Layer: roles

Module: unprivuser

Interfaces Templates

Description:

Generic unprivileged user role


Interfaces:

unprivuser_dontaudit_relabel_home_content_files( domain )
Summary

Do not audit attempts to relabel generic user home files.

Parameters
Parameter:Description:
domain

Domain allowed access.

unprivuser_dontaudit_search_home_dirs( domain )
Summary

Don't audit search on the user home subdirectory.

Parameters
Parameter:Description:
domain

Domain allowed access.

unprivuser_home_dir_filetrans_home_content( domain , object_class )
Summary

Create objects in generic user home directories with automatic file type transition.

Parameters
Parameter:Description:
domain

Domain allowed access.

object_class

The class of the object to be created. If not specified, file is used.

unprivuser_home_filetrans_home_dir( domain )
Summary

Create generic user home directories with automatic file type transition.

Parameters
Parameter:Description:
domain

Domain allowed access.

unprivuser_manage_home_content_dirs( domain )
Summary

Create, read, write, and delete subdirectories of generic user home directories.

Parameters
Parameter:Description:
domain

Domain allowed access.

unprivuser_manage_home_content_files( domain )
Summary

Create, read, write, and delete files in generic user home directories.

Parameters
Parameter:Description:
domain

Domain allowed access.

unprivuser_manage_home_content_pipes( domain )
Summary

Create, read, write, and delete named pipes in generic user home directories.

Parameters
Parameter:Description:
domain

Domain allowed access.

unprivuser_manage_home_content_sockets( domain )
Summary

Create, read, write, and delete named sockets in generic user home directories.

Parameters
Parameter:Description:
domain

Domain allowed access.

unprivuser_manage_home_content_symlinks( domain )
Summary

Create, read, write, and delete symbolic links in generic user home directories.

Parameters
Parameter:Description:
domain

Domain allowed access.

unprivuser_manage_home_dirs( domain )
Summary

Create, read, write, and delete generic user home directories.

Parameters
Parameter:Description:
domain

Domain allowed access.

unprivuser_mmap_home_content_files( domain )
Summary

Mmap of generic user home files.

Parameters
Parameter:Description:
domain

Domain allowed access.

unprivuser_read_home_content_files( domain )
Summary

Read files in generic user home directories.

Parameters
Parameter:Description:
domain

Domain allowed access.

unprivuser_relabelto_home_dirs( domain )
Summary

Relabel to generic user home directories.

Parameters
Parameter:Description:
domain

Domain allowed access.

unprivuser_search_home_dirs( domain )
Summary

Search generic user home directories.

Parameters
Parameter:Description:
domain

Domain allowed access.

Return

Templates:

unprivuser_role_change_template( prefix )
Summary

Change to the generic user role.

Parameters
Parameter:Description:
prefix

The prefix of the user role (e.g., user is the prefix for user_r).

unprivuser_role_change_to_template( prefix )
Summary

Change from the generic user role.

Description

Change from the generic user role to the specified role.

This is a template to support third party modules and its use is not allowed in upstream reference policy.

Parameters
Parameter:Description:
prefix

The prefix of the user role (e.g., user is the prefix for user_r).

Return