Layer: kernel

Module: terminal

Description:

Policy for terminals.

This module is required to be included in all policies.

Interfaces:

term_append_unallocated_ttys(
	
		domain
		
	)

Summary

Append to unallocated ttys.

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_create_console_dev(
	
		domain
		
	)

Summary

Create the console device (/dev/console).

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_create_controlling_term(
	
		domain
		
	)

Summary

Create the tty device.

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_create_devpts_dirs(
	
		domain
		
	)

Summary

Create directory /dev/pts.

Parameters

Parameter:	Description:
domain	The type of the process creating the directory.

term_create_ptmx(
	
		domain
		
	)

Summary

Create the pty multiplexor (/dev/ptmx).

Parameters

Parameter:	Description:
domain	Domain to not audit.

term_create_pty(
	
		domain
		
			,
		
		pty_type
		
	)

Summary

Create a pty in the /dev/pts directory.

Parameters

Parameter:	Description:
domain	The type of the process creating the pty.
pty_type	The type of the pty.

term_dontaudit_getattr_all_ptys(
	
		domain
		
	)

Summary

Do not audit attempts to get the attributes of any pty device nodes.

Parameters

Parameter:	Description:
domain	Domain to not audit.

term_dontaudit_getattr_all_ttys(
	
		domain
		
	)

Summary

Do not audit attempts to get the attributes of any tty device nodes.

Parameters

Parameter:	Description:
domain	Domain to not audit.

term_dontaudit_getattr_generic_ptys(
	
		domain
		
	)

Summary

Do not audit attempts to get the attributes of generic pty devices.

Parameters

Parameter:	Description:
domain	Domain to not audit.

term_dontaudit_getattr_ptmx(
	
		domain
		
	)

Summary

Do not audit attempts to get attributes on the pty multiplexor (/dev/ptmx).

Parameters

Parameter:	Description:
domain	Domain to not audit.

term_dontaudit_getattr_pty_dirs(
	
		domain
		
	)

Summary

Do not audit attempts to get the attributes of the /dev/pts directory.

Parameters

Parameter:	Description:
domain	Domain to not audit.

term_dontaudit_getattr_unallocated_ttys(
	
		domain
		
	)

Summary

Do not audit attempts to get the attributes of all unallocated tty device nodes.

Parameters

Parameter:	Description:
domain	Domain to not audit.

term_dontaudit_ioctl_unallocated_ttys(
	
		domain
		
	)

Summary

Do not audit attempts to ioctl unallocated tty device nodes.

Parameters

Parameter:	Description:
domain	Domain to not audit.

term_dontaudit_list_ptys(
	
		domain
		
	)

Summary

Do not audit attempts to read the /dev/pts directory.

Parameters

Parameter:	Description:
domain	Domain to not audit.

term_dontaudit_manage_pty_dirs(
	
		domain
		
	)

Summary

Do not audit attempts to create, read, write, or delete the /dev/pts directory.

Parameters

Parameter:	Description:
domain	Domain to not audit.

term_dontaudit_read_console(
	
		domain
		
	)

Summary

Do not audit attempts to read from the console.

Parameters

Parameter:	Description:
domain	Domain to not audit.

term_dontaudit_search_ptys(
	
		domain
		
	)

Summary

Do not audit attempts to search the contents of the /dev/pts directory.

Parameters

Parameter:	Description:
domain	Domain to not audit.

term_dontaudit_setattr_generic_ptys(
	
		domain
		
	)

Summary

Dontaudit setting the attributes of generic pty devices.

Parameters

Parameter:	Description:
domain	Domain to not audit.

term_dontaudit_setattr_unallocated_ttys(
	
		domain
		
	)

Summary

Do not audit attempts to set the attributes of unallocated tty device nodes.

Parameters

Parameter:	Description:
domain	Domain to not audit.

term_dontaudit_use_all_ptys(
	
		domain
		
	)

Summary

Do not audit attempts to read or write any ptys.

Parameters

Parameter:	Description:
domain	Domain to not audit.

term_dontaudit_use_all_ttys(
	
		domain
		
	)

Summary

Do not audit attempts to read or write any ttys.

Parameters

Parameter:	Description:
domain	Domain to not audit.

term_dontaudit_use_console(
	
		domain
		
	)

Summary

Do not audit attempts to read from or write to the console.

Parameters

Parameter:	Description:
domain	Domain to not audit.

term_dontaudit_use_generic_ptys(
	
		domain
		
	)

Summary

Dot not audit attempts to read and write the generic pty type. This is generally only used in the targeted policy.

Parameters

Parameter:	Description:
domain	Domain to not audit.

term_dontaudit_use_ptmx(
	
		domain
		
	)

Summary

Do not audit attempts to read and write the pty multiplexor (/dev/ptmx).

Parameters

Parameter:	Description:
domain	Domain to not audit.

term_dontaudit_use_unallocated_ttys(
	
		domain
		
	)

Summary

Do not audit attempts to read or write unallocated ttys.

Parameters

Parameter:	Description:
domain	Domain to not audit.

term_getattr_all_ptys(
	
		domain
		
	)

Summary

Get the attributes of all pty device nodes.

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_getattr_all_ttys(
	
		domain
		
	)

Summary

Get the attributes of all tty device nodes.

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_getattr_generic_ptys(
	
		domain
		
	)

Summary

Get the attributes of generic pty devices.

Parameters

Parameter:	Description:
domain	Domain to allow

term_getattr_ptmx(
	
		domain
		
	)

Summary

Get the attributes of the pty multiplexor (/dev/ptmx).

Parameters

Parameter:	Description:
domain	Domain to not audit.

term_getattr_pty_dirs(
	
		domain
		
	)

Summary

Get the attributes of the /dev/pts directory.

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_getattr_pty_fs(
	
		domain
		
	)

Summary

Get the attributes of a pty filesystem

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_getattr_unallocated_ttys(
	
		domain
		
	)

Summary

Get the attributes of all unallocated tty device nodes.

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_ioctl_generic_ptys(
	
		domain
		
	)

Summary

ioctl of generic pty devices.

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_list_ptys(
	
		domain
		
	)

Summary

Read the /dev/pts directory to list all ptys.

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_login_pty(
	
		pty_type
		
	)

Summary

Transform specified type into a pty type used by login programs, such as sshd.

Parameters

Parameter:	Description:
pty_type	An object type that will applied to a pty.

term_mount_devpts(
	
		domain
		
	)

Summary

mount a devpts_t filesystem

Parameters

Parameter:	Description:
domain	The type of the process to mount it

term_pty(
	
		pty_type
		
	)

Summary

Transform specified type into a pty type.

Parameters

Parameter:	Description:
pty_type	An object type that will applied to a pty.

term_read_console(
	
		domain
		
	)

Summary

Read from the console.

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_relabel_all_ptys(
	
		domain
		
	)

Summary

Relabel from and to all pty device nodes.

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_relabel_all_ttys(
	
		domain
		
	)

Summary

Relabel from and to all tty device nodes.

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_relabel_console(
	
		domain
		
	)

Summary

Relabel from and to the console type.

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_relabel_pty_dirs(
	
		domain
		
	)

Summary

Relabel from and to pty directories.

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_relabel_pty_fs(
	
		domain
		
	)

Summary

Relabel from and to pty filesystem.

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_relabel_unallocated_ttys(
	
		domain
		
	)

Summary

Relabel from and to the unallocated tty type.

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_relabelto_all_ptys(
	
		domain
		
	)

Summary

Relabel to all ptys.

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_reset_tty_labels(
	
		domain
		
	)

Summary

Relabel from all user tty types to the unallocated tty type.

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_search_ptys(
	
		domain
		
	)

Summary

Search the contents of the /dev/pts directory.

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_setattr_all_ptys(
	
		domain
		
	)

Summary

Set the attributes of all pty device nodes.

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_setattr_all_ttys(
	
		domain
		
	)

Summary

Set the attributes of all tty device nodes.

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_setattr_console(
	
		domain
		
	)

Summary

Set the attributes of the console device node.

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_setattr_controlling_term(
	
		domain
		
	)

Summary

Set the attributes of the tty device

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_setattr_generic_ptys(
	
		domain
		
	)

Summary

Allow setting the attributes of generic pty devices.

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_setattr_unallocated_ttys(
	
		domain
		
	)

Summary

Set the attributes of all unallocated tty device nodes.

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_setattr_unlink_unallocated_ttys(
	
		domain
		
	)

Summary

Setattr and unlink unallocated tty device nodes.

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_tty(
	
		tty_type
		
	)

Summary

Transform specified type into a tty type.

Parameters

Parameter:	Description:
tty_type	An object type that will applied to a tty.

term_use_all_ptys(
	
		domain
		
	)

Summary

Read and write all ptys.

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_use_all_terms(
	
		domain
		
	)

Summary

Read and write the console, all ttys and all ptys.

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_use_all_ttys(
	
		domain
		
	)

Summary

Read and write all ttys.

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_use_console(
	
		domain
		
	)

Summary

Read from and write to the console.

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_use_controlling_term(
	
		domain
		
	)

Summary

Read and write the controlling terminal (/dev/tty).

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_use_generic_ptys(
	
		domain
		
	)

Summary

Read and write the generic pty type. This is generally only used in the targeted policy.

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_use_ptmx(
	
		domain
		
	)

Summary

Read and write the pty multiplexor (/dev/ptmx).

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_use_unallocated_ttys(
	
		domain
		
	)

Summary

Read and write unallocated ttys.

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_use_virtio_console(
	
		domain
		
	)

Summary

Read from and write virtio console.

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_user_pty(
	
		userdomain
		
			,
		
		object_type
		
	)

Summary

Transform specified type into an user pty type. This allows it to be relabeled via type change by login programs such as ssh.

Parameters

Parameter:	Description:
userdomain	The type of the user domain associated with this pty.
object_type	An object type that will applied to a pty.

term_user_tty(
	
		domain
		
			,
		
		tty_type
		
	)

Summary

Transform specified type into a user tty type.

Parameters

Parameter:	Description:
domain	User domain that is related to this tty.
tty_type	An object type that will applied to a tty.

term_watch_reads_console(
	
		domain
		
	)

Summary

watch reads on console device

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_watch_reads_unallocated_ttys(
	
		domain
		
	)

Summary

Watch reads on unallocated ttys.

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_watch_unallocated_ttys(
	
		domain
		
	)

Summary

Watch unallocated ttys.

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_write_all_ptys(
	
		domain
		
	)

Summary

Write to all ptys.

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_write_all_terms(
	
		domain
		
	)

Summary

Write the console, all ttys and all ptys.

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_write_all_ttys(
	
		domain
		
	)

Summary

Write to all ttys.

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_write_console(
	
		domain
		
	)

Summary

Write to the console.

Parameters

Parameter:	Description:
domain	Domain allowed access.

term_write_unallocated_ttys(
	
		domain
		
	)

Summary

Write to unallocated ttys.

Parameters

Parameter:	Description:
domain	Domain allowed access.

Return