Libvirt virtualization API
false
Allow virt to use serial/parallell communication ports
false
Allow virt to read fuse files
false
Allow virt to manage nfs files
false
Allow virt to manage cifs files
false
Allow virt to manage device configuration, (pci)
true
Allow virt to use usb devices
All of the rules required to administrate an virt environment
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
role |
Role allowed access. |
Allow the specified domain to append virt log files.
Parameter: | Description: |
---|---|
domain |
Domain allowed to transition. |
Allow domain to attach to virt TUN devices
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Execute a domain transition to run virt.
Parameter: | Description: |
---|---|
domain |
Domain allowed to transition. |
Dontaudit inherited read virt lib files.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Do not audit attempts to write virt daemon unnamed pipes.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Make the specified type usable as a virt image
Parameter: | Description: |
---|---|
type |
Type to be used as a virtual image |
Create, read, write, and delete svirt cache files.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
manage virt config files.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Allow domain to manage virt image files
Parameter: | Description: |
---|---|
domain |
Domain to not audit. |
Create, read, write, and delete virt lib files.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Allow domain to manage virt log files
Parameter: | Description: |
---|---|
domain |
Domain to not audit. |
Manage virt pid files.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Allow domain to read virt blk image files
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Read virt config files.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Allow domain to manage virt image files
Parameter: | Description: |
---|---|
domain |
Domain to not audit. |
Allow domain to read virt image files
Parameter: | Description: |
---|---|
domain |
Domain to not audit. |
Read virt lib files.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Allow the specified domain to read virt's log files.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Read virt PID files.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Search virt lib directories.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Connect to virt over an unix domain stream socket.
Parameter: | Description: |
---|---|
domain |
Domain allowed access. |
Execute qemu in the svirt domain, and allow the specified role the svirt domain.
Parameter: | Description: |
---|---|
domain |
Domain allowed access |
role |
The role to be allowed the sandbox domain. |
Allow domain to write virt image files
Parameter: | Description: |
---|---|
domain |
Domain to not audit. |
Creates types and rules for a basic qemu process domain.
Parameter: | Description: |
---|---|
prefix |
Prefix for the domain. |