selinux-policy/refpolicy/policy/modules.conf.targeted_example

494 lines
6.9 KiB
Plaintext
Raw Normal View History

#
# This file contains a listing of available modules.
# To prevent a module from being used in policy
# creation, set the module name to "off".
#
# For monolithic policies, modules set to "base" and "module"
# will be built into the policy.
#
# For modular policies, modules set to "base" will be
# included in the base module. "module" will be compiled
# as individual loadable modules.
#
2005-08-26 13:30:59 +00:00
# Layer: kernel
# Module: devices
# Required in base
#
# Device nodes and interfaces for many basic system devices.
#
devices = base
# Layer: kernel
# Module: filesystem
# Required in base
#
# Policy for filesystems.
#
filesystem = base
# Layer: kernel
# Module: selinux
# Required in base
#
# Policy for kernel security interface, in particular, selinuxfs.
#
selinux = base
2005-08-26 13:30:59 +00:00
# Layer: kernel
# Module: terminal
# Required in base
#
# Policy for terminals.
#
terminal = base
# Layer: kernel
# Module: kernel
# Required in base
#
# Policy for kernel threads, proc filesystem,and unlabeled processes and objects.
#
kernel = base
# Layer: kernel
# Module: corenetwork
# Required in base
#
# Policy controlling access to network objects
#
corenetwork = base
# Layer: system
# Module: files
# Required in base
#
# Basic filesystem types and interfaces.
#
files = base
# Layer: system
# Module: domain
# Required in base
#
# Core policy for domains.
#
domain = base
2005-08-08 21:03:23 +00:00
# Layer: admin
# Module: usermanage
#
# Policy for managing user accounts.
#
2005-08-26 13:30:59 +00:00
usermanage = module
2005-08-08 21:03:23 +00:00
# Layer: admin
# Module: rpm
#
# Policy for the RPM package manager.
#
rpm = off
# Layer: admin
# Module: dmesg
#
# Policy for dmesg.
#
2005-08-26 13:30:59 +00:00
dmesg = module
2005-08-08 21:03:23 +00:00
# Layer: admin
# Module: logrotate
#
# Rotate and archive system logs
#
logrotate = off
# Layer: admin
# Module: consoletype
#
# Determine of the console connected to the controlling terminal.
#
2005-08-26 13:30:59 +00:00
consoletype = module
# Layer: admin
# Module: netutils
#
# Network analysis utilities
#
2005-08-26 13:30:59 +00:00
netutils = module
# Layer: admin
2005-08-08 21:03:23 +00:00
# Module: acct
#
2005-08-08 21:03:23 +00:00
# Berkeley process accounting
#
2005-08-26 13:30:59 +00:00
acct = module
# Layer: admin
2005-08-08 21:03:23 +00:00
# Module: tmpreaper
#
2005-08-08 21:03:23 +00:00
# Manage temporary directory sizes and file ages
#
2005-08-26 13:30:59 +00:00
tmpreaper = module
# Layer: admin
2005-08-08 21:03:23 +00:00
# Module: updfstab
#
2005-08-08 21:03:23 +00:00
# Red Hat utility to change /etc/fstab.
#
2005-08-26 13:30:59 +00:00
updfstab = module
# Layer: admin
2005-08-08 21:03:23 +00:00
# Module: su
#
2005-08-08 21:03:23 +00:00
# Run shells with substitute user and group
#
2005-08-08 21:03:23 +00:00
su = off
2005-08-26 13:30:59 +00:00
# Layer: admin
# Module: sudo
#
# Execute a command with a substitute user
#
sudo = module
# Layer: admin
# Module: quota
#
# File system quota management
#
quota = module
# Layer: admin
# Module: firstboot
#
# Final system configuration run during the first boot
# after installation of Red Hat/Fedora systems.
#
firstboot = module
# Layer: apps
# Module: gpg
#
# Policy for GNU Privacy Guard and related programs.
#
gpg = off
2005-08-26 13:30:59 +00:00
# Layer: apps
# Module: loadkeys
#
2005-08-26 13:30:59 +00:00
# Load keyboard mappings.
#
2005-08-26 13:30:59 +00:00
loadkeys = module
# Layer: kernel
# Module: bootloader
#
# Policy for the kernel modules, kernel image, and bootloader.
#
2005-08-26 13:30:59 +00:00
bootloader = module
# Layer: kernel
# Module: storage
#
# Policy controlling access to storage devices
#
2005-08-26 13:30:59 +00:00
storage = module
# Layer: services
2005-08-08 21:03:23 +00:00
# Module: remotelogin
#
2005-08-08 21:03:23 +00:00
# Policy for rshd, rlogind, and telnetd.
#
2005-08-26 13:30:59 +00:00
remotelogin = module
# Layer: services
2005-08-08 21:03:23 +00:00
# Module: nscd
#
2005-08-08 21:03:23 +00:00
# Name service cache daemon
#
2005-08-26 13:30:59 +00:00
nscd = module
# Layer: services
2005-08-08 21:03:23 +00:00
# Module: nis
#
2005-08-08 21:03:23 +00:00
# Policy for NIS (YP) servers and clients
#
2005-08-26 13:30:59 +00:00
nis = module
# Layer: services
# Module: sendmail
#
# Policy for sendmail.
#
sendmail = off
# Layer: services
2005-08-08 21:03:23 +00:00
# Module: ssh
#
2005-08-08 21:03:23 +00:00
# Secure shell client and server policy.
#
2005-08-08 21:03:23 +00:00
ssh = off
# Layer: services
2005-08-08 21:03:23 +00:00
# Module: cron
#
2005-08-08 21:03:23 +00:00
# Periodic execution of scheduled commands.
#
2005-08-26 13:30:59 +00:00
cron = module
# Layer: services
# Module: inetd
#
# Internet services daemon.
#
2005-08-26 13:30:59 +00:00
inetd = module
# Layer: services
# Module: kerberos
#
# MIT Kerberos admin and KDC
#
2005-08-26 13:30:59 +00:00
kerberos = module
# Layer: services
2005-08-08 21:03:23 +00:00
# Module: mta
#
2005-08-08 21:03:23 +00:00
# Policy common to all email tranfer agents.
#
2005-08-26 13:30:59 +00:00
mta = module
2005-08-08 21:03:23 +00:00
# Layer: services
# Module: mysql
#
# Policy for MySQL
#
2005-08-26 13:30:59 +00:00
mysql = module
# Layer: services
# Module: tcpd
#
# Policy for TCP daemon.
#
tcpd = module
# Layer: services
# Module: rshd
#
# Remote shell service.
#
rshd = module
# Layer: services
# Module: ldap
#
# OpenLDAP directory server
#
ldap = module
# Layer: services
# Module: gpm
#
# General Purpose Mouse driver
#
gpm = module
# Layer: services
# Module: howl
#
# Port of Apple Rendezvous multicast DNS
#
howl = module
# Layer: services
# Module: rsync
#
# Fast incremental file transfer for synchronization
#
rsync = module
# Layer: services
# Module: privoxy
#
# Privacy enhancing web proxy.
#
privoxy = module
# Layer: services
# Module: bind
#
# Berkeley internet name domain DNS server.
#
bind = module
2005-08-08 21:03:23 +00:00
# Layer: system
# Module: unconfined
#
# The unconfined domain.
#
2005-08-26 13:30:59 +00:00
unconfined = module
2005-08-08 21:03:23 +00:00
# Layer: system
# Module: authlogin
#
# Common policy for authentication and user login.
#
2005-08-26 13:30:59 +00:00
authlogin = module
# Layer: system
# Module: selinuxutil
#
# Policy for SELinux policy and userland applications.
#
2005-08-26 13:30:59 +00:00
selinuxutil = module
# Layer: system
# Module: getty
#
# Policy for getty.
#
2005-08-26 13:30:59 +00:00
getty = module
# Layer: system
# Module: mount
#
# Policy for mount.
#
2005-08-26 13:30:59 +00:00
mount = module
# Layer: system
2005-08-08 21:03:23 +00:00
# Module: ipsec
#
2005-08-08 21:03:23 +00:00
# TCP/IP encryption
#
2005-08-26 13:30:59 +00:00
ipsec = module
# Layer: system
# Module: locallogin
#
# Policy for local logins.
#
2005-08-26 13:30:59 +00:00
locallogin = module
2005-08-08 21:03:23 +00:00
# Layer: system
# Module: logging
#
# Policy for the kernel message logger and system logging daemon.
#
2005-08-26 13:30:59 +00:00
logging = module
2005-08-08 21:03:23 +00:00
# Layer: system
# Module: sysnetwork
#
# Policy for network configuration: ifconfig and dhcp client.
#
2005-08-26 13:30:59 +00:00
sysnetwork = module
2005-08-08 21:03:23 +00:00
# Layer: system
# Module: fstools
#
# Tools for filesystem management, such as mkfs and fsck.
#
2005-08-26 13:30:59 +00:00
fstools = module
2005-08-08 21:03:23 +00:00
# Layer: system
# Module: pcmcia
#
# PCMCIA card management services
#
2005-08-26 13:30:59 +00:00
pcmcia = module
2005-08-08 21:03:23 +00:00
# Layer: system
# Module: iptables
#
# Policy for iptables.
#
2005-08-26 13:30:59 +00:00
iptables = module
# Layer: system
# Module: userdomain
#
# Policy for user domains
#
2005-08-26 13:30:59 +00:00
userdomain = module
# Layer: system
# Module: corecommands
#
# Core policy for shells, and generic programs
# in /bin, /sbin, /usr/bin, and /usr/sbin.
#
2005-08-30 14:41:52 +00:00
corecommands = base
# Layer: system
# Module: hotplug
#
# Policy for hotplug system, for supporting the
# connection and disconnection of devices at runtime.
#
2005-08-26 13:30:59 +00:00
hotplug = module
2005-08-08 21:03:23 +00:00
# Layer: system
# Module: clock
#
# Policy for reading and setting the hardware clock.
#
2005-08-26 13:30:59 +00:00
clock = module
2005-08-08 21:03:23 +00:00
# Layer: system
# Module: lvm
#
# Policy for logical volume management programs.
#
2005-08-26 13:30:59 +00:00
lvm = module
# Layer: system
# Module: modutils
#
# Policy for kernel module utilities
#
2005-08-26 13:30:59 +00:00
modutils = module
# Layer: system
2005-08-08 21:03:23 +00:00
# Module: init
#
2005-08-08 21:03:23 +00:00
# System initialization programs (init and init scripts).
#
2005-08-26 13:30:59 +00:00
init = module
# Layer: system
2005-08-08 21:03:23 +00:00
# Module: udev
#
2005-08-08 21:03:23 +00:00
# Policy for udev.
#
2005-08-26 13:30:59 +00:00
udev = module
# Layer: system
# Module: hostname
#
# Policy for changing the system host name.
#
2005-08-26 13:30:59 +00:00
hostname = module
# Layer: system
2005-08-08 21:03:23 +00:00
# Module: raid
#
2005-08-08 21:03:23 +00:00
# RAID array management tools
#
2005-08-26 13:30:59 +00:00
raid = module
# Layer: system
# Module: libraries
#
# Policy for system libraries.
#
2005-08-26 13:30:59 +00:00
libraries = module
# Layer: system
# Module: miscfiles
#
# Miscelaneous files.
#
2005-08-26 13:30:59 +00:00
miscfiles = module