September 2014
Intermediate to advanced
240 pages
5h 53m
English
Service domains usually have a few binaries that are executed by user domains or through other service or application domains. Each case of these executions need to be properly investigated to see if a domain transition is needed (that is, a specific domain needs to be created for that execution environment) or if the command can run within the privileges of the caller domain.
From an interface point of view, this is provided through the _exec, _run, and _domtrans interfaces.
Execution-related interfaces allow for other policy modules to define the interaction with this application. This interaction can be a regular execution, but can also contain a domain transition to switch the application ...
Read now
Unlock full access