selinux-policy/modules-targeted.conf

2148 lines
28 KiB
Plaintext
Raw Normal View History

2005-11-21 21:49:31 +00:00
#
# This file contains a listing of available modules.
# To prevent a module from being used in policy
# creation, set the module name to "off".
#
# For monolithic policies, modules set to "base" and "module"
# will be built into the policy.
#
# For modular policies, modules set to "base" will be
# included in the base module. "module" will be compiled
# as individual loadable modules.
#
2007-03-11 05:19:36 +00:00
# Layer: admin
# Module: acct
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Berkeley process accounting
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
acct = base
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: admin
# Module: alsa
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Ainit ALSA configuration tool
2005-11-21 21:49:31 +00:00
#
2007-04-19 13:58:54 +00:00
alsa = base
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: apps
# Module: ada
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# ada executable
2005-11-21 21:49:31 +00:00
#
ada = module
2005-11-21 21:49:31 +00:00
2010-03-18 15:47:35 +00:00
# Layer: services
# Module: cachefilesd
#
# CacheFiles userspace management daemon
#
cachefilesd = module
# Layer: apps
# Module: cpufreqselector
#
# cpufreqselector executable
#
cpufreqselector = module
2009-11-20 16:55:54 +00:00
# Layer: apps
# Module: chrome
#
# chrome sandbox
#
chrome = module
2007-11-07 19:42:24 +00:00
# Layer: modules
# Module: awstats
#
# awstats executable
#
awstats = module
2009-08-21 22:58:28 +00:00
# Layer: services
# Module: abrt
#
# Automatic bug detection and reporting tool
#
abrt = module
2010-01-09 14:08:52 +00:00
# Layer: services
# Module: aiccu
#
# SixXS Automatic IPv6 Connectivity Client Utility
#
aiccu = module
2007-03-11 05:19:36 +00:00
# Layer: admin
# Module: amanda
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Automated backup program.
2005-11-21 21:49:31 +00:00
#
amanda = module
2005-11-21 21:49:31 +00:00
2008-12-11 15:21:57 +00:00
# Layer: services
# Module: afs
#
# Andrew Filesystem server
#
afs = module
2007-03-11 05:19:36 +00:00
# Layer: services
# Module: amavis
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Anti-virus
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
amavis = module
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: admin
# Module: anaconda
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Policy for the Anaconda installer.
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
anaconda = base
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: services
# Module: apache
#
# Apache web server
#
apache = module
2007-03-11 05:19:36 +00:00
# Layer: services
# Module: apm
#
# Advanced power management daemon
#
apm = base
# Layer: system
# Module: application
2006-02-19 12:17:15 +00:00
# Required in base
#
2007-03-11 05:19:36 +00:00
# Defines attributs and interfaces for all user applications
2006-02-19 12:17:15 +00:00
#
2007-03-11 05:19:36 +00:00
application = base
# Layer: services
# Module: arpwatch
#
# Ethernet activity monitor.
#
arpwatch = module
2007-03-11 05:19:36 +00:00
# Layer: services
# Module: audioentropy
#
# Generate entropy from audio input
#
audioentropy = module
# Layer: system
# Module: authlogin
#
# Common policy for authentication and user login.
#
authlogin = base
2009-11-20 16:55:54 +00:00
# Layer: services
# Module: asterisk
#
# Asterisk IP telephony server
#
asterisk = module
2007-03-11 05:19:36 +00:00
# Layer: services
# Module: automount
#
# Filesystem automounter service.
#
automount = module
2007-03-11 05:19:36 +00:00
# Layer: services
# Module: avahi
#
# mDNS/DNS-SD daemon implementing Apple ZeroConf architecture
#
avahi = module
2007-03-11 05:19:36 +00:00
2010-03-18 15:47:35 +00:00
# Layer: services
# Module: boinc
#
# Berkeley Open Infrastructure for Network Computing
#
boinc = module
2007-03-11 05:19:36 +00:00
# Layer: services
# Module: bind
#
# Berkeley internet name domain DNS server.
#
bind = module
2007-03-11 05:19:36 +00:00
# Layer: services
# Module: dnsmasq
#
# A lightweight DHCP and caching DNS server.
#
dnsmasq = module
2007-03-11 05:19:36 +00:00
# Layer: services
# Module: bluetooth
#
# Bluetooth tools and system services.
#
bluetooth = module
2006-02-19 12:17:15 +00:00
2008-11-25 19:18:01 +00:00
# Layer: kernel
# Module: ubac
#
#
#
ubac = base
#
2005-11-21 21:49:31 +00:00
# Layer: kernel
2007-03-11 05:19:36 +00:00
# Module: bootloader
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Policy for the kernel modules, kernel image, and bootloader.
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
bootloader = base
# Layer: services
# Module: canna
#
# Canna - kana-kanji conversion server
#
canna = module
2007-03-11 05:19:36 +00:00
# Layer: services
# Module: ccs
#
# policy for ccs
#
ccs = module
# Layer: apps
# Module: calamaris
#
#
# Squid log analysis
#
calamaris = module
# Layer: apps
# Module: cdrecord
#
# Policy for cdrecord
#
cdrecord = module
2005-11-21 21:49:31 +00:00
# Layer: admin
2007-03-11 05:19:36 +00:00
# Module: certwatch
#
2007-03-11 05:19:36 +00:00
# Digital Certificate Tracking
#
2007-03-11 05:19:36 +00:00
certwatch = module
# Layer: admin
# Module: certmaster
#
# Digital Certificate master
#
certmaster = module
2009-12-11 20:18:55 +00:00
# Layer: services
# Module: certmonger
#
# Certificate status monitor and PKI enrollment client
#
certmonger = module
2007-03-11 05:19:36 +00:00
# Layer: services
# Module: cipe
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Encrypted tunnel daemon
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
cipe = module
2009-09-08 23:55:31 +00:00
# Layer: services
# Module: chronyd
#
# Daemon for maintaining clock time
#
chronyd = module
2009-09-29 12:38:58 +00:00
# Layer: services
# Module: cobbler
#
# cobbler
#
cobbler = module
2007-03-11 05:19:36 +00:00
# Layer: services
# Module: comsat
#
# Comsat, a biff server.
#
comsat = module
2007-03-11 05:19:36 +00:00
2009-09-09 21:08:02 +00:00
# Layer: services
# Module: corosync
#
# Corosync Cluster Engine Executive
#
corosync = module
2007-03-11 05:19:36 +00:00
# Layer: services
# Module: clamav
#
# ClamAV Virus Scanner
#
clamav = module
2005-11-21 21:49:31 +00:00
# Layer: system
2007-03-11 05:19:36 +00:00
# Module: clock
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Policy for reading and setting the hardware clock.
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
clock = base
# Layer: services
# Module: consolekit
#
# ConsoleKit is a system daemon for tracking what users are logged
#
consolekit = module
# Layer: admin
# Module: consoletype
#
# Determine of the console connected to the controlling terminal.
#
consoletype = base
2005-11-21 21:49:31 +00:00
# Layer: kernel
2005-11-21 21:49:31 +00:00
# Module: corecommands
# Required in base
#
# Core policy for shells, and generic programs
# in /bin, /sbin, /usr/bin, and /usr/sbin.
#
corecommands = base
2007-03-11 05:19:36 +00:00
# Layer: kernel
# Module: corenetwork
# Required in base
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Policy controlling access to network objects
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
corenetwork = base
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: services
# Module: cpucontrol
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Services for loading CPU microcode and CPU frequency scaling.
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
cpucontrol = base
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: services
# Module: cron
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Periodic execution of scheduled commands.
2005-11-21 21:49:31 +00:00
#
cron = base
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: services
# Module: cups
2006-01-06 01:04:12 +00:00
#
2007-03-11 05:19:36 +00:00
# Common UNIX printing system
2006-01-06 01:04:12 +00:00
#
cups = module
2007-03-11 05:19:36 +00:00
# Layer: services
# Module: cvs
#
# Concurrent versions system
#
cvs = module
2007-03-11 05:19:36 +00:00
2008-02-26 23:02:51 +00:00
# Layer: services
# Module: cyphesis
#
# cyphesis game server
#
cyphesis = module
2007-03-11 05:19:36 +00:00
# Layer: services
# Module: cyrus
#
# Cyrus is an IMAP service intended to be run on sealed servers
#
cyrus = module
2007-03-11 05:19:36 +00:00
# Layer: system
# Module: daemontools
#
# Collection of tools for managing UNIX services
#
daemontools = module
# Layer: services
# Module: dbskk
#
# Dictionary server for the SKK Japanese input method system.
#
dbskk = module
2007-03-11 05:19:36 +00:00
# Layer: services
# Module: dbus
#
# Desktop messaging bus
#
dbus = base
# Layer: services
# Module: dcc
#
# A distributed, collaborative, spam detection and filtering network.
#
dcc = module
2006-01-06 01:04:12 +00:00
2005-11-21 21:49:31 +00:00
# Layer: admin
2007-03-11 05:19:36 +00:00
# Module: ddcprobe
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# ddcprobe retrieves monitor and graphics card information
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
ddcprobe = off
2005-11-21 21:49:31 +00:00
2009-01-19 22:34:56 +00:00
# Layer: services
# Module: devicekit
#
# devicekit-daemon
#
devicekit = module
# Layer: kernel
2007-03-11 05:19:36 +00:00
# Module: devices
# Required in base
#
2007-03-11 05:19:36 +00:00
# Device nodes and interfaces for many basic system devices.
#
2007-03-11 05:19:36 +00:00
devices = base
2007-03-11 05:19:36 +00:00
# Layer: services
# Module: dhcp
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Dynamic host configuration protocol (DHCP) server
2005-11-21 21:49:31 +00:00
#
dhcp = module
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: services
# Module: dictd
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Dictionary daemon
2005-11-21 21:49:31 +00:00
#
dictd = module
2007-03-11 05:19:36 +00:00
# Layer: services
# Module: distcc
#
# Distributed compiler daemon
#
distcc = off
2005-11-21 21:49:31 +00:00
# Layer: admin
2007-03-11 05:19:36 +00:00
# Module: dmesg
#
2007-03-11 05:19:36 +00:00
# Policy for dmesg.
#
2007-03-11 05:19:36 +00:00
dmesg = base
2005-11-21 21:49:31 +00:00
# Layer: admin
2007-03-11 05:19:36 +00:00
# Module: dmidecode
#
# Decode DMI data for x86/ia64 bioses.
#
dmidecode = base
# Layer: system
# Module: domain
# Required in base
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Core policy for domains.
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
domain = base
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: services
# Module: dovecot
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Dovecot POP and IMAP mail server
2005-11-21 21:49:31 +00:00
#
dovecot = module
2005-11-21 21:49:31 +00:00
# Layer: apps
# Module: gitosis
#
# Policy for gitosis
#
gitosis = module
2007-03-11 05:19:36 +00:00
# Layer: apps
# Module: gpg
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Policy for GNU Privacy Guard and related programs.
2005-11-21 21:49:31 +00:00
#
2009-02-10 16:08:36 +00:00
gpg = module
2009-03-06 21:11:04 +00:00
# Layer: services
# Module: gpsd
#
# gpsd monitor daemon
#
#
gpsd = module
# Layer: services
2009-02-10 16:08:36 +00:00
# Module: git
#
# Policy for the stupid content tracker
#
git = module
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: services
# Module: gpm
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# General Purpose Mouse driver
2005-11-21 21:49:31 +00:00
#
gpm = module
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: apps
# Module: ethereal
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Ethereal packet capture tool.
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
ethereal = module
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: services
# Module: fail2ban
2006-01-06 01:04:12 +00:00
#
2007-03-11 05:19:36 +00:00
# daiemon that bans IP that makes too many password failures
2006-01-06 01:04:12 +00:00
#
2007-03-11 05:19:36 +00:00
fail2ban = module
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: services
# Module: fetchmail
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Remote-mail retrieval and forwarding utility
2005-11-21 21:49:31 +00:00
#
fetchmail = module
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: kernel
# Module: files
# Required in base
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Basic filesystem types and interfaces.
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
files = base
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: kernel
# Module: filesystem
# Required in base
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Policy for filesystems.
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
filesystem = base
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: services
# Module: finger
2006-01-06 01:04:12 +00:00
#
2007-03-11 05:19:36 +00:00
# Finger user information service.
2006-01-06 01:04:12 +00:00
#
finger = module
2006-01-06 01:04:12 +00:00
2005-11-21 21:49:31 +00:00
# Layer: admin
# Module: firstboot
#
# Final system configuration run during the first boot
# after installation of Red Hat/Fedora systems.
#
firstboot = base
# Layer: apps
# Module: firewallgui
#
# policy for system-config-firewall
#
firewallgui = module
# Layer: services
# Module: fprintd
#
# finger print server
#
fprintd = module
2007-03-11 05:19:36 +00:00
# Layer: system
# Module: fstools
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Tools for filesystem management, such as mkfs and fsck.
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
fstools = base
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: services
# Module: ftp
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# File transfer protocol service
2005-11-21 21:49:31 +00:00
#
ftp = module
2005-11-21 21:49:31 +00:00
# Layer: apps
2007-03-11 05:19:36 +00:00
# Module: games
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# The Open Group Pegasus CIM/WBEM Server.
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
games = module
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: system
# Module: getty
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Policy for getty.
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
getty = base
2005-11-21 21:49:31 +00:00
# Layer: apps
2007-03-11 05:19:36 +00:00
# Module: gnome
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# gnome session and gconf
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
gnome = module
2005-11-21 21:49:31 +00:00
# Layer: services
# Module: gnomeclock
#
# gnomeclock used by dbus/polkit to set time
#
gnomeclock = module
2007-03-11 05:19:36 +00:00
# Layer: services
# Module: hal
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Hardware abstraction layer
2005-11-21 21:49:31 +00:00
#
hal = module
2005-11-21 21:49:31 +00:00
# Layer: services
# Module: hddtemp
#
# hddtemp hard disk temperature tool running as a daemon
#
hddtemp = module
# Layer: services
2009-07-23 21:47:41 +00:00
# Module: policykit
#
# Hardware abstraction layer
#
2009-07-23 21:47:41 +00:00
policykit = module
# Layer: services
# Module: puppet
#
# A network tool for managing many disparate systems
#
puppet = module
# Layer: apps
# Module: ptchown
#
# helper function for grantpt(3), changes ownship and permissions of pseudotty
#
ptchown = module
2009-01-21 20:39:17 +00:00
# Layer: services
# Module: psad
#
# Analyze iptables log for hostile traffic
#
psad = module
2007-03-11 05:19:36 +00:00
# Layer: system
# Module: hostname
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Policy for changing the system host name.
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
hostname = base
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: system
# Module: hotplug
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Policy for hotplug system, for supporting the
# connection and disconnection of devices at runtime.
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
hotplug = base
2005-11-21 21:49:31 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: howl
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Port of Apple Rendezvous multicast DNS
2005-11-21 21:49:31 +00:00
#
howl = module
2005-11-21 21:49:31 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: inetd
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Internet services daemon.
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
inetd = base
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: system
# Module: init
2005-12-13 04:53:03 +00:00
#
2007-03-11 05:19:36 +00:00
# System initialization programs (init and init scripts).
2005-12-13 04:53:03 +00:00
#
2007-03-11 05:19:36 +00:00
init = base
2005-12-13 04:53:03 +00:00
2005-11-21 21:49:31 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: inn
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Internet News NNTP server
2005-11-21 21:49:31 +00:00
#
inn = module
2007-03-11 05:19:36 +00:00
# Layer: system
# Module: iptables
#
# Policy for iptables.
#
iptables = base
# Layer: system
# Module: ipsec
#
# TCP/IP encryption
#
2007-07-11 19:44:56 +00:00
ipsec = module
2007-03-11 05:19:36 +00:00
# Layer: apps
# Module: irc
#
# IRC client policy
#
irc = module
2005-11-21 21:49:31 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: irqbalance
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# IRQ balancing daemon
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
irqbalance = base
# Layer: system
# Module: iscsi
#
# Open-iSCSI daemon
#
iscsi = module
2005-11-21 21:49:31 +00:00
# Layer: services
# Module: icecast
#
# ShoutCast compatible streaming media server
#
icecast = module
2006-01-06 01:04:12 +00:00
# Layer: services
# Module: i18n_input
#
# IIIMF htt server
#
2006-01-24 15:41:46 +00:00
i18n_input = off
2006-01-06 01:04:12 +00:00
2007-03-11 05:19:36 +00:00
2009-01-12 16:59:00 +00:00
# Layer: services
# Module: jabber
#
# Jabber instant messaging server
#
jabber = module
2007-03-11 05:19:36 +00:00
# Layer: apps
# Module: java
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# java executable
2005-11-21 21:49:31 +00:00
#
java = module
2005-11-21 21:49:31 +00:00
2009-11-20 16:55:54 +00:00
# Layer: apps
# Module: execmem
#
# execmem executable
#
execmem = module
# Layer: system
# Module: kdump
#
# kdump is kernel crash dumping mechanism
#
kdump = module
# Layer: apps
# Module: kdumpgui
#
# system-config-kdump policy
#
kdumpgui = module
2009-12-10 19:20:14 +00:00
# Layer: services
# Module: ksmtuned
#
# Kernel Samepage Merging (KSM) Tuning Daemon
#
ksmtuned = module
2005-11-21 21:49:31 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: kerberos
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# MIT Kerberos admin and KDC
2005-11-21 21:49:31 +00:00
#
kerberos = module
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: kernel
# Module: kernel
# Required in base
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Policy for kernel threads, proc filesystem,and unlabeled processes and objects.
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
kernel = base
2005-11-21 21:49:31 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: ktalk
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# KDE Talk daemon
2005-11-21 21:49:31 +00:00
#
ktalk = module
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: admin
# Module: kudzu
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Hardware detection and configuration tools
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
kudzu = base
2005-11-21 21:49:31 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: ldap
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# OpenLDAP directory server
2005-11-21 21:49:31 +00:00
#
ldap = module
2005-11-21 21:49:31 +00:00
2010-03-18 15:47:35 +00:00
# Layer: services
# Module: likewise
#
# Likewise Active Directory support for UNIX
#
likewise = module
2007-03-11 05:19:36 +00:00
# Layer: system
# Module: libraries
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Policy for system libraries.
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
libraries = base
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: apps
# Module: loadkeys
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Load keyboard mappings.
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
loadkeys = base
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: system
# Module: locallogin
2006-01-06 01:04:12 +00:00
#
2007-03-11 05:19:36 +00:00
# Policy for local logins.
2006-01-06 01:04:12 +00:00
#
2007-03-11 05:19:36 +00:00
locallogin = base
2006-01-06 01:04:12 +00:00
2007-03-11 05:19:36 +00:00
# Layer: apps
# Module: lockdev
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# device locking policy for lockdev
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
lockdev = module
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: system
# Module: logging
2006-01-06 01:04:12 +00:00
#
2007-03-11 05:19:36 +00:00
# Policy for the kernel message logger and system logging daemon.
2006-01-06 01:04:12 +00:00
#
2007-03-11 05:19:36 +00:00
logging = base
2006-01-06 01:04:12 +00:00
2007-03-11 05:19:36 +00:00
# Layer: admin
# Module: logrotate
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Rotate and archive system logs
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
logrotate = base
2005-11-21 21:49:31 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: logwatch
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# logwatch executable
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
logwatch = base
2005-11-21 21:49:31 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: lpd
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Line printer daemon
2005-11-21 21:49:31 +00:00
#
lpd = module
2005-11-21 21:49:31 +00:00
# Layer: services
# Module: lircd
#
# LIRC daemon - decodes infrared signals and provides them on a Unix domain socket.
#
lircd = module
2007-03-11 05:19:36 +00:00
# Layer: system
# Module: lvm
#
2007-03-11 05:19:36 +00:00
# Policy for logical volume management programs.
#
2007-03-11 05:19:36 +00:00
lvm = base
2010-02-03 20:52:58 +00:00
# Layer: admin
# Module: mcelog
#
# Policy for mcelog.
#
mcelog = base
2005-11-21 21:49:31 +00:00
# Layer: services
# Module: mailman
#
# Mailman is for managing electronic mail discussion and e-newsletter lists
#
mailman = module
2007-03-11 05:19:36 +00:00
# Layer: kernel
# Module: mcs
# Required in base
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# MultiCategory security policy
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
mcs = base
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: system
# Module: miscfiles
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Miscelaneous files.
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
miscfiles = base
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: kernel
# Module: mls
# Required in base
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Multilevel security policy
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
mls = base
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: system
# Module: modutils
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Policy for kernel module utilities
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
modutils = base
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: apps
# Module: mono
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# mono executable
2005-11-21 21:49:31 +00:00
#
mono = module
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: system
# Module: mount
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Policy for mount.
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
mount = base
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: apps
# Module: mozilla
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Policy for Mozilla and related web browsers
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
mozilla = module
2005-11-21 21:49:31 +00:00
# Layer: services
# Module: ntop
#
# Policy for ntop
#
ntop = module
2009-06-24 13:15:55 +00:00
# Layer: services
# Module: nslcd
#
# Policy for nslcd
#
nslcd = module
# Layer: apps
# Module: nsplugin
#
# Policy for nspluginwrapper
#
nsplugin = module
2005-11-21 21:49:31 +00:00
# Layer: services
# Module: modemmanager
#
# Manager for dynamically switching between modems.
#
modemmanager = module
2007-03-11 05:19:36 +00:00
# Layer: apps
# Module: mplayer
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Policy for Mozilla and related web browsers
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
mplayer = module
2005-11-21 21:49:31 +00:00
# Layer: apps
# Module: gpg
#
# Policy for Mozilla and related web browsers
#
gpg = module
2007-03-11 05:19:36 +00:00
# Layer: admin
# Module: mrtg
#
2007-03-11 05:19:36 +00:00
# Network traffic graphing
#
2007-03-11 05:19:36 +00:00
mrtg = module
2005-11-21 21:49:31 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: mta
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Policy common to all email tranfer agents.
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
mta = base
2005-11-21 21:49:31 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: mysql
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Policy for MySQL
2005-11-21 21:49:31 +00:00
#
mysql = module
2005-11-21 21:49:31 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: nagios
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# policy for nagios Host/service/network monitoring program
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
nagios = module
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: admin
# Module: netutils
#
2007-03-11 05:19:36 +00:00
# Network analysis utilities
#
2007-03-11 05:19:36 +00:00
netutils = base
2005-11-21 21:49:31 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: networkmanager
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Manager for dynamically switching between networks.
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
networkmanager = base
2005-11-21 21:49:31 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: nis
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Policy for NIS (YP) servers and clients
2005-11-21 21:49:31 +00:00
#
nis = module
2007-03-11 05:19:36 +00:00
2005-11-21 21:49:31 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: nscd
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Name service cache daemon
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
nscd = base
2005-11-21 21:49:31 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: ntp
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Network time protocol daemon
2005-11-21 21:49:31 +00:00
#
ntp = module
2005-11-21 21:49:31 +00:00
2009-11-20 16:55:54 +00:00
# Layer: services
# Module: nut
#
# nut - Network UPS Tools
#
nut = module
2007-11-19 20:09:32 +00:00
# Layer: services
# Module: nx
#
# NX Remote Desktop
#
nx = module
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: oddjob
#
2007-03-11 05:19:36 +00:00
# policy for oddjob
#
2007-03-11 05:19:36 +00:00
oddjob = module
2005-11-21 21:49:31 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: openct
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Service for handling smart card readers.
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
openct = off
2005-11-21 21:49:31 +00:00
2006-09-05 20:19:56 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: openvpn
2006-09-05 20:19:56 +00:00
#
2007-03-11 05:19:36 +00:00
# Policy for OPENVPN full-featured SSL VPN solution
2006-09-05 20:19:56 +00:00
#
openvpn = module
2006-09-05 20:19:56 +00:00
2007-03-11 05:19:36 +00:00
# Layer: service
# Module: pcscd
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# PC/SC Smart Card Daemon
#
pcscd = module
2007-05-04 17:30:10 +00:00
# Layer: service
# Module: openct
#
# Middleware framework for smart card terminals
#
openct = module
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: system
# Module: pcmcia
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# PCMCIA card management services
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
pcmcia = base
2005-11-21 21:49:31 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: pegasus
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# The Open Group Pegasus CIM/WBEM Server.
2005-11-21 21:49:31 +00:00
#
pegasus = module
2005-11-21 21:49:31 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: postgresql
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# PostgreSQL relational database
2005-11-21 21:49:31 +00:00
#
postgresql = module
2005-11-21 21:49:31 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: portmap
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# RPC port mapping service.
2005-11-21 21:49:31 +00:00
#
portmap = module
2005-11-21 21:49:31 +00:00
# Layer: services
# Module: postfix
#
# Postfix email server
#
postfix = module
2005-11-21 21:49:31 +00:00
2009-05-02 11:52:13 +00:00
# Layer: services
2007-11-10 14:14:41 +00:00
# Module: postgrey
#
# email scanner
#
postgrey = module
2007-11-10 14:14:41 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: ppp
#
# Point to Point Protocol daemon creates links in ppp networks
#
ppp = module
2007-03-11 05:19:36 +00:00
# Layer: admin
# Module: prelink
#
2007-03-11 05:19:36 +00:00
# Manage temporary directory sizes and file ages
#
2007-03-11 05:19:36 +00:00
prelink = base
2005-11-21 21:49:31 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: procmail
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Procmail mail delivery agent
2005-11-21 21:49:31 +00:00
#
procmail = module
2005-11-21 21:49:31 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: privoxy
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Privacy enhancing web proxy.
2005-11-21 21:49:31 +00:00
#
privoxy = module
2005-11-21 21:49:31 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: publicfile
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# publicfile supplies files to the public through HTTP and FTP
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
publicfile = module
2005-11-21 21:49:31 +00:00
2009-03-09 16:18:51 +00:00
# Layer: apps
# Module: pulseaudio
#
# The PulseAudio Sound System
#
pulseaudio = module
2007-02-27 18:34:08 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: pyzor
2007-02-27 18:34:08 +00:00
#
2007-03-11 05:19:36 +00:00
# Spam Blocker
2007-02-27 18:34:08 +00:00
#
2007-03-11 05:19:36 +00:00
pyzor = module
2007-02-27 18:34:08 +00:00
2005-11-21 21:49:31 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: qmail
2005-11-21 21:49:31 +00:00
#
# Policy for qmail
2005-11-21 21:49:31 +00:00
#
qmail = module
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: admin
# Module: quota
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# File system quota management
2005-11-21 21:49:31 +00:00
#
quota = base
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: system
# Module: raid
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# RAID array management tools
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
raid = base
2005-11-21 21:49:31 +00:00
2006-01-06 01:04:12 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: radius
2006-01-06 01:04:12 +00:00
#
2007-03-11 05:19:36 +00:00
# RADIUS authentication and accounting server.
2006-01-06 01:04:12 +00:00
#
radius = module
2005-11-21 21:49:31 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: radvd
#
2007-03-11 05:19:36 +00:00
# IPv6 router advertisement daemon
#
radvd = module
2005-11-21 21:49:31 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: razor
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# A distributed, collaborative, spam detection and filtering network.
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
razor = module
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: admin
# Module: readahead
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Readahead, read files into page cache for improved performance
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
readahead = base
2005-11-21 21:49:31 +00:00
2009-09-09 21:08:02 +00:00
# Layer: services
# Module: rgmanager
#
# Red Hat Resource Group Manager
#
rgmanager = module
# Layer: services
# Module: rhcs
#
# RHCS - Red Hat Cluster Suite
#
rhcs = module
2009-09-29 19:47:31 +00:00
# Layer: services
# Module: aisexec
#
# RHCS - Red Hat Cluster Suite
#
aisexec = module
# Layer: services
# Module: rgmanager
#
# rgmanager
#
rgmanager = module
2009-11-20 16:55:54 +00:00
# Layer: services
# Module: clogd
#
# clogd - clustered mirror log server
#
clogd = module
2005-11-21 21:49:31 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: rhgb
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# X windows login display manager
2005-11-21 21:49:31 +00:00
#
rhgb = module
2005-11-21 21:49:31 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: rdisc
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Network router discovery daemon
2005-11-21 21:49:31 +00:00
#
rdisc = module
2005-11-21 21:49:31 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: remotelogin
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Policy for rshd, rlogind, and telnetd.
2005-11-21 21:49:31 +00:00
#
remotelogin = module
2005-11-21 21:49:31 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: ricci
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# policy for ricci
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
ricci = module
2005-11-21 21:49:31 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: rlogin
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Remote login daemon
2005-11-21 21:49:31 +00:00
#
rlogin = module
2005-11-21 21:49:31 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: roundup
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Roundup Issue Tracking System policy
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
roundup = module
2005-11-21 21:49:31 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: rpc
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Remote Procedure Call Daemon for managment of network based process communication
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
rpc = base
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: admin
# Module: rpm
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Policy for the RPM package manager.
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
rpm = base
2005-11-21 21:49:31 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: rshd
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Remote shell service.
2005-11-21 21:49:31 +00:00
#
rshd = module
2005-11-21 21:49:31 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: rsync
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Fast incremental file transfer for synchronization
2005-11-21 21:49:31 +00:00
#
rsync = module
2007-03-11 05:19:36 +00:00
2009-06-25 21:43:36 +00:00
# Layer: services
# Module: rtkit
2009-06-25 21:43:36 +00:00
#
# Real Time Kit Daemon
#
rtkit = module
2009-06-25 21:43:36 +00:00
2007-04-17 19:28:14 +00:00
# Layer: services
# Module: rwho
#
# who is logged in on local machines
#
rwho = module
2005-11-21 21:49:31 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: samba
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# SMB and CIFS client/server programs for UNIX and
# name Service Switch daemon for resolving names
# from Windows NT servers.
2005-11-21 21:49:31 +00:00
#
samba = module
2005-11-21 21:49:31 +00:00
# Layer: apps
# Module: sandbox
#
# Experimental policy for running apps within a sandbox
#
sandbox = module
# Layer: apps
# Module: sambagui
#
# policy for system-config-samba
#
sambagui = module
2009-04-30 22:22:00 +00:00
# Layer: services
# Module: sasl
#
# SASL authentication server
#
sasl = module
2007-03-11 05:19:36 +00:00
# Layer: apps
# Module: screen
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# GNU terminal multiplexer
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
screen = module
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: kernel
# Module: selinux
# Required in base
#
2007-03-11 05:19:36 +00:00
# Policy for kernel security interface, in particular, selinuxfs.
#
2007-03-11 05:19:36 +00:00
selinux = base
2005-11-21 21:49:31 +00:00
# Layer: system
2007-03-11 05:19:36 +00:00
# Module: selinuxutil
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Policy for SELinux policy and userland applications.
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
selinuxutil = base
2005-11-21 21:49:31 +00:00
2009-04-30 22:22:00 +00:00
# Layer: services
# Module: sendmail
#
# Policy for sendmail.
#
sendmail = base
# Layer: apps
# Module: seunshare
#
# seunshare executable
#
seunshare = module
2009-09-09 21:08:02 +00:00
# Layer: admin
2009-04-30 22:22:00 +00:00
# Module: shorewall
#
# Policy for shorewall
#
shorewall = base
2010-03-18 15:47:35 +00:00
# Layer: admin
# Module: shutdown
#
# Policy for shutdown
#
shutdown = module
# Layer: admin
2009-11-20 16:55:54 +00:00
# Module: sectoolm
#
# Policy for sectool-mechanism
#
sectoolm = module
2005-11-21 21:49:31 +00:00
# Layer: system
2007-03-11 05:19:36 +00:00
# Module: setrans
# Required in base
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Policy for setrans
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
setrans = base
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: services
# Module: setroubleshoot
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Policy for the SELinux troubleshooting utility
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
setroubleshoot = base
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: services
# Module: slrnpull
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Service for downloading news feeds the slrn newsreader.
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
slrnpull = off
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: apps
# Module: slocate
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Update database for mlocate
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
slocate = module
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: services
# Module: smartmon
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Smart disk monitoring daemon policy
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
smartmon = module
2005-11-21 21:49:31 +00:00
2010-03-18 15:47:35 +00:00
# Layer: services
# Module: smokeping
#
# Latency Logging and Graphing System
#
smokeping = module
# Layer: admin
# Module: smoltclient
#
2010-03-18 15:47:35 +00:00
#The Fedora hardware profiler client
#
smoltclient = module
2007-03-11 05:19:36 +00:00
# Layer: services
# Module: snmp
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Simple network management protocol services
2005-11-21 21:49:31 +00:00
#
snmp = module
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: services
# Module: spamassassin
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Filter used for removing unsolicited email.
2005-11-21 21:49:31 +00:00
#
spamassassin = module
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: services
# Module: squid
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Squid caching http proxy server
2005-11-21 21:49:31 +00:00
#
squid = module
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: services
# Module: ssh
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Secure shell client and server policy.
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
ssh = base
2005-11-21 21:49:31 +00:00
2009-03-09 21:17:23 +00:00
# Layer: services
# Module: sssd
#
# System Security Services Daemon
#
sssd = module
2007-03-11 05:19:36 +00:00
# Layer: kernel
# Module: storage
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Policy controlling access to storage devices
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
storage = base
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: services
# Module: stunnel
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# SSL Tunneling Proxy
2005-11-21 21:49:31 +00:00
#
stunnel = module
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: admin
# Module: su
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Run shells with substitute user and group
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
su = base
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: admin
# Module: sudo
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Execute a command with a substitute user
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
sudo = base
2005-11-21 21:49:31 +00:00
# Layer: system
2007-03-11 05:19:36 +00:00
# Module: sysnetwork
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Policy for network configuration: ifconfig and dhcp client.
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
sysnetwork = base
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: services
# Module: sysstat
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Policy for sysstat. Reports on various system states
2005-11-21 21:49:31 +00:00
#
sysstat = module
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: services
# Module: tcpd
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Policy for TCP daemon.
2005-11-21 21:49:31 +00:00
#
tcpd = module
2005-11-21 21:49:31 +00:00
2009-12-11 20:18:55 +00:00
# Layer: services
# Module: tgtd
#
# Linux Target Framework Daemon.
#
tgtd = module
2005-11-21 21:49:31 +00:00
# Layer: system
2007-03-11 05:19:36 +00:00
# Module: udev
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Policy for udev.
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
udev = base
2005-11-21 21:49:31 +00:00
2010-02-02 16:41:03 +00:00
# Layer: services
# Module: usbmuxd
#
# Daemon for communicating with Apple's iPod Touch and iPhone
#
usbmuxd = module
2005-11-21 21:49:31 +00:00
# Layer: system
2007-03-11 05:19:36 +00:00
# Module: userdomain
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Policy for user domains
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
userdomain = base
2005-11-21 21:49:31 +00:00
# Layer: system
# Module: unconfined
#
# The unconfined domain.
#
unconfined = module
2005-11-21 21:49:31 +00:00
# Layer: services
# Module: ulogd
#
2009-12-11 20:18:55 +00:00
# netfilter/iptables ULOG daemon
#
ulogd = module
2009-12-10 19:20:14 +00:00
# Layer: services
# Module: vhostmd
#
# vhostmd - A metrics gathering daemon
#
vhostmd = module
2007-03-11 05:19:36 +00:00
# Layer: apps
# Module: wine
2005-11-21 21:49:31 +00:00
#
2007-03-11 05:19:36 +00:00
# wine executable
2005-11-21 21:49:31 +00:00
#
wine = module
2005-11-21 21:49:31 +00:00
2007-03-11 05:19:36 +00:00
# Layer: admin
# Module: tzdata
2006-03-07 22:22:14 +00:00
#
2007-03-11 05:19:36 +00:00
# Policy for tzdata-update
2006-03-07 22:22:14 +00:00
#
2007-03-11 05:19:36 +00:00
tzdata = base
2006-03-07 22:22:14 +00:00
2005-12-15 03:31:43 +00:00
# Layer: apps
2007-03-11 05:19:36 +00:00
# Module: userhelper
2005-12-15 03:31:43 +00:00
#
2007-03-11 05:19:36 +00:00
# A helper interface to pam.
2005-12-15 03:31:43 +00:00
#
2007-03-11 05:19:36 +00:00
userhelper = module
2005-12-15 03:31:43 +00:00
2005-12-30 16:08:00 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: tor
2005-12-30 16:08:00 +00:00
#
2007-03-11 05:19:36 +00:00
# TOR, the onion router
2005-12-30 16:08:00 +00:00
#
2007-03-11 05:19:36 +00:00
tor = module
2006-01-09 20:20:08 +00:00
# Layer: apps
2007-03-11 05:19:36 +00:00
# Module: tvtime
2006-01-09 20:20:08 +00:00
#
2007-03-11 05:19:36 +00:00
# tvtime - a high quality television application
2006-01-09 20:20:08 +00:00
#
2007-03-11 05:19:36 +00:00
tvtime = module
2006-01-09 20:20:08 +00:00
# Layer: apps
2007-03-11 05:19:36 +00:00
# Module: uml
2006-04-29 04:47:05 +00:00
#
2007-03-11 05:19:36 +00:00
# Policy for UML
2006-04-29 04:47:05 +00:00
#
2007-03-11 05:19:36 +00:00
uml = module
2006-04-29 04:47:05 +00:00
2007-03-11 05:19:36 +00:00
# Layer: admin
# Module: usbmodules
2006-04-29 04:47:05 +00:00
#
2007-03-11 05:19:36 +00:00
# List kernel modules of USB devices
2006-04-29 04:47:05 +00:00
#
2007-03-11 05:19:36 +00:00
usbmodules = module
2006-04-29 04:47:05 +00:00
2007-03-11 05:19:36 +00:00
# Layer: apps
# Module: usernetctl
2006-05-04 17:39:16 +00:00
#
2007-03-11 05:19:36 +00:00
# User network interface configuration helper
2006-05-04 17:39:16 +00:00
#
2007-03-11 05:19:36 +00:00
usernetctl = module
2006-05-04 17:39:16 +00:00
2006-05-08 19:26:49 +00:00
# Layer: system
2007-03-11 05:19:36 +00:00
# Module: xen
2006-05-08 19:26:49 +00:00
#
2007-08-27 21:43:05 +00:00
# virtualization software
2006-05-08 19:26:49 +00:00
#
xen = module
2006-05-08 19:26:49 +00:00
2009-05-18 18:49:15 +00:00
# Layer: services
# Module: varnishd
#
# Varnishd http accelerator daemon
#
varnishd = module
2008-07-15 15:22:39 +00:00
# Layer: services
2007-08-27 21:43:05 +00:00
# Module: virt
#
# Virtualization libraries
#
virt = module
2008-07-15 15:22:39 +00:00
# Layer: apps
# Module: qemu
#
# Virtualization emulator
#
qemu = module
2007-08-27 21:43:05 +00:00
2007-07-11 19:44:56 +00:00
# Layer: system
# Module: brctl
#
# Utilities for configuring the linux ethernet bridge
#
brctl = base
2006-05-09 21:50:36 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: telnet
2006-05-09 21:50:36 +00:00
#
2007-03-11 05:19:36 +00:00
# Telnet daemon
2006-05-09 21:50:36 +00:00
#
telnet = module
2006-07-28 17:44:17 +00:00
2006-07-14 20:09:54 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: timidity
2006-07-14 20:09:54 +00:00
#
2007-03-11 05:19:36 +00:00
# MIDI to WAV converter and player configured as a service
2006-07-14 20:09:54 +00:00
#
2007-03-11 05:19:36 +00:00
timidity = off
2006-07-14 20:09:54 +00:00
2006-07-28 17:44:17 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: tftp
2006-07-28 17:44:17 +00:00
#
2007-03-11 05:19:36 +00:00
# Trivial file transfer protocol daemon
2006-07-28 17:44:17 +00:00
#
tftp = module
2006-05-17 01:40:53 +00:00
2009-11-20 16:55:54 +00:00
# Layer: services
# Module: tuned
#
# Dynamic adaptive system tuning daemon
#
tuned = module
2007-03-11 05:19:36 +00:00
# Layer: services
# Module: uucp
#
2007-03-11 05:19:36 +00:00
# Unix to Unix Copy
#
uucp = module
2007-03-11 05:19:36 +00:00
# Layer: services
# Module: vbetool
#
2007-03-11 05:19:36 +00:00
# run real-mode video BIOS code to alter hardware state
#
2007-03-11 05:19:36 +00:00
vbetool = base
# Layer: apps
2007-03-11 05:19:36 +00:00
# Module: webalizer
#
2007-03-11 05:19:36 +00:00
# Web server log analysis
#
webalizer = module
2006-08-28 21:49:05 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: xfs
2006-08-28 21:49:05 +00:00
#
2007-03-11 05:19:36 +00:00
# X Windows Font Server
2006-08-28 21:49:05 +00:00
#
xfs = module
2006-08-28 21:49:05 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: xserver
2006-08-28 21:49:05 +00:00
#
2007-03-11 05:19:36 +00:00
# X windows login display manager
2006-08-28 21:49:05 +00:00
#
2007-03-11 05:19:36 +00:00
xserver = base
2006-08-28 21:49:05 +00:00
# Layer: services
2007-03-11 05:19:36 +00:00
# Module: zebra
2006-08-28 21:49:05 +00:00
#
2007-03-11 05:19:36 +00:00
# Zebra border gateway protocol network routing service
2006-08-28 21:49:05 +00:00
#
zebra = module
2006-08-28 21:49:05 +00:00
2007-03-11 05:19:36 +00:00
# Layer: admin
# Module: usermanage
2006-09-19 19:14:48 +00:00
#
2007-03-11 05:19:36 +00:00
# Policy for managing user accounts.
2006-09-19 19:14:48 +00:00
#
2007-03-11 05:19:36 +00:00
usermanage = base
2006-09-19 19:14:48 +00:00
2007-03-11 05:19:36 +00:00
# Layer: admin
# Module: updfstab
2006-09-19 19:14:48 +00:00
#
2007-03-11 05:19:36 +00:00
# Red Hat utility to change /etc/fstab.
2006-09-19 19:14:48 +00:00
#
2007-03-11 05:19:36 +00:00
updfstab = base
2006-09-19 19:14:48 +00:00
2007-03-11 05:19:36 +00:00
# Layer: admin
# Module: vpn
2006-09-26 14:59:58 +00:00
#
2007-03-11 05:19:36 +00:00
# Virtual Private Networking client
2006-09-26 14:59:58 +00:00
#
vpn = module
# Layer: admin
2007-03-11 05:19:36 +00:00
# Module: vbetool
#
2007-03-11 05:19:36 +00:00
# run real-mode video BIOS code to alter hardware state
#
2007-03-11 05:19:36 +00:00
vbetool = base
2007-03-11 05:19:36 +00:00
# Layer: kernel
# Module: terminal
# Required in base
2007-02-12 16:18:31 +00:00
#
2007-03-11 05:19:36 +00:00
# Policy for terminals.
2007-02-12 16:18:31 +00:00
#
2007-03-11 05:19:36 +00:00
terminal = base
2007-02-15 00:19:30 +00:00
2007-03-11 05:19:36 +00:00
# Layer: admin
# Module: tmpreaper
2007-02-15 00:19:30 +00:00
#
2007-03-11 05:19:36 +00:00
# Manage temporary directory sizes and file ages
2007-02-15 00:19:30 +00:00
#
tmpreaper = module
2007-02-15 00:19:30 +00:00
2007-03-11 05:19:36 +00:00
# Layer: admin
# Module: amtu
#
2007-03-11 05:19:36 +00:00
# Abstract Machine Test Utility (AMTU)
#
2007-03-11 05:19:36 +00:00
amtu = module
2007-03-12 14:51:29 +00:00
# Layer: services
# Module: zabbix
#
# Open-source monitoring solution for your IT infrastructure
#
zabbix = module
2007-04-02 15:17:45 +00:00
# Layer: services
# Module: apcupsd
#
# daemon for most APCs UPS for Linux
#
apcupsd = module
2007-04-02 19:53:16 +00:00
# Layer: services
# Module: aide
#
# Policy for aide
#
aide = module
2007-04-27 17:23:49 +00:00
2007-04-11 20:55:28 +00:00
# Layer: services
# Module: w3c
#
# w3c
#
w3c = module
# Layer: services
2010-02-16 22:10:14 +00:00
# Module: plymouthd
#
# Plymouth
#
2010-02-16 22:10:14 +00:00
plymouthd = module
2008-10-14 23:50:08 +00:00
# Layer: services
# Module: portreserve
#
# reserve ports to prevent portmap mapping them
#
portreserve = module
2007-05-21 18:54:40 +00:00
# Layer: services
# Module: rpcbind
#
# universal addresses to RPC program number mapper
#
rpcbind = module
2009-05-18 18:49:15 +00:00
# Layer: apps
# Module: rssh
#
# Restricted (scp/sftp) only shell
#
rssh = module
# Layer: apps
# Module: vmware
#
# VMWare Workstation virtual machines
#
vmware = module
2008-05-19 13:02:56 +00:00
# Layer: role
# Module: logadm
#
# Minimally prived root role for managing logging system
#
logadm = module
2008-05-19 13:02:56 +00:00
# Layer: role
# Module: webadm
#
# Minimally prived root role for managing apache
#
webadm = module
#
# Layer: services
# Module: exim
#
# exim mail server
#
exim = module
# Layer: services
# Module: kismet
#
# Wireless sniffing and monitoring
#
kismet = module
2007-10-23 23:13:09 +00:00
# Layer: services
# Module: munin
#
# Munin
#
munin = module
# Layer: services
# Module: bitlbee
#
# An IRC to other chat networks gateway
#
bitlbee = module
2010-03-18 15:47:35 +00:00
# Layer: system
# Module: sosreport
#
# sosreport debuggin information generator
#
sosreport = module
2007-12-18 19:58:20 +00:00
# Layer: services
# Module: soundserver
#
# sound server for network audio server programs, nasd, yiff, etc</summary>
#
soundserver = module
# Layer: role
# Module: unconfineduser
#
# The unconfined user domain.
#
unconfineduser = module
2008-05-19 13:02:56 +00:00
# Layer:role
# Module: staff
#
2008-05-19 13:02:56 +00:00
# admin account
#
2008-05-20 21:37:28 +00:00
staff = module
2008-05-19 13:02:56 +00:00
# Layer:role
# Module: sysadm
#
# System Administrator
#
2008-05-23 20:05:34 +00:00
sysadm = base
2008-05-19 13:02:56 +00:00
# Layer: role
# Module: unprivuser
#
# Minimally privs guest account on tty logins
#
2008-05-20 21:37:28 +00:00
unprivuser = module
2008-01-30 21:34:13 +00:00
# Layer: services
# Module: prelude
#
prelude = module
# Layer: services
# Module: pads
#
pads = module
# Layer: services
# Module: kerneloops
#
# program to collect and submit kernel oopses to kerneloops.org
#
kerneloops = module
# Layer: apps
# Module: openoffice
#
# openoffice executable
#
openoffice = module
2008-07-15 15:22:39 +00:00
# Layer: apps
# Module: podsleuth
#
# Podsleuth probes, identifies, and exposes properties and metadata bound to iPods.
#
podsleuth = module
2008-05-19 13:02:56 +00:00
# Layer: role
# Module: guest
#
# Minimally privs guest account on tty logins
#
guest = module
# Layer: role
# Module: xguest
#
# Minimally privs guest account on X Windows logins
#
xguest = module
2008-05-30 20:12:46 +00:00
# Layer: services
# Module: courier
#
# IMAP and POP3 email servers
#
courier = module
2008-06-04 17:26:52 +00:00
2009-12-22 17:25:13 +00:00
# Layer: services
# Module: cgroup
#
# Tools and libraries to control and monitor control groups
#
cgroup = module
# Layer: services
# Module: denyhosts
#
2009-12-23 13:02:27 +00:00
# script to help thwart ssh server attacks
2009-12-22 17:25:13 +00:00
#
denyhosts = module
2008-06-04 17:26:52 +00:00
# Layer: apps
# Module: livecd
#
# livecd creator
#
livecd = module
2008-08-11 21:19:25 +00:00
# Layer: services
# Module: snort
#
# Snort network intrusion detection system
#
snort = module
# Layer: services
# Module: memcached
#
# high-performance memory object caching system
#
memcached = module
# Layer: system
# Module: netlabel
#
# Basic netlabel types and interfaces.
#
netlabel = module
2008-10-09 03:10:32 +00:00
# Layer: services
# Module: zosremote
#
# policy for z/OS Remote-services Audit dispatcher plugin</summary>
#
zosremote = module
2008-11-25 19:18:01 +00:00
# Layer: services
# Module: pingd
#
#
pingd = module
# Layer: services
# Module: milter
#
#
#
milter = module