Change from the audit administrator role to the specified role.
This is an interface to support third party modules and its use is not allowed in upstream reference policy.
Change from the web administrator role to the specified role.
This is an interface to support third party modules and its use is not allowed in upstream reference policy.
Change from the guest role to the specified role.
This is an interface to support third party modules and its use is not allowed in upstream reference policy.
Change from the log administrator role to the specified role.
This is an interface to support third party modules and its use is not allowed in upstream reference policy.
Change from the security administrator role to the specified role.
This is an interface to support third party modules and its use is not allowed in upstream reference policy.
Change from the staff role to the specified role.
This is an interface to support third party modules and its use is not allowed in upstream reference policy.
Change from the system administrator role to the specified role.
This is an interface to support third party modules and its use is not allowed in upstream reference policy.
Allow sysadm to execute all entrypoint files in a specified domain. This is an explicit transition, requiring the caller to use setexeccon().
This is a interface to support third party modules and its use is not allowed in upstream reference policy.
Allow sysadm to execute a generic bin program in a specified domain.
This is a interface to support third party modules and its use is not allowed in upstream reference policy.
Allow sysadm to debug or ptrace all processes.
Change from the unconfineduser role to the specified role.
This is an interface to support third party modules and its use is not allowed in upstream reference policy.
Allow unconfined to execute the specified program in the specified domain.
This is a interface to support third party modules and its use is not allowed in upstream reference policy.
Allow unconfined to execute the specified program in the specified domain. Allow the specified domain the unconfined role and use of unconfined user terminals.
This is a interface to support third party modules and its use is not allowed in upstream reference policy.
Do not audit attempts to read or write unconfined domain tcp sockets.
This interface was added due to a broken symptom in ldconfig.
Do not audit attempts to read or write unconfined domain packet sockets.
This interface was added due to a broken symptom.
Transition to confined nsplugin domains from unconfined user
Allow a user to login as an unconfined domain
Ignore unconfined mmap_zero errors
Allow unconfined users to transition to the Mozilla plugin domain when running xulrunner plugin-container.
Change from the generic user role to the specified role.
This is an interface to support third party modules and its use is not allowed in upstream reference policy.
Change from the web administrator role to the specified role.
This is an interface to support third party modules and its use is not allowed in upstream reference policy.
Allow webadm to manage files in users home directories
Allow webadm to read files in users home directories
Change from the xguest role to the specified role.
This is an interface to support third party modules and its use is not allowed in upstream reference policy.
Allow xguest users to mount removable media
Allow xguest to configure Network Manager and connect to apache ports
Allow xguest to use blue tooth devices