Layer: apps

Module: qemu

Tunables Interfaces Templates

Description:

QEMU machine emulator and virtualizer

Tunables:

qemu_full_network

Default value

false

Description

Allow qemu to connect fully to the network

qemu_use_cifs

Default value

true

Description

Allow qemu to use cifs/Samba file systems

qemu_use_comm

Default value

false

Description

Allow qemu to user serial/parallel communication ports

qemu_use_nfs

Default value

true

Description

Allow qemu to use nfs file systems

qemu_use_usb

Default value

true

Description

Allow qemu to use usb devices

Return

Interfaces:

qemu_domtrans(
	
		domain
		
	)

Summary

Execute a domain transition to run qemu.

Parameters

Parameter:	Description:
domain	Domain allowed to transition.

qemu_entry_type(
	
		domain
		
	)

Summary

Make qemu_exec_t an entrypoint for the specified domain.

Parameters

Parameter:	Description:
domain	The domain for which qemu_exec_t is an entrypoint.

qemu_exec(
	
		domain
		
	)

Summary

Execute a qemu in the callers domain

Parameters

Parameter:	Description:
domain	Domain allowed access.

qemu_kill(
	
		domain
		
	)

Summary

Send a sigill to qemu

Parameters

Parameter:	Description:
domain	Domain allowed access.

qemu_manage_tmp_dirs(
	
		domain
		
	)

Summary

Manage qemu temporary dirs.

Parameters

Parameter:	Description:
domain	Domain allowed access.

qemu_manage_tmp_files(
	
		domain
		
	)

Summary

Manage qemu temporary files.

Parameters

Parameter:	Description:
domain	Domain allowed access.

qemu_read_state(
	
		domain
		
	)

Summary

Allow the domain to read state files in /proc.

Parameters

Parameter:	Description:
domain	Domain to allow access.

qemu_run(
	
		domain
		
			,
		
		role
		
	)

Summary

Execute qemu in the qemu domain.

Parameters

Parameter:	Description:
domain	Domain allowed to transition.
role	The role to allow the qemu domain.

qemu_setsched(
	
		domain
		
	)

Summary

Set the schedule on qemu.

Parameters

Parameter:	Description:
domain	Domain allowed access.

qemu_signal(
	
		domain
		
	)

Summary

Send a signal to qemu.

Parameters

Parameter:	Description:
domain	Domain allowed access.

qemu_spec_domtrans(
	
		domain
		
			,
		
		target_domain
		
	)

Summary

Execute qemu_exec_t in the specified domain but do not do it automatically. This is an explicit transition, requiring the caller to use setexeccon().

Description

Execute qemu_exec_t in the specified domain. This allows the specified domain to qemu programs on these filesystems in the specified domain.

Parameters

Parameter:	Description:
domain	Domain allowed access.
target_domain	The type of the new process.

Return

Templates:

qemu_domain_template(
	
		prefix
		
	)

Summary

Creates types and rules for a basic qemu process domain.

Parameters

Parameter:	Description:
prefix	Prefix for the domain.

qemu_role(
	
		user_role
		
			,
		
		user_domain
		
	)

Summary

The per role template for the qemu module.

Description

This template creates a derived domains which are used for qemu web browser.

This template is invoked automatically for each user, and generally does not need to be invoked directly by policy writers.

Parameters

Parameter:	Description:
user_role	The role associated with the user domain.
user_domain	The type of the user domain.

Return