## Multilevel security policy ## ##

## This module contains interfaces for handling multilevel ## security. The interfaces allow the specified subjects ## and objects to be allowed certain privileges in the ## MLS rules. ##

##
## ## Contains attributes used in MLS policy. ## ######################################## ## ## Make specified domain MLS trusted ## for reading from files at higher levels. ## ## ## ## The type of the process performing this action. ## ## # interface(`mls_file_read_up',` gen_require(` attribute mlsfileread; ') typeattribute $1 mlsfileread; ') ######################################## ## ## Make specified domain MLS trusted ## for writing to files at lower levels. ## ## ## ## The type of the process performing this action. ## ## # interface(`mls_file_write_down',` gen_require(` attribute mlsfilewrite; ') typeattribute $1 mlsfilewrite; ') ######################################## ## ## Make specified domain MLS trusted ## for raising the level of files. ## ## ## ## The type of the process performing this action. ## ## # interface(`mls_file_upgrade',` gen_require(` attribute mlsfileupgrade; ') typeattribute $1 mlsfileupgrade; ') ######################################## ## ## Make specified domain MLS trusted ## for lowering the level of files. ## ## ## ## The type of the process performing this action. ## ## # interface(`mls_file_downgrade',` gen_require(` attribute mlsfiledowngrade; ') typeattribute $1 mlsfiledowngrade; ') ######################################## ## ## Allow the specified domain to do a MLS ## range transition that changes ## the current level. ## ## ## ## The type of the process performing this action. ## ## # interface(`mls_rangetrans_source',` gen_require(` attribute privrangetrans; ') typeattribute $1 privrangetrans; ') ######################################## ## ## Make specified domain a target domain ## for MLS range transitions that change ## the current level. ## ## ## ## The type of the process performing this action. ## ## # interface(`mls_rangetrans_target',` gen_require(` attribute mlsrangetrans; ') typeattribute $1 mlsrangetrans; ') ######################################## ## ## Make specified domain MLS trusted ## for reading from processes at higher levels. ## ## ## ## The type of the process performing this action. ## ## # interface(`mls_process_read_up',` gen_require(` attribute mlsprocread; ') typeattribute $1 mlsprocread; ') ######################################## ## ## Make specified domain MLS trusted ## for writing to processes at lower levels. ## ## ## ## The type of the process performing this action. ## ## # interface(`mls_process_write_down',` gen_require(` attribute mlsprocwrite; ') typeattribute $1 mlsprocwrite; ') ######################################## ## ## Make specified domain MLS trusted ## for setting the level of processes ## it executes. ## ## ## ## The type of the process performing this action. ## ## # interface(`mls_process_set_level',` gen_require(` attribute mlsprocsetsl; ') typeattribute $1 mlsprocsetsl; ') ######################################## ## ## Make specified object MLS trusted. ## ## ##

## Make specified object MLS trusted. This ## allows all levels to read and write the ## object. ##

##

## This currently only applies to filesystem ## objects, for example, files and directories. ##

##
## ## ## The type of the object. ## ## # interface(`mls_trusted_object',` gen_require(` attribute mlstrustedobject; ') typeattribute $1 mlstrustedobject; ')