Layer: system

Module: domain

Description:

Core policy for domains.

Interfaces:

domain_dontaudit_getattr_all_tcp_sockets( domain )
Description

Do not audit attempts to get the attributes of all domains TCP sockets.

Parameters
Parameter:Description:Optional:
domain The type of the process performing this action. No
domain_dontaudit_getattr_all_udp_sockets( domain )
Description

Do not audit attempts to get the attributes of all domains UDP sockets.

Parameters
Parameter:Description:Optional:
domain The type of the process performing this action. No
domain_dontaudit_getattr_all_unix_dgram_sockets( domain )
Description

Do not audit attempts to get the attributes of all domains unix datagram sockets.

Parameters
Parameter:Description:Optional:
domain The type of the process performing this action. No
domain_dontaudit_getattr_all_unnamed_pipes( domain )
Description

Do not audit attempts to get the attributes of all domains unnamed pipes.

Parameters
Parameter:Description:Optional:
domain The type of the process performing this action. No
domain_dontaudit_list_all_domains_proc( domain )
Description

Do not audit attempts to read the process state directories of all domains.

Parameters
Parameter:Description:Optional:
domain The type of the process performing this action. No
domain_getsession_all_domains( domain )
Description

Get the session ID of all domains.

Parameters
Parameter:Description:Optional:
domain The type of the process performing this action. No
domain_kill_all_domains( domain )
Description

Send a kill signal to all domains.

Parameters
Parameter:Description:Optional:
domain The type of the process performing this action. No
domain_obj_id_change_exempt( domain )
Description

Makes caller an exception to the constraint preventing changing the user identity in object contexts.

Parameters
Parameter:Description:Optional:
domain The process type to make an exception to the constraint. No
domain_read_all_domains_state( domain )
Description

Read the process state (/proc/pid) of all domains.

Parameters
Parameter:Description:Optional:
domain The type of the process performing this action. No
domain_role_change_exempt( domain )
Description

Makes caller an exception to the constraint preventing changing of role.

Parameters
Parameter:Description:Optional:
domain The process type to make an exception to the constraint. No
domain_sigchld_all_domains( domain )
Description

Send a child terminated signal to all domains.

Parameters
Parameter:Description:Optional:
domain The type of the process performing this action. No
domain_signal_all_domains( domain )
Description

Send general signals to all domains.

Parameters
Parameter:Description:Optional:
domain The type of the process performing this action. No
domain_signull_all_domains( domain )
Description

Send a null signal to all domains.

Parameters
Parameter:Description:Optional:
domain The type of the process performing this action. No
domain_sigstop_all_domains( domain )
Description

Send a stop signal to all domains.

Parameters
Parameter:Description:Optional:
domain The type of the process performing this action. No
domain_subj_id_change_exempt( domain )
Description

Makes caller an exception to the constraint preventing changing of user identity.

Parameters
Parameter:Description:Optional:
domain The process type to make an exception to the constraint. No