Software: Apache/2.2.3 (CentOS). PHP/5.1.6 uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44 uid=48(apache) gid=48(apache) groups=48(apache) Safe-mode: OFF (not secure) /usr/share/doc/selinux-policy-2.4.6/html/ drwxr-xr-x |
Viewing file: kernel_storage.html (21.68 KB) -rw-r--r-- Select action/file-type: (+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) | Security Enhanced Linux Reference Policy
+
admin
-
corecommands
+
services
- corenetwork - devices - domain - files - filesystem - kernel - mcs - mls - selinux - storage - terminal * Global Booleans * Global Tunables * Layer Index * Interface Index * Template Index Layer: kernelModule: storageDescription:Policy controlling access to storage devices Interfaces:
storage_dev_filetrans_fixed_disk(
domain
)
SummaryCreate block devices in /dev with the fixed disk type via an automatic type transition. Parameters
storage_dontaudit_getattr_fixed_disk_dev(
domain
)
SummaryDo not audit attempts made by the caller to get the attributes of fixed disk device nodes. Parameters
storage_dontaudit_getattr_removable_dev(
domain
)
SummaryDo not audit attempts made by the caller to get the attributes of removable devices device nodes. Parameters
storage_dontaudit_raw_read_removable_device(
domain
)
SummaryDo not audit attempts to directly read removable devices. Parameters
storage_dontaudit_raw_write_removable_device(
domain
)
SummaryDo not audit attempts to directly write removable devices. Parameters
storage_dontaudit_read_fixed_disk(
domain
)
SummaryDo not audit attempts made by the caller to read fixed disk device nodes. Parameters
storage_dontaudit_read_removable_device(
domain
)
SummaryDo not audit attempts made by the caller to read removable devices device nodes. Parameters
storage_dontaudit_rw_scsi_generic(
domain
)
SummaryDo not audit attempts to read or write SCSI generic device interfaces. Parameters
storage_dontaudit_setattr_fixed_disk_dev(
domain
)
SummaryDo not audit attempts made by the caller to set the attributes of fixed disk device nodes. Parameters
storage_dontaudit_setattr_removable_dev(
domain
)
SummaryDo not audit attempts made by the caller to set the attributes of removable devices device nodes. Parameters
storage_dontaudit_write_fixed_disk(
domain
)
SummaryDo not audit attempts made by the caller to write fixed disk device nodes. Parameters
storage_getattr_fixed_disk_dev(
domain
)
SummaryAllow the caller to get the attributes of fixed disk device nodes. Parameters
storage_getattr_removable_dev(
domain
)
SummaryAllow the caller to get the attributes of removable devices device nodes. Parameters
storage_getattr_scsi_generic_dev(
domain
)
SummaryAllow the caller to get the attributes of the generic SCSI interface device nodes. Parameters
storage_getattr_tape_dev(
domain
)
SummaryAllow the caller to get the attributes of device nodes of tape devices. Parameters
storage_manage_fixed_disk(
domain
)
SummaryCreate, read, write, and delete fixed disk device nodes. Parameters
storage_raw_read_fixed_disk(
domain
)
SummaryAllow the caller to directly read from a fixed disk. This is extremly dangerous as it can bypass the SELinux protections for filesystem objects, and should only be used by trusted domains. Parameters
storage_raw_read_removable_device(
domain
)
SummaryAllow the caller to directly read from a removable device. This is extremly dangerous as it can bypass the SELinux protections for filesystem objects, and should only be used by trusted domains. Parameters
storage_raw_write_fixed_disk(
domain
)
SummaryAllow the caller to directly write to a fixed disk. This is extremly dangerous as it can bypass the SELinux protections for filesystem objects, and should only be used by trusted domains. Parameters
storage_raw_write_removable_device(
domain
)
SummaryAllow the caller to directly write to a removable device. This is extremly dangerous as it can bypass the SELinux protections for filesystem objects, and should only be used by trusted domains. Parameters
storage_read_scsi_generic(
domain
)
SummaryAllow the caller to directly read, in a generic fashion, from any SCSI device. This is extremly dangerous as it can bypass the SELinux protections for filesystem objects, and should only be used by trusted domains. Parameters
storage_read_tape(
domain
)
SummaryAllow the caller to directly read a tape device. Parameters
storage_relabel_fixed_disk(
domain
)
SummaryRelabel fixed disk device nodes. Parameters
storage_setattr_fixed_disk_dev(
domain
)
SummaryAllow the caller to set the attributes of fixed disk device nodes. Parameters
storage_setattr_removable_dev(
domain
)
SummaryAllow the caller to set the attributes of removable devices device nodes. Parameters
storage_setattr_scsi_generic_dev(
domain
)
SummaryAllow the caller to set the attributes of the generic SCSI interface device nodes. Parameters
storage_setattr_scsi_generic_dev_dev(
domain
)
SummarySet attributes of the device nodes for the SCSI generic inerface. Parameters
storage_setattr_tape_dev(
domain
)
SummaryAllow the caller to set the attributes of device nodes of tape devices. Parameters
storage_swapon_fixed_disk(
domain
)
SummaryEnable a fixed disk device as swap space Parameters
storage_tmpfs_filetrans_fixed_disk(
domain
)
SummaryCreate block devices in on a tmpfs filesystem with the fixed disk type via an automatic type transition. Parameters
storage_unconfined(
domain
)
SummaryUnconfined access to storage devices. Parameters
storage_write_scsi_generic(
domain
)
SummaryAllow the caller to directly write, in a generic fashion, from any SCSI device. This is extremly dangerous as it can bypass the SELinux protections for filesystem objects, and should only be used by trusted domains. Parameters
storage_write_tape(
domain
)
SummaryAllow the caller to directly read a tape device. Parameters
|
:: Command execute :: | |
:: Shadow's tricks :D :: | |
Useful Commands
|
:: Preddy's tricks :D :: | |
Php Safe-Mode Bypass (Read Files)
|
--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0262 ]-- |