Layer: contrib

Module: rpc

Tunables Interfaces Templates

Description:

Remote Procedure Call Daemon for managment of network based process communication

Tunables:

gssd_read_tmp

Default value

true

Description

Allow gssd to list tmp directories and read the kerberos credential cache.

nfsd_anon_write

Default value

false

Description

Allow nfs servers to modify public files used for public file transfer services. Files/Directories must be labeled public_content_rw_t.

rpcd_use_fusefs

Default value

false

Description

Allow rpcd_t to manage fuse files

Return

Interfaces:

rpc_admin(
	
		domain
		
			,
		
		role
		
	)

Summary

All of the rules required to administrate an rpc environment.

Parameters

Parameter:	Description:
domain	Domain allowed access.
role	Role allowed access.

rpc_domtrans_nfsd(
	
		domain
		
	)

Summary

Execute domain in nfsd domain.

Parameters

Parameter:	Description:
domain	Domain allowed to transition.

rpc_domtrans_rpcd(
	
		domain
		
	)

Summary

Execute domain in rpcd domain.

Parameters

Parameter:	Description:
domain	Domain allowed to transition.

rpc_dontaudit_getattr_exports(
	
		domain
		
	)

Summary

Do not audit attempts to get the attributes of the NFS export file.

Parameters

Parameter:	Description:
domain	Domain to not audit.

rpc_filetrans_var_lib_nfs_content(
	
		domain
		
	)

Summary

Transition to alsa named content

Parameters

Parameter:	Description:
domain	Domain allowed access.

rpc_initrc_domtrans_nfsd(
	
		domain
		
	)

Summary

Execute domain in nfsd domain.

Parameters

Parameter:	Description:
domain	Domain allowed to transition.

rpc_initrc_domtrans_rpcd(
	
		domain
		
	)

Summary

Execute domain in rpcd domain.

Parameters

Parameter:	Description:
domain	Domain allowed to transition.

rpc_kill_rpcd(
	
		domain
		
	)

Summary

Send kill signals to rpcd.

Parameters

Parameter:	Description:
domain	Domain allowed access.

rpc_list_nfs_state_data(
	
		domain
		
	)

Summary

List NFS state data in /var/lib/nfs.

Parameters

Parameter:	Description:
domain	Domain allowed access.

rpc_manage_nfs_state_data(
	
		domain
		
	)

Summary

Manage NFS state data in /var/lib/nfs.

Parameters

Parameter:	Description:
domain	Domain allowed access.

rpc_manage_nfs_state_data_dir(
	
		domain
		
	)

Summary

Manage NFS state data in /var/lib/nfs.

Parameters

Parameter:	Description:
domain	Domain allowed access.

rpc_read_exports(
	
		domain
		
	)

Summary

Allow read access to exports.

Parameters

Parameter:	Description:
domain	Domain allowed access.

rpc_read_nfs_state_data(
	
		domain
		
	)

Summary

Read NFS state data in /var/lib/nfs.

Parameters

Parameter:	Description:
domain	Domain allowed access.

rpc_run_rpcd(
	
		domain
		
			,
		
		role
		
	)

Summary

Execute rpcd in the rcpd domain, and allow the specified role the rpcd domain.

Parameters

Parameter:	Description:
domain	Domain allowed to transition.
role	Role allowed access.

rpc_rw_gssd_keys(
	
		domain
		
	)

Summary

Write keys for all user domains.

Parameters

Parameter:	Description:
domain	Domain allowed access.

rpc_search_nfs_state_data(
	
		domain
		
	)

Summary

Search NFS state data in /var/lib/nfs.

Parameters

Parameter:	Description:
domain	Domain allowed access.

rpc_stub(
	
		domain
		
	)

Summary

RPC stub interface. No access allowed.

Parameters

Parameter:	Description:
domain	Domain allowed access.

rpc_systemctl_nfsd(
	
		domain
		
	)

Summary

Execute nfsd server in the nfsd domain.

Parameters

Parameter:	Description:
domain	Domain allowed to transition.

rpc_systemctl_rpcd(
	
		domain
		
	)

Summary

Execute rpcd server in the rpcd domain.

Parameters

Parameter:	Description:
domain	Domain allowed to transition.

rpc_udp_rw_nfs_sockets(
	
		domain
		
	)

Summary

Allow domain to read and write to an NFS UDP socket.

Parameters

Parameter:	Description:
domain	Domain allowed access.

rpc_udp_send(
	
		domain
		
	)

Summary

Send UDP network traffic to rpc and recieve UDP traffic from rpc. (Deprecated)

Parameters

Parameter:	Description:
domain	Domain allowed access.

rpc_udp_send_nfs(
	
		domain
		
	)

Summary

Send UDP traffic to NFSd. (Deprecated)

Parameters

Parameter:	Description:
domain	Domain allowed access.

rpc_write_exports(
	
		domain
		
	)

Summary

Allow write access to exports.

Parameters

Parameter:	Description:
domain	Domain allowed access.

Return

Templates:

rpc_domain_template(
	
		userdomain_prefix
		
	)

Summary

The template to define a rpc domain.

Description

This template creates a domain to be used for a new rpc daemon.

Parameters

Parameter:	Description:
userdomain_prefix	The type of daemon to be used.

Return