Layer: roles

Module: xguest

Tunables Interfaces Templates

Description:

Least privledge X Windows user role


Tunables:

xguest_connect_network
Default value

false

Description

Allow xguest to configure Network Manager

xguest_mount_media
Default value

false

Description

Allow xguest users to mount removable media

xguest_use_bluetooth
Default value

false

Description

Allow xguest to use blue tooth devices

Return

Interfaces:

xguest_dontaudit_append_home_content_files( domain )
Summary

Do not audit attempts to append to the xguest users home directory.

Parameters
Parameter:Description:
domain

Domain to not audit.

xguest_dontaudit_search_home_dirs( domain )
Summary

Do not audit attempts to search the xguest users home directory.

Parameters
Parameter:Description:
domain

Domain to not audit.

xguest_manage_home_dirs( domain )
Summary

Create, read, write, and delete xguest home directories.

Parameters
Parameter:Description:
domain

Domain allowed access.

xguest_read_home_content_files( domain )
Summary

Read files in the xguest users home directory.

Parameters
Parameter:Description:
domain

Domain allowed access.

xguest_relabelto_home_dirs( domain )
Summary

Relabel to xguest home directories.

Parameters
Parameter:Description:
domain

Domain allowed access.

xguest_search_home_dirs( domain )
Summary

Search the xguest users home directory.

Parameters
Parameter:Description:
domain

Domain allowed access.

Return

Templates:

xguest_role_change_template( prefix )
Summary

Change to the xguest role.

Parameters
Parameter:Description:
prefix

The prefix of the user role (e.g., user is the prefix for user_r).

xguest_role_change_to_template( prefix )
Summary

Change from the xguest role.

Description

Change from the xguest role to the specified role.

This is a template to support third party modules and its use is not allowed in upstream reference policy.

Parameters
Parameter:Description:
prefix

The prefix of the user role (e.g., user is the prefix for user_r).

Return