Layer: contrib

Module: samhain

Interfaces Templates

Description:

Samhain - check file integrity


Interfaces:

samhain_admin( domain )
Summary

All of the rules required to administrate the samhain environment.

Description

This interface assumes that the calling domain has been able to remove an entry from /var/lib/ or /var/log/ and belongs to the mlsfilewrite attribute, since samhain files may be of clearance security level while their parent directories are of s0.

Parameters
Parameter:Description:
domain

Domain allowed access.

samhain_domtrans( domain )
Summary

Execute samhain in the samhain domain

Parameters
Parameter:Description:
domain

Domain allowed to transition.

samhain_manage_config_files( domain )
Summary

Manage samhain configuration files.

Parameters
Parameter:Description:
domain

Domain allowed access.

samhain_manage_db_files( domain )
Summary

Manage samhain database files.

Parameters
Parameter:Description:
domain

Domain allowed access.

samhain_manage_init_script_files( domain )
Summary

Manage samhain init script files

Parameters
Parameter:Description:
domain

Domain allowed access.

samhain_manage_log_files( domain )
Summary

Manage samhain log and log.lock files.

Parameters
Parameter:Description:
domain

Domain allowed access.

samhain_manage_pid_files( domain )
Summary

Manage samhain pid files.

Parameters
Parameter:Description:
domain

Domain allowed access.

samhain_run( domain , role )
Summary

Execute samhain in the samhain domain with the clearance security level and allow the specifiled role the samhain domain.

Description

Execute samhain in the samhain domain with the clearance security level and allow the specifiled role the samhain domain.

The range_transition rule used in this interface requires that the calling domain should have the clearance security level otherwise the MLS constraint for process transition would fail.

Parameters
Parameter:Description:
domain

Domain allowed to transition.

role

Role allowed to access.

Return

Templates:

samhain_service_template( samhaindomain_prefix )
Summary

The template containing the most basic rules common to the samhain domains.

Parameters
Parameter:Description:
samhaindomain_prefix

The prefix of the samhain domains(e.g., samhain for the domain of command line access, samhaind for the domain started by init script).

Return