Multicategory security policy
This module is required to be included in all policies.
This domain is allowed to sigkill and sigstop all domains regardless of their MCS category set.
Parameter: | Description: | Optional: |
---|---|---|
domain |
Domain target for user exemption. | No |
Make specified domain MCS trusted for setting any category set for the processes it executes.
Parameter: | Description: | Optional: |
---|---|---|
domain |
Domain target for user exemption. | No |
This domain is allowed to ptrace all domains regardless of their MCS category set.
Parameter: | Description: | Optional: |
---|---|---|
domain |
Domain target for user exemption. | No |