2005-06-15 15:45:57 +00:00
|
|
|
<html>
|
|
|
|
|
<head>
|
|
|
|
|
<title>
|
|
|
|
|
Security Enhanced Linux Reference Policy
|
|
|
|
|
</title>
|
|
|
|
|
<style type="text/css" media="all">@import "style.css";</style>
|
|
|
|
|
</head>
|
|
|
|
|
<body>
|
|
|
|
|
<div id="Header">Security Enhanced Linux Reference Policy</div>
|
|
|
|
|
<div id='Menu'>
|
|
|
|
|
|
|
|
|
|
<a href="admin.html">+
|
|
|
|
|
admin</a></br/>
|
|
|
|
|
<div id='subitem'>
|
|
|
|
|
|
|
|
|
|
</div>
|
|
|
|
|
|
2005-07-05 13:36:21 +00:00
|
|
|
<a href="apps.html">+
|
|
|
|
|
apps</a></br/>
|
|
|
|
|
<div id='subitem'>
|
|
|
|
|
|
|
|
|
|
</div>
|
|
|
|
|
|
2005-06-15 15:45:57 +00:00
|
|
|
<a href="kernel.html">+
|
|
|
|
|
kernel</a></br/>
|
|
|
|
|
<div id='subitem'>
|
|
|
|
|
|
|
|
|
|
- <a href='kernel_bootloader.html'>
|
|
|
|
|
bootloader</a><br/>
|
|
|
|
|
|
2005-12-07 15:46:38 +00:00
|
|
|
- <a href='kernel_corecommands.html'>
|
|
|
|
|
corecommands</a><br/>
|
|
|
|
|
|
2005-06-15 15:45:57 +00:00
|
|
|
- <a href='kernel_corenetwork.html'>
|
|
|
|
|
corenetwork</a><br/>
|
|
|
|
|
|
|
|
|
|
- <a href='kernel_devices.html'>
|
|
|
|
|
devices</a><br/>
|
|
|
|
|
|
2005-12-07 15:46:38 +00:00
|
|
|
- <a href='kernel_domain.html'>
|
|
|
|
|
domain</a><br/>
|
|
|
|
|
|
|
|
|
|
- <a href='kernel_files.html'>
|
|
|
|
|
files</a><br/>
|
|
|
|
|
|
2005-06-15 15:45:57 +00:00
|
|
|
- <a href='kernel_filesystem.html'>
|
|
|
|
|
filesystem</a><br/>
|
|
|
|
|
|
|
|
|
|
- <a href='kernel_kernel.html'>
|
|
|
|
|
kernel</a><br/>
|
|
|
|
|
|
2005-10-19 21:12:22 +00:00
|
|
|
- <a href='kernel_mls.html'>
|
|
|
|
|
mls</a><br/>
|
|
|
|
|
|
2005-06-15 15:45:57 +00:00
|
|
|
- <a href='kernel_selinux.html'>
|
|
|
|
|
selinux</a><br/>
|
|
|
|
|
|
|
|
|
|
- <a href='kernel_storage.html'>
|
|
|
|
|
storage</a><br/>
|
|
|
|
|
|
|
|
|
|
- <a href='kernel_terminal.html'>
|
|
|
|
|
terminal</a><br/>
|
|
|
|
|
|
|
|
|
|
</div>
|
|
|
|
|
|
|
|
|
|
<a href="services.html">+
|
|
|
|
|
services</a></br/>
|
|
|
|
|
<div id='subitem'>
|
|
|
|
|
|
|
|
|
|
</div>
|
|
|
|
|
|
|
|
|
|
<a href="system.html">+
|
|
|
|
|
system</a></br/>
|
|
|
|
|
<div id='subitem'>
|
|
|
|
|
|
|
|
|
|
</div>
|
|
|
|
|
|
|
|
|
|
<br/><p/>
|
2005-08-02 17:21:46 +00:00
|
|
|
<a href="global_booleans.html">* Global Booleans </a>
|
2005-07-05 13:36:21 +00:00
|
|
|
<br/><p/>
|
2005-08-02 17:21:46 +00:00
|
|
|
<a href="global_tunables.html">* Global Tunables </a>
|
|
|
|
|
<p/><br/><p/>
|
|
|
|
|
<a href="index.html">* Layer Index</a>
|
|
|
|
|
<br/><p/>
|
|
|
|
|
<a href="interfaces.html">* Interface Index</a>
|
|
|
|
|
<br/><p/>
|
|
|
|
|
<a href="templates.html">* Template Index</a>
|
2005-06-15 15:45:57 +00:00
|
|
|
</div>
|
|
|
|
|
|
|
|
|
|
<div id="Content">
|
|
|
|
|
|
|
|
|
|
<h1>Layer: kernel</h1><p/>
|
|
|
|
|
|
2005-08-02 17:21:46 +00:00
|
|
|
<p><p>
|
2006-01-17 20:40:13 +00:00
|
|
|
Policy for kernel threads, proc filesystem,
|
|
|
|
|
and unlabeled processes and objects.
|
2005-08-02 17:21:46 +00:00
|
|
|
</p></p><br/>
|
|
|
|
|
|
|
|
|
|
|
2005-06-15 15:45:57 +00:00
|
|
|
<table border="1" cellspacing="0" cellpadding="3" width="75%">
|
|
|
|
|
<tr><td class="title">Module:</td><td class="title">Description:</td></tr>
|
|
|
|
|
|
|
|
|
|
|
2005-07-05 13:36:21 +00:00
|
|
|
</td></tr>
|
|
|
|
|
|
|
|
|
|
|
2005-06-15 15:45:57 +00:00
|
|
|
</td></tr>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
<tr><td>
|
|
|
|
|
<a href='kernel_bootloader.html'>
|
|
|
|
|
bootloader</a></td>
|
|
|
|
|
<td><p>Policy for the kernel modules, kernel image, and bootloader.</p></td>
|
|
|
|
|
|
2005-12-07 15:46:38 +00:00
|
|
|
<tr><td>
|
|
|
|
|
<a href='kernel_corecommands.html'>
|
|
|
|
|
corecommands</a></td>
|
|
|
|
|
<td><p>
|
|
|
|
|
Core policy for shells, and generic programs
|
|
|
|
|
in /bin, /sbin, /usr/bin, and /usr/sbin.
|
|
|
|
|
</p></td>
|
|
|
|
|
|
2005-06-15 15:45:57 +00:00
|
|
|
<tr><td>
|
|
|
|
|
<a href='kernel_corenetwork.html'>
|
|
|
|
|
corenetwork</a></td>
|
|
|
|
|
<td><p>Policy controlling access to network objects</p></td>
|
|
|
|
|
|
|
|
|
|
<tr><td>
|
|
|
|
|
<a href='kernel_devices.html'>
|
|
|
|
|
devices</a></td>
|
|
|
|
|
<td><p>
|
|
|
|
|
Device nodes and interfaces for many basic system devices.
|
2005-12-07 15:46:38 +00:00
|
|
|
</p></td>
|
|
|
|
|
|
|
|
|
|
<tr><td>
|
|
|
|
|
<a href='kernel_domain.html'>
|
|
|
|
|
domain</a></td>
|
|
|
|
|
<td><p>Core policy for domains.</p></td>
|
|
|
|
|
|
|
|
|
|
<tr><td>
|
|
|
|
|
<a href='kernel_files.html'>
|
|
|
|
|
files</a></td>
|
|
|
|
|
<td><p>
|
|
|
|
|
Basic filesystem types and interfaces.
|
2005-06-15 15:45:57 +00:00
|
|
|
</p></td>
|
|
|
|
|
|
|
|
|
|
<tr><td>
|
|
|
|
|
<a href='kernel_filesystem.html'>
|
|
|
|
|
filesystem</a></td>
|
|
|
|
|
<td><p>Policy for filesystems.</p></td>
|
|
|
|
|
|
|
|
|
|
<tr><td>
|
|
|
|
|
<a href='kernel_kernel.html'>
|
|
|
|
|
kernel</a></td>
|
|
|
|
|
<td><p>
|
2006-01-17 20:40:13 +00:00
|
|
|
Policy for kernel threads, proc filesystem,
|
|
|
|
|
and unlabeled processes and objects.
|
2005-06-15 15:45:57 +00:00
|
|
|
</p></td>
|
|
|
|
|
|
2005-10-19 21:12:22 +00:00
|
|
|
<tr><td>
|
|
|
|
|
<a href='kernel_mls.html'>
|
|
|
|
|
mls</a></td>
|
|
|
|
|
<td><p>Multilevel security policy</p></td>
|
|
|
|
|
|
2005-06-15 15:45:57 +00:00
|
|
|
<tr><td>
|
|
|
|
|
<a href='kernel_selinux.html'>
|
|
|
|
|
selinux</a></td>
|
|
|
|
|
<td><p>
|
|
|
|
|
Policy for kernel security interface, in particular, selinuxfs.
|
|
|
|
|
</p></td>
|
|
|
|
|
|
|
|
|
|
<tr><td>
|
|
|
|
|
<a href='kernel_storage.html'>
|
|
|
|
|
storage</a></td>
|
|
|
|
|
<td><p>Policy controlling access to storage devices</p></td>
|
|
|
|
|
|
|
|
|
|
<tr><td>
|
|
|
|
|
<a href='kernel_terminal.html'>
|
|
|
|
|
terminal</a></td>
|
|
|
|
|
<td><p>Policy for terminals.</p></td>
|
|
|
|
|
|
|
|
|
|
</td></tr>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
</td></tr>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
</td></tr>
|
|
|
|
|
|
|
|
|
|
</table>
|
|
|
|
|
<p/><br/><br/>
|
|
|
|
|
|
|
|
|
|
</div>
|
|
|
|
|
</body>
|
|
|
|
|
</html>
|
