Security Enhanced Linux Reference Policy

# Layer: admin

## Module: usermanage

Interfaces

### Description:

Policy for managing user accounts.

### Interfaces:

usermanage_check_exec_passwd( domain )

##### Summary

Check if the passwd binary is executable.

##### Parameters

Parameter: | Description:
--- | ---
domain | Domain allowed access.

usermanage_check_exec_useradd( domain )

##### Summary

Check if the useradd binaries are executable.

##### Parameters

Parameter: | Description:
--- | ---
domain | Domain allowed access.

usermanage_domtrans_admin_passwd( domain )

##### Summary

Execute password admin functions in the admin passwd domain.

##### Parameters

Parameter: | Description:
--- | ---
domain | Domain allowed to transition.

usermanage_domtrans_chfn( domain )

##### Summary

Execute chfn in the chfn domain.

##### Parameters

Parameter: | Description:
--- | ---
domain | Domain allowed to transition.

usermanage_domtrans_groupadd( domain )

##### Summary

Execute groupadd in the groupadd domain.

##### Parameters

Parameter: | Description:
--- | ---
domain | Domain allowed to transition.

usermanage_domtrans_passwd( domain )

##### Summary

Execute passwd in the passwd domain.

##### Parameters

Parameter: | Description:
--- | ---
domain | Domain allowed to transition.

usermanage_domtrans_useradd( domain )

##### Summary

Execute useradd in the useradd domain.

##### Parameters

Parameter: | Description:
--- | ---
domain | Domain allowed to transition.

usermanage_dontaudit_use_useradd_fds( domain )

##### Summary

Do not audit attempts to use useradd fds.

##### Parameters

Parameter: | Description:
--- | ---
domain | Domain to not audit.

usermanage_kill_passwd( domain )

##### Summary

Send sigkills to passwd.

##### Parameters

Parameter: | Description:
--- | ---
domain | Domain allowed access.

usermanage_read_crack_db( domain )

##### Summary

Read the crack database.

##### Parameters

Parameter: | Description:
--- | ---
domain | Domain allowed access.

usermanage_run_admin_passwd( domain , role )

##### Summary

Execute passwd admin functions in the admin passwd domain, and allow the specified role the admin passwd domain.

##### Parameters

Parameter: | Description:
--- | ---
domain | Domain allowed to transition.
role | Role allowed access.

usermanage_run_chfn( domain , role )

##### Summary

Execute chfn in the chfn domain, and allow the specified role the chfn domain.

##### Parameters

Parameter: | Description:
--- | ---
domain | Domain allowed to transition.
role | Role allowed access.

usermanage_run_groupadd( domain , role )

##### Summary

Execute groupadd in the groupadd domain, and allow the specified role the groupadd domain.

##### Parameters

Parameter: | Description:
--- | ---
domain | Domain allowed to transition.
role | Role allowed access.

usermanage_run_passwd( domain , role )

##### Summary

Execute passwd in the passwd domain, and allow the specified role the passwd domain.

##### Parameters

Parameter: | Description:
--- | ---
domain | Domain allowed to transition.
role | Role allowed access.

usermanage_run_useradd( domain , role )

##### Summary

Execute useradd in the useradd domain, and allow the specified role the useradd domain.

##### Parameters

Parameter: | Description:
--- | ---
domain | Domain allowed to transition.
role | Role allowed access.

Return