Lines Matching refs:allow
8 …t build a policy unless it also has as a minimum: one [`allow`](cil_access_vector_rules.md#allow) …
14 …ning source/target [`allow`](cil_access_vector_rules.md#allow) rules instead of multiple [`allow`]…
84 - `(allow domain process (file (read write))))` - Adds an [`allow`](cil_access_vector_rules.md#al…
114 …onship a dot '`.`' is used, for example the following [`allow`](cil_access_vector_rules.md#allow) …
121 (allow process object (file (open read getattr)))
126 allow example_ns.process example_ns.object : example_ns.file { open read getattr };
149 (allow tmpfs tmpfs (file (open)))
151 ; allow file.tmpfs file.tmpfs : file.file open;
154 (allow tmpfs .tmpfs (file (read)))
156 ; allow file.tmpfs tmpfs : file.file read;
159 (allow .tmpfs .tmpfs (file (write)))
161 ; allow tmpfs tmpfs : file.file write;
165 (allow other_ns.tmpfs tmpfs (file (getattr)))
167 ; allow other_ns.tmpfs file.tmpfs : file.file getattr;
203 … [`typeattributeset`](cil_type_statements.md#typeattributeset) statements allow `expr_set` to mix …
242 …nd [`tunableif`](cil_conditional_statements.md#tunableif) statements only allow an `expr_set` to h…
246 (allow process device.audio_device (chr_file_set (rw_file_perms)))
252 (allow process device.audio_capture_device (chr_file_set (rw_file_perms)))
256 …atetrans`](cil_constraint_statements.md#mlsvalidatetrans) statements only allow an `expr_set` to h…
298 (allow unconfined.process self (file (read write)))