Contents

• 1 How to look at tables
• 2 Unsupported permission
• 3 Integrated permissions by SPDL
  • 3.1 Integrated permissions for file allow
  • 3.2 Integrated permissions for allowdev
  • 3.3 Permissions integrated in allowdev -tty rules
  • 3.4 Permissions integrated in allowdev -pts rules
  • 3.5 Integrated permissions for allownet rules
  • 3.6 Integrated permissions for allowcom rules
  • 3.7 Integrated permissions in allowpriv rule
  • 3.8 Integrated permissions for kernel key subsystem
  • 3.9 Rules integrated in transition rule

Simplified Policy Description Language(SPDL) simplifies SELinux by reducing number of permissions. This reduction is done by not supporting permissions and integrating permissions. This document describes what kind of permissions are not supported in Simplified Policy Description Language(SPDL) and what kind of permissions are integrated in SPDL rules. Not supported means the permissions are allowd to all domains. Integrated means permissions are treated as one permission.
Not supported permissions are listed in section 1. Integration of permission is described in section 2.