Layer: kernel

Module: corenetwork

Interfaces

Description:

Policy controlling access to network objects

This module is required to be included in all policies.


Interfaces:

corenet_all_recvfrom_labeled( domain , peer_domain )
Summary

Rules for receiving labeled packets via TCP, UDP and raw IP.

Description

Rules for receiving labeled packets via TCP, UDP and raw IP.

Due to the nature of TCP, the rules (for TCP networking only) are bidirectional.

Parameters
Parameter:Description:
domain

Domain allowed access.

peer_domain

Peer domain.

corenet_all_recvfrom_netlabel( domain )
Summary

Receive packets from a NetLabel connection.

Description

Allow the specified domain to receive NetLabel network traffic, which utilizes the Commercial IP Security Option (CIPSO) to set the MLS level of the network packets. This is required for all networking domains that receive NetLabel network traffic.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_all_recvfrom_unlabeled( domain )
Summary

Receive packets from an unlabeled connection.

Description

Allow the specified domain to receive packets from an unlabeled connection. On machines that do not utilize labeled networking, this will be required on all networking domains. On machines tha do utilize labeled networking, this will be required for any networking domain that is allowed to receive network traffic that does not have a label.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_client_packet( domain )
Summary

Define type to be a network client packet type

Description

Define type to be a network client packet type

This is for supporting third party modules and its use is not allowed in upstream reference policy.

Parameters
Parameter:Description:
domain

Type to be used for a network client packet.

corenet_dontaudit_all_recvfrom_netlabel( domain )
Summary

Do not audit attempts to receive packets from a NetLabel connection.

Parameters
Parameter:Description:
domain

Domain to not audit.

corenet_dontaudit_all_recvfrom_unlabeled( domain )
Summary

Do not audit attempts to receive packets from an unlabeled connection.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_dontaudit_non_ipsec_sendrecv( domain )
Summary

Do not audit attempts to send and receive messages on a non-encrypted (no IPSEC) network session.

Description

Do not audit attempts to send and receive messages on a non-encrypted (no IPSEC) network session.

The corenet_dontaudit_all_recvfrom_unlabeled() interface should be used instead of this one.

Parameters
Parameter:Description:
domain

Domain to not audit.

corenet_dontaudit_raw_recv_netlabel( domain )
Summary

Do not audit attempts to receive Raw IP packets from a NetLabel connection.

Parameters
Parameter:Description:
domain

Domain to not audit.

corenet_dontaudit_raw_recvfrom_netlabel( domain )
Summary

Do not audit attempts to receive Raw IP packets from a NetLabel connection.

Parameters
Parameter:Description:
domain

Domain to not audit.

corenet_dontaudit_raw_recvfrom_unlabeled( domain )
Summary

Do not audit attempts to receive Raw IP packets from an unlabeled connection.

Parameters
Parameter:Description:
domain

Domain to not audit.

corenet_dontaudit_rw_tun_tap_dev( domain )
Summary

Do not audit attempts to read or write the TUN/TAP virtual network device.

Parameters
Parameter:Description:
domain

Domain to not audit.

corenet_dontaudit_tcp_bind_all_ports( domain )
Summary

Do not audit attepts to bind TCP sockets to any ports.

Parameters
Parameter:Description:
domain

Domain to not audit.

corenet_dontaudit_tcp_bind_all_reserved_ports( domain )
Summary

Do not audit attempts to bind TCP sockets to all reserved ports.

Parameters
Parameter:Description:
domain

Domain to not audit.

corenet_dontaudit_tcp_bind_all_rpc_ports( domain )
Summary

Do not audit attempts to bind TCP sockets to all RPC ports.

Parameters
Parameter:Description:
domain

Domain to not audit.

corenet_dontaudit_tcp_bind_generic_port( domain )
Summary

Do not audit bind TCP sockets to generic ports.

Parameters
Parameter:Description:
domain

Domain to not audit.

corenet_dontaudit_tcp_connect_all_ports( domain )
Summary

Do not audit attempts to connect TCP sockets to all ports.

Parameters
Parameter:Description:
domain

Domain to not audit.

corenet_dontaudit_tcp_connect_all_reserved_ports( domain )
Summary

Do not audit attempts to connect TCP sockets all reserved ports.

Parameters
Parameter:Description:
domain

Domain to not audit.

corenet_dontaudit_tcp_connect_all_rpc_ports( domain )
Summary

Do not audit attempts to connect TCP sockets all rpc ports.

Parameters
Parameter:Description:
domain

Domain to not audit.

corenet_dontaudit_tcp_recv_netlabel( domain )
Summary

Do not audit attempts to receive TCP packets from a NetLabel connection.

Parameters
Parameter:Description:
domain

Domain to not audit.

corenet_dontaudit_tcp_recvfrom_netlabel( domain )
Summary

Do not audit attempts to receive TCP packets from a NetLabel connection.

Parameters
Parameter:Description:
domain

Domain to not audit.

corenet_dontaudit_tcp_recvfrom_unlabeled( domain )
Summary

Do not audit attempts to receive TCP packets from an unlabeled connection.

Parameters
Parameter:Description:
domain

Domain to not audit.

corenet_dontaudit_tcp_sendrecv_generic_port( domain )
Summary

Do not audit send and receive TCP network traffic on generic ports.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_dontaudit_udp_bind_all_ports( domain )
Summary

Do not audit attepts to bind UDP sockets to any ports.

Parameters
Parameter:Description:
domain

Domain to not audit.

corenet_dontaudit_udp_bind_all_reserved_ports( domain )
Summary

Do not audit attempts to bind UDP sockets to all reserved ports.

Parameters
Parameter:Description:
domain

Domain to not audit.

corenet_dontaudit_udp_bind_all_rpc_ports( domain )
Summary

Do not audit attempts to bind UDP sockets to all RPC ports.

Parameters
Parameter:Description:
domain

Domain to not audit.

corenet_dontaudit_udp_receive_all_nodes( domain )
Summary

Do not audit attempts to receive UDP network traffic on all nodes.

Parameters
Parameter:Description:
domain

Domain to not audit.

corenet_dontaudit_udp_receive_generic_if( domain )
Summary

Do not audit attempts to receive UDP network traffic on generic interfaces.

Parameters
Parameter:Description:
domain

Domain to not audit.

corenet_dontaudit_udp_recv_netlabel( domain )
Summary

Do not audit attempts to receive UDP packets from a NetLabel connection.

Parameters
Parameter:Description:
domain

Domain to not audit.

corenet_dontaudit_udp_recvfrom_netlabel( domain )
Summary

Do not audit attempts to receive UDP packets from a NetLabel connection.

Parameters
Parameter:Description:
domain

Domain to not audit.

corenet_dontaudit_udp_recvfrom_unlabeled( domain )
Summary

Do not audit attempts to receive UDP packets from an unlabeled connection.

Parameters
Parameter:Description:
domain

Domain to not audit.

corenet_dontaudit_udp_send_all_nodes( domain )
Summary

Do not audit attempts to send UDP network traffic on any nodes.

Parameters
Parameter:Description:
domain

Domain to not audit.

corenet_dontaudit_udp_send_generic_if( domain )
Summary

Dontaudit attempts to send UDP network traffic on generic interfaces.

Parameters
Parameter:Description:
domain

Domain to not audit.

corenet_dontaudit_udp_sendrecv_all_nodes( domain )
Summary

Do not audit attempts to send and receive UDP network traffic on any nodes nodes.

Parameters
Parameter:Description:
domain

Domain to not audit.

corenet_dontaudit_udp_sendrecv_generic_if( domain )
Summary

Do not audit attempts to send and receive UDP network traffic on generic interfaces.

Parameters
Parameter:Description:
domain

Domain to not audit.

corenet_getattr_ppp_dev( domain )
Summary

Getattr the point-to-point device.

Parameters
Parameter:Description:
domain

The domain allowed access.

corenet_in_generic_if( domain )
Summary

Allow incoming traffic on the generic interfaces.

Parameters
Parameter:Description:
domain

The peer label of the incoming network traffic.

corenet_in_generic_node( domain )
Summary

Allow incoming network traffic from generic nodes.

Parameters
Parameter:Description:
domain

The peer label of the incoming network traffic.

corenet_inout_generic_if( domain )
Summary

Allow incoming and outgoing network traffic on the generic interfaces.

Parameters
Parameter:Description:
domain

The peer label of the network traffic.

corenet_inout_generic_node( domain )
Summary

Allow incoming and outgoing network traffic with generic nodes.

Parameters
Parameter:Description:
domain

The peer label of the network traffic.

corenet_node( domain )
Summary

Define type to be a network node type

Description

Define type to be a network node type

This is for supporting third party modules and its use is not allowed in upstream reference policy.

Parameters
Parameter:Description:
domain

Type to be used for network nodes.

corenet_non_ipsec_sendrecv( domain )
Summary

Send and receive messages on a non-encrypted (no IPSEC) network session.

Description

Send and receive messages on a non-encrypted (no IPSEC) network session. (Deprecated)

The corenet_all_recvfrom_unlabeled() interface should be used instead of this one.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_out_generic_if( domain )
Summary

Allow outgoing network traffic on the generic interfaces.

Parameters
Parameter:Description:
domain

The peer label of the outgoing network traffic.

corenet_out_generic_node( domain )
Summary

Allow outgoing network traffic to generic nodes.

Parameters
Parameter:Description:
domain

The peer label of the outgoing network traffic.

corenet_packet( domain )
Summary

Define type to be a network packet type

Description

Define type to be a network packet type

This is for supporting third party modules and its use is not allowed in upstream reference policy.

Parameters
Parameter:Description:
domain

Type to be used for a network packet.

corenet_port( domain )
Summary

Define type to be a network port type

Description

Define type to be a network port type

This is for supporting third party modules and its use is not allowed in upstream reference policy.

Parameters
Parameter:Description:
domain

Type to be used for network ports.

corenet_raw_bind_all_nodes( domain )
Summary

Bind raw sockets to all nodes.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_raw_bind_generic_node( domain )
Summary

Bind raw sockets to generic nodes.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_raw_receive_all_if( domain )
Summary

Receive raw IP packets on all interfaces.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_raw_receive_all_nodes( domain )
Summary

Receive raw IP packets on all nodes.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_raw_receive_generic_if( domain )
Summary

Receive raw IP packets on generic interfaces.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_raw_receive_generic_node( domain )
Summary

Receive raw IP packets on generic nodes.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_raw_recv_netlabel( domain )
Summary

Receive Raw IP packets from a NetLabel connection.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_raw_recvfrom_labeled( domain , peer_domain )
Summary

Rules for receiving labeled raw IP packets.

Parameters
Parameter:Description:
domain

Domain allowed access.

peer_domain

Peer domain.

corenet_raw_recvfrom_netlabel( domain )
Summary

Receive Raw IP packets from a NetLabel connection.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_raw_recvfrom_unlabeled( domain )
Summary

Receive Raw IP packets from an unlabeled connection.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_raw_send_all_if( domain )
Summary

Send raw IP packets on all interfaces.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_raw_send_all_nodes( domain )
Summary

Send raw IP packets on all nodes.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_raw_send_generic_if( domain )
Summary

Send raw IP packets on generic interfaces.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_raw_send_generic_node( domain )
Summary

Send raw IP packets on generic nodes.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_raw_sendrecv_all_if( domain )
Summary

Send and receive raw IP packets on all interfaces.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_raw_sendrecv_all_nodes( domain )
Summary

Send and receive raw IP packets on all nodes.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_raw_sendrecv_generic_if( domain )
Summary

Send and receive raw IP packets on generic interfaces.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_raw_sendrecv_generic_node( domain )
Summary

Send and receive raw IP packets on generic nodes.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_receive_all_client_packets( domain )
Summary

Receive all client packets.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_receive_all_packets( domain )
Summary

Receive all packets.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_receive_all_server_packets( domain )
Summary

Receive all server packets.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_receive_generic_client_packets( domain )
Summary

Receive generic client packets.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_receive_generic_server_packets( domain )
Summary

Receive generic server packets.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_relabelto_all_client_packets( domain )
Summary

Relabel packets to any client packet type.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_relabelto_all_packets( domain )
Summary

Relabel packets to any packet type.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_relabelto_all_server_packets( domain )
Summary

Relabel packets to any server packet type.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_relabelto_generic_client_packets( domain )
Summary

Relabel packets to the generic client packet type.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_relabelto_generic_server_packets( domain )
Summary

Relabel packets to the generic server packet type.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_reserved_port( domain )
Summary

Define network type to be a reserved port (lt 1024)

Description

Define network type to be a reserved port (lt 1024)

This is for supporting third party modules and its use is not allowed in upstream reference policy.

Parameters
Parameter:Description:
domain

Type to be used for network ports.

corenet_rpc_port( domain )
Summary

Define network type to be a rpc port ( 512 lt PORT lt 1024)

Description

Define network type to be a rpc port ( 512 lt PORT lt 1024)

This is for supporting third party modules and its use is not allowed in upstream reference policy.

Parameters
Parameter:Description:
domain

Type to be used for network ports.

corenet_rw_ppp_dev( domain )
Summary

Read and write the point-to-point device.

Parameters
Parameter:Description:
domain

The domain allowed access.

corenet_rw_tun_tap_dev( domain )
Summary

Read and write the TUN/TAP virtual network device.

Parameters
Parameter:Description:
domain

The domain allowed access.

corenet_send_all_client_packets( domain )
Summary

Send all client packets.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_send_all_packets( domain )
Summary

Send all packets.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_send_all_server_packets( domain )
Summary

Send all server packets.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_send_generic_client_packets( domain )
Summary

Send generic client packets.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_send_generic_server_packets( domain )
Summary

Send generic server packets.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_sendrecv_all_client_packets( domain )
Summary

Send and receive all client packets.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_sendrecv_all_packets( domain )
Summary

Send and receive all packets.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_sendrecv_all_server_packets( domain )
Summary

Send and receive all server packets.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_sendrecv_generic_client_packets( domain )
Summary

Send and receive generic client packets.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_sendrecv_generic_server_packets( domain )
Summary

Send and receive generic server packets.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_sendrecv_unlabeled_packets( domain )
Summary

Send and receive unlabeled packets.

Description

Send and receive unlabeled packets. These packets do not match any netfilter SECMARK rules.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_server_packet( domain )
Summary

Define type to be a network server packet type

Description

Define type to be a network server packet type

This is for supporting third party modules and its use is not allowed in upstream reference policy.

Parameters
Parameter:Description:
domain

Type to be used for a network server packet.

corenet_setcontext_all_spds( domain )
Summary

Allow specified type to set the context of a SPD entry for labeled ipsec associations.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_spd_type( domain )
Summary

Make the specified type usable for labeled ipsec.

Parameters
Parameter:Description:
domain

Type to be used for labeled ipsec.

corenet_tcp_bind_all_nodes( domain )
Summary

Bind TCP sockets to all nodes.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_tcp_bind_all_ports( domain )
Summary

Bind TCP sockets to all ports.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_tcp_bind_all_reserved_ports( domain )
Summary

Bind TCP sockets to all reserved ports.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_tcp_bind_all_rpc_ports( domain )
Summary

Bind TCP sockets to all RPC ports.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_tcp_bind_all_unreserved_ports( domain )
Summary

Bind TCP sockets to all ports > 1024.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_tcp_bind_generic_node( domain )
Summary

Bind TCP sockets to generic nodes.

Description

Bind TCP sockets to generic nodes. This is necessary for binding a socket so it can be used for servers to listen for incoming connections.

Related interface:

  • corenet_udp_bind_generic_node()

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_tcp_bind_generic_port( domain )
Summary

Bind TCP sockets to generic ports.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_tcp_bind_reserved_port( domain )
Summary

Bind TCP sockets to generic reserved ports.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_tcp_connect_all_ports( domain )
Summary

Connect TCP sockets to all ports.

Description

Connect TCP sockets to all ports

Related interfaces:

  • corenet_all_recvfrom_unlabeled()

  • corenet_tcp_sendrecv_generic_if()

  • corenet_tcp_sendrecv_generic_node()

  • corenet_tcp_sendrecv_all_ports()

  • corenet_tcp_bind_all_ports()

Example client being able to connect to all ports over generic nodes, without labeled networking:

allow myclient_t self:tcp_socket create_stream_socket_perms; corenet_tcp_sendrecv_generic_if(myclient_t) corenet_tcp_sendrecv_generic_node(myclient_t) corenet_tcp_sendrecv_all_ports(myclient_t) corenet_tcp_connect_all_ports(myclient_t) corenet_all_recvfrom_unlabeled(myclient_t)

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_tcp_connect_all_reserved_ports( domain )
Summary

Connect TCP sockets to reserved ports.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_tcp_connect_all_rpc_ports( domain )
Summary

Connect TCP sockets to rpc ports.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_tcp_connect_all_unreserved_ports( domain )
Summary

Connect TCP sockets to all ports > 1024.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_tcp_connect_generic_port( domain )
Summary

Connect TCP sockets to generic ports.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_tcp_connect_reserved_port( domain )
Summary

Connect TCP sockets to generic reserved ports.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_tcp_recv_netlabel( domain )
Summary

Receive TCP packets from a NetLabel connection.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_tcp_recvfrom_labeled( domain , peer_domain )
Summary

Rules for receiving labeled TCP packets.

Description

Rules for receiving labeled TCP packets.

Due to the nature of TCP, this is bidirectional.

Parameters
Parameter:Description:
domain

Domain allowed access.

peer_domain

Peer domain.

corenet_tcp_recvfrom_netlabel( domain )
Summary

Receive TCP packets from a NetLabel connection.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_tcp_recvfrom_unlabeled( domain )
Summary

Receive TCP packets from an unlabled connection.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_tcp_sendrecv_all_if( domain )
Summary

Send and receive TCP network traffic on all interfaces.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_tcp_sendrecv_all_nodes( domain )
Summary

Send and receive TCP network traffic on all nodes.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_tcp_sendrecv_all_ports( domain )
Summary

Send and receive TCP network traffic on all ports.

Description

Send and receive TCP network traffic on all ports. Related interfaces:

  • corenet_all_recvfrom_unlabeled()

  • corenet_tcp_sendrecv_generic_if()

  • corenet_tcp_sendrecv_generic_node()

  • corenet_tcp_connect_all_ports()

  • corenet_tcp_bind_all_ports()

Example client being able to connect to all ports over generic nodes, without labeled networking:

allow myclient_t self:tcp_socket create_stream_socket_perms; corenet_tcp_sendrecv_generic_if(myclient_t) corenet_tcp_sendrecv_generic_node(myclient_t) corenet_tcp_sendrecv_all_ports(myclient_t) corenet_tcp_connect_all_ports(myclient_t) corenet_all_recvfrom_unlabeled(myclient_t)

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_tcp_sendrecv_all_reserved_ports( domain )
Summary

Send and receive TCP network traffic on all reserved ports.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_tcp_sendrecv_generic_if( domain )
Summary

Send and receive TCP network traffic on generic interfaces.

Description

Allow the specified domain to send and receive TCP network traffic on generic network interfaces.

Related interface:

  • corenet_all_recvfrom_unlabeled()

  • corenet_tcp_sendrecv_generic_node()

  • corenet_tcp_sendrecv_all_ports()

  • corenet_tcp_connect_all_ports()

Example client being able to connect to all ports over generic nodes, without labeled networking:

allow myclient_t self:tcp_socket create_stream_socket_perms; corenet_tcp_sendrecv_generic_if(myclient_t) corenet_tcp_sendrecv_generic_node(myclient_t) corenet_tcp_sendrecv_all_ports(myclient_t) corenet_tcp_connect_all_ports(myclient_t) corenet_all_recvfrom_unlabeled(myclient_t)

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_tcp_sendrecv_generic_node( domain )
Summary

Send and receive TCP network traffic on generic nodes.

Description

Allow the specified domain to send and receive TCP network traffic to/from generic network nodes (hostnames/networks).

Related interface:

  • corenet_all_recvfrom_unlabeled()

  • corenet_tcp_sendrecv_generic_if()

  • corenet_tcp_sendrecv_all_ports()

  • corenet_tcp_connect_all_ports()

Example client being able to connect to all ports over generic nodes, without labeled networking:

allow myclient_t self:tcp_socket create_stream_socket_perms; corenet_tcp_sendrecv_generic_if(myclient_t) corenet_tcp_sendrecv_generic_node(myclient_t) corenet_tcp_sendrecv_all_ports(myclient_t) corenet_tcp_connect_all_ports(myclient_t) corenet_all_recvfrom_unlabeled(myclient_t)

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_tcp_sendrecv_generic_port( domain )
Summary

Send and receive TCP network traffic on generic ports.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_tcp_sendrecv_reserved_port( domain )
Summary

Send and receive TCP network traffic on generic reserved ports.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_udp_bind_all_nodes( domain )
Summary

Bind UDP sockets to all nodes.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_udp_bind_all_ports( domain )
Summary

Bind UDP sockets to all ports.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_udp_bind_all_reserved_ports( domain )
Summary

Bind UDP sockets to all reserved ports.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_udp_bind_all_rpc_ports( domain )
Summary

Bind UDP sockets to all RPC ports.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_udp_bind_all_unreserved_ports( domain )
Summary

Bind UDP sockets to all ports > 1024.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_udp_bind_generic_node( domain )
Summary

Bind UDP sockets to generic nodes.

Description

Bind UDP sockets to generic nodes. This is necessary for binding a socket so it can be used for servers to listen for incoming connections.

Related interface:

  • corenet_tcp_bind_generic_node()

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_udp_bind_generic_port( domain )
Summary

Bind UDP sockets to generic ports.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_udp_bind_reserved_port( domain )
Summary

Bind UDP sockets to generic reserved ports.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_udp_receive_all_if( domain )
Summary

Receive UDP network traffic on all interfaces.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_udp_receive_all_nodes( domain )
Summary

Receive UDP network traffic on all nodes.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_udp_receive_all_ports( domain )
Summary

Receive UDP network traffic on all ports.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_udp_receive_all_reserved_ports( domain )
Summary

Receive UDP network traffic on all reserved ports.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_udp_receive_generic_if( domain )
Summary

Receive UDP network traffic on generic interfaces.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_udp_receive_generic_node( domain )
Summary

Receive UDP network traffic on generic nodes.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_udp_receive_generic_port( domain )
Summary

Receive UDP network traffic on generic ports.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_udp_receive_reserved_port( domain )
Summary

Receive UDP network traffic on generic reserved ports.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_udp_recv_netlabel( domain )
Summary

Receive UDP packets from a NetLabel connection.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_udp_recvfrom_labeled( domain , peer_domain )
Summary

Rules for receiving labeled UDP packets.

Parameters
Parameter:Description:
domain

Domain allowed access.

peer_domain

Peer domain.

corenet_udp_recvfrom_netlabel( domain )
Summary

Receive UDP packets from a NetLabel connection.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_udp_recvfrom_unlabeled( domain )
Summary

Receive UDP packets from an unlabeled connection.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_udp_send_all_if( domain )
Summary

Send UDP network traffic on all interfaces.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_udp_send_all_nodes( domain )
Summary

Send UDP network traffic on all nodes.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_udp_send_all_ports( domain )
Summary

Send UDP network traffic on all ports.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_udp_send_all_reserved_ports( domain )
Summary

Send UDP network traffic on all reserved ports.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_udp_send_generic_if( domain )
Summary

Send UDP network traffic on generic interfaces.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_udp_send_generic_node( domain )
Summary

Send UDP network traffic on generic nodes.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_udp_send_generic_port( domain )
Summary

Send UDP network traffic on generic ports.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_udp_send_reserved_port( domain )
Summary

Send UDP network traffic on generic reserved ports.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_udp_sendrecv_all_if( domain )
Summary

Send and receive UDP network traffic on all interfaces.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_udp_sendrecv_all_nodes( domain )
Summary

Send and receive UDP network traffic on all nodes.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_udp_sendrecv_all_ports( domain )
Summary

Send and receive UDP network traffic on all ports.

Description

Send and receive UDP network traffic on all ports. Related interfaces:

  • corenet_all_recvfrom_unlabeled()

  • corenet_udp_sendrecv_generic_if()

  • corenet_udp_sendrecv_generic_node()

  • corenet_udp_bind_all_ports()

Example client being able to send to all ports over generic nodes, without labeled networking:

allow myclient_t self:udp_socket create_socket_perms; corenet_udp_sendrecv_generic_if(myclient_t) corenet_udp_sendrecv_generic_node(myclient_t) corenet_udp_sendrecv_all_ports(myclient_t) corenet_all_recvfrom_unlabeled(myclient_t)

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_udp_sendrecv_all_reserved_ports( domain )
Summary

Send and receive UDP network traffic on all reserved ports.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_udp_sendrecv_generic_if( domain )
Summary

Send and receive UDP network traffic on generic interfaces.

Description

Allow the specified domain to send and receive UDP network traffic on generic network interfaces.

Related interface:

  • corenet_all_recvfrom_unlabeled()

  • corenet_udp_sendrecv_generic_node()

  • corenet_udp_sendrecv_all_ports()

Example client being able to send to all ports over generic nodes, without labeled networking:

allow myclient_t self:udp_socket create_socket_perms; corenet_udp_sendrecv_generic_if(myclient_t) corenet_udp_sendrecv_generic_node(myclient_t) corenet_udp_sendrecv_all_ports(myclient_t) corenet_all_recvfrom_unlabeled(myclient_t)

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_udp_sendrecv_generic_node( domain )
Summary

Send and receive UDP network traffic on generic nodes.

Description

Allow the specified domain to send and receive UDP network traffic to/from generic network nodes (hostnames/networks).

Related interface:

  • corenet_all_recvfrom_unlabeled()

  • corenet_udp_sendrecv_generic_if()

  • corenet_udp_sendrecv_all_ports()

Example client being able to send to all ports over generic nodes, without labeled networking:

allow myclient_t self:udp_socket create_socket_perms; corenet_udp_sendrecv_generic_if(myclient_t) corenet_udp_sendrecv_generic_node(myclient_t) corenet_udp_sendrecv_all_ports(myclient_t) corenet_all_recvfrom_unlabeled(myclient_t)

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_udp_sendrecv_generic_port( domain )
Summary

Send and receive UDP network traffic on generic ports.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_udp_sendrecv_reserved_port( domain )
Summary

Send and receive UDP network traffic on generic reserved ports.

Parameters
Parameter:Description:
domain

Domain allowed access.

corenet_unconfined( domain )
Summary

Unconfined access to network objects.

Parameters
Parameter:Description:
domain

The domain allowed access.

Return