Layer: apps

Module: mozilla

Tunables Interfaces

Description:

Policy for Mozilla and related web browsers

Tunables:

mozilla_read_content

Default value

false

Description

Control mozilla content access

Return

Interfaces:

mozilla_dbus_chat(
	
		domain
		
	)

Summary

Send and receive messages from mozilla over dbus.

Parameters

Parameter:	Description:
domain	Domain allowed access.

mozilla_domtrans(
	
		domain
		
	)

Summary

Run mozilla in the mozilla domain.

Parameters

Parameter:	Description:
domain	Domain allowed access.

mozilla_domtrans_plugin(
	
		domain
		
	)

Summary

Execute a domain transition to run mozilla_plugin.

Parameters

Parameter:	Description:
domain	Domain allowed access.

mozilla_dontaudit_manage_user_home_files(
	
		domain
		
	)

Summary

Dontaudit attempts to write mozilla home directory content

Parameters

Parameter:	Description:
domain	Domain allowed access.

mozilla_dontaudit_rw_user_home_files(
	
		domain
		
	)

Summary

Dontaudit attempts to read/write mozilla home directory content

Parameters

Parameter:	Description:
domain	Domain allowed access.

mozilla_exec_domtrans(
	
		domain
		
			,
		
		target_domain
		
	)

Summary

Execute mozilla_exec_t in the specified domain.

Description

Execute a mozilla_exec_t in the specified domain.

No interprocess communication (signals, pipes, etc.) is provided by this interface since the domains are not owned by this module.

Parameters

Parameter:	Description:
domain	Domain allowed access.
target_domain	The type of the new process.

mozilla_exec_user_home_files(
	
		domain
		
	)

Summary

Execute mozilla home directory content.

Parameters

Parameter:	Description:
domain	Domain allowed access.

mozilla_execmod_user_home_files(
	
		domain
		
	)

Summary

Write mozilla home directory content

Parameters

Parameter:	Description:
domain	Domain allowed access.

mozilla_plugin_delete_tmpfs_files(
	
		domain
		
	)

Summary

Delete mozilla_plugin tmpfs files

Parameters

Parameter:	Description:
domain	Domain allowed access

mozilla_plugin_dontaudit_leaks(
	
		domain
		
	)

Summary

Dontaudit read/write to a mozilla_plugin leaks

Parameters

Parameter:	Description:
domain	Domain to not audit.

mozilla_plugin_read_tmpfs_files(
	
		domain
		
	)

Summary

Read mozilla_plugin tmpfs files

Parameters

Parameter:	Description:
domain	Domain allowed access

mozilla_read_user_home_files(
	
		domain
		
	)

Summary

Read mozilla home directory content

Parameters

Parameter:	Description:
domain	Domain allowed access.

mozilla_role(
	
		role
		
			,
		
		domain
		
	)

Summary

Role access for mozilla

Parameters

Parameter:	Description:
role	Role allowed access
domain	User domain for the role

mozilla_role_plugin(
	
		role
		
	)

Summary

Execute qemu unconfined programs in the role.

Parameters

Parameter:	Description:
role	The role to allow the mozilla_plugin domain.

mozilla_run_plugin(
	
		domain
		
			,
		
		role
		
	)

Summary

Execute mozilla_plugin in the mozilla_plugin domain, and allow the specified role the mozilla_plugin domain.

Parameters

Parameter:	Description:
domain	Domain allowed access
role	The role to be allowed the mozilla_plugin domain.

mozilla_rw_tcp_sockets(
	
		domain
		
	)

Summary

read/write mozilla per user tcp_socket

Parameters

Parameter:	Description:
domain	Domain allowed access.

mozilla_write_user_home_files(
	
		domain
		
	)

Summary

Write mozilla home directory content

Parameters

Parameter:	Description:
domain	Domain allowed access.

Return