rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Improve documentation of corecmd_exec_bin() and corecmd_exec_shell().

Browse Source
This commit is contained in:
Chris PeBenito 2010-02-26 08:58:32 -05:00
parent 13f000d2ef
commit 3a744d1275
1 changed files with 39 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

40
policy/modules/kernel/corecommands.if
View File

@ -293,6 +293,26 @@ interface(`corecmd_read_bin_sockets',`
## Execute generic programs in bin directories,
## in the caller domain.
## </summary>
## <desc>
## <p>
## Allow the specified domain to execute generic programs
## in system bin directories (/bin, /sbin, /usr/bin,
## /usr/sbin) a without domain transition.
## </p>
## <p>
## Typically, this interface should be used when the domain
## executes general system progams within the privileges
## of the source domain. Some examples of these programs
## are ls, cp, sed, python, and tar. This does not include
## shells, such as bash.
## </p>
## <p>
## Related interface:
## </p>
## <ul>
## <li>corecmd_exec_shell()</li>
## </ul>
## </desc>
## <param name="domain">
## <summary>
## Domain allowed access.
@ -770,8 +790,26 @@ interface(`corecmd_check_exec_shell',`
########################################
## <summary>
## Execute a shell in the caller domain.
## Execute shells in the caller domain.
## </summary>
## <desc>
## <p>
## Allow the specified domain to execute shells without
## a domain transition.
## </p>
## <p>
## Typically, this interface should be used when the domain
## executes shells within the privileges
## of the source domain. Some examples of these programs
## are bash, tcsh, and zsh.
## </p>
## <p>
## Related interface:
## </p>
## <ul>
## <li>corecmd_exec_bin()</li>
## </ul>
## </desc>
## <param name="domain">
## <summary>
## Domain allowed access.