QEMU machine emulator and virtualizer
false
Allow qemu to connect fully to the network
true
Allow qemu to use cifs/Samba file systems
false
Allow qemu to use serial/parallel communication ports
true
Allow qemu to use nfs file systems
true
Allow qemu to use usb devices
Execute a domain transition to run qemu.
| Parameter: | Description: |
|---|---|
| domain |
Domain allowed to transition. |
Execute a domain transition to run qemu unconfined.
| Parameter: | Description: |
|---|---|
| domain |
Domain allowed to transition. |
Send a sigill to qemu
| Parameter: | Description: |
|---|---|
| domain |
Domain allowed access. |
Manage qemu temporary dirs.
| Parameter: | Description: |
|---|---|
| domain |
Domain allowed access. |
Manage qemu temporary files.
| Parameter: | Description: |
|---|---|
| domain |
Domain allowed access. |
Allow the domain to read state files in /proc.
| Parameter: | Description: |
|---|---|
| domain |
Domain to allow access. |
Execute qemu in the qemu domain.
| Parameter: | Description: |
|---|---|
| domain |
Domain allowed to transition. |
| role |
The role to allow the qemu domain. |
Set the schedule on qemu.
| Parameter: | Description: |
|---|---|
| domain |
Domain allowed access. |
Send a signal to qemu.
| Parameter: | Description: |
|---|---|
| domain |
Domain allowed access. |
Creates types and rules for a basic qemu process domain.
| Parameter: | Description: |
|---|---|
| prefix |
Prefix for the domain. |
The per role template for the qemu module.
This template creates a derived domains which are used for qemu web browser.
This template is invoked automatically for each user, and generally does not need to be invoked directly by policy writers.
| Parameter: | Description: |
|---|---|
| user_role |
The role associated with the user domain. |
| user_domain |
The type of the user domain. |