Layer: kernel

Module: filesystem

Description:

Policy for filesystems.

This module is required to be included in all policies.

Interfaces:

fs_associate( file_type )
Summary

Associate the specified file type to persistent filesystems with extended attributes. This allows a file of this type to be created on a filesystem such as ext3, JFS, and XFS.

Parameters
Parameter:Description:Optional:
file_type The type of the to be associated. No
fs_associate_noxattr( file_type )
Summary

Associate the specified file type to filesystems which lack extended attributes support. This allows a file of this type to be created on a filesystem such as FAT32, and NFS.

Parameters
Parameter:Description:Optional:
file_type The type of the to be associated. No
fs_associate_tmpfs( type )
Summary

Allow the type to associate to tmpfs filesystems.

Parameters
Parameter:Description:Optional:
type The type of the object to be associated. No
fs_cifs_domtrans( domain , target_domain )
Summary

Execute a file on a CIFS or SMB filesystem in the specified domain.

Description

Execute a file on a CIFS or SMB filesystem in the specified domain. This allows the specified domain to execute any file on these filesystems in the specified domain. This is not suggested.

No interprocess communication (signals, pipes, etc.) is provided by this interface since the domains are not owned by this module.

This interface was added to handle home directories on CIFS/SMB filesystems, in particular used by the ssh-agent policy.

Parameters
Parameter:Description:Optional:
domain The type of the process performing this action. No
target_domain The type of the new process. No
fs_donaudit_read_removable_files( domain )
Summary

Do not audit attempts to read removable storage files.

Parameters
Parameter:Description:Optional:
domain Domain not to audit. No
fs_dontaudit_getattr_all_files( domain )
Summary

Do not audit attempts to get the attributes of all files with a filesystem type.

Parameters
Parameter:Description:Optional:
domain Domain allowed access. No
fs_dontaudit_getattr_all_fs( domain )
Summary

Do not audit attempts to get the attributes all filesystems.

Parameters
Parameter:Description:Optional:
domain The type of the domain to not audit. No
fs_dontaudit_getattr_all_pipes( domain )
Summary

Do not audit attempts to get the attributes of all named pipes with a filesystem type.

Parameters
Parameter:Description:Optional:
domain Domain allowed access. No
fs_dontaudit_getattr_all_sockets( domain )
Summary

Do not audit attempts to get the attributes of all named sockets with a filesystem type.

Parameters
Parameter:Description:Optional:
domain Domain allowed access. No
fs_dontaudit_getattr_all_symlinks( domain )
Summary

Do not audit attempts to get the attributes of all symbolic links with a filesystem type.

Parameters
Parameter:Description:Optional:
domain Domain allowed access. No
fs_dontaudit_getattr_xattr_fs( domain )
Summary

Do not audit attempts to get the attributes of a persistent filesystem which has extended attributes, such as ext3, JFS, or XFS.

Parameters
Parameter:Description:Optional:
domain The type of the domain to not audit. No
fs_dontaudit_list_auto_mountpoints( domain )
Summary

Do not audit attempts to list directories of automatically mounted filesystems.

Parameters
Parameter:Description:Optional:
domain The type of the domain performing this action. No
fs_dontaudit_list_cifs( domain )
Summary

Do not audit attempts to list the contents of directories on a CIFS or SMB filesystem.

Parameters
Parameter:Description:Optional:
domain Domain to not audit. No
fs_dontaudit_list_nfs( domain )
Summary

Do not audit attempts to list the contents of directories on a NFS filesystem.

Parameters
Parameter:Description:Optional:
domain Domain to not audit. No
fs_dontaudit_list_removable_dirs( domain )
Summary

Do not audit attempts to list removable storage directories.

Parameters
Parameter:Description:Optional:
domain Domain not to audit. No
fs_dontaudit_list_tmpfs( domain )
Summary

Do not audit attempts to list the contents of generic tmpfs directories.

Parameters
Parameter:Description:Optional:
domain Domain to not audit. No
fs_dontaudit_manage_cifs_dirs( domain )
Summary

Do not audit attempts to create, read, write, and delete directories on a CIFS or SMB network filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain managing the directories. No
fs_dontaudit_manage_cifs_files( domain )
Summary

Do not audit attempts to create, read, write, and delete files on a CIFS or SMB network filesystem.

Parameters
Parameter:Description:Optional:
domain Domain to not audit. No
fs_dontaudit_manage_nfs_dirs( domain )
Summary

Do not audit attempts to create, read, write, and delete directories on a NFS filesystem.

Parameters
Parameter:Description:Optional:
domain Domain to not audit. No
fs_dontaudit_manage_nfs_files( domain )
Summary

Do not audit attempts to create, read, write, and delete files on a NFS filesystem.

Parameters
Parameter:Description:Optional:
domain Domain to not audit. No
fs_dontaudit_read_cifs_files( domain )
Summary

Do not audit attempts to read files on a CIFS or SMB filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain to not audit. No
fs_dontaudit_read_nfs_files( domain )
Summary

Do not audit attempts to read files on a NFS filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain to not audit. No
fs_dontaudit_rw_cifs_files( domain )
Summary

Do not audit attempts to read or write files on a CIFS or SMB filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain to not audit. No
fs_dontaudit_rw_nfs_files( domain )
Summary

Do not audit attempts to read or write files on a NFS filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain to not audit. No
fs_dontaudit_rw_tmpfs_files( domain )
Summary

Do not audit attempts to read or write generic tmpfs files.

Parameters
Parameter:Description:Optional:
domain Domain to not audit. No
fs_dontaudit_use_tmpfs_chr_dev( domain )
Summary

dontaudit Read and write character nodes on tmpfs filesystems.

Parameters
Parameter:Description:Optional:
domain The type of the process performing this action. No
fs_exec_noxattr( domain )
Summary

Execute files on a filesystem that does not support extended attributes.

Parameters
Parameter:Description:Optional:
domain Domain allowed access. No
fs_execute_cifs_files( domain )
Summary

Execute files on a CIFS or SMB network filesystem, in the caller domain.

Parameters
Parameter:Description:Optional:
domain The type of the domain executing the files. No
fs_execute_nfs_files( domain )
Summary

Execute files on a NFS filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain executing the files. No
fs_filetrans_tmpfs( ? )
Summary

Summary is missing!

Parameters
Parameter:Description:Optional:
? Parameter descriptions are missing! No
fs_get_all_fs_quotas( domain )
Summary

Get the quotas of all filesystems.

Parameters
Parameter:Description:Optional:
domain The type of the domain getting quotas. No
fs_get_xattr_fs_quota( domain )
Summary

Get the filesystem quotas of a filesystem with extended attributes.

Parameters
Parameter:Description:Optional:
domain The type of the domain mounting the filesystem. No
fs_get_xattr_fs_quotas( domain )
Summary

Get the quotas of a persistent filesystem which has extended attributes, such as ext3, JFS, or XFS.

Parameters
Parameter:Description:Optional:
domain The type of the domain getting quotas. No
fs_getattr_all_dirs( domain )
Summary

Get the attributes of all directories with a filesystem type.

Parameters
Parameter:Description:Optional:
domain Domain allowed access. No
fs_getattr_all_files( domain )
Summary

Get the attributes of all files with a filesystem type.

Parameters
Parameter:Description:Optional:
domain Domain allowed access. No
fs_getattr_all_fs( domain )
Summary

Get the attributes of all persistent filesystems.

Parameters
Parameter:Description:Optional:
domain The type of the domain doing the getattr on the filesystem. No
fs_getattr_all_pipes( domain )
Summary

Get the attributes of all named pipes with a filesystem type.

Parameters
Parameter:Description:Optional:
domain Domain allowed access. No
fs_getattr_all_sockets( domain )
Summary

Get the attributes of all named sockets with a filesystem type.

Parameters
Parameter:Description:Optional:
domain Domain allowed access. No
fs_getattr_all_symlinks( domain )
Summary

Get the attributes of all symbolic links with a filesystem type.

Parameters
Parameter:Description:Optional:
domain Domain allowed access. No
fs_getattr_autofs( domain )
Summary

Get the attributes of an automount pseudo filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain doing the getattr on the filesystem. No
fs_getattr_cifs( domain )
Summary

Get the attributes of a CIFS or SMB network filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain doing the getattr on the filesystem. No
fs_getattr_dos_fs( domain )
Summary

Get the attributes of a DOS filesystem, such as FAT32 or NTFS.

Parameters
Parameter:Description:Optional:
domain The type of the domain doing the getattr on the filesystem. No
fs_getattr_iso9660_fs( domain )
Summary

Get the attributes of an iso9660 filesystem, which is usually used on CDs.

Parameters
Parameter:Description:Optional:
domain The type of the domain doing the getattr on the filesystem. No
fs_getattr_nfs( domain )
Summary

Get the attributes of a NFS filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain doing the getattr on the filesystem. No
fs_getattr_nfsd_fs( domain )
Summary

Get the attributes of a NFS server pseudo filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain doing the getattr on the filesystem. No
fs_getattr_ramfs( domain )
Summary

Get the attributes of a RAM filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain doing the getattr on the filesystem. No
fs_getattr_romfs( domain )
Summary

Get the attributes of a ROM filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain doing the getattr on the filesystem. No
fs_getattr_rpc_dirs( domain )
Summary

Read directories of RPC file system pipes.

Parameters
Parameter:Description:Optional:
domain The type of the domain reading the symbolic links. No
fs_getattr_rpc_pipefs( domain )
Summary

Get the attributes of a RPC pipe filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain doing the getattr on the filesystem. No
fs_getattr_tmpfs( domain )
Summary

Get the attributes of a tmpfs filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain doing the getattr on the filesystem. No
fs_getattr_tmpfs_dir( domain )
Summary

Get the attributes of tmpfs directories.

Parameters
Parameter:Description:Optional:
domain Domain allowed access. No
fs_getattr_xattr_fs( domain )
Summary

Get the attributes of a persistent filesystem which has extended attributes, such as ext3, JFS, or XFS.

Parameters
Parameter:Description:Optional:
domain The type of the domain doing the getattr on the filesystem. No
fs_list_all( domain )
Summary

List all directories with a filesystem type.

Parameters
Parameter:Description:Optional:
domain Domain allowed access. No
fs_list_auto_mountpoints( domain )
Summary

Read directories of automatically mounted filesystems.

Parameters
Parameter:Description:Optional:
domain The type of the domain performing this action. No
fs_list_cifs( domain )
Summary

List the contents of directories on a CIFS or SMB filesystem.

Parameters
Parameter:Description:Optional:
domain Domain allowed access. No
fs_list_nfs( domain )
Summary

List NFS filesystem.

Parameters
Parameter:Description:Optional:
domain Domain allowed access. No
fs_list_noxattr_fs( domain )
Summary

Read all noxattrfs directories.

Parameters
Parameter:Description:Optional:
domain Domain allowed access. No
fs_list_tmpfs( domain )
Summary

List the contents of generic tmpfs directories.

Parameters
Parameter:Description:Optional:
domain Domain allowed access. No
fs_make_noxattr_fs( domain )
Summary

Transform specified type into a filesystem type which does not have extended attribute support.

Parameters
Parameter:Description:Optional:
domain The type of the process performing this action. No
fs_manage_auto_mountpoints( domain )
Summary

Create, read, write, and delete auto moutpoints.

Parameters
Parameter:Description:Optional:
domain Domain allowed access. No
fs_manage_cifs_dirs( domain )
Summary

Create, read, write, and delete directories on a CIFS or SMB network filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain managing the directories. No
fs_manage_cifs_files( domain )
Summary

Create, read, write, and delete files on a CIFS or SMB network filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain managing the files. No
fs_manage_cifs_named_pipes( domain )
Summary

Create, read, write, and delete named pipes on a CIFS or SMB network filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain managing the pipes. No
fs_manage_cifs_named_sockets( domain )
Summary

Create, read, write, and delete named sockets on a CIFS or SMB network filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain managing the sockets. No
fs_manage_cifs_symlinks( domain )
Summary

Create, read, write, and delete symbolic links on a CIFS or SMB network filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain managing the symbolic links. No
fs_manage_nfs_dirs( domain )
Summary

Create, read, write, and delete directories on a NFS filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain managing the directories. No
fs_manage_nfs_files( domain )
Summary

Create, read, write, and delete files on a NFS filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain managing the files. No
fs_manage_nfs_named_pipes( domain )
Summary

Create, read, write, and delete named pipes on a NFS filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain managing the pipes. No
fs_manage_nfs_named_sockets( domain )
Summary

Create, read, write, and delete named sockets on a NFS filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain managing the sockets. No
fs_manage_nfs_symlinks( domain )
Summary

Create, read, write, and delete symbolic links on a CIFS or SMB network filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain managing the symbolic links. No
fs_manage_tmpfs_blk_dev( domain )
Summary

Read and write, create and delete block nodes on tmpfs filesystems.

Parameters
Parameter:Description:Optional:
domain The type of the process performing this action. No
fs_manage_tmpfs_chr_dev( domain )
Summary

Read and write, create and delete character nodes on tmpfs filesystems.

Parameters
Parameter:Description:Optional:
domain The type of the process performing this action. No
fs_manage_tmpfs_dirs( domain )
Summary

Create, read, write, and delete tmpfs directories

Parameters
Parameter:Description:Optional:
domain Domain allowed access. No
fs_manage_tmpfs_files( domain )
Summary

Read and write, create and delete generic files on tmpfs filesystems.

Parameters
Parameter:Description:Optional:
domain The type of the process performing this action. No
fs_manage_tmpfs_sockets( domain )
Summary

Read and write, create and delete socket files on tmpfs filesystems.

Parameters
Parameter:Description:Optional:
domain The type of the process performing this action. No
fs_manage_tmpfs_symlinks( domain )
Summary

Read and write, create and delete symbolic links on tmpfs filesystems.

Parameters
Parameter:Description:Optional:
domain The type of the process performing this action. No
fs_mount_all_fs( domain )
Summary

Mount all filesystems.

Parameters
Parameter:Description:Optional:
domain The type of the domain mounting the filesystem. No
fs_mount_autofs( domain )
Summary

Mount an automount pseudo filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain mounting the filesystem. No
fs_mount_cifs( domain )
Summary

Mount a CIFS or SMB network filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain mounting the filesystem. No
fs_mount_dos_fs( domain )
Summary

Mount a DOS filesystem, such as FAT32 or NTFS.

Parameters
Parameter:Description:Optional:
domain The type of the domain mounting the filesystem. No
fs_mount_iso9660_fs( domain )
Summary

Mount an iso9660 filesystem, which is usually used on CDs.

Parameters
Parameter:Description:Optional:
domain The type of the domain mounting the filesystem. No
fs_mount_nfs( domain )
Summary

Mount a NFS filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain mounting the filesystem. No
fs_mount_nfsd_fs( domain )
Summary

Mount a NFS server pseudo filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain mounting the filesystem. No
fs_mount_ramfs( domain )
Summary

Mount a RAM filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain mounting the filesystem. No
fs_mount_romfs( domain )
Summary

Mount a ROM filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain mounting the filesystem. No
fs_mount_rpc_pipefs( domain )
Summary

Mount a RPC pipe filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain mounting the filesystem. No
fs_mount_tmpfs( domain )
Summary

Mount a tmpfs filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain mounting the filesystem. No
fs_mount_xattr_fs( domain )
Summary

Mount a persistent filesystem which has extended attributes, such as ext3, JFS, or XFS.

Parameters
Parameter:Description:Optional:
domain The type of the domain mounting the filesystem. No
fs_nfs_domtrans( domain , target_domain )
Summary

Execute a file on a NFS filesystem in the specified domain.

Description

Execute a file on a NFS filesystem in the specified domain. This allows the specified domain to execute any file on a NFS filesystem in the specified domain. This is not suggested.

No interprocess communication (signals, pipes, etc.) is provided by this interface since the domains are not owned by this module.

This interface was added to handle home directories on NFS filesystems, in particular used by the ssh-agent policy.

Parameters
Parameter:Description:Optional:
domain The type of the process performing this action. No
target_domain The type of the new process. No
fs_read_cifs_files( domain )
Summary

Read files on a CIFS or SMB filesystem.

Parameters
Parameter:Description:Optional:
domain Domain allowed access. No
fs_read_cifs_symlinks( domain )
Summary

Read symbolic links on a CIFS or SMB filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain reading the symbolic links. No
fs_read_eventpollfs( domain )
Summary

Read eventpollfs files

Parameters
Parameter:Description:Optional:
domain Domain allowed access. No
fs_read_nfs_files( domain )
Summary

Read files on a NFS filesystem.

Parameters
Parameter:Description:Optional:
domain Domain allowed access. No
fs_read_nfs_symlinks( domain )
Summary

Read symbolic links on a NFS filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain reading the symbolic links. No
fs_read_noxattr_fs_files( domain )
Summary

Read all noxattrfs files.

Parameters
Parameter:Description:Optional:
domain Domain allowed access. No
fs_read_noxattr_fs_symlinks( domain )
Summary

Read all noxattrfs symbolic links.

Parameters
Parameter:Description:Optional:
domain Domain allowed access. No
fs_read_removable_files( domain )
Summary

Read removable storage files.

Parameters
Parameter:Description:Optional:
domain Domain allowed access. No
fs_read_removable_symlinks( domain )
Summary

Read removable storage symbolic links.

Parameters
Parameter:Description:Optional:
domain Domain allowed access. No
fs_read_rpc_dirs( domain )
Summary

Read directories of RPC file system pipes.

Parameters
Parameter:Description:Optional:
domain The type of the domain reading the symbolic links. No
fs_read_rpc_files( domain )
Summary

Read files of RPC file system pipes.

Parameters
Parameter:Description:Optional:
domain The type of the domain reading the symbolic links. No
fs_read_rpc_sockets( domain )
Summary

Read sockets of RPC file system pipes.

Parameters
Parameter:Description:Optional:
domain The type of the domain reading the symbolic links. No
fs_read_rpc_symlinks( domain )
Summary

Read symbolic links of RPC file system pipes.

Parameters
Parameter:Description:Optional:
domain The type of the domain reading the symbolic links. No
fs_register_binary_executable_type( domain )
Summary

Register an interpreter for new binary file types, using the kernel binfmt_misc support. A common use for this is to register a JVM as an interpreter for Java byte code. Registered binaries can be directly executed on a command line without specifying the interpreter.

Parameters
Parameter:Description:Optional:
domain The type of the domain registering the interpreter. No
fs_relabel_tmpfs_blk_dev( domain )
Summary

Relabel block nodes on tmpfs filesystems.

Parameters
Parameter:Description:Optional:
domain The type of the process performing this action. No
fs_relabel_tmpfs_chr_dev( domain )
Summary

Relabel character nodes on tmpfs filesystems.

Parameters
Parameter:Description:Optional:
domain The type of the process performing this action. No
fs_relabelfrom_all_fs( domain )
Summary

Relabelfrom all filesystems.

Parameters
Parameter:Description:Optional:
domain The type of the domain doing the getattr on the filesystem. No
fs_relabelfrom_dos_fs( domain )
Summary

Allow changing of the label of a DOS filesystem using the context= mount option.

Parameters
Parameter:Description:Optional:
domain The type of the domain mounting the filesystem. No
fs_relabelfrom_xattr_fs( domain )
Summary

Allow changing of the label of a filesystem with extended attributes using the context= mount option.

Parameters
Parameter:Description:Optional:
domain The type of the domain mounting the filesystem. No
fs_remount_all_fs( domain )
Summary

Remount all filesystems. This allows some mount options to be changed.

Parameters
Parameter:Description:Optional:
domain The type of the domain mounting the filesystem. No
fs_remount_autofs( domain )
Summary

Remount an automount pseudo filesystem This allows some mount options to be changed.

Parameters
Parameter:Description:Optional:
domain The type of the domain remounting the filesystem. No
fs_remount_cifs( domain )
Summary

Remount a CIFS or SMB network filesystem. This allows some mount options to be changed.

Parameters
Parameter:Description:Optional:
domain The type of the domain mounting the filesystem. No
fs_remount_dos_fs( domain )
Summary

Remount a DOS filesystem, such as FAT32 or NTFS. This allows some mount options to be changed.

Parameters
Parameter:Description:Optional:
domain The type of the domain remounting the filesystem. No
fs_remount_iso9660_fs( domain )
Summary

Remount an iso9660 filesystem, which is usually used on CDs. This allows some mount options to be changed.

Parameters
Parameter:Description:Optional:
domain The type of the domain remounting the filesystem. No
fs_remount_nfs( domain )
Summary

Remount a NFS filesystem. This allows some mount options to be changed.

Parameters
Parameter:Description:Optional:
domain The type of the domain remounting the filesystem. No
fs_remount_nfsd_fs( domain )
Summary

Mount a NFS server pseudo filesystem. This allows some mount options to be changed.

Parameters
Parameter:Description:Optional:
domain The type of the domain remounting the filesystem. No
fs_remount_ramfs( domain )
Summary

Remount a RAM filesystem. This allows some mount options to be changed.

Parameters
Parameter:Description:Optional:
domain The type of the domain remounting the filesystem. No
fs_remount_romfs( domain )
Summary

Remount a ROM filesystem. This allows some mount options to be changed.

Parameters
Parameter:Description:Optional:
domain The type of the domain remounting the filesystem. No
fs_remount_rpc_pipefs( domain )
Summary

Remount a RPC pipe filesystem. This allows some mount option to be changed.

Parameters
Parameter:Description:Optional:
domain The type of the domain remounting the filesystem. No
fs_remount_tmpfs( domain )
Summary

Remount a tmpfs filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain remounting the filesystem. No
fs_remount_xattr_fs( domain )
Summary

Remount a persistent filesystem which has extended attributes, such as ext3, JFS, or XFS. This allows some mount options to be changed.

Parameters
Parameter:Description:Optional:
domain The type of the domain remounting the filesystem. No
fs_rw_nfsd_fs( domain )
Summary

Read and write NFS server files.

Parameters
Parameter:Description:Optional:
domain The type of the domain doing the read or write on nfsd files. No
fs_rw_ramfs_pipe( domain )
Summary

Read and write a named pipe on a ramfs filesystem.

Parameters
Parameter:Description:Optional:
domain Domain allowed access. No
fs_rw_tmpfs_file( domain )
Summary

Read and write generic tmpfs files.

Parameters
Parameter:Description:Optional:
domain The type of the process performing this action. No
fs_search_all( domain )
Summary

Search all directories with a filesystem type.

Parameters
Parameter:Description:Optional:
domain Domain allowed access. No
fs_search_auto_mountpoints( domain )
Summary

Search automount filesystem to use automatically mounted filesystems.

Parameters
Parameter:Description:Optional:
domain The type of the domain performing this action. No
fs_search_cifs( domain )
Summary

Search directories on a CIFS or SMB filesystem.

Parameters
Parameter:Description:Optional:
domain Domain allowed access. No
fs_search_nfs( domain )
Summary

Search directories on a NFS filesystem.

Parameters
Parameter:Description:Optional:
domain Domain allowed access. No
fs_search_nfsd_fs( domain )
Summary

Search NFS server directories.

Parameters
Parameter:Description:Optional:
domain The type of the domain doing the search on nfsd directories. No
fs_search_ramfs( domain )
Summary

Search directories on a ramfs

Parameters
Parameter:Description:Optional:
domain Domain allowed access. No
fs_search_removable_dirs( domain )
Summary

Search removable storage directories.

Parameters
Parameter:Description:Optional:
domain Domain allowed access. No
fs_search_rpc_dirs( domain )
Summary

Search directories of RPC file system pipes.

Parameters
Parameter:Description:Optional:
domain The type of the domain reading the symbolic links. No
fs_search_tmpfs( domain )
Summary

Search tmpfs directories.

Parameters
Parameter:Description:Optional:
domain Domain allowed access. No
fs_set_all_quotas( domain )
Summary

Set the quotas of all filesystems.

Parameters
Parameter:Description:Optional:
domain The type of the domain setting quotas. No
fs_set_xattr_fs_quota( domain )
Summary

Set the filesystem quotas of a filesystem with extended attributes.

Parameters
Parameter:Description:Optional:
domain The type of the domain mounting the filesystem. No
fs_setattr_tmpfs_dir( domain )
Summary

Set the attributes of tmpfs directories.

Parameters
Parameter:Description:Optional:
domain Domain allowed access. No
fs_type( domain )
Summary

Transform specified type into a filesystem type.

Parameters
Parameter:Description:Optional:
domain The type of the process performing this action. No
fs_unconfined( domain )
Summary

Unconfined access to filesystems

Parameters
Parameter:Description:Optional:
domain Domain allowed access. No
fs_unmount_all_fs( domain )
Summary

Unmount all filesystems.

Parameters
Parameter:Description:Optional:
domain The type of the domain unmounting the filesystem. No
fs_unmount_autofs( domain )
Summary

Unmount an automount pseudo filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain unmounting the filesystem. No
fs_unmount_cifs( domain )
Summary

Unmount a CIFS or SMB network filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain mounting the filesystem. No
fs_unmount_dos_fs( domain )
Summary

Unmount a DOS filesystem, such as FAT32 or NTFS.

Parameters
Parameter:Description:Optional:
domain The type of the domain unmounting the filesystem. No
fs_unmount_iso9660_fs( domain )
Summary

Unmount an iso9660 filesystem, which is usually used on CDs.

Parameters
Parameter:Description:Optional:
domain The type of the domain unmounting the filesystem. No
fs_unmount_nfs( domain )
Summary

Unmount a NFS filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain unmounting the filesystem. No
fs_unmount_nfsd_fs( domain )
Summary

Unmount a NFS server pseudo filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain unmounting the filesystem. No
fs_unmount_ramfs( domain )
Summary

Unmount a RAM filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain unmounting the filesystem. No
fs_unmount_romfs( domain )
Summary

Unmount a ROM filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain unmounting the filesystem. No
fs_unmount_rpc_pipefs( domain )
Summary

Unmount a RPC pipe filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain unmounting the filesystem. No
fs_unmount_tmpfs( domain )
Summary

Unmount a tmpfs filesystem.

Parameters
Parameter:Description:Optional:
domain The type of the domain unmounting the filesystem. No
fs_unmount_xattr_fs( domain )
Summary

Unmount a persistent filesystem which has extended attributes, such as ext3, JFS, or XFS.

Parameters
Parameter:Description:Optional:
domain The type of the domain unmounting the filesystem. No
fs_use_tmpfs_blk_dev( domain )
Summary

Read and write block nodes on tmpfs filesystems.

Parameters
Parameter:Description:Optional:
domain The type of the process performing this action. No
fs_use_tmpfs_chr_dev( domain )
Summary

Read and write character nodes on tmpfs filesystems.

Parameters
Parameter:Description:Optional:
domain The type of the process performing this action. No
fs_write_nfs_files( domain )
Summary

Read files on a NFS filesystem.

Parameters
Parameter:Description:Optional:
domain Domain allowed access. No
fs_write_ramfs_pipe( domain )
Summary

Write to named pipe on a ramfs filesystem.

Parameters
Parameter:Description:Optional:
domain Domain allowed access. No
fs_write_ramfs_socket( domain )
Summary

Write to named socket on a ramfs filesystem.

Parameters
Parameter:Description:Optional:
domain Domain allowed access. No
Return