<html> <head> <title> Security Enhanced Linux Reference Policy </title> <style type="text/css" media="all">@import "style.css";</style> </head> <body> <div id="Header">Security Enhanced Linux Reference Policy</div> <div id='Menu'> <a href="admin.html">+ admin</a></br/> <div id='subitem'> </div> <a href="apps.html">+ apps</a></br/> <div id='subitem'> </div> <a href="kernel.html">+ kernel</a></br/> <div id='subitem'> </div> <a href="services.html">+ services</a></br/> <div id='subitem'> </div> <a href="system.html">+ system</a></br/> <div id='subitem'> - <a href='system_authlogin.html'> authlogin</a><br/> - <a href='system_clock.html'> clock</a><br/> - <a href='system_corecommands.html'> corecommands</a><br/> - <a href='system_domain.html'> domain</a><br/> - <a href='system_files.html'> files</a><br/> - <a href='system_fstools.html'> fstools</a><br/> - <a href='system_getty.html'> getty</a><br/> - <a href='system_hostname.html'> hostname</a><br/> - <a href='system_hotplug.html'> hotplug</a><br/> - <a href='system_init.html'> init</a><br/> - <a href='system_ipsec.html'> ipsec</a><br/> - <a href='system_iptables.html'> iptables</a><br/> - <a href='system_libraries.html'> libraries</a><br/> - <a href='system_locallogin.html'> locallogin</a><br/> - <a href='system_logging.html'> logging</a><br/> - <a href='system_lvm.html'> lvm</a><br/> - <a href='system_miscfiles.html'> miscfiles</a><br/> - <a href='system_modutils.html'> modutils</a><br/> - <a href='system_mount.html'> mount</a><br/> - <a href='system_pcmcia.html'> pcmcia</a><br/> - <a href='system_raid.html'> raid</a><br/> - <a href='system_selinuxutil.html'> selinuxutil</a><br/> - <a href='system_sysnetwork.html'> sysnetwork</a><br/> - <a href='system_udev.html'> udev</a><br/> - <a href='system_unconfined.html'> unconfined</a><br/> - <a href='system_userdomain.html'> userdomain</a><br/> </div> <br/><p/> <a href="global_booleans.html">* Global Booleans </a> <br/><p/> <a href="global_tunables.html">* Global Tunables </a> <p/><br/><p/> <a href="index.html">* Layer Index</a> <br/><p/> <a href="interfaces.html">* Interface Index</a> <br/><p/> <a href="templates.html">* Template Index</a> </div> <div id="Content"> <a name="top":></a> <h1>Layer: system</h1><p/> <h2>Module: domain</h2><p/> <a href=#interfaces>Interfaces</a> <a href=#templates>Templates</a> <h3>Description:</h3> <p><p>Core policy for domains.</p></p> <p>This module is required to be included in all policies.</p> <a name="interfaces"></a> <h3>Interfaces: </h3> <a name="link_domain_base_domain_type"></a> <div id="interface"> <div id="codeblock"> <b>domain_base_domain_type</b>( ? )<br> </div> <div id="description"> <h5>Summary</h5> <p> Summary is missing! </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> ? </td><td> Parameter descriptions are missing! </td><td> No </td></tr> </table> </div> </div> <a name="link_domain_dontaudit_getattr_all_sockets"></a> <div id="interface"> <div id="codeblock"> <b>domain_dontaudit_getattr_all_sockets</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Do not audit attempts to get the attributes of all domains sockets, for all socket types. </p> <h5>Description</h5> <p> </p><p> Do not audit attempts to get the attributes of all domains sockets, for all socket types. </p><p> </p><p> This interface was added for PCMCIA cardmgr and is probably excessive. </p><p> </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> Domain to not audit. </td><td> No </td></tr> </table> </div> </div> <a name="link_domain_dontaudit_getattr_all_tcp_sockets"></a> <div id="interface"> <div id="codeblock"> <b>domain_dontaudit_getattr_all_tcp_sockets</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Do not audit attempts to get the attributes of all domains TCP sockets. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> The type of the process performing this action. </td><td> No </td></tr> </table> </div> </div> <a name="link_domain_dontaudit_getattr_all_udp_sockets"></a> <div id="interface"> <div id="codeblock"> <b>domain_dontaudit_getattr_all_udp_sockets</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Do not audit attempts to get the attributes of all domains UDP sockets. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> The type of the process performing this action. </td><td> No </td></tr> </table> </div> </div> <a name="link_domain_dontaudit_getattr_all_unix_dgram_sockets"></a> <div id="interface"> <div id="codeblock"> <b>domain_dontaudit_getattr_all_unix_dgram_sockets</b>( domain )<br> </div> <div id="description"> <h5>Description</h5> <p> Do not audit attempts to get the attributes of all domains unix datagram sockets. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> The type of the process performing this action. </td><td> No </td></tr> </table> </div> </div> <a name="link_domain_dontaudit_getattr_all_unnamed_pipes"></a> <div id="interface"> <div id="codeblock"> <b>domain_dontaudit_getattr_all_unnamed_pipes</b>( domain )<br> </div> <div id="description"> <h5>Description</h5> <p> Do not audit attempts to get the attributes of all domains unnamed pipes. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> The type of the process performing this action. </td><td> No </td></tr> </table> </div> </div> <a name="link_domain_dontaudit_getsession_all_domains"></a> <div id="interface"> <div id="codeblock"> <b>domain_dontaudit_getsession_all_domains</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Do not audit attempts to get the session ID of all domains. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> The type of the process performing this action. </td><td> No </td></tr> </table> </div> </div> <a name="link_domain_dontaudit_list_all_domains_proc"></a> <div id="interface"> <div id="codeblock"> <b>domain_dontaudit_list_all_domains_proc</b>( domain )<br> </div> <div id="description"> <h5>Description</h5> <p> Do not audit attempts to read the process state directories of all domains. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> The type of the process performing this action. </td><td> No </td></tr> </table> </div> </div> <a name="link_domain_dontaudit_read_all_domains_state"></a> <div id="interface"> <div id="codeblock"> <b>domain_dontaudit_read_all_domains_state</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Do not audit attempts to read the process state (/proc/pid) of all domains. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> The type of the process performing this action. </td><td> No </td></tr> </table> </div> </div> <a name="link_domain_dontaudit_rw_all_key_sockets"></a> <div id="interface"> <div id="codeblock"> <b>domain_dontaudit_rw_all_key_sockets</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Do not audit attempts to read or write all domains key sockets. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> The type of the process performing this action. </td><td> No </td></tr> </table> </div> </div> <a name="link_domain_dontaudit_rw_all_udp_sockets"></a> <div id="interface"> <div id="codeblock"> <b>domain_dontaudit_rw_all_udp_sockets</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Do not audit attempts to read or write all domains UDP sockets. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> The type of the process performing this action. </td><td> No </td></tr> </table> </div> </div> <a name="link_domain_dontaudit_use_wide_inherit_fd"></a> <div id="interface"> <div id="codeblock"> <b>domain_dontaudit_use_wide_inherit_fd</b>( ? )<br> </div> <div id="description"> <h5>Summary</h5> <p> Summary is missing! </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> ? </td><td> Parameter descriptions are missing! </td><td> No </td></tr> </table> </div> </div> <a name="link_domain_dyntrans_type"></a> <div id="interface"> <div id="codeblock"> <b>domain_dyntrans_type</b>( ? )<br> </div> <div id="description"> <h5>Summary</h5> <p> Summary is missing! </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> ? </td><td> Parameter descriptions are missing! </td><td> No </td></tr> </table> </div> </div> <a name="link_domain_entry_file"></a> <div id="interface"> <div id="codeblock"> <b>domain_entry_file</b>( ? )<br> </div> <div id="description"> <h5>Summary</h5> <p> Summary is missing! </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> ? </td><td> Parameter descriptions are missing! </td><td> No </td></tr> </table> </div> </div> <a name="link_domain_exec_all_entry_files"></a> <div id="interface"> <div id="codeblock"> <b>domain_exec_all_entry_files</b>( ? )<br> </div> <div id="description"> <h5>Summary</h5> <p> Summary is missing! </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> ? </td><td> Parameter descriptions are missing! </td><td> No </td></tr> </table> </div> </div> <a name="link_domain_getattr_all_sockets"></a> <div id="interface"> <div id="codeblock"> <b>domain_getattr_all_sockets</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Get the attributes of all domains sockets, for all socket types. </p> <h5>Description</h5> <p> </p><p> Get the attributes of all domains sockets, for all socket types. </p><p> </p><p> This is commonly used for domains that can use lsof on all domains. </p><p> </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> Domain allowed access. </td><td> No </td></tr> </table> </div> </div> <a name="link_domain_getsession_all_domains"></a> <div id="interface"> <div id="codeblock"> <b>domain_getsession_all_domains</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Get the session ID of all domains. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> The type of the process performing this action. </td><td> No </td></tr> </table> </div> </div> <a name="link_domain_kill_all_domains"></a> <div id="interface"> <div id="codeblock"> <b>domain_kill_all_domains</b>( domain )<br> </div> <div id="description"> <h5>Description</h5> <p> Send a kill signal to all domains. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> The type of the process performing this action. </td><td> No </td></tr> </table> </div> </div> <a name="link_domain_obj_id_change_exempt"></a> <div id="interface"> <div id="codeblock"> <b>domain_obj_id_change_exempt</b>( domain )<br> </div> <div id="description"> <h5>Description</h5> <p> Makes caller an exception to the constraint preventing changing the user identity in object contexts. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> The process type to make an exception to the constraint. </td><td> No </td></tr> </table> </div> </div> <a name="link_domain_read_all_domains_state"></a> <div id="interface"> <div id="codeblock"> <b>domain_read_all_domains_state</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Read the process state (/proc/pid) of all domains. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> The type of the process performing this action. </td><td> No </td></tr> </table> </div> </div> <a name="link_domain_read_all_entry_files"></a> <div id="interface"> <div id="codeblock"> <b>domain_read_all_entry_files</b>( ? )<br> </div> <div id="description"> <h5>Summary</h5> <p> Summary is missing! </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> ? </td><td> Parameter descriptions are missing! </td><td> No </td></tr> </table> </div> </div> <a name="link_domain_role_change_exempt"></a> <div id="interface"> <div id="codeblock"> <b>domain_role_change_exempt</b>( domain )<br> </div> <div id="description"> <h5>Description</h5> <p> Makes caller an exception to the constraint preventing changing of role. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> The process type to make an exception to the constraint. </td><td> No </td></tr> </table> </div> </div> <a name="link_domain_setpriority_all_domains"></a> <div id="interface"> <div id="codeblock"> <b>domain_setpriority_all_domains</b>( ? )<br> </div> <div id="description"> <h5>Summary</h5> <p> Summary is missing! </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> ? </td><td> Parameter descriptions are missing! </td><td> No </td></tr> </table> </div> </div> <a name="link_domain_sigchld_all_domains"></a> <div id="interface"> <div id="codeblock"> <b>domain_sigchld_all_domains</b>( domain )<br> </div> <div id="description"> <h5>Description</h5> <p> Send a child terminated signal to all domains. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> The type of the process performing this action. </td><td> No </td></tr> </table> </div> </div> <a name="link_domain_sigchld_wide_inherit_fd"></a> <div id="interface"> <div id="codeblock"> <b>domain_sigchld_wide_inherit_fd</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Send a SIGCHLD signal to domains whose file discriptors are widely inheritable. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> Domain allowed access. </td><td> No </td></tr> </table> </div> </div> <a name="link_domain_signal_all_domains"></a> <div id="interface"> <div id="codeblock"> <b>domain_signal_all_domains</b>( domain )<br> </div> <div id="description"> <h5>Description</h5> <p> Send general signals to all domains. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> The type of the process performing this action. </td><td> No </td></tr> </table> </div> </div> <a name="link_domain_signull_all_domains"></a> <div id="interface"> <div id="codeblock"> <b>domain_signull_all_domains</b>( domain )<br> </div> <div id="description"> <h5>Description</h5> <p> Send a null signal to all domains. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> The type of the process performing this action. </td><td> No </td></tr> </table> </div> </div> <a name="link_domain_sigstop_all_domains"></a> <div id="interface"> <div id="codeblock"> <b>domain_sigstop_all_domains</b>( domain )<br> </div> <div id="description"> <h5>Description</h5> <p> Send a stop signal to all domains. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> The type of the process performing this action. </td><td> No </td></tr> </table> </div> </div> <a name="link_domain_subj_id_change_exempt"></a> <div id="interface"> <div id="codeblock"> <b>domain_subj_id_change_exempt</b>( domain )<br> </div> <div id="description"> <h5>Description</h5> <p> Makes caller an exception to the constraint preventing changing of user identity. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> The process type to make an exception to the constraint. </td><td> No </td></tr> </table> </div> </div> <a name="link_domain_type"></a> <div id="interface"> <div id="codeblock"> <b>domain_type</b>( ? )<br> </div> <div id="description"> <h5>Summary</h5> <p> Summary is missing! </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> ? </td><td> Parameter descriptions are missing! </td><td> No </td></tr> </table> </div> </div> <a name="link_domain_unconfined"></a> <div id="interface"> <div id="codeblock"> <b>domain_unconfined</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Unconfined access to domains. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> The type of the process performing this action. </td><td> No </td></tr> </table> </div> </div> <a name="link_domain_use_wide_inherit_fd"></a> <div id="interface"> <div id="codeblock"> <b>domain_use_wide_inherit_fd</b>( ? )<br> </div> <div id="description"> <h5>Summary</h5> <p> Summary is missing! </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> ? </td><td> Parameter descriptions are missing! </td><td> No </td></tr> </table> </div> </div> <a name="link_domain_wide_inherit_fd"></a> <div id="interface"> <div id="codeblock"> <b>domain_wide_inherit_fd</b>( ? )<br> </div> <div id="description"> <h5>Summary</h5> <p> Summary is missing! </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> ? </td><td> Parameter descriptions are missing! </td><td> No </td></tr> </table> </div> </div> <a href=#top>Return</a> <a name="templates"></a> <h3>Templates: </h3> <a name="link_domain_auto_trans"></a> <div id="template"> <div id="codeblock"> <b>domain_auto_trans</b>( ? )<br> </div> <div id="description"> <h5>Summary</h5> <p> Summary is missing! </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> ? </td><td> Parameter descriptions are missing! </td><td> No </td></tr> </table> </div> </div> <a name="link_domain_trans"></a> <div id="template"> <div id="codeblock"> <b>domain_trans</b>( ? )<br> </div> <div id="description"> <h5>Summary</h5> <p> Summary is missing! </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> ? </td><td> Parameter descriptions are missing! </td><td> No </td></tr> </table> </div> </div> <a href=#top>Return</a> </div> </body> </html>