File: //usr/share/doc/selinux-policy/html/kernel_mls.html
<html>
<head>
<title>
Security Enhanced Linux Reference Policy
</title>
<style type="text/css" media="all">@import "style.css";</style>
</head>
<body>
<div id="Header">Security Enhanced Linux Reference Policy</div>
<div id='Menu'>
<a href="admin.html">+
admin</a></br/>
<div id='subitem'>
</div>
<a href="apps.html">+
apps</a></br/>
<div id='subitem'>
</div>
<a href="contrib.html">+
contrib</a></br/>
<div id='subitem'>
</div>
<a href="kernel.html">+
kernel</a></br/>
<div id='subitem'>
- <a href='kernel_corecommands.html'>
corecommands</a><br/>
- <a href='kernel_corenetwork.html'>
corenetwork</a><br/>
- <a href='kernel_devices.html'>
devices</a><br/>
- <a href='kernel_domain.html'>
domain</a><br/>
- <a href='kernel_files.html'>
files</a><br/>
- <a href='kernel_filesystem.html'>
filesystem</a><br/>
- <a href='kernel_kernel.html'>
kernel</a><br/>
- <a href='kernel_mcs.html'>
mcs</a><br/>
- <a href='kernel_mls.html'>
mls</a><br/>
- <a href='kernel_selinux.html'>
selinux</a><br/>
- <a href='kernel_storage.html'>
storage</a><br/>
- <a href='kernel_terminal.html'>
terminal</a><br/>
- <a href='kernel_ubac.html'>
ubac</a><br/>
- <a href='kernel_unlabelednet.html'>
unlabelednet</a><br/>
</div>
<a href="roles.html">+
roles</a></br/>
<div id='subitem'>
</div>
<a href="services.html">+
services</a></br/>
<div id='subitem'>
</div>
<a href="system.html">+
system</a></br/>
<div id='subitem'>
</div>
<br/><p/>
<a href="global_booleans.html">* Global Booleans </a>
<br/><p/>
<a href="global_tunables.html">* Global Tunables </a>
<p/><br/><p/>
<a href="index.html">* Layer Index</a>
<br/><p/>
<a href="booleans.html">* Boolean Index</a>
<br/><p/>
<a href="tunables.html">* Tunable Index</a>
<br/><p/>
<a href="interfaces.html">* Interface Index</a>
<br/><p/>
<a href="templates.html">* Template Index</a>
</div>
<div id="Content">
<a name="top":></a>
<h1>Layer: kernel</h1><p/>
<h2>Module: mls</h2><p/>
<a href=#interfaces>Interfaces</a>
<h3>Description:</h3>
<p><p>
</p><p>
This module contains interfaces for handling multilevel
security. The interfaces allow the specified subjects
and objects to be allowed certain privileges in the
MLS rules.
</p><p>
</p></p>
<p>This module is required to be included in all policies.</p>
<hr>
<a name="interfaces"></a>
<h3>Interfaces: </h3>
<a name="link_mls_colormap_read_all_levels"></a>
<div id="interface">
<div id="codeblock">
<b>mls_colormap_read_all_levels</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain MLS trusted
for reading from X colormaps at any level.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_colormap_write_all_levels"></a>
<div id="interface">
<div id="codeblock">
<b>mls_colormap_write_all_levels</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain MLS trusted
for writing to X colormaps at any level.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_context_translate_all_levels"></a>
<div id="interface">
<div id="codeblock">
<b>mls_context_translate_all_levels</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain MLS trusted
for translating contexts at all levels.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_db_downgrade"></a>
<div id="interface">
<div id="codeblock">
<b>mls_db_downgrade</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain MLS trusted
for lowering the level of databases.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_db_read_all_levels"></a>
<div id="interface">
<div id="codeblock">
<b>mls_db_read_all_levels</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain MLS trusted
for reading from databases at any level.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_db_upgrade"></a>
<div id="interface">
<div id="codeblock">
<b>mls_db_upgrade</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain MLS trusted
for raising the level of databases.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_db_write_all_levels"></a>
<div id="interface">
<div id="codeblock">
<b>mls_db_write_all_levels</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain MLS trusted
for writing to databases at any level.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_dbus_recv_all_levels"></a>
<div id="interface">
<div id="codeblock">
<b>mls_dbus_recv_all_levels</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain MLS trusted
for receiving dbus messages from
all levels.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_dbus_send_all_levels"></a>
<div id="interface">
<div id="codeblock">
<b>mls_dbus_send_all_levels</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain MLS trusted
for sending dbus messages to
all levels.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_fd_share_all_levels"></a>
<div id="interface">
<div id="codeblock">
<b>mls_fd_share_all_levels</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make the file descriptors from the
specifed domain inheritable by
all levels.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_fd_use_all_levels"></a>
<div id="interface">
<div id="codeblock">
<b>mls_fd_use_all_levels</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make the specified domain trusted
to inherit and use file descriptors
from all levels.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_file_downgrade"></a>
<div id="interface">
<div id="codeblock">
<b>mls_file_downgrade</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain MLS trusted
for lowering the level of files.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_file_read_all_levels"></a>
<div id="interface">
<div id="codeblock">
<b>mls_file_read_all_levels</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain MLS trusted
for reading from files at all levels.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_file_read_to_clearance"></a>
<div id="interface">
<div id="codeblock">
<b>mls_file_read_to_clearance</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain MLS trusted
for reading from files up to its clearance.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_file_read_up"></a>
<div id="interface">
<div id="codeblock">
<b>mls_file_read_up</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain MLS trusted
for reading from files at all levels. (Deprecated)
</p>
<h5>Description</h5>
<p>
</p><p>
Make specified domain MLS trusted
for reading from files at all levels.
</p><p>
</p><p>
This interface has been deprecated, please use
mls_file_read_all_levels() instead.
</p><p>
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_file_relabel_to_clearance"></a>
<div id="interface">
<div id="codeblock">
<b>mls_file_relabel_to_clearance</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain MLS trusted
for relabelto to files up to its clearance.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_file_upgrade"></a>
<div id="interface">
<div id="codeblock">
<b>mls_file_upgrade</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain MLS trusted
for raising the level of files.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_file_write_all_levels"></a>
<div id="interface">
<div id="codeblock">
<b>mls_file_write_all_levels</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain MLS trusted
for writing to files at all levels.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_file_write_down"></a>
<div id="interface">
<div id="codeblock">
<b>mls_file_write_down</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain MLS trusted
for writing to files at all levels. (Deprecated)
</p>
<h5>Description</h5>
<p>
</p><p>
Make specified domain MLS trusted
for writing to files at all levels.
</p><p>
</p><p>
This interface has been deprecated, please use
mls_file_write_all_levels() instead.
</p><p>
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_file_write_to_clearance"></a>
<div id="interface">
<div id="codeblock">
<b>mls_file_write_to_clearance</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain MLS trusted
for write to files up to its clearance.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_file_write_within_range"></a>
<div id="interface">
<div id="codeblock">
<b>mls_file_write_within_range</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain trusted to
be written to within its MLS range.
The subject's MLS range must be a
proper subset of the object's MLS range.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_net_inbound_all_levels"></a>
<div id="interface">
<div id="codeblock">
<b>mls_net_inbound_all_levels</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain trusted to
write inbound packets regardless of the
network's or node's MLS range.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_net_outbound_all_levels"></a>
<div id="interface">
<div id="codeblock">
<b>mls_net_outbound_all_levels</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain trusted to
write outbound packets regardless of the
network's or node's MLS range.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_net_receive_all_levels"></a>
<div id="interface">
<div id="codeblock">
<b>mls_net_receive_all_levels</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain MLS trusted
for receiving network data from
network interfaces or hosts at any level.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_net_write_within_range"></a>
<div id="interface">
<div id="codeblock">
<b>mls_net_write_within_range</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain trusted to
write to network objects within its MLS range.
The subject's MLS range must be a
proper subset of the object's MLS range.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_process_read_all_levels"></a>
<div id="interface">
<div id="codeblock">
<b>mls_process_read_all_levels</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain MLS trusted
for reading from processes at all levels.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_process_read_to_clearance"></a>
<div id="interface">
<div id="codeblock">
<b>mls_process_read_to_clearance</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain MLS trusted
for reading from processes up to
its clearance.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_process_read_up"></a>
<div id="interface">
<div id="codeblock">
<b>mls_process_read_up</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain MLS trusted
for reading from processes at all levels. (Deprecated)
</p>
<h5>Description</h5>
<p>
</p><p>
Make specified domain MLS trusted
for reading from processes at all levels.
</p><p>
</p><p>
This interface has been deprecated, please use
mls_process_read_all_levels() instead.
</p><p>
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_process_set_level"></a>
<div id="interface">
<div id="codeblock">
<b>mls_process_set_level</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain MLS trusted
for setting the level of processes
it executes.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_process_write_all_levels"></a>
<div id="interface">
<div id="codeblock">
<b>mls_process_write_all_levels</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain MLS trusted
for writing to processes at all levels.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_process_write_down"></a>
<div id="interface">
<div id="codeblock">
<b>mls_process_write_down</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain MLS trusted
for writing to processes at all levels. (Deprecated)
</p>
<h5>Description</h5>
<p>
</p><p>
Make specified domain MLS trusted
for writing to processes at all levels.
</p><p>
</p><p>
This interface has been deprecated, please use
mls_process_write_all_levels() instead.
</p><p>
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_process_write_to_clearance"></a>
<div id="interface">
<div id="codeblock">
<b>mls_process_write_to_clearance</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain MLS trusted
for writing to processes up to
its clearance.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_rangetrans_source"></a>
<div id="interface">
<div id="codeblock">
<b>mls_rangetrans_source</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Allow the specified domain to do a MLS
range transition that changes
the current level.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_rangetrans_target"></a>
<div id="interface">
<div id="codeblock">
<b>mls_rangetrans_target</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain a target domain
for MLS range transitions that change
the current level.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_socket_read_all_levels"></a>
<div id="interface">
<div id="codeblock">
<b>mls_socket_read_all_levels</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain MLS trusted
for reading from sockets at any level.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_socket_read_to_clearance"></a>
<div id="interface">
<div id="codeblock">
<b>mls_socket_read_to_clearance</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain MLS trusted
for reading from sockets at any level
that is dominated by the process clearance.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_socket_write_all_levels"></a>
<div id="interface">
<div id="codeblock">
<b>mls_socket_write_all_levels</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain MLS trusted
for writing to sockets at any level.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_socket_write_to_clearance"></a>
<div id="interface">
<div id="codeblock">
<b>mls_socket_write_to_clearance</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain MLS trusted
for writing to sockets up to
its clearance.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_sysvipc_read_all_levels"></a>
<div id="interface">
<div id="codeblock">
<b>mls_sysvipc_read_all_levels</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain MLS trusted
for reading from System V IPC objects
at any level.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_sysvipc_read_to_clearance"></a>
<div id="interface">
<div id="codeblock">
<b>mls_sysvipc_read_to_clearance</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain MLS trusted
for reading from System V IPC objects
up to its clearance.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_sysvipc_write_all_levels"></a>
<div id="interface">
<div id="codeblock">
<b>mls_sysvipc_write_all_levels</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain MLS trusted
for writing to System V IPC objects
at any level.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_sysvipc_write_to_clearance"></a>
<div id="interface">
<div id="codeblock">
<b>mls_sysvipc_write_to_clearance</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain MLS trusted
for writing to System V IPC objects
up to its clearance.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_trusted_object"></a>
<div id="interface">
<div id="codeblock">
<b>mls_trusted_object</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified object MLS trusted.
</p>
<h5>Description</h5>
<p>
</p><p>
Make specified object MLS trusted. This
allows all levels to read and write the
object.
</p><p>
</p><p>
This currently only applies to filesystem
objects, for example, files and directories.
</p><p>
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
The type of the object.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_xwin_read_all_levels"></a>
<div id="interface">
<div id="codeblock">
<b>mls_xwin_read_all_levels</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain MLS trusted
for reading from X objects at any level.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_xwin_read_to_clearance"></a>
<div id="interface">
<div id="codeblock">
<b>mls_xwin_read_to_clearance</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain MLS trusted
for reading from X objects up to its clearance.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_xwin_write_all_levels"></a>
<div id="interface">
<div id="codeblock">
<b>mls_xwin_write_all_levels</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain MLS trusted
for writing to X objects at any level.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_mls_xwin_write_to_clearance"></a>
<div id="interface">
<div id="codeblock">
<b>mls_xwin_write_to_clearance</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make specified domain MLS trusted
for write to X objects up to its clearance.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a href=#top>Return</a>
</div>
</body>
</html>