounting the filesystem.	No

fs_unmount_xattr_fs(
	
		domain
		
	)

Description

Unmount a persistent filesystem which has extended attributes, such as ext3, JFS, or XFS.

Parameters

Parameter:	Description:	Optional:
domain	The type of the domain unmounting the filesystem.	No

fs_use_tmpfs_block_devices(
	
		domain
		
	)

Description

Read and write block nodes on tmpfs filesystems.

Parameters

Parameter:	Description:	Optional:
domain	The type of the process performing this action.	No

fs_use_tmpfs_character_devices(
	
		domain
		
	)

Description

Read and write character nodes on tmpfs filesystems.

Parameters

Parameter:	Description:	Optional:
domain	The type of the process performing this action.	No