<html> <head> <title> Security Enhanced Linux Reference Policy </title> <style type="text/css" media="all">@import "style.css";</style> </head> <body> <div id="Header">Security Enhanced Linux Reference Policy</div> <div id='Menu'> <a href="admin.html">+ admin</a></br/> <div id='subitem'> </div> <a href="apps.html">+ apps</a></br/> <div id='subitem'> </div> <a href="contrib.html">+ contrib</a></br/> <div id='subitem'> </div> <a href="kernel.html">+ kernel</a></br/> <div id='subitem'> - <a href='kernel_corecommands.html'> corecommands</a><br/> - <a href='kernel_corenetwork.html'> corenetwork</a><br/> - <a href='kernel_devices.html'> devices</a><br/> - <a href='kernel_domain.html'> domain</a><br/> - <a href='kernel_files.html'> files</a><br/> - <a href='kernel_filesystem.html'> filesystem</a><br/> - <a href='kernel_kernel.html'> kernel</a><br/> - <a href='kernel_mcs.html'> mcs</a><br/> - <a href='kernel_mls.html'> mls</a><br/> - <a href='kernel_selinux.html'> selinux</a><br/> - <a href='kernel_storage.html'> storage</a><br/> - <a href='kernel_terminal.html'> terminal</a><br/> - <a href='kernel_ubac.html'> ubac</a><br/> - <a href='kernel_unlabelednet.html'> unlabelednet</a><br/> </div> <a href="roles.html">+ roles</a></br/> <div id='subitem'> </div> <a href="services.html">+ services</a></br/> <div id='subitem'> </div> <a href="system.html">+ system</a></br/> <div id='subitem'> </div> <br/><p/> <a href="global_booleans.html">* Global Booleans </a> <br/><p/> <a href="global_tunables.html">* Global Tunables </a> <p/><br/><p/> <a href="index.html">* Layer Index</a> <br/><p/> <a href="booleans.html">* Boolean Index</a> <br/><p/> <a href="tunables.html">* Tunable Index</a> <br/><p/> <a href="interfaces.html">* Interface Index</a> <br/><p/> <a href="templates.html">* Template Index</a> </div> <div id="Content"> <a name="top":></a> <h1>Layer: kernel</h1><p/> <h2>Module: mls</h2><p/> <a href=#interfaces>Interfaces</a> <h3>Description:</h3> <p><p> </p><p> This module contains interfaces for handling multilevel security. The interfaces allow the specified subjects and objects to be allowed certain privileges in the MLS rules. </p><p> </p></p> <p>This module is required to be included in all policies.</p> <hr> <a name="interfaces"></a> <h3>Interfaces: </h3> <a name="link_mls_colormap_read_all_levels"></a> <div id="interface"> <div id="codeblock"> <b>mls_colormap_read_all_levels</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain MLS trusted for reading from X colormaps at any level. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_colormap_write_all_levels"></a> <div id="interface"> <div id="codeblock"> <b>mls_colormap_write_all_levels</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain MLS trusted for writing to X colormaps at any level. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_context_translate_all_levels"></a> <div id="interface"> <div id="codeblock"> <b>mls_context_translate_all_levels</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain MLS trusted for translating contexts at all levels. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_db_downgrade"></a> <div id="interface"> <div id="codeblock"> <b>mls_db_downgrade</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain MLS trusted for lowering the level of databases. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_db_read_all_levels"></a> <div id="interface"> <div id="codeblock"> <b>mls_db_read_all_levels</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain MLS trusted for reading from databases at any level. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_db_upgrade"></a> <div id="interface"> <div id="codeblock"> <b>mls_db_upgrade</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain MLS trusted for raising the level of databases. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_db_write_all_levels"></a> <div id="interface"> <div id="codeblock"> <b>mls_db_write_all_levels</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain MLS trusted for writing to databases at any level. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_dbus_recv_all_levels"></a> <div id="interface"> <div id="codeblock"> <b>mls_dbus_recv_all_levels</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain MLS trusted for receiving dbus messages from all levels. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_dbus_send_all_levels"></a> <div id="interface"> <div id="codeblock"> <b>mls_dbus_send_all_levels</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain MLS trusted for sending dbus messages to all levels. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_fd_share_all_levels"></a> <div id="interface"> <div id="codeblock"> <b>mls_fd_share_all_levels</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make the file descriptors from the specifed domain inheritable by all levels. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_fd_use_all_levels"></a> <div id="interface"> <div id="codeblock"> <b>mls_fd_use_all_levels</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make the specified domain trusted to inherit and use file descriptors from all levels. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_file_downgrade"></a> <div id="interface"> <div id="codeblock"> <b>mls_file_downgrade</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain MLS trusted for lowering the level of files. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_file_read_all_levels"></a> <div id="interface"> <div id="codeblock"> <b>mls_file_read_all_levels</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain MLS trusted for reading from files at all levels. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_file_read_to_clearance"></a> <div id="interface"> <div id="codeblock"> <b>mls_file_read_to_clearance</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain MLS trusted for reading from files up to its clearance. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_file_read_up"></a> <div id="interface"> <div id="codeblock"> <b>mls_file_read_up</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain MLS trusted for reading from files at all levels. (Deprecated) </p> <h5>Description</h5> <p> </p><p> Make specified domain MLS trusted for reading from files at all levels. </p><p> </p><p> This interface has been deprecated, please use mls_file_read_all_levels() instead. </p><p> </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_file_relabel_to_clearance"></a> <div id="interface"> <div id="codeblock"> <b>mls_file_relabel_to_clearance</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain MLS trusted for relabelto to files up to its clearance. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_file_upgrade"></a> <div id="interface"> <div id="codeblock"> <b>mls_file_upgrade</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain MLS trusted for raising the level of files. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_file_write_all_levels"></a> <div id="interface"> <div id="codeblock"> <b>mls_file_write_all_levels</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain MLS trusted for writing to files at all levels. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_file_write_down"></a> <div id="interface"> <div id="codeblock"> <b>mls_file_write_down</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain MLS trusted for writing to files at all levels. (Deprecated) </p> <h5>Description</h5> <p> </p><p> Make specified domain MLS trusted for writing to files at all levels. </p><p> </p><p> This interface has been deprecated, please use mls_file_write_all_levels() instead. </p><p> </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_file_write_to_clearance"></a> <div id="interface"> <div id="codeblock"> <b>mls_file_write_to_clearance</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain MLS trusted for write to files up to its clearance. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_file_write_within_range"></a> <div id="interface"> <div id="codeblock"> <b>mls_file_write_within_range</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain trusted to be written to within its MLS range. The subject's MLS range must be a proper subset of the object's MLS range. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_net_inbound_all_levels"></a> <div id="interface"> <div id="codeblock"> <b>mls_net_inbound_all_levels</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain trusted to write inbound packets regardless of the network's or node's MLS range. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_net_outbound_all_levels"></a> <div id="interface"> <div id="codeblock"> <b>mls_net_outbound_all_levels</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain trusted to write outbound packets regardless of the network's or node's MLS range. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_net_receive_all_levels"></a> <div id="interface"> <div id="codeblock"> <b>mls_net_receive_all_levels</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain MLS trusted for receiving network data from network interfaces or hosts at any level. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_net_write_within_range"></a> <div id="interface"> <div id="codeblock"> <b>mls_net_write_within_range</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain trusted to write to network objects within its MLS range. The subject's MLS range must be a proper subset of the object's MLS range. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_process_read_all_levels"></a> <div id="interface"> <div id="codeblock"> <b>mls_process_read_all_levels</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain MLS trusted for reading from processes at all levels. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_process_read_to_clearance"></a> <div id="interface"> <div id="codeblock"> <b>mls_process_read_to_clearance</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain MLS trusted for reading from processes up to its clearance. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_process_read_up"></a> <div id="interface"> <div id="codeblock"> <b>mls_process_read_up</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain MLS trusted for reading from processes at all levels. (Deprecated) </p> <h5>Description</h5> <p> </p><p> Make specified domain MLS trusted for reading from processes at all levels. </p><p> </p><p> This interface has been deprecated, please use mls_process_read_all_levels() instead. </p><p> </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_process_set_level"></a> <div id="interface"> <div id="codeblock"> <b>mls_process_set_level</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain MLS trusted for setting the level of processes it executes. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_process_write_all_levels"></a> <div id="interface"> <div id="codeblock"> <b>mls_process_write_all_levels</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain MLS trusted for writing to processes at all levels. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_process_write_down"></a> <div id="interface"> <div id="codeblock"> <b>mls_process_write_down</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain MLS trusted for writing to processes at all levels. (Deprecated) </p> <h5>Description</h5> <p> </p><p> Make specified domain MLS trusted for writing to processes at all levels. </p><p> </p><p> This interface has been deprecated, please use mls_process_write_all_levels() instead. </p><p> </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_process_write_to_clearance"></a> <div id="interface"> <div id="codeblock"> <b>mls_process_write_to_clearance</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain MLS trusted for writing to processes up to its clearance. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_rangetrans_source"></a> <div id="interface"> <div id="codeblock"> <b>mls_rangetrans_source</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Allow the specified domain to do a MLS range transition that changes the current level. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_rangetrans_target"></a> <div id="interface"> <div id="codeblock"> <b>mls_rangetrans_target</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain a target domain for MLS range transitions that change the current level. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_socket_read_all_levels"></a> <div id="interface"> <div id="codeblock"> <b>mls_socket_read_all_levels</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain MLS trusted for reading from sockets at any level. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_socket_read_to_clearance"></a> <div id="interface"> <div id="codeblock"> <b>mls_socket_read_to_clearance</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain MLS trusted for reading from sockets at any level that is dominated by the process clearance. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_socket_write_all_levels"></a> <div id="interface"> <div id="codeblock"> <b>mls_socket_write_all_levels</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain MLS trusted for writing to sockets at any level. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_socket_write_to_clearance"></a> <div id="interface"> <div id="codeblock"> <b>mls_socket_write_to_clearance</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain MLS trusted for writing to sockets up to its clearance. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_sysvipc_read_all_levels"></a> <div id="interface"> <div id="codeblock"> <b>mls_sysvipc_read_all_levels</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain MLS trusted for reading from System V IPC objects at any level. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_sysvipc_read_to_clearance"></a> <div id="interface"> <div id="codeblock"> <b>mls_sysvipc_read_to_clearance</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain MLS trusted for reading from System V IPC objects up to its clearance. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_sysvipc_write_all_levels"></a> <div id="interface"> <div id="codeblock"> <b>mls_sysvipc_write_all_levels</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain MLS trusted for writing to System V IPC objects at any level. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_sysvipc_write_to_clearance"></a> <div id="interface"> <div id="codeblock"> <b>mls_sysvipc_write_to_clearance</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain MLS trusted for writing to System V IPC objects up to its clearance. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_trusted_object"></a> <div id="interface"> <div id="codeblock"> <b>mls_trusted_object</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified object MLS trusted. </p> <h5>Description</h5> <p> </p><p> Make specified object MLS trusted. This allows all levels to read and write the object. </p><p> </p><p> This currently only applies to filesystem objects, for example, files and directories. </p><p> </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> The type of the object. </p> </td></tr> </table> </div> </div> <a name="link_mls_xwin_read_all_levels"></a> <div id="interface"> <div id="codeblock"> <b>mls_xwin_read_all_levels</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain MLS trusted for reading from X objects at any level. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_xwin_read_to_clearance"></a> <div id="interface"> <div id="codeblock"> <b>mls_xwin_read_to_clearance</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain MLS trusted for reading from X objects up to its clearance. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_xwin_write_all_levels"></a> <div id="interface"> <div id="codeblock"> <b>mls_xwin_write_all_levels</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain MLS trusted for writing to X objects at any level. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a name="link_mls_xwin_write_to_clearance"></a> <div id="interface"> <div id="codeblock"> <b>mls_xwin_write_to_clearance</b>( domain )<br> </div> <div id="description"> <h5>Summary</h5> <p> Make specified domain MLS trusted for write to X objects up to its clearance. </p> <h5>Parameters</h5> <table border="1" cellspacing="0" cellpadding="3" width="65%"> <tr><th >Parameter:</th><th >Description:</th></tr> <tr><td> domain </td><td> <p> Domain allowed access. </p> </td></tr> </table> </div> </div> <a href=#top>Return</a> </div> </body> </html>