Layer: system

Module: authlogin

Interfaces Templates

Description:

Common policy for authentication and user login.

Interfaces:

auth_delete_pam_pid( domain )
Description

Delete pam PID files.

Parameters
Parameter:Description:Optional:
domain The type of the process performing this action. No
auth_domtrans_chk_passwd( domain )
Description

Run unix_chkpwd to check a password.

Parameters
Parameter:Description:Optional:
domain The type of the process performing this action. No
auth_domtrans_login_program( domain , target_domain )
Description

Execute a login_program in the target domain.

Parameters
Parameter:Description:Optional:
domain The type of the process performing this action. No
target_domain The type of the login_program process. No
auth_domtrans_pam( domain )
Description

Execute pam programs in the pam domain.

Parameters
Parameter:Description:Optional:
domain The type of the process performing this action. No
auth_domtrans_pam_console( ? )
Summary

Summary is missing!

Parameters
Parameter:Description:Optional:
? Parameter descriptions are missing! No
auth_domtrans_utempter( domain )
Description

Execute utempter programs in the utempter domain.

Parameters
Parameter:Description:Optional:
domain The type of the process performing this action. No
auth_dontaudit_getattr_shadow( domain )
Description

Parameters
Parameter:Description:Optional:
domain The type of the process performing this action. No
auth_dontaudit_read_shadow( domain )
Description

Do not audit attempts to read the shadow password file (/etc/shadow).

Parameters
Parameter:Description:Optional:
domain The type of the domain to not audit. No
auth_dontaudit_write_login_records( ? )
Summary

Summary is missing!

Parameters
Parameter:Description:Optional:
? Parameter descriptions are missing! No
auth_exec_pam( domain )
Description

Execute the pam program.

Parameters
Parameter:Description:Optional:
domain The type of the process performing this action. No
auth_list_pam_console_data( ? )
Summary

Summary is missing!

Parameters
Parameter:Description:Optional:
? Parameter descriptions are missing! No
auth_login_entry_type( domain )
Description

Use the login program as an entry point program.

Parameters
Parameter:Description:Optional:
domain The type of process using the login program as entry point. No
auth_manage_all_files_except_shadow( domain , [ exception_types ] )
Description

Manage all files on the filesystem, except the shadow passwords and listed exceptions.

Parameters
Parameter:Description:Optional:
domain The type of the domain perfoming this action. No
exception_types The types to be excluded. Each type or attribute must be negated by the caller. yes
auth_manage_login_records( ? )
Summary

Summary is missing!

Parameters
Parameter:Description:Optional:
? Parameter descriptions are missing! No
auth_manage_pam_console_data( ? )
Summary

Summary is missing!

Parameters
Parameter:Description:Optional:
? Parameter descriptions are missing! No
auth_manage_shadow( ? )
Summary

Summary is missing!

Parameters
Parameter:Description:Optional:
? Parameter descriptions are missing! No
auth_read_login_records( ? )
Summary

Summary is missing!

Parameters
Parameter:Description:Optional:
? Parameter descriptions are missing! No
auth_read_pam_console_data( ? )
Summary

Summary is missing!

Parameters
Parameter:Description:Optional:
? Parameter descriptions are missing! No
auth_read_pam_pid( ? )
Summary

Summary is missing!

Parameters
Parameter:Description:Optional:
? Parameter descriptions are missing! No
auth_read_shadow( domain )
Description

Read the shadow passwords file (/etc/shadow)

Parameters
Parameter:Description:Optional:
domain The type of the process performing this action. No
auth_relabel_all_files_except_shadow( domain , [ exception_types ] )
Description

Relabel all files on the filesystem, except the shadow passwords and listed exceptions.

Parameters
Parameter:Description:Optional:
domain The type of the domain perfoming this action. No
exception_types The types to be excluded. Each type or attribute must be negated by the caller. yes
auth_relabelto_shadow( ? )
Summary

Summary is missing!

Parameters
Parameter:Description:Optional:
? Parameter descriptions are missing! No
auth_run_pam( domain , role , terminal )
Description

Execute pam programs in the PAM domain.

Parameters
Parameter:Description:Optional:
domain The type of the process performing this action. No
role The role to allow the PAM domain. No
terminal The type of the terminal allow the PAM domain to use. No
auth_run_utempter( domain , role , terminal )
Description

Execute utempter programs in the utempter domain.

Parameters
Parameter:Description:Optional:
domain The type of the process performing this action. No
role The role to allow the utempter domain. No
terminal The type of the terminal allow the utempter domain to use. No
auth_rw_faillog( ? )
Summary

Summary is missing!

Parameters
Parameter:Description:Optional:
? Parameter descriptions are missing! No
auth_rw_lastlog( ? )
Summary

Summary is missing!

Parameters
Parameter:Description:Optional:
? Parameter descriptions are missing! No
auth_rw_login_records( ? )
Summary

Summary is missing!

Parameters
Parameter:Description:Optional:
? Parameter descriptions are missing! No
auth_rw_shadow( domain )
Description

Read and write the shadow password file (/etc/shadow).

Parameters
Parameter:Description:Optional:
domain The type of the process performing this action. No
Return

Templates:

authlogin_per_userdomain_template( userdomain_prefix )
Summary

The per user domain template for the authlogin module.

Description

This template creates a derived domain which is allowed to authenticate users by using PAM unix_chkpwd support. This domain will be used by any programs running in the user domain which use PAM to authenticate.

This template is invoked automatically for each user, and generally does not need to be invoked directly by policy writers.

Parameters
Parameter:Description:Optional:
userdomain_prefix The prefix of the user domain (e.g., user is the prefix for user_t). No
Return