The unconfined domain.
Add an alias type to the unconfined domain. (Deprecated)
Add an alias type to the unconfined domain. (Deprecated)
This is added to support targeted policy. Its use should be limited. It has no effect on the strict policy.
Parameter: | Description: |
---|---|
domain |
New alias of the unconfined domain. |
Make the specified domain unconfined and audit executable heap usage.
Make the specified domain unconfined and audit executable heap usage. With exception of memory protections, usage of this interface will result in the level of access the domain has is like SELinux was not being used.
Only completely trusted domains should use this interface.
Parameter: | Description: |
---|---|
domain |
Domain to make unconfined. |
Make the specified domain unconfined.
Parameter: | Description: |
---|---|
domain |
Domain to make unconfined. |
Add an alias type to the unconfined execmem program file type. (Deprecated)
Add an alias type to the unconfined execmem program file type. (Deprecated)
This is added to support targeted policy. Its use should be limited. It has no effect on the strict policy.
Parameter: | Description: |
---|---|
domain |
New alias of the unconfined execmem program type. |
Create and use unconfined service shared memory
Parameter: | Description: |
---|---|
domain |
Domain to not audit. |
Create unconfined_service_t TCP sockets.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Create unconfined_service_t UDP sockets.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Create unconfined_service_t UNIX sockets.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Allow caller domain to dbus chat unconfined_server.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Connect to unconfined_server with a unix socket.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Do not audit attempts to read and write
Parameter: | Description: |
---|---|
domain |
Domain to not audit. |
Allow noatsecure.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Allow the specified domain read unconfined service semaphores
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Allow inherit signal state
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send signull to unconfined_service_t.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Connect to unconfined_server with a unix socket.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Connect to unconfined_service_t with a unix socket.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |