4007 lines
54 KiB
HTML
4007 lines
54 KiB
HTML
<html>
|
|
<head>
|
|
<title>
|
|
Security Enhanced Linux Reference Policy
|
|
</title>
|
|
<style type="text/css" media="all">@import "style.css";</style>
|
|
</head>
|
|
<body>
|
|
<div id="Header">Security Enhanced Linux Reference Policy</div>
|
|
<div id='Menu'>
|
|
|
|
<a href="admin.html">+
|
|
admin</a></br/>
|
|
<div id='subitem'>
|
|
|
|
- <a href='admin_acct.html'>
|
|
acct</a><br/>
|
|
|
|
- <a href='admin_alsa.html'>
|
|
alsa</a><br/>
|
|
|
|
- <a href='admin_amanda.html'>
|
|
amanda</a><br/>
|
|
|
|
- <a href='admin_anaconda.html'>
|
|
anaconda</a><br/>
|
|
|
|
- <a href='admin_bootloader.html'>
|
|
bootloader</a><br/>
|
|
|
|
- <a href='admin_certwatch.html'>
|
|
certwatch</a><br/>
|
|
|
|
- <a href='admin_consoletype.html'>
|
|
consoletype</a><br/>
|
|
|
|
- <a href='admin_ddcprobe.html'>
|
|
ddcprobe</a><br/>
|
|
|
|
- <a href='admin_dmesg.html'>
|
|
dmesg</a><br/>
|
|
|
|
- <a href='admin_dmidecode.html'>
|
|
dmidecode</a><br/>
|
|
|
|
- <a href='admin_firstboot.html'>
|
|
firstboot</a><br/>
|
|
|
|
- <a href='admin_kudzu.html'>
|
|
kudzu</a><br/>
|
|
|
|
- <a href='admin_logrotate.html'>
|
|
logrotate</a><br/>
|
|
|
|
- <a href='admin_logwatch.html'>
|
|
logwatch</a><br/>
|
|
|
|
- <a href='admin_mrtg.html'>
|
|
mrtg</a><br/>
|
|
|
|
- <a href='admin_netutils.html'>
|
|
netutils</a><br/>
|
|
|
|
- <a href='admin_portage.html'>
|
|
portage</a><br/>
|
|
|
|
- <a href='admin_prelink.html'>
|
|
prelink</a><br/>
|
|
|
|
- <a href='admin_quota.html'>
|
|
quota</a><br/>
|
|
|
|
- <a href='admin_readahead.html'>
|
|
readahead</a><br/>
|
|
|
|
- <a href='admin_rpm.html'>
|
|
rpm</a><br/>
|
|
|
|
- <a href='admin_su.html'>
|
|
su</a><br/>
|
|
|
|
- <a href='admin_sudo.html'>
|
|
sudo</a><br/>
|
|
|
|
- <a href='admin_tmpreaper.html'>
|
|
tmpreaper</a><br/>
|
|
|
|
- <a href='admin_updfstab.html'>
|
|
updfstab</a><br/>
|
|
|
|
- <a href='admin_usbmodules.html'>
|
|
usbmodules</a><br/>
|
|
|
|
- <a href='admin_usermanage.html'>
|
|
usermanage</a><br/>
|
|
|
|
- <a href='admin_vbetool.html'>
|
|
vbetool</a><br/>
|
|
|
|
- <a href='admin_vpn.html'>
|
|
vpn</a><br/>
|
|
|
|
</div>
|
|
|
|
<a href="apps.html">+
|
|
apps</a></br/>
|
|
<div id='subitem'>
|
|
|
|
- <a href='apps_cdrecord.html'>
|
|
cdrecord</a><br/>
|
|
|
|
- <a href='apps_gpg.html'>
|
|
gpg</a><br/>
|
|
|
|
- <a href='apps_irc.html'>
|
|
irc</a><br/>
|
|
|
|
- <a href='apps_java.html'>
|
|
java</a><br/>
|
|
|
|
- <a href='apps_loadkeys.html'>
|
|
loadkeys</a><br/>
|
|
|
|
- <a href='apps_lockdev.html'>
|
|
lockdev</a><br/>
|
|
|
|
- <a href='apps_mono.html'>
|
|
mono</a><br/>
|
|
|
|
- <a href='apps_screen.html'>
|
|
screen</a><br/>
|
|
|
|
- <a href='apps_slocate.html'>
|
|
slocate</a><br/>
|
|
|
|
- <a href='apps_tvtime.html'>
|
|
tvtime</a><br/>
|
|
|
|
- <a href='apps_uml.html'>
|
|
uml</a><br/>
|
|
|
|
- <a href='apps_userhelper.html'>
|
|
userhelper</a><br/>
|
|
|
|
- <a href='apps_usernetctl.html'>
|
|
usernetctl</a><br/>
|
|
|
|
- <a href='apps_webalizer.html'>
|
|
webalizer</a><br/>
|
|
|
|
- <a href='apps_wine.html'>
|
|
wine</a><br/>
|
|
|
|
</div>
|
|
|
|
<a href="kernel.html">+
|
|
kernel</a></br/>
|
|
<div id='subitem'>
|
|
|
|
- <a href='kernel_corecommands.html'>
|
|
corecommands</a><br/>
|
|
|
|
- <a href='kernel_corenetwork.html'>
|
|
corenetwork</a><br/>
|
|
|
|
- <a href='kernel_devices.html'>
|
|
devices</a><br/>
|
|
|
|
- <a href='kernel_domain.html'>
|
|
domain</a><br/>
|
|
|
|
- <a href='kernel_files.html'>
|
|
files</a><br/>
|
|
|
|
- <a href='kernel_filesystem.html'>
|
|
filesystem</a><br/>
|
|
|
|
- <a href='kernel_kernel.html'>
|
|
kernel</a><br/>
|
|
|
|
- <a href='kernel_mcs.html'>
|
|
mcs</a><br/>
|
|
|
|
- <a href='kernel_mls.html'>
|
|
mls</a><br/>
|
|
|
|
- <a href='kernel_selinux.html'>
|
|
selinux</a><br/>
|
|
|
|
- <a href='kernel_storage.html'>
|
|
storage</a><br/>
|
|
|
|
- <a href='kernel_terminal.html'>
|
|
terminal</a><br/>
|
|
|
|
</div>
|
|
|
|
<a href="services.html">+
|
|
services</a></br/>
|
|
<div id='subitem'>
|
|
|
|
- <a href='services_apache.html'>
|
|
apache</a><br/>
|
|
|
|
- <a href='services_apm.html'>
|
|
apm</a><br/>
|
|
|
|
- <a href='services_arpwatch.html'>
|
|
arpwatch</a><br/>
|
|
|
|
- <a href='services_automount.html'>
|
|
automount</a><br/>
|
|
|
|
- <a href='services_avahi.html'>
|
|
avahi</a><br/>
|
|
|
|
- <a href='services_bind.html'>
|
|
bind</a><br/>
|
|
|
|
- <a href='services_bluetooth.html'>
|
|
bluetooth</a><br/>
|
|
|
|
- <a href='services_canna.html'>
|
|
canna</a><br/>
|
|
|
|
- <a href='services_comsat.html'>
|
|
comsat</a><br/>
|
|
|
|
- <a href='services_cpucontrol.html'>
|
|
cpucontrol</a><br/>
|
|
|
|
- <a href='services_cron.html'>
|
|
cron</a><br/>
|
|
|
|
- <a href='services_cups.html'>
|
|
cups</a><br/>
|
|
|
|
- <a href='services_cvs.html'>
|
|
cvs</a><br/>
|
|
|
|
- <a href='services_cyrus.html'>
|
|
cyrus</a><br/>
|
|
|
|
- <a href='services_dbskk.html'>
|
|
dbskk</a><br/>
|
|
|
|
- <a href='services_dbus.html'>
|
|
dbus</a><br/>
|
|
|
|
- <a href='services_dhcp.html'>
|
|
dhcp</a><br/>
|
|
|
|
- <a href='services_dictd.html'>
|
|
dictd</a><br/>
|
|
|
|
- <a href='services_distcc.html'>
|
|
distcc</a><br/>
|
|
|
|
- <a href='services_djbdns.html'>
|
|
djbdns</a><br/>
|
|
|
|
- <a href='services_dovecot.html'>
|
|
dovecot</a><br/>
|
|
|
|
- <a href='services_fetchmail.html'>
|
|
fetchmail</a><br/>
|
|
|
|
- <a href='services_finger.html'>
|
|
finger</a><br/>
|
|
|
|
- <a href='services_ftp.html'>
|
|
ftp</a><br/>
|
|
|
|
- <a href='services_gpm.html'>
|
|
gpm</a><br/>
|
|
|
|
- <a href='services_hal.html'>
|
|
hal</a><br/>
|
|
|
|
- <a href='services_howl.html'>
|
|
howl</a><br/>
|
|
|
|
- <a href='services_i18n_input.html'>
|
|
i18n_input</a><br/>
|
|
|
|
- <a href='services_inetd.html'>
|
|
inetd</a><br/>
|
|
|
|
- <a href='services_inn.html'>
|
|
inn</a><br/>
|
|
|
|
- <a href='services_irqbalance.html'>
|
|
irqbalance</a><br/>
|
|
|
|
- <a href='services_kerberos.html'>
|
|
kerberos</a><br/>
|
|
|
|
- <a href='services_ktalk.html'>
|
|
ktalk</a><br/>
|
|
|
|
- <a href='services_ldap.html'>
|
|
ldap</a><br/>
|
|
|
|
- <a href='services_lpd.html'>
|
|
lpd</a><br/>
|
|
|
|
- <a href='services_mailman.html'>
|
|
mailman</a><br/>
|
|
|
|
- <a href='services_mta.html'>
|
|
mta</a><br/>
|
|
|
|
- <a href='services_mysql.html'>
|
|
mysql</a><br/>
|
|
|
|
- <a href='services_networkmanager.html'>
|
|
networkmanager</a><br/>
|
|
|
|
- <a href='services_nis.html'>
|
|
nis</a><br/>
|
|
|
|
- <a href='services_nscd.html'>
|
|
nscd</a><br/>
|
|
|
|
- <a href='services_ntp.html'>
|
|
ntp</a><br/>
|
|
|
|
- <a href='services_openct.html'>
|
|
openct</a><br/>
|
|
|
|
- <a href='services_pegasus.html'>
|
|
pegasus</a><br/>
|
|
|
|
- <a href='services_portmap.html'>
|
|
portmap</a><br/>
|
|
|
|
- <a href='services_postfix.html'>
|
|
postfix</a><br/>
|
|
|
|
- <a href='services_postgresql.html'>
|
|
postgresql</a><br/>
|
|
|
|
- <a href='services_ppp.html'>
|
|
ppp</a><br/>
|
|
|
|
- <a href='services_privoxy.html'>
|
|
privoxy</a><br/>
|
|
|
|
- <a href='services_procmail.html'>
|
|
procmail</a><br/>
|
|
|
|
- <a href='services_publicfile.html'>
|
|
publicfile</a><br/>
|
|
|
|
- <a href='services_radius.html'>
|
|
radius</a><br/>
|
|
|
|
- <a href='services_radvd.html'>
|
|
radvd</a><br/>
|
|
|
|
- <a href='services_rdisc.html'>
|
|
rdisc</a><br/>
|
|
|
|
- <a href='services_remotelogin.html'>
|
|
remotelogin</a><br/>
|
|
|
|
- <a href='services_rlogin.html'>
|
|
rlogin</a><br/>
|
|
|
|
- <a href='services_roundup.html'>
|
|
roundup</a><br/>
|
|
|
|
- <a href='services_rpc.html'>
|
|
rpc</a><br/>
|
|
|
|
- <a href='services_rshd.html'>
|
|
rshd</a><br/>
|
|
|
|
- <a href='services_rsync.html'>
|
|
rsync</a><br/>
|
|
|
|
- <a href='services_samba.html'>
|
|
samba</a><br/>
|
|
|
|
- <a href='services_sasl.html'>
|
|
sasl</a><br/>
|
|
|
|
- <a href='services_sendmail.html'>
|
|
sendmail</a><br/>
|
|
|
|
- <a href='services_slrnpull.html'>
|
|
slrnpull</a><br/>
|
|
|
|
- <a href='services_smartmon.html'>
|
|
smartmon</a><br/>
|
|
|
|
- <a href='services_snmp.html'>
|
|
snmp</a><br/>
|
|
|
|
- <a href='services_spamassassin.html'>
|
|
spamassassin</a><br/>
|
|
|
|
- <a href='services_squid.html'>
|
|
squid</a><br/>
|
|
|
|
- <a href='services_ssh.html'>
|
|
ssh</a><br/>
|
|
|
|
- <a href='services_stunnel.html'>
|
|
stunnel</a><br/>
|
|
|
|
- <a href='services_sysstat.html'>
|
|
sysstat</a><br/>
|
|
|
|
- <a href='services_tcpd.html'>
|
|
tcpd</a><br/>
|
|
|
|
- <a href='services_telnet.html'>
|
|
telnet</a><br/>
|
|
|
|
- <a href='services_tftp.html'>
|
|
tftp</a><br/>
|
|
|
|
- <a href='services_timidity.html'>
|
|
timidity</a><br/>
|
|
|
|
- <a href='services_ucspitcp.html'>
|
|
ucspitcp</a><br/>
|
|
|
|
- <a href='services_uucp.html'>
|
|
uucp</a><br/>
|
|
|
|
- <a href='services_xfs.html'>
|
|
xfs</a><br/>
|
|
|
|
- <a href='services_xserver.html'>
|
|
xserver</a><br/>
|
|
|
|
- <a href='services_zebra.html'>
|
|
zebra</a><br/>
|
|
|
|
</div>
|
|
|
|
<a href="system.html">+
|
|
system</a></br/>
|
|
<div id='subitem'>
|
|
|
|
- <a href='system_authlogin.html'>
|
|
authlogin</a><br/>
|
|
|
|
- <a href='system_clock.html'>
|
|
clock</a><br/>
|
|
|
|
- <a href='system_daemontools.html'>
|
|
daemontools</a><br/>
|
|
|
|
- <a href='system_fstools.html'>
|
|
fstools</a><br/>
|
|
|
|
- <a href='system_getty.html'>
|
|
getty</a><br/>
|
|
|
|
- <a href='system_hostname.html'>
|
|
hostname</a><br/>
|
|
|
|
- <a href='system_hotplug.html'>
|
|
hotplug</a><br/>
|
|
|
|
- <a href='system_init.html'>
|
|
init</a><br/>
|
|
|
|
- <a href='system_ipsec.html'>
|
|
ipsec</a><br/>
|
|
|
|
- <a href='system_iptables.html'>
|
|
iptables</a><br/>
|
|
|
|
- <a href='system_libraries.html'>
|
|
libraries</a><br/>
|
|
|
|
- <a href='system_locallogin.html'>
|
|
locallogin</a><br/>
|
|
|
|
- <a href='system_logging.html'>
|
|
logging</a><br/>
|
|
|
|
- <a href='system_lvm.html'>
|
|
lvm</a><br/>
|
|
|
|
- <a href='system_miscfiles.html'>
|
|
miscfiles</a><br/>
|
|
|
|
- <a href='system_modutils.html'>
|
|
modutils</a><br/>
|
|
|
|
- <a href='system_mount.html'>
|
|
mount</a><br/>
|
|
|
|
- <a href='system_pcmcia.html'>
|
|
pcmcia</a><br/>
|
|
|
|
- <a href='system_raid.html'>
|
|
raid</a><br/>
|
|
|
|
- <a href='system_selinuxutil.html'>
|
|
selinuxutil</a><br/>
|
|
|
|
- <a href='system_sysnetwork.html'>
|
|
sysnetwork</a><br/>
|
|
|
|
- <a href='system_udev.html'>
|
|
udev</a><br/>
|
|
|
|
- <a href='system_unconfined.html'>
|
|
unconfined</a><br/>
|
|
|
|
- <a href='system_userdomain.html'>
|
|
userdomain</a><br/>
|
|
|
|
</div>
|
|
|
|
<br/><p/>
|
|
<a href="global_booleans.html">* Global Booleans </a>
|
|
<br/><p/>
|
|
<a href="global_tunables.html">* Global Tunables </a>
|
|
<p/><br/><p/>
|
|
<a href="index.html">* Layer Index</a>
|
|
<br/><p/>
|
|
<a href="interfaces.html">* Interface Index</a>
|
|
<br/><p/>
|
|
<a href="templates.html">* Template Index</a>
|
|
</div>
|
|
|
|
<div id="Content">
|
|
<h3>Master template index:</h3>
|
|
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_admin_user_template'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>admin_user_template</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
The template for creating an administrative user.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='services_apache.html#link_apache_content_template'>
|
|
apache</a><p/>
|
|
Layer: <a href='services.html'>
|
|
services</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>apache_content_template</b>(
|
|
|
|
|
|
|
|
|
|
prefix
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Create a set of derived types for apache
|
|
web content.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='services_apache.html#link_apache_per_userdomain_template'>
|
|
apache</a><p/>
|
|
Layer: <a href='services.html'>
|
|
services</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>apache_per_userdomain_template</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
user_domain
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
user_role
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
The per user domain template for the apache module.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_authlogin.html#link_auth_domtrans_user_chk_passwd'>
|
|
authlogin</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>auth_domtrans_user_chk_passwd</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Run unix_chkpwd to check a password
|
|
for a user domain.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_authlogin.html#link_authlogin_common_auth_domain_template'>
|
|
authlogin</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>authlogin_common_auth_domain_template</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Common template to create a domain for authentication.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_authlogin.html#link_authlogin_per_userdomain_template'>
|
|
authlogin</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>authlogin_per_userdomain_template</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
user_domain
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
user_role
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
The per user domain template for the authlogin module.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_base_user_template'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>base_user_template</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
The template containing rules common to unprivileged
|
|
users and administrative users.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='apps_cdrecord.html#link_cdrecord_per_userdomain_template'>
|
|
cdrecord</a><p/>
|
|
Layer: <a href='apps.html'>
|
|
apps</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>cdrecord_per_userdomain_template</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
user_domain
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
user_role
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
The per user domain template for the cdrecord module.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='services_cron.html#link_cron_admin_template'>
|
|
cron</a><p/>
|
|
Layer: <a href='services.html'>
|
|
services</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>cron_admin_template</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
The administrative functions template for the cron module.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='services_cron.html#link_cron_per_userdomain_template'>
|
|
cron</a><p/>
|
|
Layer: <a href='services.html'>
|
|
services</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>cron_per_userdomain_template</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
user_domain
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
user_role
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
The per user domain template for the cron module.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='services_dbus.html#link_dbus_per_userdomain_template'>
|
|
dbus</a><p/>
|
|
Layer: <a href='services.html'>
|
|
services</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>dbus_per_userdomain_template</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
user_domain
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
user_role
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
The per user domain template for the dbus module.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='services_dbus.html#link_dbus_system_bus_client_template'>
|
|
dbus</a><p/>
|
|
Layer: <a href='services.html'>
|
|
services</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>dbus_system_bus_client_template</b>(
|
|
|
|
|
|
|
|
|
|
domain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Template for creating connections to
|
|
the system DBUS.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='services_djbdns.html#link_djbdns_daemontools_domain_template'>
|
|
djbdns</a><p/>
|
|
Layer: <a href='services.html'>
|
|
services</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>djbdns_daemontools_domain_template</b>(
|
|
|
|
|
|
|
|
|
|
prefix
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Create a set of derived types for djbdns
|
|
components that are directly supervised by daemontools.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='kernel_domain.html#link_domain_auto_trans'>
|
|
domain</a><p/>
|
|
Layer: <a href='kernel.html'>
|
|
kernel</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>domain_auto_trans</b>(
|
|
|
|
|
|
|
|
|
|
?
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Summary is missing!
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='kernel_domain.html#link_domain_trans'>
|
|
domain</a><p/>
|
|
Layer: <a href='kernel.html'>
|
|
kernel</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>domain_trans</b>(
|
|
|
|
|
|
|
|
|
|
?
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Summary is missing!
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='services_ftp.html#link_ftp_per_userdomain_template'>
|
|
ftp</a><p/>
|
|
Layer: <a href='services.html'>
|
|
services</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>ftp_per_userdomain_template</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
The per user domain template for the ftp module.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='apps_gpg.html#link_gpg_per_userdomain_template'>
|
|
gpg</a><p/>
|
|
Layer: <a href='apps.html'>
|
|
apps</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>gpg_per_userdomain_template</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
userdomain
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
role
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
The per user domain template for the gpg module.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='apps_irc.html#link_irc_per_userdomain_template'>
|
|
irc</a><p/>
|
|
Layer: <a href='apps.html'>
|
|
apps</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>irc_per_userdomain_template</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
user_domain
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
user_role
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
The per user domain template for the irc module.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='apps_java.html#link_java_per_userdomain_template'>
|
|
java</a><p/>
|
|
Layer: <a href='apps.html'>
|
|
apps</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>java_per_userdomain_template</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
user_domain
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
user_role
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
The per user domain template for the java module.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='apps_lockdev.html#link_lockdev_per_userdomain_template'>
|
|
lockdev</a><p/>
|
|
Layer: <a href='apps.html'>
|
|
apps</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>lockdev_per_userdomain_template</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
user_domain
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
user_role
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
The per user domain template for the lockdev module.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='services_lpd.html#link_lpd_per_userdomain_template'>
|
|
lpd</a><p/>
|
|
Layer: <a href='services.html'>
|
|
services</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>lpd_per_userdomain_template</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
user_domain
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
user_role
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
The per user domain template for the lpd module.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='services_lpd.html#link_lpr_admin_template'>
|
|
lpd</a><p/>
|
|
Layer: <a href='services.html'>
|
|
services</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>lpr_admin_template</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
The administrative functions template for the lpd module.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='services_mailman.html#link_mailman_domain_template'>
|
|
mailman</a><p/>
|
|
Layer: <a href='services.html'>
|
|
services</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>mailman_domain_template</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
The template to define a mailmain domain.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='services_mta.html#link_mta_admin_template'>
|
|
mta</a><p/>
|
|
Layer: <a href='services.html'>
|
|
services</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>mta_admin_template</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
user_domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Provide extra permissions for admin users
|
|
mail domain.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='services_mta.html#link_mta_base_mail_template'>
|
|
mta</a><p/>
|
|
Layer: <a href='services.html'>
|
|
services</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>mta_base_mail_template</b>(
|
|
|
|
|
|
|
|
|
|
domain_prefix
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Basic mail transfer agent domain template.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='services_mta.html#link_mta_per_userdomain_template'>
|
|
mta</a><p/>
|
|
Layer: <a href='services.html'>
|
|
services</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>mta_per_userdomain_template</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
user_domain
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
user_role
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
The per user domain template for the mta module.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='admin_portage.html#link_portage_compile_domain_template'>
|
|
portage</a><p/>
|
|
Layer: <a href='admin.html'>
|
|
admin</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>portage_compile_domain_template</b>(
|
|
|
|
|
|
|
|
|
|
prefix
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Template for portage sandbox.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='services_postfix.html#link_postfix_domain_template'>
|
|
postfix</a><p/>
|
|
Layer: <a href='services.html'>
|
|
services</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>postfix_domain_template</b>(
|
|
|
|
|
|
|
|
|
|
?
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Summary is missing!
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='services_postfix.html#link_postfix_per_userdomain_template'>
|
|
postfix</a><p/>
|
|
Layer: <a href='services.html'>
|
|
services</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>postfix_per_userdomain_template</b>(
|
|
|
|
|
|
|
|
|
|
?
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Summary is missing!
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='services_postfix.html#link_postfix_public_domain_template'>
|
|
postfix</a><p/>
|
|
Layer: <a href='services.html'>
|
|
services</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>postfix_public_domain_template</b>(
|
|
|
|
|
|
|
|
|
|
?
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Summary is missing!
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='services_postfix.html#link_postfix_server_domain_template'>
|
|
postfix</a><p/>
|
|
Layer: <a href='services.html'>
|
|
services</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>postfix_server_domain_template</b>(
|
|
|
|
|
|
|
|
|
|
?
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Summary is missing!
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='services_postfix.html#link_postfix_user_domain_template'>
|
|
postfix</a><p/>
|
|
Layer: <a href='services.html'>
|
|
services</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>postfix_user_domain_template</b>(
|
|
|
|
|
|
|
|
|
|
?
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Summary is missing!
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='services_rpc.html#link_rpc_domain_template'>
|
|
rpc</a><p/>
|
|
Layer: <a href='services.html'>
|
|
services</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>rpc_domain_template</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
The template to define a rpc domain.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='services_samba.html#link_samba_per_userdomain_template'>
|
|
samba</a><p/>
|
|
Layer: <a href='services.html'>
|
|
services</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>samba_per_userdomain_template</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
The per user domain template for the samba module.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='apps_screen.html#link_screen_per_userdomain_template'>
|
|
screen</a><p/>
|
|
Layer: <a href='apps.html'>
|
|
apps</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>screen_per_userdomain_template</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
user_domain
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
user_role
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
The per user domain template for the screen module.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='services_spamassassin.html#link_spamassassin_per_userdomain_template'>
|
|
spamassassin</a><p/>
|
|
Layer: <a href='services.html'>
|
|
services</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>spamassassin_per_userdomain_template</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
user_domain
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
user_role
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
The per user domain template for the spamassassin module.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='services_ssh.html#link_ssh_per_userdomain_template'>
|
|
ssh</a><p/>
|
|
Layer: <a href='services.html'>
|
|
services</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>ssh_per_userdomain_template</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
user_domain
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
user_role
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
The per user domain template for the ssh module.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='services_ssh.html#link_ssh_server_template'>
|
|
ssh</a><p/>
|
|
Layer: <a href='services.html'>
|
|
services</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>ssh_server_template</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
The template to define a ssh server.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='admin_su.html#link_su_per_userdomain_template'>
|
|
su</a><p/>
|
|
Layer: <a href='admin.html'>
|
|
admin</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>su_per_userdomain_template</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
user_domain
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
user_role
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
The per user domain template for the su module.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='admin_su.html#link_su_restricted_domain_template'>
|
|
su</a><p/>
|
|
Layer: <a href='admin.html'>
|
|
admin</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>su_restricted_domain_template</b>(
|
|
|
|
|
|
|
|
|
|
?
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Summary is missing!
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='admin_sudo.html#link_sudo_per_userdomain_template'>
|
|
sudo</a><p/>
|
|
Layer: <a href='admin.html'>
|
|
admin</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>sudo_per_userdomain_template</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
user_domain
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
user_role
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
The per user domain template for the sudo module.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='apps_tvtime.html#link_tvtime_per_userdomain_template'>
|
|
tvtime</a><p/>
|
|
Layer: <a href='apps.html'>
|
|
apps</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>tvtime_per_userdomain_template</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
user_domain
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
user_role
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
The per user domain template for the tvtime module.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='apps_uml.html#link_uml_per_userdomain_template'>
|
|
uml</a><p/>
|
|
Layer: <a href='apps.html'>
|
|
apps</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>uml_per_userdomain_template</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
user_domain
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
user_role
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
The per user domain template for the uml module.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_unpriv_user_template'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>unpriv_user_template</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
The template for creating a unprivileged user.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_create_user_pty'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_create_user_pty</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Create a user pty.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_dontaudit_append_user_tmp_files'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_dontaudit_append_user_tmp_files</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Do not audit attempts to append users
|
|
temporary files.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_dontaudit_exec_user_home_content_files'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_dontaudit_exec_user_home_content_files</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Do not audit attempts to execute user home files.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_dontaudit_list_user_home_dirs'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_dontaudit_list_user_home_dirs</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Do not audit attempts to list user home subdirectories.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_dontaudit_list_user_tmp'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_dontaudit_list_user_tmp</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Do not audit attempts to list user
|
|
temporary directories.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_dontaudit_list_user_tmp_untrusted_content'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_dontaudit_list_user_tmp_untrusted_content</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Do not audit attempts to list user
|
|
temporary untrusted directories.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_dontaudit_list_user_untrusted_content'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_dontaudit_list_user_untrusted_content</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Do not audit attempts to list user
|
|
untrusted directories.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_dontaudit_read_user_home_content_files'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_dontaudit_read_user_home_content_files</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Do not audit attempts to read user home files.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_dontaudit_read_user_tmp_files'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_dontaudit_read_user_tmp_files</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Do not audit attempts to read users
|
|
temporary files.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_dontaudit_read_user_tmp_untrusted_content_files'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_dontaudit_read_user_tmp_untrusted_content_files</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Do not audit attempts to read users
|
|
temporary untrusted files.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_dontaudit_read_user_untrusted_content_files'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_dontaudit_read_user_untrusted_content_files</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Do not audit attempts to read users
|
|
untrusted files.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_dontaudit_setattr_user_home_content_files'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_dontaudit_setattr_user_home_content_files</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Do not audit attempts to set the
|
|
attributes of user home files.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_dontaudit_use_user_terminals'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_dontaudit_use_user_terminals</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Do not audit attempts to read and write
|
|
a user domain tty and pty.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_dontaudit_write_user_home_content_files'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_dontaudit_write_user_home_content_files</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Do not audit attempts to write user home files.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_exec_user_home_content_files'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_exec_user_home_content_files</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Execute user home files.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_list_user_home_dirs'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_list_user_home_dirs</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
List user home directories.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_list_user_tmp'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_list_user_tmp</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
List user temporary directories.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_list_user_tmp_untrusted_content'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_list_user_tmp_untrusted_content</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
List users temporary untrusted directories.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_list_user_untrusted_content'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_list_user_untrusted_content</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
List users untrusted directories.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_manage_user_home_content_dirs'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_manage_user_home_content_dirs</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Create, read, write, and delete directories
|
|
in a user home subdirectory.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_manage_user_home_content_files'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_manage_user_home_content_files</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Create, read, write, and delete files
|
|
in a user home subdirectory.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_manage_user_home_content_pipes'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_manage_user_home_content_pipes</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Create, read, write, and delete named pipes
|
|
in a user home subdirectory.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_manage_user_home_content_sockets'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_manage_user_home_content_sockets</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Create, read, write, and delete named sockets
|
|
in a user home subdirectory.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_manage_user_home_content_symlinks'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_manage_user_home_content_symlinks</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Create, read, write, and delete symbolic links
|
|
in a user home subdirectory.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_manage_user_tmp_dirs'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_manage_user_tmp_dirs</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Create, read, write, and delete user
|
|
temporary directories.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_manage_user_tmp_files'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_manage_user_tmp_files</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Create, read, write, and delete user
|
|
temporary files.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_manage_user_tmp_pipes'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_manage_user_tmp_pipes</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Create, read, write, and delete user
|
|
temporary named pipes.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_manage_user_tmp_sockets'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_manage_user_tmp_sockets</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Create, read, write, and delete user
|
|
temporary named sockets.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_manage_user_tmp_symlinks'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_manage_user_tmp_symlinks</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Create, read, write, and delete user
|
|
temporary symbolic links.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_read_user_home_content_files'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_read_user_home_content_files</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Read user home files.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_read_user_home_content_symlinks'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_read_user_home_content_symlinks</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Read user home subdirectory symbolic links.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_read_user_tmp_files'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_read_user_tmp_files</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Read user temporary files.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_read_user_tmp_symlinks'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_read_user_tmp_symlinks</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Read user
|
|
temporary symbolic links.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_read_user_tmp_untrusted_content_files'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_read_user_tmp_untrusted_content_files</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Read user temporary untrusted files.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_read_user_tmp_untrusted_content_symlinks'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_read_user_tmp_untrusted_content_symlinks</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Read user temporary untrusted symbolic links.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_read_user_untrusted_content_files'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_read_user_untrusted_content_files</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Read user untrusted files.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_read_user_untrusted_content_symlinks'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_read_user_untrusted_content_symlinks</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Read user untrusted symbolic links.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_rw_user_tmp_files'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_rw_user_tmp_files</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Read and write user temporary files.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_rw_user_tmpfs_files'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_rw_user_tmpfs_files</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Read user tmpfs files.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_search_user_home_dirs'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_search_user_home_dirs</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Search user home directories.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_setattr_user_ptys'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_setattr_user_ptys</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Set the attributes of a user pty.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_setattr_user_ttys'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_setattr_user_ttys</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Set the attributes of a user domain tty.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_use_user_terminals'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_use_user_terminals</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Read and write a user domain tty and pty.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_use_user_ttys'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_use_user_ttys</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Read and write a user domain tty.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_user_home_content'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_user_home_content</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
type
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Make the specified type usable in a
|
|
user home directory.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_user_home_dir_filetrans'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_user_home_dir_filetrans</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
private_type
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
object_class
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Create objects in a user home directory
|
|
with an automatic type transition to
|
|
a specified private type.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_user_home_dir_filetrans_user_home_content'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_user_home_dir_filetrans_user_home_content</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
object_class
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Create objects in a user home directory
|
|
with an automatic type transition to
|
|
the user home file type.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_user_home_domtrans'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_user_home_domtrans</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
source_domain
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
target_domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Do a domain transition to the specified
|
|
domain when executing a program in the
|
|
user home directory.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='system_userdomain.html#link_userdom_write_user_tmp_sockets'>
|
|
userdomain</a><p/>
|
|
Layer: <a href='system.html'>
|
|
system</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userdom_write_user_tmp_sockets</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Write to user temporary named sockets.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='apps_userhelper.html#link_userhelper_per_userdomain_template'>
|
|
userhelper</a><p/>
|
|
Layer: <a href='apps.html'>
|
|
apps</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>userhelper_per_userdomain_template</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
user_domain
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
user_role
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
The per user domain template for the userhelper module.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='services_xserver.html#link_xserver_common_domain_template'>
|
|
xserver</a><p/>
|
|
Layer: <a href='services.html'>
|
|
services</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>xserver_common_domain_template</b>(
|
|
|
|
|
|
|
|
|
|
prefix
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Template to create types and rules common to
|
|
all X server domains.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='services_xserver.html#link_xserver_domtrans_user_xauth'>
|
|
xserver</a><p/>
|
|
Layer: <a href='services.html'>
|
|
services</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>xserver_domtrans_user_xauth</b>(
|
|
|
|
|
|
|
|
|
|
userdomain_prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Transition to a user Xauthority domain.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='services_xserver.html#link_xserver_per_userdomain_template'>
|
|
xserver</a><p/>
|
|
Layer: <a href='services.html'>
|
|
services</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>xserver_per_userdomain_template</b>(
|
|
|
|
|
|
|
|
|
|
prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
user_domain
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
user_role
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
The per user domain template for the xserver module.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='services_xserver.html#link_xserver_ro_session_template'>
|
|
xserver</a><p/>
|
|
Layer: <a href='services.html'>
|
|
services</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>xserver_ro_session_template</b>(
|
|
|
|
|
|
|
|
|
|
prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
tmpfs_type
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Template for creating sessions on a
|
|
prefix X server, with read-only
|
|
access to the X server shared
|
|
memory segments.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='services_xserver.html#link_xserver_rw_session_template'>
|
|
xserver</a><p/>
|
|
Layer: <a href='services.html'>
|
|
services</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>xserver_rw_session_template</b>(
|
|
|
|
|
|
|
|
|
|
prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
tmpfs_type
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Template for creating sessions on a
|
|
prefix X server, with read and write
|
|
access to the X server shared
|
|
memory segments.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<div id="templatesmall">
|
|
Module: <a href='services_xserver.html#link_xserver_user_client_template'>
|
|
xserver</a><p/>
|
|
Layer: <a href='services.html'>
|
|
services</a><p/>
|
|
<div id="codeblock">
|
|
|
|
<b>xserver_user_client_template</b>(
|
|
|
|
|
|
|
|
|
|
prefix
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
tmpfs_type
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<p>
|
|
Template for creating full client sessions
|
|
on a user X server.
|
|
</p>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
|
|
</div>
|
|
</body>
|
|
</html>
|