Layer: kernel

Module: selinux

Policy for kernel security interface, in particular, selinuxfs.

selinux_compute_access_vector(
	
		domain
		
	)

Allows caller to compute an access vector.

Parameter:	Description:	Optional:
domain	The process type allowed to compute an access vector.	No

selinux_compute_create_context(
	
		domain
		
	)

Parameter:	Description:	Optional:
domain		No

selinux_compute_relabel_context(
	
		domain
		
	)

Parameter:	Description:	Optional:
domain	The process type to	No

selinux_compute_user_contexts(
	
		domain
		
	)

Allows caller to compute possible contexts for a user.

Parameter:	Description:	Optional:
domain	The process type allowed to compute user contexts.	No

selinux_get_enforce_mode(
	
		domain
		
	)

Allows the caller to get the mode of policy enforcement (enforcing or permissive mode).

Parameter:	Description:	Optional:
domain	The process type to allow to get the enforcing mode.	No

selinux_get_fs_mount(
	
		domain
		
	)

Gets the caller the mountpoint of the selinuxfs filesystem.

Parameter:	Description:	Optional:
domain	The process type requesting the selinuxfs mountpoint.	No

selinux_load_policy(
	
		domain
		
	)

Allow caller to load the policy into the kernel.

Parameter:	Description:	Optional:
domain	The process type that will load the policy.	No

selinux_set_boolean(
	
		domain
		
			,
		
			[
		
		booltype
		
			]
		
	)

Allow caller to set the state of Booleans to enable or disable conditional portions of the policy.

Parameter:	Description:	Optional:
domain	The process type allowed to set the Boolean.	No
booltype	The type of Booleans the caller is allowed to set.	yes

selinux_set_enforce_mode(
	
		domain
		
	)

Allow caller to set the mode of policy enforcement (enforcing or permissive mode).

Parameter:	Description:	Optional:
domain	The process type to allow to set the enforcement mode.	No

selinux_set_parameters(
	
		domain
		
	)

Allow caller to set selinux security parameters.

Parameter:	Description:	Optional:
domain	The process type to allow to set security parameters.	No

selinux_validate_context(
	
		domain
		
	)

Allows caller to validate security contexts.

Parameter:	Description:	Optional:
domain	The process type permitted to validate contexts.	No