## <summary>Multicategory security policy</summary> ## <required val="true"> ## Contains attributes used in MCS policy. ## </required> ######################################## ## <summary> ## This domain is allowed to sigkill and sigstop ## all domains regardless of their MCS category set. ## </summary> ## <param name="domain"> ## <summary> ## Domain target for user exemption. ## </summary> ## </param> ## <rolecap/> # interface(`mcs_killall',` gen_require(` attribute mcskillall; ') typeattribute $1 mcskillall; ') ######################################## ## <summary> ## This domain is allowed to ptrace ## all domains regardless of their MCS ## category set. ## </summary> ## <param name="domain"> ## <summary> ## Domain target for user exemption. ## </summary> ## </param> # interface(`mcs_ptrace_all',` gen_require(` attribute mcsptraceall; ') typeattribute $1 mcsptraceall; ') ######################################## ## <summary> ## Make specified domain MCS trusted ## for setting any category set for ## the processes it executes. ## </summary> ## <param name="domain"> ## <summary> ## Domain target for user exemption. ## </summary> ## </param> # interface(`mcs_process_set_categories',` gen_require(` attribute mcssetcats; ') typeattribute $1 mcssetcats; ')