Layer: apps

Module: nsplugin

Tunables Interfaces Templates

Description:

policy for nsplugin


Tunables:

allow_nsplugin_execmem
Default value

false

Description

Allow nsplugin code to execmem/execstack

Return

Interfaces:

nsplugin_admin( domain , role , terminal )
Summary

All of the rules required to administrate an nsplugin environment

Parameters
Parameter:Description:Optional:
domain

Domain allowed access.

No
role

The role to be allowed to manage the syslog domain.

No
terminal

The type of the user terminal.

No
nsplugin_config_domtrans( domain )
Summary

Execute a domain transition to run nsplugin_config.

Parameters
Parameter:Description:Optional:
domain

Domain allowed to transition.

No
nsplugin_domtrans( domain )
Summary

Execute a domain transition to run nsplugin.

Parameters
Parameter:Description:Optional:
domain

Domain allowed to transition.

No
nsplugin_manage_home_files( domain )
Summary

Create, read, write, and delete nsplugin home files.

Parameters
Parameter:Description:Optional:
domain

Domain allowed access.

No
nsplugin_manage_rw( domain )
Summary

Manage nsplugin rw files.

Parameters
Parameter:Description:Optional:
domain

Domain allowed access.

No
nsplugin_manage_rw_files( domain )
Summary

Create, read, write, and delete nsplugin rw files.

Parameters
Parameter:Description:Optional:
domain

Domain allowed access.

No
nsplugin_read_rw_files( domain )
Summary

Read nsplugin rw files.

Parameters
Parameter:Description:Optional:
domain

Domain allowed access.

No
nsplugin_run( domain , role , terminal )
Summary

Execute nsplugin in the nsplugin domain, and allow the specified role the nsplugin domain.

Parameters
Parameter:Description:Optional:
domain

Domain allowed access

No
role

The role to be allowed the nsplugin domain.

No
terminal

The type of the role's terminal.

No
nsplugin_run_config( domain , role , terminal )
Summary

Execute plugin_config in the nsplugin_config domain, and allow the specified role the nsplugin_config domain.

Parameters
Parameter:Description:Optional:
domain

Domain allowed access

No
role

The role to be allowed the nsplugin domain.

No
terminal

The type of the role's terminal.

No
nsplugin_rw_exec( domain )
Summary

Exec nsplugin rw files.

Parameters
Parameter:Description:Optional:
domain

Domain allowed access.

No
nsplugin_search_rw_dir( domain )
Summary

Search nsplugin rw directories.

Parameters
Parameter:Description:Optional:
domain

Domain allowed access.

No
Return

Templates:

nsplugin_per_role_template( userdomain_prefix , user_domain , user_role )
Summary

The per role template for the nsplugin module.

Description

This template creates a derived domains which are used for nsplugin web browser.

This template is invoked automatically for each user, and generally does not need to be invoked directly by policy writers.

Parameters
Parameter:Description:Optional:
userdomain_prefix

The prefix of the user domain (e.g., user is the prefix for user_t).

No
user_domain

The type of the user domain.

No
user_role

The role associated with the user domain.

No
nsplugin_use( userdomain_prefix , user_domain , user_role )
Summary

The per role template for the nsplugin module.

Description

This template creates a derived domains which are used for nsplugin web browser.

This template is invoked automatically for each user, and generally does not need to be invoked directly by policy writers.

Parameters
Parameter:Description:Optional:
userdomain_prefix

The prefix of the user domain (e.g., user is the prefix for user_t).

No
user_domain

The type of the user domain.

No
user_role

The role associated with the user domain.

No
Return