File: //usr/share/doc/selinux-policy/html/system_unconfined.html
<html>
<head>
<title>
Security Enhanced Linux Reference Policy
</title>
<style type="text/css" media="all">@import "style.css";</style>
</head>
<body>
<div id="Header">Security Enhanced Linux Reference Policy</div>
<div id='Menu'>
<a href="admin.html">+
admin</a></br/>
<div id='subitem'>
</div>
<a href="apps.html">+
apps</a></br/>
<div id='subitem'>
</div>
<a href="contrib.html">+
contrib</a></br/>
<div id='subitem'>
</div>
<a href="kernel.html">+
kernel</a></br/>
<div id='subitem'>
</div>
<a href="roles.html">+
roles</a></br/>
<div id='subitem'>
</div>
<a href="services.html">+
services</a></br/>
<div id='subitem'>
</div>
<a href="system.html">+
system</a></br/>
<div id='subitem'>
- <a href='system_application.html'>
application</a><br/>
- <a href='system_authlogin.html'>
authlogin</a><br/>
- <a href='system_clock.html'>
clock</a><br/>
- <a href='system_fstools.html'>
fstools</a><br/>
- <a href='system_getty.html'>
getty</a><br/>
- <a href='system_hostname.html'>
hostname</a><br/>
- <a href='system_hotplug.html'>
hotplug</a><br/>
- <a href='system_init.html'>
init</a><br/>
- <a href='system_ipsec.html'>
ipsec</a><br/>
- <a href='system_iptables.html'>
iptables</a><br/>
- <a href='system_kdbus.html'>
kdbus</a><br/>
- <a href='system_libraries.html'>
libraries</a><br/>
- <a href='system_locallogin.html'>
locallogin</a><br/>
- <a href='system_logging.html'>
logging</a><br/>
- <a href='system_lvm.html'>
lvm</a><br/>
- <a href='system_miscfiles.html'>
miscfiles</a><br/>
- <a href='system_modutils.html'>
modutils</a><br/>
- <a href='system_mount.html'>
mount</a><br/>
- <a href='system_netlabel.html'>
netlabel</a><br/>
- <a href='system_selinuxutil.html'>
selinuxutil</a><br/>
- <a href='system_setrans.html'>
setrans</a><br/>
- <a href='system_sysnetwork.html'>
sysnetwork</a><br/>
- <a href='system_systemd.html'>
systemd</a><br/>
- <a href='system_udev.html'>
udev</a><br/>
- <a href='system_unconfined.html'>
unconfined</a><br/>
- <a href='system_userdomain.html'>
userdomain</a><br/>
</div>
<br/><p/>
<a href="global_booleans.html">* Global Booleans </a>
<br/><p/>
<a href="global_tunables.html">* Global Tunables </a>
<p/><br/><p/>
<a href="index.html">* Layer Index</a>
<br/><p/>
<a href="booleans.html">* Boolean Index</a>
<br/><p/>
<a href="tunables.html">* Tunable Index</a>
<br/><p/>
<a href="interfaces.html">* Interface Index</a>
<br/><p/>
<a href="templates.html">* Template Index</a>
</div>
<div id="Content">
<a name="top":></a>
<h1>Layer: system</h1><p/>
<h2>Module: unconfined</h2><p/>
<a href=#interfaces>Interfaces</a>
<h3>Description:</h3>
<p><p>The unconfined domain.</p></p>
<hr>
<a name="interfaces"></a>
<h3>Interfaces: </h3>
<a name="link_unconfined_alias_domain"></a>
<div id="interface">
<div id="codeblock">
<b>unconfined_alias_domain</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Add an alias type to the unconfined domain. (Deprecated)
</p>
<h5>Description</h5>
<p>
</p><p>
Add an alias type to the unconfined domain. (Deprecated)
</p><p>
</p><p>
This is added to support targeted policy. Its
use should be limited. It has no effect
on the strict policy.
</p><p>
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
New alias of the unconfined domain.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_unconfined_domain"></a>
<div id="interface">
<div id="codeblock">
<b>unconfined_domain</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make the specified domain unconfined and
audit executable heap usage.
</p>
<h5>Description</h5>
<p>
</p><p>
Make the specified domain unconfined and
audit executable heap usage. With exception
of memory protections, usage of this interface
will result in the level of access the domain has
is like SELinux was not being used.
</p><p>
</p><p>
Only completely trusted domains should use this interface.
</p><p>
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain to make unconfined.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_unconfined_domain_noaudit"></a>
<div id="interface">
<div id="codeblock">
<b>unconfined_domain_noaudit</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Make the specified domain unconfined.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain to make unconfined.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_unconfined_execmem_alias_program"></a>
<div id="interface">
<div id="codeblock">
<b>unconfined_execmem_alias_program</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Add an alias type to the unconfined execmem
program file type. (Deprecated)
</p>
<h5>Description</h5>
<p>
</p><p>
Add an alias type to the unconfined execmem
program file type. (Deprecated)
</p><p>
</p><p>
This is added to support targeted policy. Its
use should be limited. It has no effect
on the strict policy.
</p><p>
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
New alias of the unconfined execmem program type.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_unconfined_server_create_shm"></a>
<div id="interface">
<div id="codeblock">
<b>unconfined_server_create_shm</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Create and use unconfined service shared memory
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain to not audit.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_unconfined_server_create_tcp_sockets"></a>
<div id="interface">
<div id="codeblock">
<b>unconfined_server_create_tcp_sockets</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Create unconfined_service_t TCP sockets.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_unconfined_server_create_udp_sockets"></a>
<div id="interface">
<div id="codeblock">
<b>unconfined_server_create_udp_sockets</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Create unconfined_service_t UDP sockets.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_unconfined_server_create_unix_sockets"></a>
<div id="interface">
<div id="codeblock">
<b>unconfined_server_create_unix_sockets</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Create unconfined_service_t UNIX sockets.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_unconfined_server_dbus_chat"></a>
<div id="interface">
<div id="codeblock">
<b>unconfined_server_dbus_chat</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Allow caller domain to dbus chat unconfined_server.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_unconfined_server_domtrans"></a>
<div id="interface">
<div id="codeblock">
<b>unconfined_server_domtrans</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Connect to unconfined_server with a unix socket.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_unconfined_server_noatsecure"></a>
<div id="interface">
<div id="codeblock">
<b>unconfined_server_noatsecure</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Allow noatsecure.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_unconfined_server_read_semaphores"></a>
<div id="interface">
<div id="codeblock">
<b>unconfined_server_read_semaphores</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Allow the specified domain read unconfined service semaphores
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_unconfined_server_siginh"></a>
<div id="interface">
<div id="codeblock">
<b>unconfined_server_siginh</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Allow inherit signal state
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_unconfined_server_signull"></a>
<div id="interface">
<div id="codeblock">
<b>unconfined_server_signull</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Send signull to unconfined_service_t.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a name="link_unconfined_server_stream_connect"></a>
<div id="interface">
<div id="codeblock">
<b>unconfined_server_stream_connect</b>(
domain
)<br>
</div>
<div id="description">
<h5>Summary</h5>
<p>
Connect to unconfined_server with a unix socket.
</p>
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="65%">
<tr><th >Parameter:</th><th >Description:</th></tr>
<tr><td>
domain
</td><td>
<p>
Domain allowed access.
</p>
</td></tr>
</table>
</div>
</div>
<a href=#top>Return</a>
</div>
</body>
</html>