Layer: system

Module: qemu

Tunables Interfaces Templates

Description:

policy for qemu


Tunables:

allow_qemu_full_network
Default value

false

Description

Allow qemu to connect fully to the network

Return

Interfaces:

qemu_domtrans( domain )
Summary

Execute a domain transition to run qemu.

Parameters
Parameter:Description:Optional:
domain

Domain allowed to transition.

No
qemu_domtrans_unconfined( domain )
Summary

Execute a domain transition to run qemu.

Parameters
Parameter:Description:Optional:
domain

Domain allowed to transition.

No
qemu_read_state( domain )
Summary

Allow the domain to read state files in /proc.

Parameters
Parameter:Description:Optional:
domain

Domain to allow access.

No
qemu_role( role )
Summary

Execute qemu programs in the role.

Parameters
Parameter:Description:Optional:
role

The role to allow the PAM domain.

No
qemu_run( domain , role , terminal )
Summary

Execute qemu programs in the qemu domain.

Parameters
Parameter:Description:Optional:
domain

Domain allowed access.

No
role

The role to allow the PAM domain.

No
terminal

The type of the terminal allow the PAM domain to use.

No
qemu_runas( domain , role , terminal )
Summary

Execute qemu programs in the qemu domain.

Parameters
Parameter:Description:Optional:
domain

Domain allowed access.

No
role

The role to allow the PAM domain.

No
terminal

The type of the terminal allow the PAM domain to use.

No
qemu_runas_unconfined( domain , role , terminal )
Summary

Execute qemu programs in the qemu unconfined domain.

Parameters
Parameter:Description:Optional:
domain

Domain allowed access.

No
role

The role to allow the PAM domain.

No
terminal

The type of the terminal allow the PAM domain to use.

No
qemu_sigkill( domain )
Summary

Send a sigill to qemu

Parameters
Parameter:Description:Optional:
domain

Domain allowed access.

No
qemu_signal( domain )
Summary

Send a signal to qemu.

Parameters
Parameter:Description:Optional:
domain

Domain allowed access.

No
qemu_unconfined_role( role )
Summary

Execute qemu unconfined programs in the role.

Parameters
Parameter:Description:Optional:
role

The role to allow the PAM domain.

No
Return

Templates:

qemu_domain_template( prefix )
Summary

Creates types and rules for a basic qemu process domain.

Parameters
Parameter:Description:Optional:
prefix

Prefix for the domain.

No
Return