Security Enhanced Linux Reference Policy

# Layer: system

## Module: xen

Tunables Interfaces

### Description:

Xen hypervisor.

### Tunables:

xen_use_fusefs

##### Default value

false

##### Description

Determine whether xen can use fusefs file systems.

xen_use_nfs

##### Default value

false

##### Description

Determine whether xen can use nfs file systems.

xen_use_samba

##### Default value

false

##### Description

Determine whether xen can use samba file systems.

xend_run_blktap

##### Default value

false

##### Description

Determine whether xend can run blktapctrl and tapdisk.

Return

### Interfaces:

xen_append_log( domain )

##### Summary

Append xend log files.

##### Parameters

Parameter: | Description:
--- | ---
domain | Domain allowed access.

xen_domtrans( domain )

##### Summary

Execute a domain transition to run xend.

##### Parameters

Parameter: | Description:
--- | ---
domain | Domain allowed to transition.

xen_domtrans_xm( domain )

##### Summary

Execute a domain transition to run xm.

##### Parameters

Parameter: | Description:
--- | ---
domain | Domain allowed to transition.

xen_dontaudit_rw_unix_stream_sockets( domain )

##### Summary

Do not audit attempts to read and write Xen unix domain stream sockets.

##### Parameters

Parameter: | Description:
--- | ---
domain | Domain to not audit.

xen_dontaudit_use_fds( domain )

##### Summary

Do not audit attempts to inherit xen file descriptors.

##### Parameters

Parameter: | Description:
--- | ---
domain | Domain to not audit.

xen_exec( domain )

##### Summary

Execute xend in the caller domain.

##### Parameters

Parameter: | Description:
--- | ---
domain | Domain allowed access.

xen_manage_image_dirs( domain )

##### Summary

Create, read, write, and delete xend image directories.

##### Parameters

Parameter: | Description:
--- | ---
domain | Domain allowed access.

xen_manage_log( domain )

##### Summary

Create, read, write, and delete xend log files.

##### Parameters

Parameter: | Description:
--- | ---
domain | Domain allowed access.

xen_pid_filetrans( domain , private type , object )

##### Summary

Create in a xend_runtime_t directory (Deprecated)

##### Parameters

Parameter: | Description:
--- | ---
domain | Domain allowed access.
private type | The type of the object to be created.
object | The object class of the object being created.

xen_read_image_files( domain )

##### Summary

Read xend image files.

##### Parameters

Parameter: | Description:
--- | ---
domain | Domain allowed access.

xen_read_xenstored_pid_files( domain )

##### Summary

Read xenstored pid files. (Deprecated)

##### Parameters

Parameter: | Description:
--- | ---
domain | Domain allowed access.

xen_read_xenstored_runtime_files( domain )

##### Summary

Read xenstored runtime files.

##### Parameters

Parameter: | Description:
--- | ---
domain | Domain allowed access.

xen_runtime_filetrans( domain , private type , object )

##### Summary

Create in a xend_runtime_t directory

##### Parameters

Parameter: | Description:
--- | ---
domain | Domain allowed access.
private type | The type of the object to be created.
object | The object class of the object being created.

xen_rw_image_files( domain )

##### Summary

Read and write xend image files.

##### Parameters

Parameter: | Description:
--- | ---
domain | Domain allowed access.

xen_stream_connect( domain )

##### Summary

Connect to xend with a unix domain stream socket.

##### Parameters

Parameter: | Description:
--- | ---
domain | Domain allowed access.

xen_stream_connect_xenstore( domain )

##### Summary

Connect to xenstored with a unix domain stream socket.

##### Parameters

Parameter: | Description:
--- | ---
domain | Domain allowed access.

xen_stream_connect_xm( domain )

##### Summary

Connect to xm with a unix domain stream socket.

##### Parameters

Parameter: | Description:
--- | ---
domain | Domain allowed access.

xen_use_fds( domain )

##### Summary

Inherit and use xen file descriptors.

##### Parameters

Parameter: | Description:
--- | ---
domain | Domain allowed access.

Return