O'Reilly logo

SELinux by Bill McCarty

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Appendix E. SELinux Type Attributes

Table E-1 summarizes the SELinux type attributes appearing in the Fedora Core 2 implementation of SELinux. Other implementations may define different type attributes or assign different meaning to attributes shown in the table.

Table E-1. SELinux type attributes

Type attribute

Description

admin

Administrator domain, such as sysadm_t

auth

Domain that can read /etc/shadow

auth_chkpwd

Domain that can authenticate users by running unix_chkpwd

auth_write

Domain that can write or relabel /etc/shadow

dbus_client_domain

Domain of dbus client

device_type

Type assigned to device nodes

domain

Type that can be assigned to a process

etc_writer

Domain that can write to etc_t

exec_type

Type assigned to executables that are domain entry points

file_type

Type assigned to files in persistent filesystems

fs_domain

Domain that can directly access a fixed disk

fs_type

Type assigned to filesystems, including nonpersistent filesystems

gphdomain

Domain derived from gnome-pty-helper

home_dir_type

Type assigned to the parent directory holding user home directories

home_type

Type assigned to home directories

homedirfile

Type of special file in home directory, used to associate mount points with home directories

lockfile

Type assigned to lock files or directories

logfile

Type assigned to log files or directories

login_contexts

Type assigned to files used to define default contexts for login type

mail_server_domain ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required