539 lines
6.4 KiB
HTML
539 lines
6.4 KiB
HTML
<html>
|
|
<head>
|
|
<title>
|
|
Security Enhanced Linux Reference Policy
|
|
</title>
|
|
<style type="text/css" media="all">@import "style.css";</style>
|
|
</head>
|
|
<body>
|
|
<div id="Header">Security Enhanced Linux Reference Policy</div>
|
|
<div id='Menu'>
|
|
|
|
<a href="admin.html">+
|
|
admin</a></br/>
|
|
<div id='subitem'>
|
|
|
|
- <a href='admin_dmesg.html'>
|
|
dmesg</a><br/>
|
|
|
|
- <a href='admin_rpm.html'>
|
|
rpm</a><br/>
|
|
|
|
- <a href='admin_usermanage.html'>
|
|
usermanage</a><br/>
|
|
|
|
</div>
|
|
|
|
<a href="kernel.html">+
|
|
kernel</a></br/>
|
|
<div id='subitem'>
|
|
|
|
</div>
|
|
|
|
<a href="services.html">+
|
|
services</a></br/>
|
|
<div id='subitem'>
|
|
|
|
</div>
|
|
|
|
<a href="system.html">+
|
|
system</a></br/>
|
|
<div id='subitem'>
|
|
|
|
</div>
|
|
|
|
<br/><p/>
|
|
<a href="interfaces.html">* Interface Index</a>
|
|
</div>
|
|
|
|
<div id="Content">
|
|
<h1>Layer: admin</h1><p/>
|
|
<h2>Module: usermanage</h2><p/>
|
|
<h3>Description:</h3>
|
|
|
|
<p>Policy for managing user accounts.</p>
|
|
|
|
<h3>Interfaces: </h3>
|
|
|
|
<div id="interface">
|
|
|
|
|
|
<div id="codeblock">
|
|
|
|
<b>usermanage_domtrans_chfn</b>(
|
|
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<h5>Description:</h5>
|
|
<p>
|
|
Execute chfn in the chfn domain.
|
|
</p><br/>
|
|
<h5>Parameters:</h5>
|
|
<div id="description">
|
|
<table border="1" cellspacing="0" cellpadding="3" width="80%">
|
|
<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
|
|
|
|
<tr><td>
|
|
domain
|
|
</td><td>
|
|
|
|
The type of the process performing this action.
|
|
|
|
</td><td>
|
|
No
|
|
</td></tr>
|
|
|
|
</table>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<div id="interface">
|
|
|
|
|
|
<div id="codeblock">
|
|
|
|
<b>usermanage_domtrans_groupadd</b>(
|
|
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<h5>Description:</h5>
|
|
<p>
|
|
Execute groupadd in the groupadd domain.
|
|
</p><br/>
|
|
<h5>Parameters:</h5>
|
|
<div id="description">
|
|
<table border="1" cellspacing="0" cellpadding="3" width="80%">
|
|
<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
|
|
|
|
<tr><td>
|
|
domain
|
|
</td><td>
|
|
|
|
The type of the process performing this action.
|
|
|
|
</td><td>
|
|
No
|
|
</td></tr>
|
|
|
|
</table>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<div id="interface">
|
|
|
|
|
|
<div id="codeblock">
|
|
|
|
<b>usermanage_domtrans_passwd</b>(
|
|
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<h5>Description:</h5>
|
|
<p>
|
|
Execute passwd in the passwd domain.
|
|
</p><br/>
|
|
<h5>Parameters:</h5>
|
|
<div id="description">
|
|
<table border="1" cellspacing="0" cellpadding="3" width="80%">
|
|
<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
|
|
|
|
<tr><td>
|
|
domain
|
|
</td><td>
|
|
|
|
The type of the process performing this action.
|
|
|
|
</td><td>
|
|
No
|
|
</td></tr>
|
|
|
|
</table>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<div id="interface">
|
|
|
|
|
|
<div id="codeblock">
|
|
|
|
<b>usermanage_domtrans_useradd</b>(
|
|
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<h5>Description:</h5>
|
|
<p>
|
|
Execute useradd in the useradd domain.
|
|
</p><br/>
|
|
<h5>Parameters:</h5>
|
|
<div id="description">
|
|
<table border="1" cellspacing="0" cellpadding="3" width="80%">
|
|
<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
|
|
|
|
<tr><td>
|
|
domain
|
|
</td><td>
|
|
|
|
The type of the process performing this action.
|
|
|
|
</td><td>
|
|
No
|
|
</td></tr>
|
|
|
|
</table>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<div id="interface">
|
|
|
|
|
|
<div id="codeblock">
|
|
|
|
<b>usermanage_run_chfn</b>(
|
|
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
role
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
terminal
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<h5>Description:</h5>
|
|
<p>
|
|
Execute chfn in the chfn domain, and
|
|
allow the specified role the chfn domain.
|
|
</p><br/>
|
|
<h5>Parameters:</h5>
|
|
<div id="description">
|
|
<table border="1" cellspacing="0" cellpadding="3" width="80%">
|
|
<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
|
|
|
|
<tr><td>
|
|
domain
|
|
</td><td>
|
|
|
|
The type of the process performing this action.
|
|
|
|
</td><td>
|
|
No
|
|
</td></tr>
|
|
|
|
<tr><td>
|
|
role
|
|
</td><td>
|
|
|
|
The role to be allowed the chfn domain.
|
|
|
|
</td><td>
|
|
No
|
|
</td></tr>
|
|
|
|
<tr><td>
|
|
terminal
|
|
</td><td>
|
|
|
|
The type of the terminal allow the chfn domain to use.
|
|
|
|
</td><td>
|
|
No
|
|
</td></tr>
|
|
|
|
</table>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<div id="interface">
|
|
|
|
|
|
<div id="codeblock">
|
|
|
|
<b>usermanage_run_groupadd</b>(
|
|
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
role
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
terminal
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<h5>Description:</h5>
|
|
<p>
|
|
Execute groupadd in the groupadd domain, and
|
|
allow the specified role the groupadd domain.
|
|
</p><br/>
|
|
<h5>Parameters:</h5>
|
|
<div id="description">
|
|
<table border="1" cellspacing="0" cellpadding="3" width="80%">
|
|
<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
|
|
|
|
<tr><td>
|
|
domain
|
|
</td><td>
|
|
|
|
The type of the process performing this action.
|
|
|
|
</td><td>
|
|
No
|
|
</td></tr>
|
|
|
|
<tr><td>
|
|
role
|
|
</td><td>
|
|
|
|
The role to be allowed the groupadd domain.
|
|
|
|
</td><td>
|
|
No
|
|
</td></tr>
|
|
|
|
<tr><td>
|
|
terminal
|
|
</td><td>
|
|
|
|
The type of the terminal allow the groupadd domain to use.
|
|
|
|
</td><td>
|
|
No
|
|
</td></tr>
|
|
|
|
</table>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<div id="interface">
|
|
|
|
|
|
<div id="codeblock">
|
|
|
|
<b>usermanage_run_passwd</b>(
|
|
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
role
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
terminal
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<h5>Description:</h5>
|
|
<p>
|
|
Execute passwd in the passwd domain, and
|
|
allow the specified role the passwd domain.
|
|
</p><br/>
|
|
<h5>Parameters:</h5>
|
|
<div id="description">
|
|
<table border="1" cellspacing="0" cellpadding="3" width="80%">
|
|
<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
|
|
|
|
<tr><td>
|
|
domain
|
|
</td><td>
|
|
|
|
The type of the process performing this action.
|
|
|
|
</td><td>
|
|
No
|
|
</td></tr>
|
|
|
|
<tr><td>
|
|
role
|
|
</td><td>
|
|
|
|
The role to be allowed the passwd domain.
|
|
|
|
</td><td>
|
|
No
|
|
</td></tr>
|
|
|
|
<tr><td>
|
|
terminal
|
|
</td><td>
|
|
|
|
The type of the terminal allow the passwd domain to use.
|
|
|
|
</td><td>
|
|
No
|
|
</td></tr>
|
|
|
|
</table>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<div id="interface">
|
|
|
|
|
|
<div id="codeblock">
|
|
|
|
<b>usermanage_run_useradd</b>(
|
|
|
|
|
|
|
|
|
|
domain
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
role
|
|
|
|
|
|
|
|
,
|
|
|
|
|
|
|
|
terminal
|
|
|
|
|
|
)<br>
|
|
</div>
|
|
|
|
<div id="description">
|
|
<h5>Description:</h5>
|
|
<p>
|
|
Execute useradd in the useradd domain, and
|
|
allow the specified role the useradd domain.
|
|
</p><br/>
|
|
<h5>Parameters:</h5>
|
|
<div id="description">
|
|
<table border="1" cellspacing="0" cellpadding="3" width="80%">
|
|
<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
|
|
|
|
<tr><td>
|
|
domain
|
|
</td><td>
|
|
|
|
The type of the process performing this action.
|
|
|
|
</td><td>
|
|
No
|
|
</td></tr>
|
|
|
|
<tr><td>
|
|
role
|
|
</td><td>
|
|
|
|
The role to be allowed the useradd domain.
|
|
|
|
</td><td>
|
|
No
|
|
</td></tr>
|
|
|
|
<tr><td>
|
|
terminal
|
|
</td><td>
|
|
|
|
The type of the terminal allow the useradd domain to use.
|
|
|
|
</td><td>
|
|
No
|
|
</td></tr>
|
|
|
|
</table>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
|
|
|
|
</div>
|
|
</body>
|
|
</html>
|