Layer: services

Module: virt

Description:

Libvirt virtualization API

Interfaces:

virt_admin(
	
		domain
		
			,
		
		role
		
	)

Summary

All of the rules required to administrate an virt environment

Parameters

Parameter:	Description:	Optional:
domain	Domain allowed access.	No
role	Role allowed access.	No

virt_append_log(
	
		domain
		
	)

Summary

Allow the specified domain to append virt log files.

Parameters

Parameter:	Description:	Optional:
domain	Domain allowed to transition.	No

virt_attach_tun_iface(
	
		domain
		
	)

Summary

Allow domain to attach to virt TUN devices

Parameters

Parameter:	Description:	Optional:
domain	Domain allowed access.	No

virt_domtrans(
	
		domain
		
	)

Summary

Execute a domain transition to run virt.

Parameters

Parameter:	Description:	Optional:
domain	Domain allowed to transition.	No

virt_dontaudit_read_lib_files(
	
		domain
		
	)

Summary

Dontaudit inherited read virt lib files.

Parameters

Parameter:	Description:	Optional:
domain	Domain allowed access.	No

virt_dontaudit_write_pipes(
	
		domain
		
	)

Summary

Do not audit attempts to write virt daemon unnamed pipes.

Parameters

Parameter:	Description:	Optional:
domain	Domain allowed access.	No

virt_image(
	
		type
		
	)

Summary

Make the specified type usable as a virt image

Parameters

Parameter:	Description:	Optional:
type	Type to be used as a virtual image	No

virt_manage_cache(
	
		domain
		
	)

Summary

Create, read, write, and delete svirt cache files.

Parameters

Parameter:	Description:	Optional:
domain	Domain allowed access.	No

virt_manage_config(
	
		domain
		
	)

Summary

manage virt config files.

Parameters

Parameter:	Description:	Optional:
domain	Domain allowed access.	No

virt_manage_images(
	
		domain
		
	)

Summary

Allow domain to manage virt image files

Parameters

Parameter:	Description:	Optional:
domain	Domain to not audit.	No

virt_manage_lib_files(
	
		domain
		
	)

Summary

Create, read, write, and delete virt lib files.

Parameters

Parameter:	Description:	Optional:
domain	Domain allowed access.	No

virt_manage_log(
	
		domain
		
	)

Summary

Allow domain to manage virt log files

Parameters

Parameter:	Description:	Optional:
domain	Domain to not audit.	No

virt_manage_pid_files(
	
		domain
		
	)

Summary

Manage virt pid files.

Parameters

Parameter:	Description:	Optional:
domain	Domain allowed access.	No

virt_read_config(
	
		domain
		
	)

Summary

Read virt config files.

Parameters

Parameter:	Description:	Optional:
domain	Domain allowed access.	No

virt_read_content(
	
		domain
		
	)

Summary

Allow domain to manage virt image files

Parameters

Parameter:	Description:	Optional:
domain	Domain to not audit.	No

virt_read_images(
	
		domain
		
	)

Summary

Allow domain to read virt image files

Parameters

Parameter:	Description:	Optional:
domain	Domain to not audit.	No

virt_read_lib_files(
	
		domain
		
	)

Summary

Read virt lib files.

Parameters

Parameter:	Description:	Optional:
domain	Domain allowed access.	No

virt_read_log(
	
		domain
		
	)

Summary

Allow the specified domain to read virt's log files.

Parameters

Parameter:	Description:	Optional:
domain	Domain allowed access.	No

virt_read_pid_files(
	
		domain
		
	)

Summary

Read virt PID files.

Parameters

Parameter:	Description:	Optional:
domain	Domain allowed access.	No

virt_search_lib(
	
		domain
		
	)

Summary

Search virt lib directories.

Parameters

Parameter:	Description:	Optional:
domain	Domain allowed access.	No

virt_stream_connect(
	
		domain
		
	)

Summary

Connect to virt over an unix domain stream socket.

Parameters

Parameter:	Description:	Optional:
domain	Domain allowed access.	No

virt_transition_svirt(
	
		domain
		
			,
		
		role
		
	)

Summary

Execute qemu in the svirt domain, and allow the specified role the svirt domain.

Parameters

Parameter:	Description:	Optional:
domain	Domain allowed access	No
role	The role to be allowed the sandbox domain.	No

Return

Templates:

virt_domain_template(
	
		prefix
		
	)

Summary

Creates types and rules for a basic qemu process domain.

Parameters

Parameter:	Description:	Optional:
prefix	Prefix for the domain.	No

Return