next up previous contents
Next: 7 Access control to Up: 6 Domain transition Previous: 6.1 Domain transition:domain_trans   Contents


6.2 Simplified domain transition:program

  1. Syntax
    program path-to-program;
  2. Meaning
    By this, path-to-program is attached domain when launched from command line, and /etc/init.d scripts.That is to say, allow domain transition from unconfined domain. However, domain transition from authentication program domain(such as domains for su,login,sshd) is not configured. Which domains are regarded as authentication_domain is configured in authentication_domain field in converter.conf.
  3. Example
    1)
    {
    domain httpd_t;
    program /usr/sbin/httpd;
    }
    /usr/sbin/httpd is attached httpd_t domain when launched from command
    		line and /etc/init.d script.
    
  4. Note
    This element is intended to be used in relaxed policy. This will not mean nothing in more strict policy where there is not unconfined domain.



Yuichi Nakamura 2006-11-13