Layer: services

Module: deepin_perm_control

Tunables Interfaces

Description:

Policy for deepin_perm_control and related programs.


Tunables:

allow_dpkg_upgrade
Default value

false

Description

Let dpkg can upgrade package.

can_disable_security_service
Default value

false

Description

whether init process can disable security service.

can_enable_security_service
Default value

true

Description

whether init process can enable security service.

can_gdb_security_service
Default value

false

Description

enable sysadm can gdb security service.

deepin_enable_file_audit
Default value

true

Description

enable file audit.

deepin_enable_process_audit
Default value

false

Description

enable process audit.

deepin_enable_socket_audit
Default value

false

Description

enable socket audit.

enable_process_unkillable
Default value

true

Description

enable process unkillable.

open_app_networking_control
Default value

false

Description

open app networking control.

open_deepin_gdb
Default value

false

Description

deepin gdb flag.

open_usec_developer_mode
Default value

false

Description

open developer mode of usec.

root_use_failsafe_context_directly
Default value

true

Description

use failsafe context directly when root login.

Return

Interfaces:

deepin_access_all_security_resource( domain )
Summary

allow domain to access all security resources.

Parameters
Parameter:Description:
domain

Domain allowed access.

deepin_access_all_sensitive_resource( domain )
Summary

allow domain to access all sensitive resources.

Description

allow $1 to access downstream network.

Parameters
Parameter:Description:
domain

Domain allowed access.

deepin_access_all_system_resource( domain )
Summary

allow domain to access all system resources.

Parameters
Parameter:Description:
domain

Domain allowed access.

deepin_access_camera_resource( domain )
Summary

allow domain to access camera resource.

Parameters
Parameter:Description:
domain

Domain allowed access.

deepin_access_microphone_resource( domain )
Summary

allow domain to access microphone resource.

Parameters
Parameter:Description:
domain

Domain allowed access.

deepin_access_network( domain )
Summary

allow specific domain to access network.

Parameters
Parameter:Description:
domain

Domain allow access.

deepin_access_security_server( domain )
Summary

allow specific domain to access security service.

Description

Let $1 can be write.

Parameters
Parameter:Description:
domain

Domain allowed access.

deepin_app_access_camera_domain_set( domain )
Summary

Make the specified domain usable for the deepin_app_access_camera_domain.

Parameters
Parameter:Description:
domain

Type to be used for deepin_app_access_camera_domain.

deepin_app_access_microphone_domain_set( domain )
Summary

Make the specified domain usable for the deepin_app_access_microphone_domain.

Description

Grant the $1_t domains access camera resource by condition

Parameters
Parameter:Description:
domain

Type to be used for deepin_app_access_microphone_domain.

deepin_app_domain_set( domain )
Summary

Make the specified domain usable for the deepin_app_domain.

Parameters
Parameter:Description:
domain

Type to be used for deepin_app_domain.

deepin_app_private_file_type_set( type )
Summary

Make the specified type usable for the deepin_app_private_file_type.

Parameters
Parameter:Description:
type

Type to be used for deepin_app_private_file_type.

deepin_camera_resource_type_set( type )
Summary

Make the specified type usable for the deepin_camera_resource_type.

Parameters
Parameter:Description:
type

Type to be used for deepin_camera_resource_type.

deepin_dbus_chat_deepin_login_counts( domain )
Summary

Send and receive messages from deepin-elf-verify over dbus.

Parameters
Parameter:Description:
domain

Domain allowed access.

deepin_dbus_chat_security_enhance( domain )
Summary

allow specific domain to send dbus to security enhance.

Parameters
Parameter:Description:
domain

Domain allowed access.

deepin_deletable_file_type_set( type )
Summary

Make the specified type usable for the deepin_deletable_file_type.

Parameters
Parameter:Description:
type

Type to be used for deepin_deletable_file_type.

deepin_elfverify_entry_type( domain )
Summary

Make general progams in deepin-elf-verify an entrypoint for the specified domain.

Parameters
Parameter:Description:
domain

The domain for which deepin_elf_verify_exec_t is an entrypoint.

deepin_exec_elf_verify( domain )
Summary

execute deepin-elf-verify program.

Parameters
Parameter:Description:
domain

Domain allowed access.

deepin_execfile_protection( domain )
Summary

let exec file writable.

Description

Let $1 be unkillable.

Parameters
Parameter:Description:
domain

Domain allowed access.

deepin_executable_file_type_set( type )
Summary

Make the specified type usable for the deepin_executable_file_type.

Parameters
Parameter:Description:
type

Type to be used for deepin_executable_file_type.

deepin_file_type_set( type )
Summary

Make the specified type usable for the deepin_file_type.

Parameters
Parameter:Description:
type

Type to be used for deepin_file_type.

deepin_getattr_elf_verify_files( domain )
Summary

Get the attributes of files in bin directories.

Parameters
Parameter:Description:
domain

Domain allowed access.

deepin_manage_all_sidtwo( domain )
Summary

allow specific domain to manage all files which were labeled to deepin_sidtwo_type.

Description

Allow $1 to access security service.

Parameters
Parameter:Description:
domain

Domain allowed access.

deepin_manage_wall_paper( domain )
Summary

allow specific domain to manage all files which were labeled to deepin_wall_paper_resource_type.

Parameters
Parameter:Description:
domain

Domain allowed access.

deepin_microphone_resource_type_set( type )
Summary

Make the specified type usable for the deepin_microphone_resource_type.

Parameters
Parameter:Description:
type

Type to be used for deepin_microphone_resource_type.

deepin_package_manage_domain_set( domain )
Summary

Make the specified domain usable for the deepin_package_manage_domain.

Parameters
Parameter:Description:
domain

Type to be used for deepin_package_manage_domain.

deepin_perm_manager_domtrans( domain )
Summary

Execute a domain transition to run deepin permission manager.

Parameters
Parameter:Description:
domain

Domain allowed to transition.

deepin_process_unkillable( domain )
Summary

let domain unkillable.

Description

Grant the $1_t domains access microphone resource by condition

Parameters
Parameter:Description:
domain

Domain allowed access.

deepin_read_elf_verify( domain )
Summary

Also allow to read a possible deepin-elf-verify symlink.

Parameters
Parameter:Description:
domain

Domain allowed access.

deepin_readable_file_type_set( type )
Summary

Make the specified type usable for the deepin_readable_file_type.

Parameters
Parameter:Description:
type

Type to be used for deepin_readable_file_type.

deepin_sec_domain_set( domain )
Summary

Make the specified domain usable for the deepin_sec_domain.

Parameters
Parameter:Description:
domain

Type to be used for deepin_sec_domain.

deepin_security_server_domain_set( domain )
Summary

Make the specified domain usable for the deepin_security_server_domain.

Parameters
Parameter:Description:
domain

Type to be used for deepin_security_server_domain.

deepin_security_verify_domtrans( domain )
Summary

Execute a domain transition to run deepin security verify.

Description

Allow $1 to manage deepin_wall_paper_resource_type.

Parameters
Parameter:Description:
domain

Domain allowed to transition.

deepin_sidtwo_type_set( type )
Summary

Make the specified type usable for the deepin_sidtwo_type.

Parameters
Parameter:Description:
type

Type to be used for deepin_sidtwo_type.

deepin_sys_domain_set( domain )
Summary

Make the specified domain usable for the deepin_sys_domain.

Parameters
Parameter:Description:
domain

Type to be used for deepin_sys_domain.

deepin_usaudit_file_type_set( type )
Summary

Make the specified type usable for the deepin_usaudit_file_type.

Parameters
Parameter:Description:
type

Type to be used for deepin_usaudit_file_type.

deepin_usaudit_process_type_set( type )
Summary

Make the specified type usable for the deepin_usaudit_process_type.

Parameters
Parameter:Description:
type

Type to be used for deepin_usaudit_process_type.

deepin_usaudit_socket_type_set( type )
Summary

Make the specified type usable for the deepin_usaudit_socket_type.

Parameters
Parameter:Description:
type

Type to be used for deepin_usaudit_socket_type.

deepin_usaudit_type_set( type )
Summary

Make the specified type usable for the deepin_usaudit_type.

Parameters
Parameter:Description:
type

Type to be used for deepin_usaudit_type.

deepin_wall_paper_resource_type_set( type )
Summary

Make the specified type usable for the deepin_wall_paper_resource_type.

Description

Allow $1 to manage deepin_sidtwo_type.

Parameters
Parameter:Description:
type

Type to be used for deepin_wall_paper_resource_type.

deepin_writable_file_type_set( type )
Summary

Make the specified type usable for the deepin_writable_file_type.

Parameters
Parameter:Description:
type

Type to be used for deepin_writable_file_type.

Return