Layer: contrib

Module: qemu

Tunables Interfaces Templates

Description:

QEMU machine emulator and virtualizer


Tunables:

qemu_full_network
Default value

false

Description

Allow qemu to connect fully to the network

qemu_use_cifs
Default value

true

Description

Allow qemu to use cifs/Samba file systems

qemu_use_comm
Default value

false

Description

Allow qemu to use serial/parallel communication ports

qemu_use_nfs
Default value

true

Description

Allow qemu to use nfs file systems

qemu_use_usb
Default value

true

Description

Allow qemu to use usb devices

Return

Interfaces:

qemu_domtrans( domain )
Summary

Execute a domain transition to run qemu.

Parameters
Parameter:Description:
domain

Domain allowed to transition.

qemu_entry_type( domain )
Summary

Make qemu_exec_t an entrypoint for the specified domain.

Parameters
Parameter:Description:
domain

The domain for which qemu_exec_t is an entrypoint.

qemu_exec( domain )
Summary

Execute a qemu in the callers domain

Parameters
Parameter:Description:
domain

Domain allowed access.

qemu_getattr_exec( domain )
Summary

Getattr on qemu executable.

Parameters
Parameter:Description:
domain

Domain allowed to transition.

qemu_kill( domain )
Summary

Send a sigill to qemu

Parameters
Parameter:Description:
domain

Domain allowed access.

qemu_manage_tmp_dirs( domain )
Summary

Manage qemu temporary dirs.

Parameters
Parameter:Description:
domain

Domain allowed access.

qemu_manage_tmp_files( domain )
Summary

Manage qemu temporary files.

Parameters
Parameter:Description:
domain

Domain allowed access.

qemu_read_state( domain )
Summary

Allow the domain to read state files in /proc.

Parameters
Parameter:Description:
domain

Domain to allow access.

qemu_run( domain , role )
Summary

Execute qemu in the qemu domain.

Parameters
Parameter:Description:
domain

Domain allowed to transition.

role

The role to allow the qemu domain.

qemu_setsched( domain )
Summary

Set the schedule on qemu.

Parameters
Parameter:Description:
domain

Domain allowed access.

qemu_signal( domain )
Summary

Send a signal to qemu.

Parameters
Parameter:Description:
domain

Domain allowed access.

qemu_spec_domtrans( domain , target_domain )
Summary

Execute qemu_exec_t in the specified domain but do not do it automatically. This is an explicit transition, requiring the caller to use setexeccon().

Description

Execute qemu_exec_t in the specified domain. This allows the specified domain to qemu programs on these filesystems in the specified domain.

Parameters
Parameter:Description:
domain

Domain allowed access.

target_domain

The type of the new process.

qemu_unconfined_role( role )
Summary

Execute qemu unconfined programs in the role.

Parameters
Parameter:Description:
role

The role to allow the qemu unconfined domain.

Return

Templates:

qemu_domain_template( prefix )
Summary

Creates types and rules for a basic qemu process domain.

Parameters
Parameter:Description:
prefix

Prefix for the domain.

Return