Layer: kernel

Module: filesystem

Description:

Policy for filesystems.

Interfaces:

fs_associate( file_type )
Description:

Associate the specified file type to persistent filesystems with extended attributes. This allows a file of this type to be created on a filesystem such as ext3, JFS, and XFS.


Parameters:
Parameter:Description:Optional:
file_type The type of the to be associated. No
fs_associate_noxattr( file_type )
Description:

Associate the specified file type to filesystems which lack extended attributes support. This allows a file of this type to be created on a filesystem such as FAT32, and NFS.


Parameters:
Parameter:Description:Optional:
file_type The type of the to be associated. No
fs_associate_tmpfs( type )
Description:

Allow the type to associate to tmpfs filesystems.


Parameters:
Parameter:Description:Optional:
type The type of the object to be associated. No
fs_dontaudit_getattr_xattr_fs( domain )
Description:

Do not audit attempts to get the attributes of a persistent filesystem which has extended attributes, such as ext3, JFS, or XFS.


Parameters:
Parameter:Description:Optional:
domain The type of the domain to not audit. No
fs_execute_cifs_files( domain )
Description:

Execute files on a CIFS or SMB network filesystem, in the caller domain.


Parameters:
Parameter:Description:Optional:
domain The type of the domain executing the files. No
fs_execute_nfs_files( domain )
Description:

Execute files on a NFS filesystem.


Parameters:
Parameter:Description:Optional:
domain The type of the domain executing the files. No
fs_get_all_fs_quotas( domain )
Description:

Get the quotas of all filesystems.


Parameters:
Parameter:Description:Optional:
domain The type of the domain getting quotas. No
fs_getattr_all_fs( domain )
Description:

Get the attributes of all persistent filesystems.


Parameters:
Parameter:Description:Optional:
domain The type of the domain doing the getattr on the filesystem. No
fs_getattr_autofs( domain )
Description:

Get the attributes of an automount pseudo filesystem.


Parameters:
Parameter:Description:Optional:
domain The type of the domain doing the getattr on the filesystem. No
fs_getattr_cifs( domain )
Description:

Get the attributes of a CIFS or SMB network filesystem.


Parameters:
Parameter:Description:Optional:
domain The type of the domain doing the getattr on the filesystem. No
fs_getattr_dos_fs( domain )
Description:

Get the attributes of a DOS filesystem, such as FAT32 or NTFS.


Parameters:
Parameter:Description:Optional:
domain The type of the domain doing the getattr on the filesystem. No
fs_getattr_nfs( domain )
Description:

Get the attributes of a NFS filesystem.


Parameters:
Parameter:Description:Optional:
domain The type of the domain doing the getattr on the filesystem. No
fs_getattr_nfsd_fs( domain )
Description:

Get the attributes of a NFS server pseudo filesystem.


Parameters:
Parameter:Description:Optional:
domain The type of the domain doing the getattr on the filesystem. No
fs_getattr_ramfs( domain )
Description:

Get the attributes of a RAM filesystem.


Parameters:
Parameter:Description:Optional:
domain The type of the domain doing the getattr on the filesystem. No
fs_getattr_romfs( domain )
Description:

Get the attributes of a ROM filesystem.


Parameters:
Parameter:Description:Optional:
domain The type of the domain doing the getattr on the filesystem. No
fs_getattr_rpc_pipefs( domain )
Description:

Get the attributes of a RPC pipe filesystem.


Parameters:
Parameter:Description:Optional:
domain The type of the domain doing the getattr on the filesystem. No
fs_getattr_tmpfs( domain )
Description:

Get the attributes of a tmpfs filesystem.


Parameters:
Parameter:Description:Optional:
domain The type of the domain doing the getattr on the filesystem. No
fs_getattr_xattr_fs( domain )
Description:

Get the attributes of a persistent filesystem which has extended attributes, such as ext3, JFS, or XFS.


Parameters:
Parameter:Description:Optional:
domain The type of the domain doing the getattr on the filesystem. No
fs_make_fs( domain )
Description:

Transform specified type into a filesystem type.


Parameters:
Parameter:Description:Optional:
domain The type of the process performing this action. No
fs_make_noxattr_fs( domain )
Description:

Transform specified type into a filesystem type which does not have extended attribute support.


Parameters:
Parameter:Description:Optional:
domain The type of the process performing this action. No
fs_manage_cifs_dirs( domain )
Description:

Create, read, write, and delete directories on a CIFS or SMB network filesystem.


Parameters:
Parameter:Description:Optional:
domain The type of the domain managing the directories. No
fs_manage_cifs_files( domain )
Description:

Create, read, write, and delete files on a CIFS or SMB network filesystem.


Parameters:
Parameter:Description:Optional:
domain The type of the domain managing the files. No
fs_manage_cifs_named_pipes( domain )
Description:

Create, read, write, and delete named pipes on a CIFS or SMB network filesystem.


Parameters:
Parameter:Description:Optional:
domain The type of the domain managing the pipes. No
fs_manage_cifs_named_sockets( domain )
Description:

Create, read, write, and delete named sockets on a CIFS or SMB network filesystem.


Parameters:
Parameter:Description:Optional:
domain The type of the domain managing the sockets. No
fs_manage_cifs_symlinks( domain )
Description:

Create, read, write, and delete symbolic links on a CIFS or SMB network filesystem.


Parameters:
Parameter:Description:Optional:
domain The type of the domain managing the symbolic links. No
fs_manage_nfs_dirs( domain )
Description:

Create, read, write, and delete directories on a NFS filesystem.


Parameters:
Parameter:Description:Optional:
domain The type of the domain managing the directories. No
fs_manage_nfs_files( domain )
Description:

Create, read, write, and delete files on a NFS filesystem.


Parameters:
Parameter:Description:Optional:
domain The type of the domain managing the files. No
fs_manage_nfs_named_pipes( domain )
Description:

Create, read, write, and delete named pipes on a NFS filesystem.


Parameters:
Parameter:Description:Optional:
domain The type of the domain managing the pipes. No
fs_manage_nfs_named_sockets( domain )
Description:

Create, read, write, and delete named sockets on a NFS filesystem.


Parameters:
Parameter:Description:Optional:
domain The type of the domain managing the sockets. No
fs_manage_nfs_symlinks( domain )
Description:

Create, read, write, and delete symbolic links on a CIFS or SMB network filesystem.


Parameters:
Parameter:Description:Optional:
domain The type of the domain managing the symbolic links. No
fs_manage_tmpfs_block_devices( domain )
Description:

Read and write, create and delete block nodes on tmpfs filesystems.


Parameters:
Parameter:Description:Optional:
domain The type of the process performing this action. No
fs_manage_tmpfs_character_devices( domain )
Description:

Read and write, create and delete character nodes on tmpfs filesystems.


Parameters:
Parameter:Description:Optional:
domain The type of the process performing this action. No
fs_mount_all_fs( domain )
Description:

Mount all filesystems.


Parameters:
Parameter:Description:Optional:
domain The type of the domain mounting the filesystem. No
fs_mount_autofs( domain )
Description:

Mount an automount pseudo filesystem.


Parameters:
Parameter:Description:Optional:
domain The type of the domain mounting the filesystem. No
fs_mount_cifs( domain )
Description:

Mount a CIFS or SMB network filesystem.


Parameters:
Parameter:Description:Optional:
domain The type of the domain mounting the filesystem. No
fs_mount_dos_fs( domain )
Description:

Mount a DOS filesystem, such as FAT32 or NTFS.


Parameters:
Parameter:Description:Optional:
domain The type of the domain mounting the filesystem. No
fs_mount_iso9660_fs( domain )
Description:

Mount an iso9660 filesystem, which is usually used on CDs.


Parameters:
Parameter:Description:Optional:
domain The type of the domain mounting the filesystem. No
fs_mount_iso9660_fs( domain )
Description:

Get the attributes of an iso9660 filesystem, which is usually used on CDs.


Parameters:
Parameter:Description:Optional:
domain The type of the domain doing the getattr on the filesystem. No
fs_mount_nfs( domain )
Description:

Mount a NFS filesystem.


Parameters:
Parameter:Description:Optional:
domain The type of the domain mounting the filesystem. No
fs_mount_nfs( domain )
Description:

Unmount a NFS filesystem.


Parameters:
Parameter:Description:Optional:
domain The type of the domain unmounting the filesystem. No
fs_mount_nfsd_fs( domain )
Description:

Mount a NFS server pseudo filesystem.


Parameters:
Parameter:Description:Optional:
domain The type of the domain mounting the filesystem. No
fs_mount_ramfs( domain )
Description:

Mount a RAM filesystem.


Parameters:
Parameter:Description:Optional:
domain The type of the domain mounting the filesystem. No
fs_mount_romfs( domain )
Description:

Mount a ROM filesystem.


Parameters:
Parameter:Description:Optional:
domain The type of the domain mounting the filesystem. No
fs_mount_rpc_pipefs( domain )
Description:

Mount a RPC pipe filesystem.


Parameters:
Parameter:Description:Optional:
domain The type of the domain mounting the filesystem. No
fs_mount_tmpfs( domain )
Description:

Mount a tmpfs filesystem.


Parameters:
Parameter:Description:Optional:
domain The type of the domain mounting the filesystem. No
fs_mount_xattr_fs( domain )
Description:

Mount a persistent filesystem which has extended attributes, such as ext3, JFS, or XFS.


Parameters:
Parameter:Description:Optional:
domain The type of the domain mounting the filesystem. No
fs_register_binary_executable_type( domain )
Description:

Register an interpreter for new binary file types, using the kernel binfmt_misc support. A common use for this is to register a JVM as an interpreter for Java byte code. Registered binaries can be directly executed on a command line without specifying the interpreter.


Parameters:
Parameter:Description:Optional:
domain The type of the domain registering the interpreter. No
fs_relabel_tmpfs_block_devices( domain )
Description:

Relabel block nodes on tmpfs filesystems.


Parameters:
Parameter:Description:Optional:
domain The type of the process performing this action. No
fs_relabel_tmpfs_character_devices( domain )
Description:

Relabel character nodes on tmpfs filesystems.


Parameters:
Parameter:Description:Optional:
domain The type of the process performing this action. No
fs_relabelfrom_dos_fs( domain )
Description:

Allow changing of the label of a DOS filesystem using the context= mount option.


Parameters:
Parameter:Description:Optional:
domain The type of the domain mounting the filesystem. No
fs_relabelfrom_xattr_fs( domain )
Description:

Allow changing of the label of a filesystem with extended attributes using the context= mount option.


Parameters:
Parameter:Description:Optional:
domain The type of the domain mounting the filesystem. No
fs_remount_all_fs( domain )
Description:

Remount all filesystems. This allows some mount options to be changed.


Parameters:
Parameter:Description:Optional:
domain The type of the domain mounting the filesystem. No
fs_remount_autofs( domain )
Description:

Remount an automount pseudo filesystem This allows some mount options to be changed.


Parameters:
Parameter:Description:Optional:
domain The type of the domain remounting the filesystem. No
fs_remount_cifs( domain )
Description:

Remount a CIFS or SMB network filesystem. This allows some mount options to be changed.


Parameters:
Parameter:Description:Optional:
domain The type of the domain mounting the filesystem. No
fs_remount_dos_fs( domain )
Description:

Remount a DOS filesystem, such as FAT32 or NTFS. This allows some mount options to be changed.


Parameters:
Parameter:Description:Optional:
domain The type of the domain remounting the filesystem. No
fs_remount_iso9660_fs( domain )
Description:

Remount an iso9660 filesystem, which is usually used on CDs. This allows some mount options to be changed.


Parameters:
Parameter:Description:Optional:
domain The type of the domain remounting the filesystem. No
fs_remount_nfs( domain )
Description:

Remount a NFS filesystem. This allows some mount options to be changed.


Parameters:
Parameter:Description:Optional:
domain The type of the domain remounting the filesystem. No
fs_remount_nfsd_fs( domain )
Description:

Mount a NFS server pseudo filesystem. This allows some mount options to be changed.


Parameters:
Parameter:Description:Optional:
domain The type of the domain remounting the filesystem. No
fs_remount_ramfs( domain )
Description:

Remount a RAM filesystem. This allows some mount options to be changed.


Parameters:
Parameter:Description:Optional:
domain The type of the domain remounting the filesystem. No
fs_remount_romfs( domain )
Description:

Remount a ROM filesystem. This allows some mount options to be changed.


Parameters:
Parameter:Description:Optional:
domain The type of the domain remounting the filesystem. No
fs_remount_rpc_pipefs( domain )
Description:

Remount a RPC pipe filesystem. This allows some mount option to be changed.


Parameters:
Parameter:Description:Optional:
domain The type of the domain remounting the filesystem. No
fs_remount_tmpfs( domain )
Description:

Remount a tmpfs filesystem.


Parameters:
Parameter:Description:Optional:
domain The type of the domain remounting the filesystem. No
fs_remount_xattr_fs( domain )
Description:

Remount a persistent filesystem which has extended attributes, such as ext3, JFS, or XFS. This allows some mount options to be changed.


Parameters:
Parameter:Description:Optional:
domain The type of the domain remounting the filesystem. No
fs_set_all_quotas( domain )
Description:

Set the quotas of all filesystems.


Parameters:
Parameter:Description:Optional:
domain The type of the domain setting quotas. No
fs_unmount_all_fs( domain )
Description:

Unmount all filesystems.


Parameters:
Parameter:Description:Optional:
domain The type of the domain unmounting the filesystem. No
fs_unmount_autofs( domain )
Description:

Unmount an automount pseudo filesystem.


Parameters:
Parameter:Description:Optional:
domain The type of the domain unmounting the filesystem. No
fs_unmount_cifs( domain )
Description:

Unmount a CIFS or SMB network filesystem.


Parameters:
Parameter:Description:Optional:
domain The type of the domain mounting the filesystem. No
fs_unmount_dos_fs( domain )
Description:

Unmount a DOS filesystem, such as FAT32 or NTFS.


Parameters:
Parameter:Description:Optional:
domain The type of the domain unmounting the filesystem. No
fs_unmount_iso9660_fs( domain )
Description:

Unmount an iso9660 filesystem, which is usually used on CDs.


Parameters:
Parameter:Description:Optional:
domain The type of the domain unmounting the filesystem. No
fs_unmount_nfsd_fs( domain )
Description:

Unmount a NFS server pseudo filesystem.


Parameters:
Parameter:Description:Optional:
domain The type of the domain unmounting the filesystem. No
fs_unmount_ramfs( domain )
Description:

Unmount a RAM filesystem.


Parameters:
Parameter:Description:Optional:
domain The type of the domain unmounting the filesystem. No
fs_unmount_romfs( domain )
Description:

Unmount a ROM filesystem.


Parameters:
Parameter:Description:Optional:
domain The type of the domain unmounting the filesystem. No
fs_unmount_rpc_pipefs( domain )
Description:

Unmount a RPC pipe filesystem.


Parameters:
Parameter:Description:Optional:
domain The type of the domain unmounting the filesystem. No
fs_unmount_tmpfs( domain )
Description:

Unmount a tmpfs filesystem.


Parameters:
Parameter:Description:Optional:
domain The type of the domain unmounting the filesystem. No
fs_unmount_xattr_fs( domain )
Description:

Unmount a persistent filesystem which has extended attributes, such as ext3, JFS, or XFS.


Parameters:
Parameter:Description:Optional:
domain The type of the domain unmounting the filesystem. No
fs_use_tmpfs_block_devices( domain )
Description:

Read and write block nodes on tmpfs filesystems.


Parameters:
Parameter:Description:Optional:
domain The type of the process performing this action. No
fs_use_tmpfs_character_devices( domain )
Description:

Read and write character nodes on tmpfs filesystems.


Parameters:
Parameter:Description:Optional:
domain The type of the process performing this action. No