<html> <head> <title> Security Enhanced Linux Reference Policy </title> <style type="text/css" media="all">@import "style.css";</style> </head> <body> <div id="Header">Security Enhanced Linux Reference Policy</div> <div id='Menu'> <a href="admin.html">+ admin</a></br/> <div id='subitem'> </div> <a href="apps.html">+ apps</a></br/> <div id='subitem'> </div> <a href="kernel.html">+ kernel</a></br/> <div id='subitem'> - <a href='kernel_bootloader.html'> bootloader</a><br/> - <a href='kernel_corenetwork.html'> corenetwork</a><br/> - <a href='kernel_devices.html'> devices</a><br/> - <a href='kernel_filesystem.html'> filesystem</a><br/> - <a href='kernel_kernel.html'> kernel</a><br/> - <a href='kernel_mls.html'> mls</a><br/> - <a href='kernel_selinux.html'> selinux</a><br/> - <a href='kernel_storage.html'> storage</a><br/> - <a href='kernel_terminal.html'> terminal</a><br/> </div> <a href="services.html">+ services</a></br/> <div id='subitem'> </div> <a href="system.html">+ system</a></br/> <div id='subitem'> </div> <br/><p/> <a href="global_booleans.html">* Global Booleans </a> <br/><p/> <a href="global_tunables.html">* Global Tunables </a> <p/><br/><p/> <a href="index.html">* Layer Index</a> <br/><p/> <a href="interfaces.html">* Interface Index</a> <br/><p/> <a href="templates.html">* Template Index</a> </div> <div id="Content"> <a name="top":></a> <h1>Layer: kernel</h1><p/> <h2>Module: bootloader</h2><p/> <h3>Description:</h3> <p><p>Policy for the kernel modules, kernel image, and bootloader.</p></p> <a name="interfaces"></a> <h3>Interfaces: </h3> <a name="link_bootloader_create_kernel"></a> <div id="interface"> <div id="codeblock"> <b>bootloader_create_kernel</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Install a kernel into the /boot directory. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> The type of the process performing this action. </td><td> No </td></tr> </table> </div> </div> <a name="link_bootloader_create_kernel_symbol_table"></a> <div id="interface"> <div id="codeblock"> <b>bootloader_create_kernel_symbol_table</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Install a system.map into the /boot directory. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> The type of the process performing this action. </td><td> No </td></tr> </table> </div> </div> <a name="link_bootloader_create_modules"></a> <div id="interface"> <div id="codeblock"> <b>bootloader_create_modules</b>( ? )<br> </div> <div id="description"> <h5>Summary</h5> <p> Summary is missing! </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> ? </td><td> Parameter descriptions are missing! </td><td> No </td></tr> </table> </div> </div> <a name="link_bootloader_create_runtime_file"></a> <div id="interface"> <div id="codeblock"> <b>bootloader_create_runtime_file</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Read and write the bootloader temporary data in /tmp. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> The type of the process performing this action. </td><td> No </td></tr> </table> </div> </div> <a name="link_bootloader_delete_kernel"></a> <div id="interface"> <div id="codeblock"> <b>bootloader_delete_kernel</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Delete a kernel from /boot. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> The type of the process performing this action. </td><td> No </td></tr> </table> </div> </div> <a name="link_bootloader_delete_kernel_symbol_table"></a> <div id="interface"> <div id="codeblock"> <b>bootloader_delete_kernel_symbol_table</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Delete a system.map in the /boot directory. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> The type of the process performing this action. </td><td> No </td></tr> </table> </div> </div> <a name="link_bootloader_domtrans"></a> <div id="interface"> <div id="codeblock"> <b>bootloader_domtrans</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Execute bootloader in the bootloader domain. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> The type of the process performing this action. </td><td> No </td></tr> </table> </div> </div> <a name="link_bootloader_dontaudit_getattr_boot_dir"></a> <div id="interface"> <div id="codeblock"> <b>bootloader_dontaudit_getattr_boot_dir</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Do not audit attempts to get attributes of the /boot directory. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> Domain to not audit. </td><td> No </td></tr> </table> </div> </div> <a name="link_bootloader_dontaudit_search_boot"></a> <div id="interface"> <div id="codeblock"> <b>bootloader_dontaudit_search_boot</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Do not audit attempts to search the /boot directory. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> The type of the process performing this action. </td><td> No </td></tr> </table> </div> </div> <a name="link_bootloader_getattr_kernel_modules"></a> <div id="interface"> <div id="codeblock"> <b>bootloader_getattr_kernel_modules</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Get the attributes of kernel module files. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> The type of the process performing this action. </td><td> No </td></tr> </table> </div> </div> <a name="link_bootloader_list_kernel_modules"></a> <div id="interface"> <div id="codeblock"> <b>bootloader_list_kernel_modules</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> List the contents of the kernel module directories. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> The type of the process performing this action. </td><td> No </td></tr> </table> </div> </div> <a name="link_bootloader_manage_kernel_modules"></a> <div id="interface"> <div id="codeblock"> <b>bootloader_manage_kernel_modules</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Create, read, write, and delete kernel module files. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> The type of the process performing this action. </td><td> No </td></tr> </table> </div> </div> <a name="link_bootloader_read_config"></a> <div id="interface"> <div id="codeblock"> <b>bootloader_read_config</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Read the bootloader configuration file. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> The type of the process performing this action. </td><td> No </td></tr> </table> </div> </div> <a name="link_bootloader_read_kernel_modules"></a> <div id="interface"> <div id="codeblock"> <b>bootloader_read_kernel_modules</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Read kernel module files. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> The type of the process performing this action. </td><td> No </td></tr> </table> </div> </div> <a name="link_bootloader_read_kernel_symbol_table"></a> <div id="interface"> <div id="codeblock"> <b>bootloader_read_kernel_symbol_table</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Read system.map in the /boot directory. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> The type of the process performing this action. </td><td> No </td></tr> </table> </div> </div> <a name="link_bootloader_run"></a> <div id="interface"> <div id="codeblock"> <b>bootloader_run</b>( domain , role , terminal )<br> </div> <div id="description"> <h5>Summary</h5> <p> Execute bootloader interactively and do a domain transition to the bootloader domain. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> The type of the process performing this action. </td><td> No </td></tr> <tr><td> role </td><td> The role to be allowed the bootloader domain. </td><td> No </td></tr> <tr><td> terminal </td><td> The type of the terminal allow the bootloader domain to use. </td><td> No </td></tr> </table> </div> </div> <a name="link_bootloader_rw_boot_symlinks"></a> <div id="interface"> <div id="codeblock"> <b>bootloader_rw_boot_symlinks</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Read and write symbolic links in the /boot directory. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> The type of the process performing this action. </td><td> No </td></tr> </table> </div> </div> <a name="link_bootloader_rw_config"></a> <div id="interface"> <div id="codeblock"> <b>bootloader_rw_config</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Read and write the bootloader configuration file. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> The type of the process performing this action. </td><td> No </td></tr> </table> </div> </div> <a name="link_bootloader_rw_tmp_file"></a> <div id="interface"> <div id="codeblock"> <b>bootloader_rw_tmp_file</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Read and write the bootloader temporary data in /tmp. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> The type of the process performing this action. </td><td> No </td></tr> </table> </div> </div> <a name="link_bootloader_search_boot"></a> <div id="interface"> <div id="codeblock"> <b>bootloader_search_boot</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Search the /boot directory. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> The type of the process performing this action. </td><td> No </td></tr> </table> </div> </div> <a name="link_bootloader_search_kernel_modules"></a> <div id="interface"> <div id="codeblock"> <b>bootloader_search_kernel_modules</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Search the contents of the kernel module directories. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> The type of the process performing this action. </td><td> No </td></tr> </table> </div> </div> <a name="link_bootloader_write_kernel_modules"></a> <div id="interface"> <div id="codeblock"> <b>bootloader_write_kernel_modules</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Write kernel module files. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="80%"> <tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr> <tr><td> domain </td><td> The type of the process performing this action. </td><td> No </td></tr> </table> </div> </div> <a href=#top>Return</a> </div> </body> </html>