Policy controlling access to network objects
This module is required to be included in all policies.
Rules for receiving labeled packets via TCP, UDP and raw IP.
Rules for receiving labeled packets via TCP, UDP and raw IP.
Due to the nature of TCP, the rules (for TCP networking only) are bidirectional.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
peer_domain |
Peer domain. |
Receive packets from a NetLabel connection.
Allow the specified domain to receive NetLabel network traffic, which utilizes the Commercial IP Security Option (CIPSO) to set the MLS level of the network packets. This is required for all networking domains that receive NetLabel network traffic.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Receive packets from an unlabeled connection.
Allow the specified domain to receive packets from an unlabeled connection. On machines that do not utilize labeled networking, this will be required on all networking domains. On machines tha do utilize labeled networking, this will be required for any networking domain that is allowed to receive network traffic that does not have a label.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Define type to be a network client packet type
Define type to be a network client packet type
This is for supporting third party modules and its use is not allowed in upstream reference policy.
Parameter: | Description: |
---|---|
domain |
Type to be used for a network client packet. |
Do not audit attempts to receive packets from a NetLabel connection.
Parameter: | Description: |
---|---|
domain |
Domain to not audit. |
Do not audit attempts to receive packets from an unlabeled connection.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Do not audit attempts to send and receive messages on a non-encrypted (no IPSEC) network session.
Do not audit attempts to send and receive messages on a non-encrypted (no IPSEC) network session.
The corenet_dontaudit_all_recvfrom_unlabeled() interface should be used instead of this one.
Parameter: | Description: |
---|---|
domain |
Domain to not audit. |
Do not audit attempts to receive Raw IP packets from a NetLabel connection.
Parameter: | Description: |
---|---|
domain |
Domain to not audit. |
Do not audit attempts to receive Raw IP packets from a NetLabel connection.
Parameter: | Description: |
---|---|
domain |
Domain to not audit. |
Do not audit attempts to receive Raw IP packets from an unlabeled connection.
Parameter: | Description: |
---|---|
domain |
Domain to not audit. |
Do not audit attempts to read or write the TUN/TAP virtual network device.
Parameter: | Description: |
---|---|
domain |
Domain to not audit. |
Do not audit attepts to bind TCP sockets to any ports.
Parameter: | Description: |
---|---|
domain |
Domain to not audit. |
Do not audit attempts to bind TCP sockets to all reserved ports.
Parameter: | Description: |
---|---|
domain |
Domain to not audit. |
Do not audit attempts to bind TCP sockets to all RPC ports.
Parameter: | Description: |
---|---|
domain |
Domain to not audit. |
Do not audit bind TCP sockets to generic ports.
Parameter: | Description: |
---|---|
domain |
Domain to not audit. |
Do not audit attempts to connect TCP sockets to all ports.
Parameter: | Description: |
---|---|
domain |
Domain to not audit. |
Do not audit attempts to connect TCP sockets all reserved ports.
Parameter: | Description: |
---|---|
domain |
Domain to not audit. |
Do not audit attempts to connect TCP sockets all rpc ports.
Parameter: | Description: |
---|---|
domain |
Domain to not audit. |
Do not audit attempts to receive TCP packets from a NetLabel connection.
Parameter: | Description: |
---|---|
domain |
Domain to not audit. |
Do not audit attempts to receive TCP packets from a NetLabel connection.
Parameter: | Description: |
---|---|
domain |
Domain to not audit. |
Do not audit attempts to receive TCP packets from an unlabeled connection.
Parameter: | Description: |
---|---|
domain |
Domain to not audit. |
Do not audit send and receive TCP network traffic on generic ports.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Do not audit attepts to bind UDP sockets to any ports.
Parameter: | Description: |
---|---|
domain |
Domain to not audit. |
Do not audit attempts to bind UDP sockets to all reserved ports.
Parameter: | Description: |
---|---|
domain |
Domain to not audit. |
Do not audit attempts to bind UDP sockets to all RPC ports.
Parameter: | Description: |
---|---|
domain |
Domain to not audit. |
Do not audit attempts to receive UDP network traffic on all nodes.
Parameter: | Description: |
---|---|
domain |
Domain to not audit. |
Do not audit attempts to receive UDP network traffic on generic interfaces.
Parameter: | Description: |
---|---|
domain |
Domain to not audit. |
Do not audit attempts to receive UDP packets from a NetLabel connection.
Parameter: | Description: |
---|---|
domain |
Domain to not audit. |
Do not audit attempts to receive UDP packets from a NetLabel connection.
Parameter: | Description: |
---|---|
domain |
Domain to not audit. |
Do not audit attempts to receive UDP packets from an unlabeled connection.
Parameter: | Description: |
---|---|
domain |
Domain to not audit. |
Do not audit attempts to send UDP network traffic on any nodes.
Parameter: | Description: |
---|---|
domain |
Domain to not audit. |
Dontaudit attempts to send UDP network traffic on generic interfaces.
Parameter: | Description: |
---|---|
domain |
Domain to not audit. |
Do not audit attempts to send and receive UDP network traffic on any nodes nodes.
Parameter: | Description: |
---|---|
domain |
Domain to not audit. |
Do not audit attempts to send and receive UDP network traffic on generic interfaces.
Parameter: | Description: |
---|---|
domain |
Domain to not audit. |
Getattr the point-to-point device.
Parameter: | Description: |
---|---|
domain |
The domain allowed access. |
Allow incoming traffic on the generic interfaces.
Parameter: | Description: |
---|---|
domain |
The peer label of the incoming network traffic. |
Allow incoming network traffic from generic nodes.
Parameter: | Description: |
---|---|
domain |
The peer label of the incoming network traffic. |
Allow incoming and outgoing network traffic on the generic interfaces.
Parameter: | Description: |
---|---|
domain |
The peer label of the network traffic. |
Allow incoming and outgoing network traffic with generic nodes.
Parameter: | Description: |
---|---|
domain |
The peer label of the network traffic. |
Define type to be a network node type
Define type to be a network node type
This is for supporting third party modules and its use is not allowed in upstream reference policy.
Parameter: | Description: |
---|---|
domain |
Type to be used for network nodes. |
Send and receive messages on a non-encrypted (no IPSEC) network session.
Send and receive messages on a non-encrypted (no IPSEC) network session. (Deprecated)
The corenet_all_recvfrom_unlabeled() interface should be used instead of this one.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Allow outgoing network traffic on the generic interfaces.
Parameter: | Description: |
---|---|
domain |
The peer label of the outgoing network traffic. |
Allow outgoing network traffic to generic nodes.
Parameter: | Description: |
---|---|
domain |
The peer label of the outgoing network traffic. |
Define type to be a network packet type
Define type to be a network packet type
This is for supporting third party modules and its use is not allowed in upstream reference policy.
Parameter: | Description: |
---|---|
domain |
Type to be used for a network packet. |
Define type to be a network port type
Define type to be a network port type
This is for supporting third party modules and its use is not allowed in upstream reference policy.
Parameter: | Description: |
---|---|
domain |
Type to be used for network ports. |
Bind raw sockets to all nodes.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Bind raw sockets to generic nodes.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Receive raw IP packets on all interfaces.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Receive raw IP packets on all nodes.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Receive raw IP packets on generic interfaces.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Receive raw IP packets on generic nodes.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Receive Raw IP packets from a NetLabel connection.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Rules for receiving labeled raw IP packets.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
peer_domain |
Peer domain. |
Receive Raw IP packets from a NetLabel connection.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Receive Raw IP packets from an unlabeled connection.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send raw IP packets on all interfaces.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send raw IP packets on all nodes.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send raw IP packets on generic interfaces.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send raw IP packets on generic nodes.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send and receive raw IP packets on all interfaces.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send and receive raw IP packets on all nodes.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send and receive raw IP packets on generic interfaces.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send and receive raw IP packets on generic nodes.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Receive all client packets.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Receive all packets.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Receive all server packets.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Receive generic client packets.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Receive generic server packets.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Relabel packets to any client packet type.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Relabel packets to any packet type.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Relabel packets to any server packet type.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Relabel packets to the generic client packet type.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Relabel packets to the generic server packet type.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Define network type to be a reserved port (lt 1024)
Define network type to be a reserved port (lt 1024)
This is for supporting third party modules and its use is not allowed in upstream reference policy.
Parameter: | Description: |
---|---|
domain |
Type to be used for network ports. |
Define network type to be a rpc port ( 512 lt PORT lt 1024)
Define network type to be a rpc port ( 512 lt PORT lt 1024)
This is for supporting third party modules and its use is not allowed in upstream reference policy.
Parameter: | Description: |
---|---|
domain |
Type to be used for network ports. |
Read and write the point-to-point device.
Parameter: | Description: |
---|---|
domain |
The domain allowed access. |
Read and write the TUN/TAP virtual network device.
Parameter: | Description: |
---|---|
domain |
The domain allowed access. |
Send all client packets.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send all packets.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send all server packets.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send generic client packets.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send generic server packets.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send and receive all client packets.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send and receive all packets.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send and receive all server packets.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send and receive generic client packets.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send and receive generic server packets.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send and receive unlabeled packets.
Send and receive unlabeled packets. These packets do not match any netfilter SECMARK rules.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Define type to be a network server packet type
Define type to be a network server packet type
This is for supporting third party modules and its use is not allowed in upstream reference policy.
Parameter: | Description: |
---|---|
domain |
Type to be used for a network server packet. |
Allow specified type to set the context of a SPD entry for labeled ipsec associations.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Make the specified type usable for labeled ipsec.
Parameter: | Description: |
---|---|
domain |
Type to be used for labeled ipsec. |
Bind TCP sockets to all nodes.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Bind TCP sockets to all ports.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Bind TCP sockets to all reserved ports.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Bind TCP sockets to all RPC ports.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Bind TCP sockets to all ports > 1024.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Bind TCP sockets to generic nodes.
Bind TCP sockets to generic nodes. This is necessary for binding a socket so it can be used for servers to listen for incoming connections.
Related interface:
corenet_udp_bind_generic_node()
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Bind TCP sockets to generic ports.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Bind TCP sockets to generic reserved ports.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Connect TCP sockets to all ports.
Connect TCP sockets to all ports
Related interfaces:
corenet_all_recvfrom_unlabeled()
corenet_tcp_sendrecv_generic_if()
corenet_tcp_sendrecv_generic_node()
corenet_tcp_sendrecv_all_ports()
corenet_tcp_bind_all_ports()
Example client being able to connect to all ports over generic nodes, without labeled networking:
allow myclient_t self:tcp_socket create_stream_socket_perms; corenet_tcp_sendrecv_generic_if(myclient_t) corenet_tcp_sendrecv_generic_node(myclient_t) corenet_tcp_sendrecv_all_ports(myclient_t) corenet_tcp_connect_all_ports(myclient_t) corenet_all_recvfrom_unlabeled(myclient_t)
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Connect TCP sockets to reserved ports.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Connect TCP sockets to rpc ports.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Connect TCP sockets to all ports > 1024.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Connect TCP sockets to generic ports.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Connect TCP sockets to generic reserved ports.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Receive TCP packets from a NetLabel connection.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Rules for receiving labeled TCP packets.
Rules for receiving labeled TCP packets.
Due to the nature of TCP, this is bidirectional.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
peer_domain |
Peer domain. |
Receive TCP packets from a NetLabel connection.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Receive TCP packets from an unlabled connection.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send and receive TCP network traffic on all interfaces.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send and receive TCP network traffic on all nodes.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send and receive TCP network traffic on all ports.
Send and receive TCP network traffic on all ports. Related interfaces:
corenet_all_recvfrom_unlabeled()
corenet_tcp_sendrecv_generic_if()
corenet_tcp_sendrecv_generic_node()
corenet_tcp_connect_all_ports()
corenet_tcp_bind_all_ports()
Example client being able to connect to all ports over generic nodes, without labeled networking:
allow myclient_t self:tcp_socket create_stream_socket_perms; corenet_tcp_sendrecv_generic_if(myclient_t) corenet_tcp_sendrecv_generic_node(myclient_t) corenet_tcp_sendrecv_all_ports(myclient_t) corenet_tcp_connect_all_ports(myclient_t) corenet_all_recvfrom_unlabeled(myclient_t)
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send and receive TCP network traffic on all reserved ports.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send and receive TCP network traffic on generic interfaces.
Allow the specified domain to send and receive TCP network traffic on generic network interfaces.
Related interface:
corenet_all_recvfrom_unlabeled()
corenet_tcp_sendrecv_generic_node()
corenet_tcp_sendrecv_all_ports()
corenet_tcp_connect_all_ports()
Example client being able to connect to all ports over generic nodes, without labeled networking:
allow myclient_t self:tcp_socket create_stream_socket_perms; corenet_tcp_sendrecv_generic_if(myclient_t) corenet_tcp_sendrecv_generic_node(myclient_t) corenet_tcp_sendrecv_all_ports(myclient_t) corenet_tcp_connect_all_ports(myclient_t) corenet_all_recvfrom_unlabeled(myclient_t)
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send and receive TCP network traffic on generic nodes.
Allow the specified domain to send and receive TCP network traffic to/from generic network nodes (hostnames/networks).
Related interface:
corenet_all_recvfrom_unlabeled()
corenet_tcp_sendrecv_generic_if()
corenet_tcp_sendrecv_all_ports()
corenet_tcp_connect_all_ports()
Example client being able to connect to all ports over generic nodes, without labeled networking:
allow myclient_t self:tcp_socket create_stream_socket_perms; corenet_tcp_sendrecv_generic_if(myclient_t) corenet_tcp_sendrecv_generic_node(myclient_t) corenet_tcp_sendrecv_all_ports(myclient_t) corenet_tcp_connect_all_ports(myclient_t) corenet_all_recvfrom_unlabeled(myclient_t)
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send and receive TCP network traffic on generic ports.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send and receive TCP network traffic on generic reserved ports.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Bind UDP sockets to all nodes.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Bind UDP sockets to all ports.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Bind UDP sockets to all reserved ports.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Bind UDP sockets to all RPC ports.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Bind UDP sockets to all ports > 1024.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Bind UDP sockets to generic nodes.
Bind UDP sockets to generic nodes. This is necessary for binding a socket so it can be used for servers to listen for incoming connections.
Related interface:
corenet_tcp_bind_generic_node()
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Bind UDP sockets to generic ports.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Bind UDP sockets to generic reserved ports.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Receive UDP network traffic on all interfaces.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Receive UDP network traffic on all nodes.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Receive UDP network traffic on all ports.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Receive UDP network traffic on all reserved ports.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Receive UDP network traffic on generic interfaces.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Receive UDP network traffic on generic nodes.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Receive UDP network traffic on generic ports.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Receive UDP network traffic on generic reserved ports.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Receive UDP packets from a NetLabel connection.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Rules for receiving labeled UDP packets.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
peer_domain |
Peer domain. |
Receive UDP packets from a NetLabel connection.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Receive UDP packets from an unlabeled connection.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send UDP network traffic on all interfaces.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send UDP network traffic on all nodes.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send UDP network traffic on all ports.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send UDP network traffic on all reserved ports.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send UDP network traffic on generic interfaces.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send UDP network traffic on generic nodes.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send UDP network traffic on generic ports.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send UDP network traffic on generic reserved ports.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send and receive UDP network traffic on all interfaces.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send and receive UDP network traffic on all nodes.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send and receive UDP network traffic on all ports.
Send and receive UDP network traffic on all ports. Related interfaces:
corenet_all_recvfrom_unlabeled()
corenet_udp_sendrecv_generic_if()
corenet_udp_sendrecv_generic_node()
corenet_udp_bind_all_ports()
Example client being able to send to all ports over generic nodes, without labeled networking:
allow myclient_t self:udp_socket create_socket_perms; corenet_udp_sendrecv_generic_if(myclient_t) corenet_udp_sendrecv_generic_node(myclient_t) corenet_udp_sendrecv_all_ports(myclient_t) corenet_all_recvfrom_unlabeled(myclient_t)
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send and receive UDP network traffic on all reserved ports.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send and receive UDP network traffic on generic interfaces.
Allow the specified domain to send and receive UDP network traffic on generic network interfaces.
Related interface:
corenet_all_recvfrom_unlabeled()
corenet_udp_sendrecv_generic_node()
corenet_udp_sendrecv_all_ports()
Example client being able to send to all ports over generic nodes, without labeled networking:
allow myclient_t self:udp_socket create_socket_perms; corenet_udp_sendrecv_generic_if(myclient_t) corenet_udp_sendrecv_generic_node(myclient_t) corenet_udp_sendrecv_all_ports(myclient_t) corenet_all_recvfrom_unlabeled(myclient_t)
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send and receive UDP network traffic on generic nodes.
Allow the specified domain to send and receive UDP network traffic to/from generic network nodes (hostnames/networks).
Related interface:
corenet_all_recvfrom_unlabeled()
corenet_udp_sendrecv_generic_if()
corenet_udp_sendrecv_all_ports()
Example client being able to send to all ports over generic nodes, without labeled networking:
allow myclient_t self:udp_socket create_socket_perms; corenet_udp_sendrecv_generic_if(myclient_t) corenet_udp_sendrecv_generic_node(myclient_t) corenet_udp_sendrecv_all_ports(myclient_t) corenet_all_recvfrom_unlabeled(myclient_t)
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send and receive UDP network traffic on generic ports.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Send and receive UDP network traffic on generic reserved ports.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Unconfined access to network objects.
Parameter: | Description: |
---|---|
domain |
The domain allowed access. |