Layer: contrib

Module: mozilla

Tunables Interfaces

Description:

Policy for Mozilla and related web browsers

Tunables:

mozilla_plugin_bind_unreserved_ports

Default value

false

Description

Allow mozilla plugin domain to bind unreserved tcp/udp ports.

mozilla_plugin_can_network_connect

Default value

true

Description

Allow mozilla plugin domain to connect to the network using TCP.

mozilla_plugin_use_bluejeans

Default value

false

Description

Allow mozilla plugin to use Bluejeans.

mozilla_plugin_use_gps

Default value

false

Description

Allow mozilla plugin to support GPS.

mozilla_plugin_use_spice

Default value

false

Description

Allow mozilla plugin to support spice protocols.

mozilla_read_content

Default value

false

Description

Allow confined web browsers to read home directory content

Return

Interfaces:

mozilla_dbus_chat(
	
		domain
		
	)

Summary

Send and receive messages from mozilla over dbus.

Parameters

Parameter:	Description:
domain	Domain allowed access.

mozilla_domtrans(
	
		domain
		
	)

Summary

Run mozilla in the mozilla domain.

Parameters

Parameter:	Description:
domain	Domain allowed to transition.

mozilla_domtrans_plugin(
	
		domain
		
	)

Summary

Execute a domain transition to run mozilla_plugin.

Parameters

Parameter:	Description:
domain	Domain allowed access.

mozilla_domtrans_spec(
	
		domain
		
			,
		
		target_domain
		
	)

Summary

Execute a mozilla_exec_t in the specified domain.

Parameters

Parameter:	Description:
domain	Domain allowed to transition.
target_domain	The type of the new process.

mozilla_dontaudit_manage_user_home_files(
	
		domain
		
	)

Summary

Dontaudit attempts to write mozilla home directory content

Parameters

Parameter:	Description:
domain	Domain to not audit.

mozilla_dontaudit_rw_user_home_files(
	
		domain
		
	)

Summary

Dontaudit attempts to read/write mozilla home directory content

Parameters

Parameter:	Description:
domain	Domain to not audit.

mozilla_exec_user_home_files(
	
		domain
		
	)

Summary

Execute mozilla home directory content.

Parameters

Parameter:	Description:
domain	Domain allowed access.

mozilla_execmod_user_home_files(
	
		domain
		
	)

Summary

Execmod mozilla home directory content.

Parameters

Parameter:	Description:
domain	Domain allowed access.

mozilla_filetrans_home_content(
	
		domain
		
	)

Summary

Create mozilla content in the user home directory with an correct label.

Parameters

Parameter:	Description:
domain	Domain allowed access.

mozilla_plugin_delete_tmpfs_files(
	
		domain
		
	)

Summary

Delete mozilla_plugin tmpfs files

Parameters

Parameter:	Description:
domain	Domain allowed access

mozilla_plugin_dontaudit_leaks(
	
		domain
		
	)

Summary

Dontaudit read/write to a mozilla_plugin leaks

Parameters

Parameter:	Description:
domain	Domain to not audit.

mozilla_plugin_dontaudit_rw_sem(
	
		domain
		
	)

Summary

Dontaudit generict ipc read/write to a mozilla_plugin

Parameters

Parameter:	Description:
domain	Domain to not audit.

mozilla_plugin_dontaudit_rw_tmp_files(
	
		domain
		
	)

Summary

Dontaudit read/write to a mozilla_plugin tmp files.

Parameters

Parameter:	Description:
domain	Domain to not audit.

mozilla_plugin_manage_rw_files(
	
		domain
		
	)

Summary

Create, read, write, and delete mozilla_plugin rw files.

Parameters

Parameter:	Description:
domain	Domain allowed access.

mozilla_plugin_read_rw_files(
	
		domain
		
	)

Summary

read mozilla_plugin rw files.

Parameters

Parameter:	Description:
domain	Domain allowed access.

mozilla_plugin_read_state(
	
		domain
		
	)

Summary

Allow the domain to read mozilla_plugin state files in /proc.

Parameters

Parameter:	Description:
domain	Domain allowed access.

mozilla_plugin_read_tmpfs_files(
	
		domain
		
	)

Summary

Read mozilla_plugin tmpfs files

Parameters

Parameter:	Description:
domain	Domain allowed access

mozilla_plugin_rw_sem(
	
		domain
		
	)

Summary

Allow generict ipc read/write to a mozilla_plugin

Parameters

Parameter:	Description:
domain	Domain to not audit.

mozilla_plugin_rw_tmp_files(
	
		domain
		
	)

Summary

Allow read/write to a mozilla_plugin tmp files.

Parameters

Parameter:	Description:
domain	Domain allowed access.

mozilla_plugin_rw_tmpfs_files(
	
		domain
		
	)

Summary

Read/Write mozilla_plugin tmpfs files

Parameters

Parameter:	Description:
domain	Domain allowed access

mozilla_read_user_home_files(
	
		domain
		
	)

Summary

Read mozilla home directory content

Parameters

Parameter:	Description:
domain	Domain allowed access.

mozilla_role(
	
		role
		
			,
		
		domain
		
	)

Summary

Role access for mozilla

Parameters

Parameter:	Description:
role	Role allowed access
domain	User domain for the role

mozilla_role_plugin(
	
		role
		
	)

Summary

Execute qemu unconfined programs in the role.

Parameters

Parameter:	Description:
role	The role to allow the mozilla_plugin domain.

mozilla_run_plugin(
	
		domain
		
			,
		
		role
		
	)

Summary

Execute mozilla_plugin in the mozilla_plugin domain, and allow the specified role the mozilla_plugin domain.

Parameters

Parameter:	Description:
domain	Domain allowed access
role	The role to be allowed the mozilla_plugin domain.

mozilla_rw_tcp_sockets(
	
		domain
		
	)

Summary

read/write mozilla per user tcp_socket

Parameters

Parameter:	Description:
domain	Domain allowed access.

mozilla_write_user_home_files(
	
		domain
		
	)

Summary

Write mozilla home directory content

Parameters

Parameter:	Description:
domain	Domain allowed access.

Return