policy for nsplugin
false
Allow nsplugin code to execmem/execstack
All of the rules required to administrate an nsplugin environment
Parameter: | Description: | Optional: |
---|---|---|
domain |
Domain allowed access. | No |
role |
The role to be allowed to manage the syslog domain. | No |
terminal |
The type of the user terminal. | No |
Execute a domain transition to run nsplugin_config.
Parameter: | Description: | Optional: |
---|---|---|
domain |
Domain allowed to transition. | No |
Execute a domain transition to run nsplugin.
Parameter: | Description: | Optional: |
---|---|---|
domain |
Domain allowed to transition. | No |
Create, read, write, and delete nsplugin home files.
Parameter: | Description: | Optional: |
---|---|---|
domain |
Domain allowed access. | No |
Manage nsplugin rw files.
Parameter: | Description: | Optional: |
---|---|---|
domain |
Domain allowed access. | No |
Create, read, write, and delete nsplugin rw files.
Parameter: | Description: | Optional: |
---|---|---|
domain |
Domain allowed access. | No |
Read nsplugin rw files.
Parameter: | Description: | Optional: |
---|---|---|
domain |
Domain allowed access. | No |
Execute nsplugin in the nsplugin domain, and allow the specified role the nsplugin domain.
Parameter: | Description: | Optional: |
---|---|---|
domain |
Domain allowed access | No |
role |
The role to be allowed the nsplugin domain. | No |
terminal |
The type of the role's terminal. | No |
Execute plugin_config in the nsplugin_config domain, and allow the specified role the nsplugin_config domain.
Parameter: | Description: | Optional: |
---|---|---|
domain |
Domain allowed access | No |
role |
The role to be allowed the nsplugin domain. | No |
terminal |
The type of the role's terminal. | No |
Exec nsplugin rw files.
Parameter: | Description: | Optional: |
---|---|---|
domain |
Domain allowed access. | No |
Search nsplugin rw directories.
Parameter: | Description: | Optional: |
---|---|---|
domain |
Domain allowed access. | No |
The per role template for the nsplugin module.
This template creates a derived domains which are used for nsplugin web browser.
This template is invoked automatically for each user, and generally does not need to be invoked directly by policy writers.
Parameter: | Description: | Optional: |
---|---|---|
userdomain_prefix |
The prefix of the user domain (e.g., user is the prefix for user_t). | No |
user_domain |
The type of the user domain. | No |
user_role |
The role associated with the user domain. | No |
The per role template for the nsplugin module.
This template creates a derived domains which are used for nsplugin web browser.
This template is invoked automatically for each user, and generally does not need to be invoked directly by policy writers.
Parameter: | Description: | Optional: |
---|---|---|
userdomain_prefix |
The prefix of the user domain (e.g., user is the prefix for user_t). | No |
user_domain |
The type of the user domain. | No |
user_role |
The role associated with the user domain. | No |