Layer: system

Module: mount

Tunables Interfaces

Description:

Policy for mount.


Tunables:

allow_mount_anyfile
Default value

false

Description

Allow mount to mount any file

allow_mounton_anydir
Default value

true

Description

Allow mount to mount any dir

Return

Interfaces:

mount_domtrans( domain )
Summary

Execute mount in the mount domain.

Parameters
Parameter:Description:Optional:
domain

The type of the process performing this action.

No
mount_domtrans_unconfined( domain )
Summary

Execute mount in the unconfined mount domain.

Parameters
Parameter:Description:Optional:
domain

Domain allowed access.

No
mount_exec( domain )
Summary

Execute mount in the caller domain.

Parameters
Parameter:Description:Optional:
domain

The type of the process performing this action.

No
mount_ntfs_domtrans( domain )
Summary

Execute a domain transition to run mount_ntfs.

Parameters
Parameter:Description:Optional:
domain

Domain allowed to transition.

No
mount_ntfs_rw_stream_sockets( domain )
Summary

Allow the specified domain to read/write to init scripts with a unix domain stream sockets.

Parameters
Parameter:Description:Optional:
domain

Domain allowed access.

No
mount_run( domain , role , terminal )
Summary

Execute mount in the mount domain, and allow the specified role the mount domain, and use the caller's terminal.

Parameters
Parameter:Description:Optional:
domain

The type of the process performing this action.

No
role

The role to be allowed the mount domain.

No
terminal

The type of the terminal allow the mount domain to use.

No
mount_send_nfs_client_request( domain )
Summary

Allow the mount domain to send nfs requests for mounting network drives

Description

Allow the mount domain to send nfs requests for mounting network drives

This interface has been deprecated as these rules were a side effect of leaked mount file descriptors. This interface has no effect.

Parameters
Parameter:Description:Optional:
domain

Domain allowed access.

No
mount_use_fds( domain )
Summary

Use file descriptors for mount.

Parameters
Parameter:Description:Optional:
domain

The type of the process performing this action.

No
Return