next up previous contents
Next: 12 Access control of Up: 11 Access control to Previous: 11.3 Usage of Network   Contents


11.4 Inherit socket from other domain

Following syntax allows using socket of other domain. It is rare to configure.
  1. Syntax
    1. allownet -protocol protocol -domain domain use; protocol, tcp,udp can be specified, splitted by ,.

  2. Meaning
    1. This enables to restrict inheriting socket from other domain. This configures from where the domain can inherit socket. When domain is self, the domain can use socket which is created by its own domain.
  3. Example
    domain foo_t;
    # foo_t can inherit UDP socket from bar_t
    allownet -protocol udp -domain bar_t;
    


Yuichi Nakamura 2006-11-13