Layer: kernel

Module: mcs

Interfaces

Description:

Multicategory security policy

This module is required to be included in all policies.


Interfaces:

mcs_file_read_all( domain )
Summary

This domain is allowed to read files and directories regardless of their MCS category set.

Parameters
Parameter:Description:
domain

Domain target for user exemption.

mcs_file_write_all( domain )
Summary

This domain is allowed to write files and directories regardless of their MCS category set.

Parameters
Parameter:Description:
domain

Domain target for user exemption.

mcs_killall( domain )
Summary

This domain is allowed to sigkill and sigstop all domains regardless of their MCS category set.

Parameters
Parameter:Description:
domain

Domain target for user exemption.

mcs_process_set_categories( domain )
Summary

Make specified domain MCS trusted for setting any category set for the processes it executes.

Parameters
Parameter:Description:
domain

Domain target for user exemption.

mcs_ptrace_all( domain )
Summary

This domain is allowed to ptrace all domains regardless of their MCS category set.

Parameters
Parameter:Description:
domain

Domain target for user exemption.

mcs_socket_write_all_levels( domain )
Summary

Make specified domain MCS trusted for writing to sockets at any level.

Parameters
Parameter:Description:
domain

Domain allowed access.

mcs_untrusted_proc( domain )
Summary

Make specified process type MCS untrusted.

Description

Make specified process type MCS untrusted. This prevents this process from sending signals to other processes with different mcs labels object.

Parameters
Parameter:Description:
domain

The type of the process.

Return