rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity
f148635ab0
selinux-policy/modules-targeted-contrib.conf

2722 lines
35 KiB
Plaintext
Raw Normal View History

Add modules-*.conf files
2012-12-17 16:22:13 +00:00
# Layer: services
# Module: abrt
#
# Automatic bug detection and reporting tool
#
abrt = module
# Layer: services
# Module: accountsd
#
# An application to view and modify user accounts information
#
accountsd = module
# Layer: admin
# Module: acct
#
# Berkeley process accounting
#
acct = module
# Layer: services
# Module: afs
#
# Andrew Filesystem server
#
afs = module
# Layer: services
# Module: aiccu
#
# SixXS Automatic IPv6 Connectivity Client Utility
#
aiccu = module
# Layer: services
# Module: aide
#
# Policy for aide
#
aide = module
# Layer: services
# Module: ajaxterm
#
# Web Based Terminal
#
ajaxterm = module
# Layer: admin
# Module: alsa
#
# Ainit ALSA configuration tool
#
alsa = module
# Layer: admin
# Module: amanda
#
# Automated backup program.
#
amanda = module
# Layer: admin
# Module: amtu
#
# Abstract Machine Test Utility (AMTU)
#
amtu = module
# Layer: admin
# Module: anaconda
#
# Policy for the Anaconda installer.
#
anaconda = module
# Layer: contrib
# Module: antivirus
#
# SELinux policy for antivirus programs
#
antivirus = module
# Layer: services
# Module: apache
#
# Apache web server
#
apache = module
# Layer: services
# Module: apcupsd
#
# daemon for most APC’s UPS for Linux
#
apcupsd = module
# Layer: services
# Module: apm
#
# Advanced power management daemon
#
apm = module
# Layer: services
# Module: arpwatch
#
# Ethernet activity monitor.
#
arpwatch = module
# Layer: services
# Module: asterisk
#
# Asterisk IP telephony server
#
asterisk = module
# Layer: contrib
# Module: authconfig
#
# Authorization configuration tool
#
authconfig = module
# Layer: services
# Module: automount
#
# Filesystem automounter service.
#
automount = module
# Layer: services
# Module: avahi
#
# mDNS/DNS-SD daemon implementing Apple ZeroConf architecture
#
avahi = module
# Layer: module
# Module: awstats
#
# awstats executable
#
awstats = module
# Layer: services
# Module: bcfg2
#
# Configuration management server
#
bcfg2 = module
# Layer: services
# Module: bind
#
# Berkeley internet name domain DNS server.
#
bind = module
# Layer: contrib
# Module: rngd
#
# Daemon used to feed random data from hardware device to kernel random device
#
rngd = module
# Layer: services
# Module: bitlbee
#
# An IRC to other chat networks gateway
#
bitlbee = module
# Layer: services
# Module: blueman
#
# Blueman tools and system services.
#
blueman = module
# Layer: services
# Module: bluetooth
#
# Bluetooth tools and system services.
#
bluetooth = module
# Layer: services
# Module: boinc
#
# Berkeley Open Infrastructure for Network Computing
#
boinc = module
# Layer: system
# Module: brctl
#
# Utilities for configuring the linux ethernet bridge
#
brctl = module
# Layer: services
# Module: bugzilla
#
# Bugzilla server
#
bugzilla = module
Added new policies to modules-targeted-contrib.conf
2013-11-21 10:13:23 +00:00
# Layer: services
# Module: bumblebee
#
# Support NVIDIA Optimus technology under Linux
#
bumblebee = module
Add modules-*.conf files
2012-12-17 16:22:13 +00:00
# Layer: services
# Module: cachefilesd
#
# CacheFiles userspace management daemon
#
cachefilesd = module
# Module: calamaris
#
#
# Squid log analysis
#
calamaris = module
# Layer: services
# Module: callweaver
#
# callweaver telephony sever
#
callweaver = module
# Layer: services
# Module: canna
#
# Canna - kana-kanji conversion server
#
canna = module
# Layer: services
# Module: ccs
#
# policy for ccs
#
ccs = module
# Layer: apps
# Module: cdrecord
#
# Policy for cdrecord
#
cdrecord = module
# Layer: admin
# Module: certmaster
#
# Digital Certificate master
#
certmaster = module
# Layer: services
# Module: certmonger
#
# Certificate status monitor and PKI enrollment client
#
certmonger = module
# Layer: admin
# Module: certwatch
#
# Digital Certificate Tracking
#
certwatch = module
# Layer: services
# Module: cfengine
#
# cfengine
#
cfengine = module
# Layer: services
# Module: cgroup
#
# Tools and libraries to control and monitor control groups
#
cgroup = module
# Layer: apps
# Module: chrome
#
# chrome sandbox
#
chrome = module
# Layer: services
# Module: chronyd
#
# Daemon for maintaining clock time
#
chronyd = module
# Layer: services
# Module: cipe
#
# Encrypted tunnel daemon
#
cipe = module
# Layer: services
# Module: clogd
#
# clogd - clustered mirror log server
#
clogd = module
# Layer: services
# Module: cloudform
#
# cloudform daemons
#
cloudform = module
# Layer: services
# Module: cmirrord
#
# cmirrord - daemon providing device-mapper-base mirrors in a shared-storege cluster
#
cmirrord = module
# Layer: services
# Module: cobbler
#
# cobbler
#
cobbler = module
# Layer: services
# Module: collectd
#
# Statistics collection daemon for filling RRD files
#
collectd = module
# Layer: services
# Module: colord
#
# color device daemon
#
colord = module
# Layer: services
# Module: comsat
#
# Comsat, a biff server.
#
comsat = module
# Layer: services
# Module: condor
#
# policy for condor
#
condor = module
Added conman to modules-targeted-contrib.conf
2013-12-06 10:17:48 +00:00
# Layer: services
# Module: conman
#
# Conman is a program for connecting to remote consoles being managed by conmand
#
conman = module
Add modules-*.conf files
2012-12-17 16:22:13 +00:00
# Layer: services
# Module: consolekit
#
# ConsoleKit is a system daemon for tracking what users are logged
#
Add back consolekit but we keep just consolekit.te and .fc was commented
2013-01-11 13:33:08 +00:00
consolekit = module
Add modules-*.conf files
2012-12-17 16:22:13 +00:00
# Layer: services
# Module: couchdb
#
# Apache CouchDB database server
#
couchdb = module
# Layer: services
# Module: courier
#
# IMAP and POP3 email servers
#
courier = module
# Layer: services
# Module: cpucontrol
#
# Services for loading CPU microcode and CPU frequency scaling.
#
cpucontrol = module
# Layer: apps
# Module: cpufreqselector
#
# cpufreqselector executable
#
cpufreqselector = module
# Layer: services
# Module: cron
#
# Periodic execution of scheduled commands.
#
cron = module
# Layer: services
Revert "Upstream uses ctdb instead of ctdbd policy" This reverts commit 1871109735a0dcfc3fedade6afbcf743007e678f.
2013-01-07 13:54:40 +00:00
# Module: ctdbd
Add modules-*.conf files
2012-12-17 16:22:13 +00:00
#
# Cluster Daemon
#
Upstream uses ctdb instead of ctdbd policy
2013-01-06 23:11:42 +00:00
ctdb = module
Add modules-*.conf files
2012-12-17 16:22:13 +00:00
# Layer: services
# Module: cups
#
# Common UNIX printing system
#
cups = module
# Layer: services
# Module: cvs
#
# Concurrent versions system
#
cvs = module
# Layer: services
# Module: cyphesis
#
# cyphesis game server
#
cyphesis = module
# Layer: services
# Module: cyrus
#
# Cyrus is an IMAP service intended to be run on sealed servers
#
cyrus = module
# Layer: system
# Module: daemontools
#
# Collection of tools for managing UNIX services
#
daemontools = module
# Layer: role
# Module: dbadm
#
# Minimally prived root role for managing databases
#
dbadm = module
# Layer: services
# Module: dbskk
#
# Dictionary server for the SKK Japanese input method system.
#
dbskk = module
# Layer: services
# Module: dbus
#
# Desktop messaging bus
#
dbus = module
# Layer: services
# Module: dcc
#
# A distributed, collaborative, spam detection and filtering network.
#
dcc = module
# Layer: services
# Module: ddclient
#
# Update dynamic IP address at DynDNS.org
#
ddclient = module
# Layer: admin
# Module: ddcprobe
#
# ddcprobe retrieves monitor and graphics card information
#
ddcprobe = off
# Layer: services
# Module: denyhosts
#
# script to help thwart ssh server attacks
#
denyhosts = module
# Layer: services
# Module: devicekit
#
# devicekit-daemon
#
devicekit = module
# Layer: services
# Module: dhcp
#
# Dynamic host configuration protocol (DHCP) server
#
dhcp = module
# Layer: services
# Module: dictd
#
# Dictionary daemon
#
dictd = module
# Layer: services
# Module: dirsrv-admin
#
# An 309 directory admin server
#
dirsrv-admin = module
# Layer: services
# Module: dirsrv
#
# An 309 directory server
#
dirsrv = module
# Layer: services
# Module: distcc
#
# Distributed compiler daemon
#
distcc = off
# Layer: admin
# Module: dmidecode
#
# Decode DMI data for x86/ia64 bioses.
#
dmidecode = module
# Layer: services
# Module: dnsmasq
#
# A lightweight DHCP and caching DNS server.
#
dnsmasq = module
# Layer: services
# Module: dnssec
#
# A dnssec server application
#
dnssec = module
# Layer: services
# Module: dovecot
#
# Dovecot POP and IMAP mail server
#
dovecot = module
# Layer: services
# Module: drbd
#
# DRBD mirrors a block device over the network to another machine.
#
drbd = module
# Layer: services
# Module: dspam
#
# dspam - library and Mail Delivery Agent for Bayesian SPAM filtering
#
dspam = module
# Layer: services
# Module: entropy
#
# Generate entropy from audio input
#
entropyd = module
# Layer: services
# Module: exim
#
# exim mail server
#
exim = module
# Layer: services
# Module: fail2ban
#
# daiemon that bans IP that makes too many password failures
#
fail2ban = module
# Layer: services
Upstream change: -fcoemon = module +fcoe = module
2013-01-07 08:44:43 +00:00
# Module: fcoe
Add modules-*.conf files
2012-12-17 16:22:13 +00:00
#
Upstream change: -fcoemon = module +fcoe = module
2013-01-07 08:44:43 +00:00
# fcoe
Add modules-*.conf files
2012-12-17 16:22:13 +00:00
#
Upstream change: -fcoemon = module +fcoe = module
2013-01-07 08:44:43 +00:00
fcoe = module
Add modules-*.conf files
2012-12-17 16:22:13 +00:00
# Layer: services
# Module: fetchmail
#
# Remote-mail retrieval and forwarding utility
#
fetchmail = module
# Layer: services
# Module: finger
#
# Finger user information service.
#
finger = module
# Layer: services
# Module: firewalld
#
# firewalld is firewall service daemon that provides dynamic customizable
#
firewalld = module
# Layer: apps
# Module: firewallgui
#
# policy for system-config-firewall
#
firewallgui = module
# Module: firstboot
#
# Final system configuration run during the first boot
# after installation of Red Hat/Fedora systems.
#
firstboot = module
# Layer: services
# Module: fprintd
#
# finger print server
#
fprintd = module
Added new policies to modules-targeted-contrib.conf
2013-11-21 10:13:23 +00:00
# Layer: services
# Module: freqset
#
# Utility for CPU frequency scaling
#
freqset = module
Add modules-*.conf files
2012-12-17 16:22:13 +00:00
# Layer: services
# Module: ftp
#
# File transfer protocol service
#
ftp = module
# Layer: apps
# Module: games
#
# The Open Group Pegasus CIM/WBEM Server.
#
games = module
# Layer: apps
# Module: gitosis
#
# Policy for gitosis
#
gitosis = module
# Layer: services
# Module: git
#
# Policy for the stupid content tracker
#
git = module
# Layer: services
# Module: glance
#
# Policy for glance
#
glance = module
# Layer: contrib
# Module: glusterd
#
# policy for glusterd service
#
Revert "Upstream change:" This reverts commit 7316889d21a0baedca980e02de37b3dbe24d73be.
2013-01-07 13:54:15 +00:00
glusterd = module
Add modules-*.conf files
2012-12-17 16:22:13 +00:00
# Layer: apps
# Module: gnome
#
# gnome session and gconf
#
gnome = module
# Layer: apps
# Module: gpg
#
# Policy for GNU Privacy Guard and related programs.
#
gpg = module
# Layer: services
# Module: gpm
#
# General Purpose Mouse driver
#
gpm = module
# Module: gpsd
#
# gpsd monitor daemon
#
#
gpsd = module
Add gssproxy policy
2013-05-31 21:24:35 +00:00
# Module: gssproxy
#
# A proxy for GSSAPI credential handling
#
#
gssproxy = module
Add modules-*.conf files
2012-12-17 16:22:13 +00:00
# Layer: role
# Module: guest
#
# Minimally privs guest account on tty logins
#
guest = module
# Layer: role
# Module: xguest
#
# Minimally privs guest account on X Windows logins
#
xguest = module
# Layer: services
# Module: hddtemp
#
# hddtemp hard disk temperature tool running as a daemon
#
hddtemp = module
Add new policy for hostapd
2015-01-03 14:32:33 +00:00
# Layer: services
# Module: hostapd
#
# hostapd - IEEE 802.11 AP, IEEE 802.1X/WPA/WPA2/EAP/RADIUS Authenticator
#
hostapd = module
Add modules-*.conf files
2012-12-17 16:22:13 +00:00
# Layer: services
# Module: i18n_input
#
# IIIMF htt server
#
i18n_input = off
# Layer: services
# Module: icecast
#
# ShoutCast compatible streaming media server
#
icecast = module
# Layer: services
# Module: inetd
#
# Internet services daemon.
#
inetd = module
# Layer: services
# Module: inn
#
# Internet News NNTP server
#
inn = module
# Layer: services
# Module: lircd
#
# LIRC daemon - decodes infrared signals and provides them on a Unix domain socket.
#
lircd = module
# Layer: apps
# Module: irc
#
# IRC client policy
#
irc = module
# Layer: services
# Module: irqbalance
#
# IRQ balancing daemon
#
irqbalance = module
# Layer: system
# Module: iscsi
#
# Open-iSCSI daemon
#
iscsi = module
# Layer: system
# Module: isnsd
#
#
#
Upstream change: -isnsd = module +isns = module
2013-01-07 13:32:26 +00:00
isns = module
Add modules-*.conf files
2012-12-17 16:22:13 +00:00
# Layer: services
# Module: jabber
#
# Jabber instant messaging server
#
jabber = module
# Layer: services
# Module: jetty
#
# Java based http server
#
jetty = module
# Layer: apps
# Module: jockey
#
# policy for jockey-backend
#
jockey = module
# Layer: apps
# Module: kdumpgui
#
# system-config-kdump policy
#
kdumpgui = module
# Layer: admin
# Module: kdump
#
# kdump is kernel crash dumping mechanism
#
kdump = module
# Layer: services
# Module: kerberos
#
# MIT Kerberos admin and KDC
#
kerberos = module
Add keepalived to modules-targeted-contrib
2014-02-17 12:42:02 +00:00
# Layer: services
# Module: keepalived
#
# keepalived - load-balancing and high-availability service
#
keepalived = module
Add modules-*.conf files
2012-12-17 16:22:13 +00:00
# Module: keyboardd
#
# system-setup-keyboard is a keyboard layout daemon that monitors
# /etc/sysconfig/keyboard and writes out an xorg.conf.d snippet
#
keyboardd = module
# Layer: services
# Module: keystone
#
# openstack-keystone
#
keystone = module
# Layer: services
# Module: kismet
#
# Wireless sniffing and monitoring
#
kismet = module
# Layer: services
# Module: ksmtuned
#
# Kernel Samepage Merging (KSM) Tuning Daemon
#
ksmtuned = module
# Layer: services
# Module: ktalk
#
# KDE Talk daemon
#
ktalk = module
# Layer: services
# Module: l2ltpd
#
# Layer 2 Tunnelling Protocol Daemon
#
* Wed Jan 9 2013 Miroslav Grepl <mgrepl@redhat.com> 3.12.1-1 - Mass merge with upstream
2013-01-09 12:16:35 +00:00
l2tp = module
Add modules-*.conf files
2012-12-17 16:22:13 +00:00
# Layer: services
# Module: ldap
#
# OpenLDAP directory server
#
ldap = module
# Layer: services
# Module: likewise
#
# Likewise Active Directory support for UNIX
#
likewise = module
# Layer: apps
# Module: livecd
#
# livecd creator
#
livecd = module
# Layer: services
# Module: lldpad
#
# lldpad - Link Layer Discovery Protocol (LLDP) agent daemon
#
lldpad = module
# Layer: apps
# Module: loadkeys
#
# Load keyboard mappings.
#
loadkeys = module
# Layer: apps
# Module: lockdev
#
# device locking policy for lockdev
#
lockdev = module
# Layer: admin
# Module: logrotate
#
# Rotate and archive system logs
#
logrotate = module
# Layer: services
# Module: logwatch
#
# logwatch executable
#
logwatch = module
# Layer: services
# Module: lpd
#
# Line printer daemon
#
lpd = module
# Layer: services
# Module: mailman
#
# Mailman is for managing electronic mail discussion and e-newsletter lists
#
mailman = module
# Layer: services
# Module: mailman
#
# Policy for mailscanner
#
mailscanner = module
# Layer: apps
# Module: man2html
#
# policy for man2html apps
#
man2html = module
# Layer: admin
# Module: mcelog
#
# Policy for mcelog.
#
mcelog = module
# Layer: apps
# Module: mediawiki
#
# mediawiki
#
mediawiki = module
# Layer: services
# Module: memcached
#
# high-performance memory object caching system
#
memcached = module
# Layer: services
# Module: milter
#
#
#
milter = module
Added new policies to modules-targeted-contrib.conf
2013-11-21 10:13:23 +00:00
# Layer: services
# Module: mip6d
#
# UMIP Mobile IPv6 and NEMO Basic Support protocol implementation
#
mip6d = module
Add modules-*.conf files
2012-12-17 16:22:13 +00:00
# Layer: services
# Module: mock
#
# Policy for mock rpm builder
#
mock = module
# Layer: services
# Module: modemmanager
#
# Manager for dynamically switching between modems.
#
modemmanager = module
# Layer: services
# Module: mojomojo
#
# Wiki server
#
mojomojo = module
# Layer: apps
# Module: mozilla
#
# Policy for Mozilla and related web browsers
#
mozilla = module
# Layer: services
# Module: mpd
#
# mpd - daemon for playing music
#
mpd = module
# Layer: apps
# Module: mplayer
#
# Policy for Mozilla and related web browsers
#
mplayer = module
# Layer: admin
# Module: mrtg
#
# Network traffic graphing
#
mrtg = module
# Layer: services
# Module: mta
#
# Policy common to all email tranfer agents.
#
mta = module
# Layer: services
# Module: munin
#
# Munin
#
munin = module
# Layer: services
# Module: mysql
#
# Policy for MySQL
#
mysql = module
Merge branch 'master' of ssh://pkgs.fedoraproject.org/selinux-policy Conflicts: selinux-policy.spec
2013-01-15 16:54:07 +00:00
# Layer: contrib
# Module: mythtv
#
# Policy for Mythtv (Web Server)
#
mythtv = module
Add modules-*.conf files
2012-12-17 16:22:13 +00:00
# Layer: services
# Module: nagios
#
# policy for nagios Host/service/network monitoring program
#
nagios = module
# Layer: apps
# Module: namespace
#
# policy for namespace.init script
#
namespace = module
# Layer: admin
# Module: ncftool
#
# Tool to modify the network configuration of a system
#
ncftool = module
# Layer: services
# Module: networkmanager
#
# Manager for dynamically switching between networks.
#
networkmanager = module
Added ninfod and openwsman to modules-targeted-contrib.conf
2013-12-05 14:43:22 +00:00
# Layer: services
# Module: ninfod
#
# Respond to IPv6 Node Information Queries
#
ninfod = module
Add modules-*.conf files
2012-12-17 16:22:13 +00:00
# Layer: services
# Module: nis
#
# Policy for NIS (YP) servers and clients
#
nis = module
# Layer: services
# Module: nova
#
# openstack-nova
#
nova = module
# Layer: services
# Module: nscd
#
# Name service cache daemon
#
nscd = module
# Layer: services
# Module: nslcd
#
# Policy for nslcd
#
nslcd = module
# Layer: services
# Module: ntop
#
# Policy for ntop
#
ntop = module
# Layer: services
# Module: ntp
#
# Network time protocol daemon
#
ntp = module
# Layer: services
# Module: numad
#
# numad - user-level daemon that provides advice and managment for optimum use of CPUs and memory on systems with NUMA topology
#
numad = module
# Layer: services
# Module: nut
#
# nut - Network UPS Tools
#
nut = module
# Layer: services
# Module: nx
#
# NX Remote Desktop
#
nx = module
# Layer: services
# Module: obex
#
# policy for obex-data-server
#
obex = module
# Layer: services
# Module: oddjob
#
# policy for oddjob
#
oddjob = module
# Layer: services
# Module: openct
#
# Service for handling smart card readers.
#
openct = off
# Layer: service
# Module: openct
#
# Middleware framework for smart card terminals
#
openct = module
# Layer: contrib
# Module: openshift-origin
#
# Origin version of openshift policy
#
openshift-origin = module
# Layer: contrib
# Module: openshift
#
# Core openshift policy
#
openshift = module
Added new policies to modules-targeted-contrib.conf
2013-11-21 10:13:23 +00:00
# Layer: services
# Module: opensm
#
# InfiniBand subnet manager and administration (SM/SA)
#
opensm = module
Add modules-*.conf files
2012-12-17 16:22:13 +00:00
# Layer: services
# Module: openvpn
#
# Policy for OPENVPN full-featured SSL VPN solution
#
openvpn = module
# Layer: contrib
# Module: openvswitch
#
# SELinux policy for openvswitch programs
#
openvswitch = module
Added ninfod and openwsman to modules-targeted-contrib.conf
2013-12-05 14:43:22 +00:00
# Layer: services
# Module: openwsman
#
# WS-Management Server
#
openwsman = module
Added osad to modules-targeted-contrib.conf
2014-02-03 09:22:22 +00:00
# Layer: services
# Module: osad
#
# Client-side service written in Python that responds to pings
#
osad = module
Add prosody policy
2013-07-01 11:19:11 +00:00
# Layer: contrib
# Module: prelude
#
# SELinux policy for prelude
#
Add modules-*.conf files
2012-12-17 16:22:13 +00:00
prelude = module
Add prosody policy
2013-07-01 11:19:11 +00:00
# Layer: contrib
# Module: prosody
#
# SELinux policy for prosody flexible communications server for Jabber/XMPP
#
prosody = module
Add modules-*.conf files
2012-12-17 16:22:13 +00:00
# Layer: services
# Module: pads
#
pads = module
# Layer: services
# Module: passenger
#
# Passenger
#
passenger = module
# Layer: system
# Module: pcmcia
#
# PCMCIA card management services
#
pcmcia = module
# Layer: service
# Module: pcscd
#
# PC/SC Smart Card Daemon
#
pcscd = module
Make pdns policy active.
2015-07-28 14:56:19 +00:00
# Layer: services
# Module: pdns
#
# PowerDNS DNS server
#
pdns = module
Add modules-*.conf files
2012-12-17 16:22:13 +00:00
# Layer: services
# Module: pegasus
#
# The Open Group Pegasus CIM/WBEM Server.
#
pegasus = module
# Layer: services
# Module: pingd
#
#
pingd = module
# Layer: services
# Module: piranha
#
# piranha - various tools to administer and configure the Linux Virtual Server
#
piranha = module
# Layer: contrib
Upload new upstream sources
2013-11-13 14:27:57 +00:00
# Module: pkcs
Add modules-*.conf files
2012-12-17 16:22:13 +00:00
#
# daemon manages PKCS#11 objects between PKCS#11-enabled applications
#
Upload new upstream sources
2013-11-13 14:27:57 +00:00
pkcs = module
Add modules-*.conf files
2012-12-17 16:22:13 +00:00
# Layer: services
# Module: plymouthd
#
# Plymouth
#
plymouthd = module
# Layer: apps
# Module: podsleuth
#
# Podsleuth probes, identifies, and exposes properties and metadata bound to iPods.
#
podsleuth = module
# Layer: services
# Module: policykit
#
# Hardware abstraction layer
#
policykit = module
# Layer: services
# Module: polipo
#
# polipo
#
polipo = module
# Layer: services
# Module: portmap
#
# RPC port mapping service.
#
portmap = module
# Layer: services
# Module: portreserve
#
# reserve ports to prevent portmap mapping them
#
portreserve = module
# Layer: services
# Module: postfix
#
# Postfix email server
#
postfix = module
# Layer: services
# Module: postgrey
#
# email scanner
#
postgrey = module
# Layer: services
# Module: ppp
#
# Point to Point Protocol daemon creates links in ppp networks
#
ppp = module
# Layer: admin
# Module: prelink
#
# Manage temporary directory sizes and file ages
#
prelink = module
# Layer: services
# Module: privoxy
#
# Privacy enhancing web proxy.
#
privoxy = module
# Layer: services
# Module: procmail
#
# Procmail mail delivery agent
#
procmail = module
# Layer: services
# Module: psad
#
# Analyze iptables log for hostile traffic
#
psad = module
# Layer: apps
# Module: ptchown
#
# helper function for grantpt(3), changes ownship and permissions of pseudotty
#
ptchown = module
# Layer: services
# Module: publicfile
#
# publicfile supplies files to the public through HTTP and FTP
#
publicfile = module
# Layer: apps
# Module: pulseaudio
#
# The PulseAudio Sound System
#
pulseaudio = module
# Layer: services
# Module: puppet
#
# A network tool for managing many disparate systems
#
puppet = module
# Layer: apps
# Module: pwauth
#
# External plugin for mod_authnz_external authenticator
#
pwauth = module
# Layer: services
# Module: qmail
#
# Policy for qmail
#
qmail = module
# Layer: services
# Module: qpidd
#
# Policy for qpidd
#
qpid = module
# Layer: services
# Module: quantum
#
# Quantum is a virtual network service for Openstack
#
quantum = module
# Layer: admin
# Module: quota
#
# File system quota management
#
quota = module
# Layer: services
# Module: rabbitmq
#
# rabbitmq daemons
#
rabbitmq = module
# Layer: services
# Module: radius
#
# RADIUS authentication and accounting server.
#
radius = module
# Layer: services
# Module: radvd
#
# IPv6 router advertisement daemon
#
radvd = module
# Layer: system
# Module: raid
#
# RAID array management tools
#
raid = module
Added rasdaemon module to modules-targeted-contrib.conf
2013-11-21 16:35:26 +00:00
# Layer: services
# Module: rasdaemon
#
# The rasdaemon program is a daemon with monitors the RAS trace events from /sys/kernel/debug/tracing
#
rasdaemon = module
Add modules-*.conf files
2012-12-17 16:22:13 +00:00
# Layer: services
# Module: rdisc
#
# Network router discovery daemon
#
rdisc = module
# Layer: admin
# Module: readahead
#
# Readahead, read files into page cache for improved performance
#
readahead = module
# Layer: contrib
# Module: stapserver
#
# dbus system service which manages discovery and enrollment in realms and domains like Active Directory or IPA
#
realmd = module
# Layer: services
# Module: remotelogin
#
# Policy for rshd, rlogind, and telnetd.
#
remotelogin = module
# Layer: services
# Module: rhcs
#
# RHCS - Red Hat Cluster Suite
#
rhcs = module
# Layer: services
# Module: rhev
#
# rhev policy module contains policies for rhev apps
#
rhev = module
# Layer: services
# Module: rhgb
#
# X windows login display manager
#
rhgb = module
# Layer: services
# Module: rhsmcertd
#
# Subscription Management Certificate Daemon policy
#
rhsmcertd = module
# Layer: services
# Module: ricci
#
# policy for ricci
#
ricci = module
# Layer: services
# Module: rlogin
#
# Remote login daemon
#
rlogin = module
# Layer: services
# Module: roundup
#
# Roundup Issue Tracking System policy
#
roundup = module
# Layer: services
# Module: rpcbind
#
# universal addresses to RPC program number mapper
#
rpcbind = module
# Layer: services
# Module: rpc
#
# Remote Procedure Call Daemon for managment of network based process communication
#
rpc = module
# Layer: admin
# Module: rpm
#
# Policy for the RPM package manager.
#
rpm = module
# Layer: services
# Module: rshd
#
# Remote shell service.
#
rshd = module
# Layer: apps
# Module: rssh
#
# Restricted (scp/sftp) only shell
#
rssh = module
# Layer: services
# Module: rsync
#
# Fast incremental file transfer for synchronization
#
rsync = module
# Layer: services
# Module: rtkit
#
# Real Time Kit Daemon
#
rtkit = module
# Layer: services
# Module: rwho
#
# who is logged in on local machines
#
rwho = module
# Layer: apps
# Module: sambagui
#
# policy for system-config-samba
#
sambagui = module
#
# SMB and CIFS client/server programs for UNIX and
# name Service Switch daemon for resolving names
# from Windows NT servers.
#
samba = module
# Layer: apps
# Module: sandbox
#
# Policy for running apps within a sandbox
#
sandbox = module
# Layer: apps
# Module: sandbox
#
# Policy for running apps within a X sandbox
#
sandboxX = module
# Layer: services
# Module: sanlock
#
# sanlock policy
#
sanlock = module
# Layer: services
# Module: sasl
#
# SASL authentication server
#
sasl = module
# Layer: services
# Module: sblim
#
# sblim
#
sblim = module
# Layer: apps
# Module: screen
#
# GNU terminal multiplexer
#
screen = module
# Layer: admin
# Module: sectoolm
#
# Policy for sectool-mechanism
#
sectoolm = module
# Layer: services
# Module: sendmail
#
# Policy for sendmail.
#
sendmail = module
# Layer: contrib
# Module: sensord
#
# Sensor information logging daemon
#
sensord = module
# Layer: services
# Module: setroubleshoot
#
# Policy for the SELinux troubleshooting utility
#
setroubleshoot = module
# Layer: services
# Module: sge
#
# policy for grindengine MPI jobs
#
sge = module
# Layer: admin
# Module: shorewall
#
# Policy for shorewall
#
shorewall = module
# Layer: apps
# Module: slocate
#
# Update database for mlocate
#
slocate = module
# Layer: contrib
# Module: slpd
#
# OpenSLP server daemon to dynamically register services
#
slpd = module
# Layer: services
# Module: slrnpull
#
# Service for downloading news feeds the slrn newsreader.
#
slrnpull = off
# Layer: services
# Module: smartmon
#
# Smart disk monitoring daemon policy
#
smartmon = module
# Layer: services
# Module: smokeping
#
# Latency Logging and Graphing System
#
smokeping = module
# Layer: admin
# Module: smoltclient
#
#The Fedora hardware profiler client
#
smoltclient = module
# Layer: services
# Module: snmp
#
# Simple network management protocol services
#
snmp = module
# Layer: services
# Module: snort
#
# Snort network intrusion detection system
#
snort = module
# Layer: admin
# Module: sosreport
#
# sosreport debuggin information generator
#
sosreport = module
# Layer: services
# Module: soundserver
#
# sound server for network audio server programs, nasd, yiff, etc</summary>
#
soundserver = module
# Layer: services
# Module: spamassassin
#
# Filter used for removing unsolicited email.
#
spamassassin = module
Added speech-dispatcher to modules-targeted-contrib.conf
2013-12-20 14:28:27 +00:00
# Layer: services
# Module: speech-dispatcher
#
# speech-dispatcher - server process managing speech requests in Speech Dispatcher
#
speech-dispatcher = module
Add modules-*.conf files
2012-12-17 16:22:13 +00:00
# Layer: services
# Module: squid
#
# Squid caching http proxy server
#
squid = module
# Layer: services
# Module: sssd
#
# System Security Services Daemon
#
sssd = module
Make sslh policy active
2015-08-03 08:16:38 +00:00
# Layer: services
# Module: sslh
#
# Applicative protocol(SSL/SSH) multiplexer
#
sslh = module
Add modules-*.conf files
2012-12-17 16:22:13 +00:00
# Layer: contrib
# Module: stapserver
#
# Instrumentation System Server
#
stapserver = module
# Layer: services
# Module: stunnel
#
# SSL Tunneling Proxy
#
stunnel = module
# Layer: services
# Module: svnserve
#
# policy for subversion service
#
svnserve = module
add openstack swift domain
2013-02-04 22:03:20 +00:00
# Layer: services
# Module: swift
#
# openstack-swift
#
swift = module
Add modules-*.conf files
2012-12-17 16:22:13 +00:00
# Layer: services
# Module: sysstat
#
# Policy for sysstat. Reports on various system states
#
sysstat = module
# Layer: services
# Module: tcpd
#
# Policy for TCP daemon.
#
tcpd = module
# Layer: services
# Module: tcsd
#
# tcsd - daemon that manages Trusted Computing resources
#
tcsd = module
# Layer: apps
# Module: telepathy
#
# telepathy - Policy for Telepathy framework
#
telepathy = module
# Layer: services
# Module: telnet
#
# Telnet daemon
#
telnet = module
# Layer: services
# Module: tftp
#
# Trivial file transfer protocol daemon
#
tftp = module
# Layer: services
# Module: tgtd
#
# Linux Target Framework Daemon.
#
tgtd = module
# Layer: apps
# Module: thumb
#
# Thumbnailer confinement
#
thumb = module
# Layer: services
# Module: timidity
#
# MIDI to WAV converter and player configured as a service
#
timidity = off
# Layer: admin
# Module: tmpreaper
#
# Manage temporary directory sizes and file ages
#
tmpreaper = module
# Layer: contrib
# Module: glusterd
#
# policy for tomcat service
#
tomcat = module
# Layer: services
# Module: tor
#
# TOR, the onion router
#
tor = module
# Layer: services
# Module: tuned
#
# Dynamic adaptive system tuning daemon
#
tuned = module
# Layer: apps
# Module: tvtime
#
# tvtime - a high quality television application
#
tvtime = module
# Layer: services
# Module: ulogd
#
# netfilter/iptables ULOG daemon
#
ulogd = module
# Layer: apps
# Module: uml
#
# Policy for UML
#
uml = module
# Layer: admin
# Module: updfstab
#
# Red Hat utility to change /etc/fstab.
#
updfstab = module
# Layer: admin
# Module: usbmodules
#
# List kernel modules of USB devices
#
usbmodules = module
# Layer: services
# Module: usbmuxd
#
# Daemon for communicating with Apple's iPod Touch and iPhone
#
usbmuxd = module
# Layer: apps
# Module: userhelper
#
# A helper interface to pam.
#
userhelper = module
# Layer: apps
# Module: usernetctl
#
# User network interface configuration helper
#
usernetctl = module
# Layer: services
# Module: uucp
#
# Unix to Unix Copy
#
uucp = module
# Layer: services
# Module: uuidd
#
# UUID generation daemon
#
uuidd = module
# Layer: services
# Module: varnishd
#
# Varnishd http accelerator daemon
#
varnishd = module
# Layer: services
# Module: vdagent
#
# vdagent
#
vdagent = module
# Layer: services
# Module: vhostmd
#
# vhostmd - spice guest agent daemon.
#
vhostmd = module
# Layer: services
# Module: virt
#
# Virtualization libraries
#
virt = module
# Layer: apps
# Module: vhostmd
#
# vlock - Virtual Console lock program
#
vlock = module
Added vmtools to modules-targeted-contrib.conf
2013-12-10 10:26:08 +00:00
# Layer: services
# Module: vmtools
#
# VMware Tools daemon
#
vmtools = module
Add modules-*.conf files
2012-12-17 16:22:13 +00:00
# Layer: apps
# Module: vmware
#
# VMWare Workstation virtual machines
#
vmware = module
# Layer: services
# Module: vnstatd
#
# Network traffic Monitor
#
vnstatd = module
# Layer: admin
# Module: vpn
#
# Virtual Private Networking client
#
vpn = module
# Layer: services
# Module: w3c
#
# w3c
#
w3c = module
# Layer: services
# Module: wdmd
#
# wdmd policy
#
wdmd = module
# Layer: role
# Module: webadm
#
# Minimally prived root role for managing apache
#
webadm = module
# Layer: apps
# Module: webalizer
#
# Web server log analysis
#
webalizer = module
# Layer: apps
# Module: wine
#
# wine executable
#
wine = module
# Layer: apps
# Module: wireshark
#
# wireshark executable
#
wireshark = module
# Layer: system
# Module: xen
#
# virtualization software
#
xen = module
# Layer: services
# Module: zabbix
#
# Open-source monitoring solution for your IT infrastructure
#
zabbix = module
# Layer: services
# Module: zarafa
#
# Zarafa Collaboration Platform
#
zarafa = module
# Layer: services
# Module: zebra
#
# Zebra border gateway protocol network routing service
#
zebra = module
# Layer: services
# Module: zoneminder
#
# Zoneminder Camera Security Surveillance Solution
#
zoneminder = module
# Layer: services
# Module: zosremote
#
# policy for z/OS Remote-services Audit dispatcher plugin</summary>
#
zosremote = module
# Layer: contrib
# Module: thin
#
# Policy for thin
#
thin = module
# Layer: contrib
# Module: mandb
#
# Policy for mandb
#
mandb = module
# Layer: services
# Module: pki
#
# policy for pki
#
pki = module
# Layer: services
# Module: smsd
#
# policy for smsd
#
smsd = module
- Allow lvm_t to create default targets for filesystem handling - Fix labeling for razor-lightdm binaries - Allow insmod_t to read any file labeled var_lib_t - Add policy for pesign - Activate policy for cmpiLMI_Account-cimprovagt - Allow isnsd syscall=listen - /usr/libexec/pegasus/cimprovagt needs setsched caused by sched_setschedule - Allow ctdbd to use udp/4379 - gatherd wants sys_nice and setsched - Add support for texlive2012 - Allow NM to read file_t (usb stick with no labels used to transfer keys fo - Allow cobbler to execute apache with domain transition
2013-06-24 21:12:23 +00:00
# Layer: contrib
# Module: pesign
#
# policy for pesign
#
pesign = module
Activate nsd policy
2013-07-01 11:35:39 +00:00
# Layer: contrib
# Module: nsd
#
# Fast and lean authoritative DNS Name Server
#
nsd = module
- Add prosody policy written by Michael Scherer - Allow nagios plugins to read /sys info - ntpd needs to manage own log files - Add support for HOME_DIR/.IBMERS - Allow iptables commands to read firewalld config - Allow consolekit_t to read utmp - Fix filename transitions on .razor directory - Add additional fixes to make DSPAM with LDA working - Allow snort to read /etc/passwd - Allow fail2ban to communicate with firewalld over dbus - Dontaudit openshift_cgreoup_file_t read/write leaked dev - Allow nfsd to use mountd port - Call th proper interface - Allow openvswitch to read sys and execute plymouth - Allow tmpwatch to read /var/spool/cups/tmp - Add support for /usr/libexec/telepathy-rakia - Add systemd support for zoneminder - Allow mysql to create files/directories under /var/log/mysql - Allow zoneminder apache scripts to rw zoneminder tmpfs - Allow httpd to manage zoneminder lib files - Add zoneminder_run_sudo boolean to allow to start zoneminder - Allow zoneminder to send mails - gssproxy_t sock_file can be under /var/lib - Allow web domains to connect to whois port. - Allow sandbox_web_type to connect to the same ports as mozilla_plugin_t. - We really need to add an interface to corenet to define what a web_client_domain i - then define chrome_sandbox_t, mozilla_plugin_t and sandbox_web_type to that domain - Add labeling for cmpiLMI_LogicalFile-cimprovagt - Also make pegasus_openlmi_logicalfile_t as unconfined to have unconfined_domain at - Update policy rules for pegasus_openlmi_logicalfile_t - Add initial types for logicalfile/unconfined OpenLMI providers - mailmanctl needs to read own log - Allow logwatch manage own lock files - Allow nrpe to read meminfo - Allow httpd to read certs located in pki-ca - Add pki_read_tomcat_cert() interface - Add support for nagios openshift plugins - Add port definition for redis port - fix selinuxuser_use_ssh_chroot boolean
2013-07-08 07:18:11 +00:00
# Layer: contrib
# Module: iodine
#
# Fast and lean authoritative DNS Name Server
#
iodine = module
Activate openhpid policy
2013-07-10 08:48:34 +00:00
# Layer: contrib
# Module: openhpid
#
# OpenHPI daemon runs as a background process and accepts connecti
#
Add oracleasm policy
2013-08-07 08:06:23 +00:00
openhpid = module
Activate watchdog policy
2013-08-06 13:08:02 +00:00
# Layer: contrib
# Module: watchdog
#
# Watchdog policy
#
Add oracleasm policy
2013-08-07 08:06:23 +00:00
watchdog = module
# Layer: contrib
# Module: oracleasm
#
# oracleasm policy
#
oracleasm = module
Cleanup related to init_domain()+inetd_domain fixes - Use just init_domain instead of init_daemon_domain in inetd_core_service_domain - svirt domains neeed to create kobject_uevint_sockets - Lots of new access required for sosreport - Allow tgtd_t to connect to isns ports - Allow init_t to transition to all inetd domains: - openct needs to be able to create netlink_object_uevent_sockets - Dontaudit leaks into ldconfig_t - Dontaudit su domains getattr on /dev devices, move su domains to attribute based calls - Move kernel_stream_connect into all Xwindow using users - Dontaudit inherited lock files in ifconfig o dhcpc_t
2013-09-05 13:40:37 +00:00
# Layer: contrib
# Module: redis
#
# redis policy
#
redis = module
# Layer: contrib
# Module: hypervkvp
#
# hypervkvp policy
#
hypervkvp = module
# Layer: contrib
# Module: lsm
#
# lsm policy
#
lsm = module
"motion+rtas should be in modules-targeted-contrib.conf"
2013-10-17 12:02:09 +00:00
# Layer: contrib
# Module: motion
#
# Daemon for detect motion using a video4linux device
motion = module
Add oracleasm policy
2013-08-07 08:06:23 +00:00
"motion+rtas should be in modules-targeted-contrib.conf"
2013-10-17 12:02:09 +00:00
# Layer: contrib
# Module: rtas
#
# rtas policy
#
rtas = module
Add journalctl to modules-targeted-contrib
2013-11-05 22:04:20 +00:00
# Layer: contrib
# Module: journalctl
#
# journalctl policy
#
journalctl = module
* Wed Nov 13 2013 Miroslav Grepl <mgrepl@redhat.com> 3.13.1-1 - Update to upstream
2013-11-13 15:05:06 +00:00
# Layer: contrib
# Module: gdomap
#
# gdomap policy
#
gdomap = module
# Layer: contrib
# Module: minidlna
#
# minidlna policy
#
minidlna = module
# Layer: contrib
# Module: minissdpd
#
# minissdpd policy
#
minissdpd = module
Add freeipmi policy
2013-12-06 09:00:23 +00:00
# Layer: contrib
# Module: freeipmi
#
# Remote-Console (out-of-band) and System Management Software (in-band)
# based on IntelligentPlatform Management Interface specification
#
freeipmi = module
- Allow freeipmi_ipmidetectd_t to use freeipmi port - Update freeipmi_domain_template() - Allow journalctl running as ABRT to read /run/log/journal - Allow NM to read dispatcher.d directory - Update freeipmi policy - Type transitions with a filename not allowed inside conditionals - Allow tor to bind to hplip port - Make new type to texlive files in homedir - Allow zabbix_agent to transition to dmidecode - Add rules for docker - Allow sosreport to send signull to unconfined_t - Add virt_noatsecure and virt_rlimitinh interfaces - Fix labeling in thumb.fc to add support for /usr/lib64/tumbler-1/tumblerddd support for freeipm - Add sysadm_u_default_contexts - Add logging_read_syslog_pid() - Fix userdom_manage_home_texlive() interface - Make new type to texlive files in homedir - Add filename transitions for /run and /lock links - Allow virtd to inherit rlimit information
2013-12-12 16:23:54 +00:00
Turn on mirrormanager policy
2013-12-19 20:10:46 +00:00
# Layer: contrib
# Module: mirrormanager
#
# mirrormanager policy
#
mirrormanager = module
See spec file
2014-01-17 15:40:25 +00:00
# Layer: contrib
# Module: snapper
#
# snapper policy
#
snapper = module
# Layer: contrib
# Module: pcp
#
# pcp policy
#
pcp = module
Add geoclue policy
2014-01-21 11:22:50 +00:00
# Layer: contrib
# Module: geoclue
#
# Add policy for Geoclue. Geoclue is a D-Bus service that provides location information
#
geoclue = module
Add rkhunter policy
2014-01-27 10:24:48 +00:00
# Layer: contrib
# Module: rkhunter
#
# rkhunter policy for /var/lib/rkhunter
#
rkhunter = module
Turn on bacula policy
2014-01-31 09:21:40 +00:00
# Layer: contrib
# Module: bacula
#
# bacula policy
#
bacula = module
Turn on rhnsd policy
2014-01-31 14:18:53 +00:00
# Layer: contrib
# Module: rhnsd
#
# rhnsd policy
#
rhnsd = module
- Turn on gear_port_t - Add gear policy and remove permissive domains. - Add labels for ostree - Add SELinux awareness for NM - Label /usr/sbin/pwhistory_helper as updpwd_exec_t
2014-03-27 19:39:58 +00:00
- mongod should not be a part of cloudforms.pp - Fix labeling in snapper.fc - Allow docker to read unconfined_t process state - geoclue dbus chats with NetworkManager - Add cockpit policy - Add interface to allow tools to check the processes state of bind/named - Allow myslqd to use the tram port for Galera/MariaDB
2014-04-23 09:47:29 +00:00
# Layer: contrib
# Module: mongodb
#
# mongodb policy
#
mongodb = module
Added iotop to permissive domains, and modules-targeted-contrib
2014-05-12 13:42:54 +00:00
# Layer: contrib
# Module: iotop
#
# iotop policy
#
iotop = module
Add kmscon policy to modules-targeted-contrib.conf and to permissivedomains
2014-06-12 16:00:33 +00:00
# Layer: contrib
# Module: kmscon
#
# kmscon policy
#
kmscon = module
Clean up modules-targeted-{contrib,base}.conf from dups.
2014-06-19 12:58:29 +00:00
Add support for naemon, Add naemon to permissive domains
2014-07-22 11:45:54 +00:00
# Layer: contrib
# Module: naemon
#
# naemon policy
#
naemon = module
Activated module brltty policy
2014-10-06 11:05:03 +00:00
# Layer: contrib
# Module: brltty
#
# brltty policy
#
brltty = module
Activate cpuplug policy
2014-10-06 13:21:58 +00:00
# Layer: contrib
# Module: cpuplug
#
# cpuplug policy
#
cpuplug = module
Add mon_statd to modules-targeted-contrib.conf
2014-10-13 13:41:34 +00:00
# Layer: contrib
# Module: mon_statd
#
# mon_statd policy
#
mon_statd = module
Add cinder to modules-targeted-contrib
2014-10-21 12:53:28 +00:00
# Layer: contrib
# Module: cinder
#
# openstack-cinder policy
#
cinder = module
Added support for linuxptp policy.
2014-11-07 18:12:59 +00:00
# Layer: contrib
# Module: linuxptp
#
# linuxptp policy
#
linuxptp = module
Turn on rolekit in F22
2015-03-06 16:10:03 +00:00
# Layer: contrib
# Module: rolekit
#
# rolekit policy
#
rolekit = module
Make targetd policy active.
2015-08-04 12:16:26 +00:00
# Layer: contrib
# Module: targetd
#
# targetd policy
#
targetd = module
Activate new hsqldb policy.
2015-08-17 12:43:42 +00:00
# Layer: contrib
# Module: hsqldb
#
# Hsqldb is transactional database engine with in-memory and disk-based tables, supporting embedded and server modes.
#
hsqldb = module
Activate new blkmapd policy.
2015-08-20 09:39:18 +00:00
# Layer: contrib
# Module: blkmapd
#
Set recently created domains as permissive for testing period. Enable new ipmievd domain. #1241453
2015-10-14 15:58:27 +00:00
# The blkmapd daemon performs device discovery and mapping for pNFS block layout client.
Activate new blkmapd policy.
2015-08-20 09:39:18 +00:00
#
blkmapd = module
Make pkcs11proxyd policy active
2015-09-29 16:16:18 +00:00
# Layer: contrib
# Module: pkcs11proxyd
#
# pkcs11proxyd policy
#
pkcs11proxyd = module
Set recently created domains as permissive for testing period. Enable new ipmievd domain. #1241453
2015-10-14 15:58:27 +00:00
# Layer: contrib
# Module: ipmievd
#
# IPMI event daemon for sending events to syslog
#
ipmievd = module
Add support for openfortivpn
2015-11-10 07:18:14 +00:00
# Layer: contrib
# Module: openfortivpn
#
# Fortinet compatible SSL VPN daemons.
#
openfortivpn = module
Add fwupd module to modules-targeted-contrib.conf file.
2016-01-18 13:50:53 +00:00
# Layer: contrib
# Module: fwupd
#
# fwupd is a daemon to allow session software to update device firmware.
#
fwupd = module
Make lttng-tools SELinux module active
2016-02-15 20:34:40 +00:00
# Layer: contrib
# Module: lttng-tools
#
# LTTng 2.x central tracing registry session daemon.
#
lttng-tools = module
Make rkt policy active.
2016-02-26 16:34:45 +00:00
# Layer: contrib
# Module: rkt
#
# CLI for running app containers
#
rkt = module
Make opendnssec module active
2016-05-25 10:20:13 +00:00
# Layer: contrib
# Module: opendnssec
#
# opendnssec
#
opendnssec = module
Make hwloc module active
2016-06-09 14:38:56 +00:00
# Layer: contrib
# Module: hwloc
#
# hwloc
#
hwloc = module
Make sbd SELinux module active
2016-07-05 11:50:18 +00:00
# Layer: contrib
# Module: sbd
#
# sbd
#
sbd = module
Make tlp policy active
2016-11-16 13:33:40 +00:00
# Layer: contrib
# Module: tlp
#
# tlp
#
tlp = module
Make ganesha module active
2017-02-16 21:11:52 +00:00
Make conntrackd policy active
2017-10-16 12:41:30 +00:00
# Layer: contrib
# Module: conntrackd
#
# conntrackd
#
conntrackd = module
Make tangd policy active
2018-04-25 09:01:01 +00:00
# Layer: contrib
# Module: tangd
#
# tangd
#
tangd = module
Make ibacm policy active
2018-06-29 13:32:02 +00:00
# Layer: contrib
# Module: ibacm
#
# ibacm
#
ibacm = module
Enable opafm policy module
2018-08-06 04:31:51 +00:00
# Layer: contrib
# Module: opafm
#
# opafm
#
opafm = module
Make boltd policy active
2018-08-07 13:19:00 +00:00
# Layer: contrib
# Module: boltd
#
# boltd
#
boltd = module
Make kpatch policy active
2018-11-27 12:52:09 +00:00
# Layer: contrib
# Module: kpatch
#
# kpatch
#
kpatch = module
Make timedatex module active
2019-07-23 10:49:04 +00:00
# Layer: contrib
# Module: timedatex
#
# timedatex
#
timedatex = module
Make rrdcached policy active
2019-07-29 13:33:56 +00:00
# Layer: contrib
# Module: rrdcached
#
# rrdcached
#
rrdcached = module
Make stratisd policy active
2019-09-10 13:28:53 +00:00
# Layer: contrib
# Module: stratisd
#
# stratisd
#
stratisd = module
* Fri Aug 27 2021 Zdenek Pytela <zpytela@redhat.com> - 34.17-5 - Add ica module to modules-targeted-contrib.conf
2021-08-27 11:46:07 +00:00
# Layer: contrib
# Module: ica
#
# ica
#
ica = module
* Thu Oct 07 2021 Zdenek Pytela <zpytela@redhat.com> - 35.1-1 - Add fedoratp module - Allow xdm_t domain transition to fedoratp_t - Allow ModemManager create and use netlink route socket - Add default file context for /run/gssproxy.default.sock - Allow xdm_t watch fonts directories - Allow xdm_t watch generic directories in /lib - Allow xdm_t watch generic pid directories
2021-10-07 16:06:06 +00:00
# Layer: contrib
# Module: fedoratp
#
# fedoratp
#
fedoratp = module
Add insights_client module to modules-targeted-contrib.conf
2022-02-23 17:43:55 +00:00
# Layer: contrib
# Module: insights_client
#
# insights_client
#
insights_client = module
Add stalld module to modules-targeted-contrib.conf
2022-04-21 07:10:30 +00:00
# Layer: contrib
# Module: stalld
#
# stalld
#
stalld = module
* Wed Sep 14 2022 Zdenek Pytela <zpytela@redhat.com> - 37.11-1 - Allow tor get filesystem attributes - Allow utempter append to login_userdomain stream - Allow login_userdomain accept a stream connection to XDM - Allow login_userdomain write to boltd named pipes - Allow staff_u and user_u users write to bolt pipe - Allow login_userdomain watch various directories - Update rhcd policy for executing additional commands 5 - Update rhcd policy for executing additional commands 4 - Allow rhcd create rpm hawkey logs with correct label - Allow systemd-gpt-auto-generator to check for empty dirs - Update rhcd policy for executing additional commands 3 - Allow journalctl read rhcd fifo files - Update insights-client policy for additional commands execution 5 - Allow init remount all file_type filesystems - Confine insights-client systemd unit - Update insights-client policy for additional commands execution 4 - Allow pcp pmcd search tracefs and acct_data dirs - Allow httpd read network sysctls - Dontaudit domain map permission on directories - Revert "Allow X userdomains to mmap user_fonts_cache_t dirs" - Revert "Allow xdm_t domain to mmap /var/lib/gdm/.cache/fontconfig BZ(1725509)" - Update insights-client policy for additional commands execution 3 - Allow systemd permissions needed for sandboxed services - Add rhcd module - Make dependency on rpm-plugin-selinux unordered
2022-09-14 07:14:08 +00:00
# Layer: contrib
# Module: rhcd
#
# rhcd
#
rhcd = module
* Mon Nov 21 2022 Zdenek Pytela <zpytela@redhat.com> - 38.1-1 - Revert "Allow sysadm_t read raw memory devices" - Allow systemd-socket-proxyd get attributes of cgroup filesystems - Allow rpc.gssd read network sysctls - Allow winbind-rpcd get attributes of device and pty filesystems - Allow insights-client domain transition on semanage execution - Allow insights-client create gluster log dir with a transition - Allow insights-client manage generic locks - Allow insights-client unix_read all domain semaphores - Add domain_unix_read_all_semaphores() interface - Allow winbind-rpcd use the terminal multiplexor - Allow mrtg send mails - Allow systemd-hostnamed dbus chat with init scripts - Allow sssd dbus chat with system cronjobs - Add interface to watch all filesystems - Add watch_sb interfaces - Add watch interfaces - Allow dhcpd bpf capability to run bpf programs - Allow netutils and traceroute bpf capability to run bpf programs - Allow pkcs_slotd_t bpf capability to run bpf programs - Allow xdm bpf capability to run bpf programs - Allow pcscd bpf capability to run bpf programs - Allow lldpad bpf capability to run bpf programs - Allow keepalived bpf capability to run bpf programs - Allow ipsec bpf capability to run bpf programs - Allow fprintd bpf capability to run bpf programs - Allow systemd-socket-proxyd get filesystems attributes - Allow dirsrv_snmp_t to manage dirsrv_config_t & dirsrv_var_run_t files
2022-11-21 16:04:56 +00:00
# Layer: contrib
# Module: wireguard
#
# wireguard
#
wireguard = module
Add mptcpd and rshim modules
2022-12-15 10:31:44 +00:00
# Layer: contrib
# Module: mptcpd
#
# mptcpd
#
mptcpd = module
# Layer: contrib
# Module: rshim
#
# rshim
#
rshim = module
* Wed Feb 08 2023 Zdenek Pytela <zpytela@redhat.com> - 38.7-1 - Allowing snapper to create snapshots of /home/ subvolume/partition - Add boolean qemu-ga to run unconfined script - Label systemd-journald feature LogNamespace - Add none file context for polyinstantiated tmp dirs - Allow certmonger read the contents of the sysfs filesystem - Add journalctl the sys_resource capability - Allow nm-dispatcher plugins read generic files in /proc - Add initial policy for the /usr/sbin/request-key helper - Additional support for rpmdb_migrate - Add the keyutils module
2023-02-08 20:18:26 +00:00
# Layer: contrib
# Module: keyutils
#
# keyutils
#
keyutils = module
* Mon May 22 2023 Zdenek Pytela <zpytela@redhat.com> - 38.13-1 - Add initial policy for cifs-helper - Label key.dns_resolver with keyutils_dns_resolver_exec_t - Allow unconfined_service_t to create .gnupg labeled as gpg_secret_t - Allow some systemd services write to cgroup files - Allow NetworkManager_dispatcher_dhclient_t to read the DHCP configuration files - Allow systemd resolved to bind to arbitrary nodes - Allow plymouthd_t bpf capability to run bpf programs - Allow cupsd to create samba_var_t files - Allow rhsmcert request the kernel to load a module - Allow virsh name_connect virt_port_t - Allow certmonger manage cluster library files - Allow plymouthd read init process state - Add chromium_sandbox_t setcap capability - Allow snmpd read raw disk data - Allow samba-rpcd work with passwords - Allow unconfined service inherit signal state from init - Allow cloud-init manage gpg admin home content - Allow cluster_t dbus chat with various services - Allow nfsidmapd work with systemd-userdbd and sssd - Allow unconfined_domain_type use IORING_OP_URING_CMD on all device nodes - Allow plymouthd map dri and framebuffer devices - Allow rpmdb_migrate execute rpmdb - Allow logrotate dbus chat with systemd-hostnamed - Allow icecast connect to kernel using a unix stream socket - Allow lldpad connect to systemd-userdbd over a unix socket - Allow journalctl open user domain ptys and ttys - Allow keepalived to manage its tmp files - Allow ftpd read network sysctls - Label /run/bgpd with zebra_var_run_t - Allow gssproxy read network sysctls - Add the cifsutils module
2023-05-22 07:00:23 +00:00
# Layer: contrib
# Module: cifsutils
#
# cifsutils - Utilities for managing CIFS mounts
#
cifsutils = module
Reference in New Issue Copy Permalink