Layer: apps

Module: nsplugin

Tunables Interfaces Templates

Description:

policy for nsplugin

Tunables:

allow_nsplugin_execmem

Default value

false

Description

Allow nsplugin code to execmem/execstack

Return

Interfaces:

nsplugin_admin(
	
		domain
		
			,
		
		role
		
			,
		
		terminal
		
	)

Summary

All of the rules required to administrate an nsplugin environment

Parameters

Parameter:	Description:	Optional:
domain	Domain allowed access.	No
role	The role to be allowed to manage the syslog domain.	No
terminal	The type of the user terminal.	No

nsplugin_config_domtrans(
	
		domain
		
	)

Summary

Execute a domain transition to run nsplugin_config.

Parameters

Parameter:	Description:	Optional:
domain	Domain allowed to transition.	No

nsplugin_domtrans(
	
		domain
		
	)

Summary

Execute a domain transition to run nsplugin.

Parameters

Parameter:	Description:	Optional:
domain	Domain allowed to transition.	No

nsplugin_manage_home_files(
	
		domain
		
	)

Summary

Create, read, write, and delete nsplugin home files.

Parameters

Parameter:	Description:	Optional:
domain	Domain allowed access.	No

nsplugin_manage_rw(
	
		domain
		
	)

Summary

Manage nsplugin rw files.

Parameters

Parameter:	Description:	Optional:
domain	Domain allowed access.	No

nsplugin_manage_rw_files(
	
		domain
		
	)

Summary

Create, read, write, and delete nsplugin rw files.

Parameters

Parameter:	Description:	Optional:
domain	Domain allowed access.	No

nsplugin_read_rw_files(
	
		domain
		
	)

Summary

Read nsplugin rw files.

Parameters

Parameter:	Description:	Optional:
domain	Domain allowed access.	No

nsplugin_run(
	
		domain
		
			,
		
		role
		
			,
		
		terminal
		
	)

Summary

Execute nsplugin in the nsplugin domain, and allow the specified role the nsplugin domain.

Parameters

Parameter:	Description:	Optional:
domain	Domain allowed access	No
role	The role to be allowed the nsplugin domain.	No
terminal	The type of the role's terminal.	No

nsplugin_run_config(
	
		domain
		
			,
		
		role
		
			,
		
		terminal
		
	)

Summary

Execute plugin_config in the nsplugin_config domain, and allow the specified role the nsplugin_config domain.

Parameters

Parameter:	Description:	Optional:
domain	Domain allowed access	No
role	The role to be allowed the nsplugin domain.	No
terminal	The type of the role's terminal.	No

nsplugin_rw_exec(
	
		domain
		
	)

Summary

Exec nsplugin rw files.

Parameters

Parameter:	Description:	Optional:
domain	Domain allowed access.	No

nsplugin_search_rw_dir(
	
		domain
		
	)

Summary

Search nsplugin rw directories.

Parameters

Parameter:	Description:	Optional:
domain	Domain allowed access.	No

Return

Templates:

nsplugin_per_role_template(
	
		userdomain_prefix
		
			,
		
		user_domain
		
			,
		
		user_role
		
	)

Summary

The per role template for the nsplugin module.

Description

This template creates a derived domains which are used for nsplugin web browser.

This template is invoked automatically for each user, and generally does not need to be invoked directly by policy writers.

Parameters

Parameter:	Description:	Optional:
userdomain_prefix	The prefix of the user domain (e.g., user is the prefix for user_t).	No
user_domain	The type of the user domain.	No
user_role	The role associated with the user domain.	No

nsplugin_use(
	
		userdomain_prefix
		
			,
		
		user_domain
		
			,
		
		user_role
		
	)

Summary

The per role template for the nsplugin module.

Description

This template creates a derived domains which are used for nsplugin web browser.

This template is invoked automatically for each user, and generally does not need to be invoked directly by policy writers.

Parameters

Parameter:	Description:	Optional:
userdomain_prefix	The prefix of the user domain (e.g., user is the prefix for user_t).	No
user_domain	The type of the user domain.	No
user_role	The role associated with the user domain.	No

Return