Layer: roles

Module: unprivuser

Tunables Interfaces

Description:

Generic unprivileged user role


Tunables:

user_bind_unreserved
Default value

false

Description

Allow user to bind all unreserved ports

user_chat_init_dbus
Default value

true

Description

Allow user to chat with init_t:dbus

Return

Interfaces:

init_dbus_chat_except_user( domain )
Summary

Send and receive (except a certain type as specified ) messages from systemd over dbus.

Parameters
Parameter:Description:
domain

Domain allowed access.

unprivuser_dbus_chat( domain )
Summary

unprivuser send and receive dbus msg.

Parameters
Parameter:Description:
domain

Domain allowed access.

unprivuser_domtrans_to( domain , entry_point )
Summary

Allow unprivuser transition to confined domain.

Parameters
Parameter:Description:
domain

Type to be used as a domain.

entry_point

Type of the program to be used as an entry point to this domain.

unprivuser_role_change( role )
Summary

Change to the generic user role.

Parameters
Parameter:Description:
role

Role allowed access.

unprivuser_role_change_to( role )
Summary

Change from the generic user role.

Description

Change from the generic user role to the specified role.

This is an interface to support third party modules and its use is not allowed in upstream reference policy.

Parameters
Parameter:Description:
role

Role allowed access.

Return