diff --git a/www/api-docs/kernel.html b/www/api-docs/kernel.html
index 5667144b..ac3a8353 100644
--- a/www/api-docs/kernel.html
+++ b/www/api-docs/kernel.html
@@ -92,7 +92,8 @@
-Policy for kernel threads, proc filesystem,and unlabeled processes and objects.
+Policy for kernel threads, proc filesystem,
+and unlabeled processes and objects.
diff --git a/www/api-docs/kernel_bootloader.html b/www/api-docs/kernel_bootloader.html
index 5ec0660b..a5dd10e1 100644
--- a/www/api-docs/kernel_bootloader.html
+++ b/www/api-docs/kernel_bootloader.html
@@ -101,13 +101,13 @@
Interfaces:
-
+
-bootloader_create_kernel(
+bootloader_create_kernel_img(
@@ -185,48 +185,6 @@ No
-
-
-
-
-
-
-bootloader_create_modules(
-
-
-
-
- ?
-
-
- )
-
-
-
- Summary
-
-Summary is missing!
-
-
-
- Parameters
-
-| Parameter: | Description: | Optional: |
|---|
-
-|
-?
- |
-
-Parameter descriptions are missing!
-
- |
-No
- |
-
-
-
-
@@ -481,6 +439,90 @@ No
+
+
+
+
+
+
+bootloader_filetrans_modules(
+
+
+
+
+ ?
+
+
+ )
+
+
+
+ Summary
+
+Summary is missing!
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+?
+ |
+
+Parameter descriptions are missing!
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+bootloader_getattr_boot_dir(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Get attributes of the /boot directory.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain to not audit.
+
+ |
+No
+ |
+
+
+
+
diff --git a/www/api-docs/kernel_corecommands.html b/www/api-docs/kernel_corecommands.html
index 9068d767..c44acb38 100644
--- a/www/api-docs/kernel_corecommands.html
+++ b/www/api-docs/kernel_corecommands.html
@@ -746,6 +746,174 @@ No
+
+
+
+
+
+
+corecmd_manage_bin_files(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Create, read, write, and delete bin files.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+corecmd_manage_sbin_files(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Create, read, write, and delete sbin files.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+corecmd_mmap_bin_files(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Mmap a bin file as executable.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+corecmd_mmap_sbin_files(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Mmap a sbin file as executable.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
@@ -1064,6 +1232,90 @@ Read symbolic links in sbin directories.
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+corecmd_relabel_bin_files(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Relabel to and from the bin type.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+corecmd_relabel_sbin_files(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Relabel to and from the sbin type.
+
+
+
Parameters
| Parameter: | Description: | Optional: |
|---|
diff --git a/www/api-docs/kernel_corenetwork.html b/www/api-docs/kernel_corenetwork.html
index 11e61b88..6697c54e 100644
--- a/www/api-docs/kernel_corenetwork.html
+++ b/www/api-docs/kernel_corenetwork.html
@@ -592,6 +592,48 @@ Receive raw IP packets on the link_local node.
+Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+The type of the process performing this action.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+
+
+
+corenet_raw_receive_lo_if(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Receive raw IP packets on the lo interface.
+
+
+
Parameters
| Parameter: | Description: | Optional: |
|---|
@@ -1096,6 +1138,48 @@ Send raw IP packets on the link_local node.
+Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+The type of the process performing this action.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+
+
+
+corenet_raw_send_lo_if(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Send raw IP packets on the lo interface.
+
+
+
Parameters
| Parameter: | Description: | Optional: |
|---|
@@ -1600,6 +1684,48 @@ Send and receive raw IP packets on the link_local node.
+Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+The type of the process performing this action.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+
+
+
+corenet_raw_sendrecv_lo_if(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Send and receive raw IP packets on the lo interface.
+
+
+
Parameters
| Parameter: | Description: | Optional: |
|---|
@@ -12016,6 +12142,48 @@ Send and receive TCP traffic on the link_local node.
+Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+The type of the process performing this action.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+
+
+
+corenet_tcp_sendrecv_lo_if(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Send and receive TCP network traffic on the lo interface.
+
+
+
Parameters
| Parameter: | Description: | Optional: |
|---|
@@ -20416,6 +20584,48 @@ Receive UDP traffic on the link_local node.
+Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+The type of the process performing this action.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+
+
+
+corenet_udp_receive_lo_if(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Receive UDP network traffic on the lo interface.
+
+
+
Parameters
| Parameter: | Description: | Optional: |
|---|
@@ -24658,6 +24868,48 @@ Send UDP traffic on the link_local node.
+Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+The type of the process performing this action.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+
+
+
+corenet_udp_send_lo_if(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Send UDP network traffic on the lo interface.
+
+
+
Parameters
| Parameter: | Description: | Optional: |
|---|
@@ -28900,6 +29152,48 @@ Send and receive UDP traffic on the link_local node.
+Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+The type of the process performing this action.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+
+
+
+corenet_udp_sendrecv_lo_if(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Send and receive UDP network traffic on the lo interface.
+
+
+
Parameters
| Parameter: | Description: | Optional: |
|---|
diff --git a/www/api-docs/kernel_devices.html b/www/api-docs/kernel_devices.html
index 02f90019..28977b7d 100644
--- a/www/api-docs/kernel_devices.html
+++ b/www/api-docs/kernel_devices.html
@@ -252,86 +252,6 @@ No
-
-
-
-
-
-
-dev_create_dev_node(
-
-
-
-
- domain
-
-
-
- ,
-
-
-
- file
-
-
-
- ,
-
-
-
- objectclass(es)
-
-
- )
-
-
-
- Summary
-
-Create, read, and write device nodes. The node
-will be transitioned to the type provided.
-
-
-
- Parameters
-
-| Parameter: | Description: | Optional: |
|---|
-
-|
-domain
- |
-
-Domain allowed access.
-
- |
-No
- |
-
-|
-file
- |
-
-Type to which the created node will be transitioned.
-
- |
-No
- |
-
-|
-objectclass(es)
- |
-
-Object class(es) (single or set including {}) for which this
-the transition will occur.
-
- |
-No
- |
-
-
-
-
@@ -795,6 +715,48 @@ No
+
+
+
+
+
+
+dev_dontaudit_getattr_memory_dev(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+dontaudit getattr raw memory devices (e.g. /dev/mem).
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
@@ -1646,6 +1608,86 @@ No
+
+
+
+
+
+
+dev_filetrans_dev_node(
+
+
+
+
+ domain
+
+
+
+ ,
+
+
+
+ file
+
+
+
+ ,
+
+
+
+ objectclass(es)
+
+
+ )
+
+
+
+ Summary
+
+Create, read, and write device nodes. The node
+will be transitioned to the type provided.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+|
+file
+ |
+
+Type to which the created node will be transitioned.
+
+ |
+No
+ |
+
+|
+objectclass(es)
+ |
+
+Object class(es) (single or set including {}) for which this
+the transition will occur.
+
+ |
+No
+ |
+
+
+
+
diff --git a/www/api-docs/kernel_domain.html b/www/api-docs/kernel_domain.html
index c72992b3..81fe2385 100644
--- a/www/api-docs/kernel_domain.html
+++ b/www/api-docs/kernel_domain.html
@@ -1543,6 +1543,91 @@ No
+
+
+
+
+
+
+domain_manage_all_entry_files(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Create, read, write, and delete all
+entrypoint files.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+domain_mmap_all_entry_files(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Mmap all entry point files as executable.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
@@ -1736,6 +1821,49 @@ Read the process state (/proc/pid) of all confined domains.
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+domain_relabel_all_entry_files(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Relabel to and from all entry point
+file types.
+
+
+
Parameters
| Parameter: | Description: | Optional: |
|---|
diff --git a/www/api-docs/kernel_files.html b/www/api-docs/kernel_files.html
index 4db3242a..b7ed449f 100644
--- a/www/api-docs/kernel_files.html
+++ b/www/api-docs/kernel_files.html
@@ -244,571 +244,6 @@ No
-
-
-
-
-
-
-files_create_etc_config(
-
-
-
-
- ?
-
-
- )
-
-
-
- Summary
-
-Summary is missing!
-
-
-
- Parameters
-
-| Parameter: | Description: | Optional: |
|---|
-
-|
-?
- |
-
-Parameter descriptions are missing!
-
- |
-No
- |
-
-
-
-
-
-
-
-
-files_create_home_dirs(
-
-
-
-
- domain
-
-
-
- ,
-
-
-
- home_type
-
-
- )
-
-
-
- Summary
-
-Create home directories
-
-
-
- Parameters
-
-| Parameter: | Description: | Optional: |
|---|
-
-|
-domain
- |
-
-The type of the process performing this action.
-
- |
-No
- |
-
-|
-home_type
- |
-
-The type of the home directory
-
- |
-No
- |
-
-
-
-
-
-
-
-
-files_create_lock(
-
-
-
-
- ?
-
-
- )
-
-
-
- Summary
-
-Summary is missing!
-
-
-
- Parameters
-
-| Parameter: | Description: | Optional: |
|---|
-
-|
-?
- |
-
-Parameter descriptions are missing!
-
- |
-No
- |
-
-
-
-
-
-
-
-
-files_create_pid(
-
-
-
-
- ?
-
-
- )
-
-
-
- Summary
-
-Summary is missing!
-
-
-
- Parameters
-
-| Parameter: | Description: | Optional: |
|---|
-
-|
-?
- |
-
-Parameter descriptions are missing!
-
- |
-No
- |
-
-
-
-
-
-
-
-
-files_create_root(
-
-
-
-
- domain
-
-
-
- ,
-
-
-
- [
-
- private type
-
- ]
-
-
-
- ,
-
-
-
- [
-
- object
-
- ]
-
-
- )
-
-
-
- Summary
-
-Create an object in the root directory, with a private
-type. If no object class is specified, the
-default is file.
-
-
-
- Parameters
-
-| Parameter: | Description: | Optional: |
|---|
-
-|
-domain
- |
-
-The type of the process performing this action.
-
- |
-No
- |
-
-|
-private type
- |
-
-The type of the object to be created. If no type
-is specified, the type of the root directory will
-be used.
-
- |
-yes
- |
-
-|
-object
- |
-
-The object class of the object being created. If
-no class is specified, file will be used.
-
- |
-yes
- |
-
-
-
-
-
-
-
-
-files_create_tmp_files(
-
-
-
-
- ?
-
-
- )
-
-
-
- Summary
-
-Summary is missing!
-
-
-
- Parameters
-
-| Parameter: | Description: | Optional: |
|---|
-
-|
-?
- |
-
-Parameter descriptions are missing!
-
- |
-No
- |
-
-
-
-
-
-
-
-
-files_create_usr(
-
-
-
-
- domain
-
-
-
- ,
-
-
-
- file_type
-
-
-
- ,
-
-
-
- [
-
- object_class
-
- ]
-
-
- )
-
-
-
- Summary
-
-Create objects in the /usr directory
-
-
-
- Parameters
-
-| Parameter: | Description: | Optional: |
|---|
-
-|
-domain
- |
-
-Domain allowed access.
-
- |
-No
- |
-
-|
-file_type
- |
-
-The type of the object to be created
-
- |
-No
- |
-
-|
-object_class
- |
-
-The object class. If not specified, file is used.
-
- |
-yes
- |
-
-
-
-
-
-
-
-
-files_create_var(
-
-
-
-
- domain
-
-
-
- ,
-
-
-
- file_type
-
-
-
- ,
-
-
-
- [
-
- object_class
-
- ]
-
-
- )
-
-
-
- Summary
-
-Create objects in the /var directory
-
-
-
- Parameters
-
-| Parameter: | Description: | Optional: |
|---|
-
-|
-domain
- |
-
-Domain allowed access.
-
- |
-No
- |
-
-|
-file_type
- |
-
-The type of the object to be created
-
- |
-No
- |
-
-|
-object_class
- |
-
-The object class. If not specified, file is used.
-
- |
-yes
- |
-
-
-
-
-
-
-
-
-files_create_var_lib(
-
-
-
-
- domain
-
-
-
- ,
-
-
-
- file_type
-
-
-
- ,
-
-
-
- [
-
- object_class
-
- ]
-
-
- )
-
-
-
- Summary
-
-Create objects in the /var/lib directory
-
-
-
- Parameters
-
-| Parameter: | Description: | Optional: |
|---|
-
-|
-domain
- |
-
-Domain allowed access.
-
- |
-No
- |
-
-|
-file_type
- |
-
-The type of the object to be created
-
- |
-No
- |
-
-|
-object_class
- |
-
-The object class. If not specified, file is used.
-
- |
-yes
- |
-
-
-
-
@@ -1775,6 +1210,49 @@ directories with the default file type.
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain to not audit.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+files_dontaudit_list_home(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Do not audit attempts to list
+home directories root (/home).
+
+
+
Parameters
| Parameter: | Description: | Optional: |
|---|
@@ -1814,7 +1292,7 @@ No
Summary
Do not audit attempts to list all
-non security directories.
+non-security directories.
@@ -1836,6 +1314,48 @@ No
+
+
+
+
+
+
+files_dontaudit_list_tmp(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Do not audit listing of the tmp directory (/tmp).
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain not to audit.
+
+ |
+No
+ |
+
+
+
+
@@ -2390,6 +1910,48 @@ No
+
+
+
+
+
+
+files_dontaudit_write_var(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Do not audit attempts to write to /var.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain to not audit.
+
+ |
+No
+ |
+
+
+
+
@@ -2516,6 +2078,587 @@ No
+
+
+
+
+
+
+files_filetrans_etc(
+
+
+
+
+ ?
+
+
+ )
+
+
+
+ Summary
+
+Summary is missing!
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+?
+ |
+
+Parameter descriptions are missing!
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+files_filetrans_home(
+
+
+
+
+ domain
+
+
+
+ ,
+
+
+
+ home_type
+
+
+
+ ,
+
+
+
+ [
+
+ object
+
+ ]
+
+
+ )
+
+
+
+ Summary
+
+Create objects in /home.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+The type of the process performing this action.
+
+ |
+No
+ |
+
+|
+home_type
+ |
+
+The private type.
+
+ |
+No
+ |
+
+|
+object
+ |
+
+The object class of the object being created. If
+no class is specified, dir will be used.
+
+ |
+yes
+ |
+
+
+
+
+
+
+
+
+files_filetrans_lock(
+
+
+
+
+ ?
+
+
+ )
+
+
+
+ Summary
+
+Summary is missing!
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+?
+ |
+
+Parameter descriptions are missing!
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+files_filetrans_pid(
+
+
+
+
+ ?
+
+
+ )
+
+
+
+ Summary
+
+Summary is missing!
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+?
+ |
+
+Parameter descriptions are missing!
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+files_filetrans_root(
+
+
+
+
+ domain
+
+
+
+ ,
+
+
+
+ private type
+
+
+
+ ,
+
+
+
+ [
+
+ object
+
+ ]
+
+
+ )
+
+
+
+ Summary
+
+Create an object in the root directory, with a private
+type.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+The type of the process performing this action.
+
+ |
+No
+ |
+
+|
+private type
+ |
+
+The type of the object to be created.
+
+ |
+No
+ |
+
+|
+object
+ |
+
+The object class of the object being created. If
+no class is specified, file will be used.
+
+ |
+yes
+ |
+
+
+
+
+
+
+
+
+files_filetrans_tmp(
+
+
+
+
+ ?
+
+
+ )
+
+
+
+ Summary
+
+Summary is missing!
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+?
+ |
+
+Parameter descriptions are missing!
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+files_filetrans_usr(
+
+
+
+
+ domain
+
+
+
+ ,
+
+
+
+ file_type
+
+
+
+ ,
+
+
+
+ [
+
+ object_class
+
+ ]
+
+
+ )
+
+
+
+ Summary
+
+Create objects in the /usr directory
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+|
+file_type
+ |
+
+The type of the object to be created
+
+ |
+No
+ |
+
+|
+object_class
+ |
+
+The object class. If not specified, file is used.
+
+ |
+yes
+ |
+
+
+
+
+
+
+
+
+files_filetrans_var(
+
+
+
+
+ domain
+
+
+
+ ,
+
+
+
+ file_type
+
+
+
+ ,
+
+
+
+ [
+
+ object_class
+
+ ]
+
+
+ )
+
+
+
+ Summary
+
+Create objects in the /var directory
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+|
+file_type
+ |
+
+The type of the object to be created
+
+ |
+No
+ |
+
+|
+object_class
+ |
+
+The object class. If not specified, file is used.
+
+ |
+yes
+ |
+
+
+
+
+
+
+
+
+files_filetrans_var_lib(
+
+
+
+
+ domain
+
+
+
+ ,
+
+
+
+ file_type
+
+
+
+ ,
+
+
+
+ [
+
+ object_class
+
+ ]
+
+
+ )
+
+
+
+ Summary
+
+Create objects in the /var/lib directory
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+|
+file_type
+ |
+
+The type of the object to be created
+
+ |
+No
+ |
+
+|
+object_class
+ |
+
+The object class. If not specified, file is used.
+
+ |
+yes
+ |
+
+
+
+
@@ -2751,6 +2894,48 @@ Get the attributes of all symbolic links.
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+files_getattr_default_dir(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Getattr of directories with the default file type.
+
+
+
Parameters
| Parameter: | Description: | Optional: |
|---|
@@ -2836,6 +3021,49 @@ Get the attributes of the home directories root
+Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+The type of the process performing this action.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+
+
+
+files_getattr_isid_type_dir(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Getattr of directories on new filesystems
+that have not yet been labeled.
+
+
+
Parameters
| Parameter: | Description: | Optional: |
|---|
@@ -3275,6 +3503,48 @@ No
+
+
+
+
+
+
+files_list_non_security(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+List all non-security directories.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
@@ -4613,6 +4883,49 @@ No
+
+
+
+
+
+
+files_mounton_all_poly_members(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Mount filesystems on all polyinstantiation
+member directories.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
@@ -5019,6 +5332,49 @@ No
+
+
+
+
+
+
+files_polyinstantiate_all(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Allow access to manage all polyinstantiated
+directories on the system.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
@@ -5319,6 +5675,48 @@ yes
+
+
+
+
+
+
+files_read_all_locks(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Read all lock files.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
@@ -5435,7 +5833,7 @@ No
Summary
-Read all symbloic links on the filesystem, except
+Read all symbolic links on the filesystem, except
the listed exceptions.
@@ -5891,6 +6289,48 @@ No
+
+
+
+
+files_read_non_security_files(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Read all non-security files.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
@@ -7816,6 +8256,48 @@ No
+
+
+
+
+
+
+files_write_non_security_dir(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Allow attempts to modify any directory
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain to allow
+
+ |
+No
+ |
+
+
+
+
- fs_create_tmpfs_data(
+ fs_donaudit_read_removable_files(
- ?
+ domain
)
@@ -338,7 +338,7 @@ No
Summary
-Summary is missing!
+Do not audit attempts to read removable storage files.
@@ -347,10 +347,10 @@ Summary is missing!
| Parameter: | Description: | Optional: |
|---|
|
-?
+domain
|
-Parameter descriptions are missing!
+Domain not to audit.
|
No
@@ -620,6 +620,49 @@ No
+
+
+
+
+
+
+fs_dontaudit_list_auto_mountpoints(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Do not audit attempts to list directories of automatically
+mounted filesystems.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+The type of the domain performing this action.
+
+ |
+No
+ |
+
+
+
+
@@ -706,6 +749,48 @@ No
+
+
+
+
+
+
+fs_dontaudit_list_removable_dirs(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Do not audit attempts to list removable storage directories.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain not to audit.
+
+ |
+No
+ |
+
+
+
+
@@ -1097,6 +1182,91 @@ No
+
+
+
+
+
+
+fs_dontaudit_rw_tmpfs_files(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Do not audit attempts to read or write
+generic tmpfs files.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain to not audit.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+fs_dontaudit_use_tmpfs_chr_dev(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+dontaudit Read and write character nodes on tmpfs filesystems.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+The type of the process performing this action.
+
+ |
+No
+ |
+
+
+
+
@@ -1226,6 +1396,48 @@ No
+
+
+
+
+
+
+fs_filetrans_tmpfs(
+
+
+
+
+ ?
+
+
+ )
+
+
+
+ Summary
+
+Summary is missing!
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+?
+ |
+
+Parameter descriptions are missing!
+
+ |
+No
+ |
+
+
+
+
@@ -2223,6 +2435,49 @@ No
+
+
+
+
+
+
+fs_list_auto_mountpoints(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Read directories of automatically
+mounted filesystems.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+The type of the domain performing this action.
+
+ |
+No
+ |
+
+
+
+
@@ -2248,6 +2503,48 @@ CIFS or SMB filesystem.
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+fs_list_nfs(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+List NFS filesystem.
+
+
+
Parameters
| Parameter: | Description: | Optional: |
|---|
@@ -2394,6 +2691,49 @@ No
+
+
+
+
+
+
+fs_manage_auto_mountpoints(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Create, read, write, and delete
+auto moutpoints.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
@@ -3756,6 +4096,48 @@ No
+
+
+
+
+
+
+fs_read_eventpollfs(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Read eventpollfs files
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
@@ -3906,6 +4288,90 @@ Read all noxattrfs symbolic links.
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+fs_read_removable_files(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Read removable storage files.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+fs_read_removable_symlinks(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Read removable storage symbolic links.
+
+
+
Parameters
| Parameter: | Description: | Optional: |
|---|
@@ -5255,6 +5721,90 @@ No
+
+
+
+
+
+
+fs_search_removable_dirs(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Search removable storage directories.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+fs_search_rpc_dirs(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Search directories of RPC file system pipes.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+The type of the domain reading the symbolic links.
+
+ |
+No
+ |
+
+
+
+
diff --git a/www/api-docs/kernel_kernel.html b/www/api-docs/kernel_kernel.html
index f1ab1807..28965cdd 100644
--- a/www/api-docs/kernel_kernel.html
+++ b/www/api-docs/kernel_kernel.html
@@ -95,7 +95,8 @@
Description:
-Policy for kernel threads, proc filesystem,and unlabeled processes and objects.
+Policy for kernel threads, proc filesystem,
+and unlabeled processes and objects.
@@ -3545,7 +3546,7 @@ assocation.
The corenetwork interface
-corenet_sendrecv_no_ipsec() should
+corenet_non_ipsec_sendrecv() should
be used instead of this one.
@@ -4180,7 +4181,7 @@ No
Summary
-Unconfined access to the kernel.
+Unconfined access to kernel module resources.
diff --git a/www/api-docs/kernel_terminal.html b/www/api-docs/kernel_terminal.html
index eb5f4fcb..5915faa5 100644
--- a/www/api-docs/kernel_terminal.html
+++ b/www/api-docs/kernel_terminal.html
@@ -319,6 +319,49 @@ of all unallocated tty device nodes.
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+term_dontaudit_ioctl_unallocated_ttys(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Do not audit attempts to ioctl
+unallocated tty device nodes.
+
+
+
Parameters
| Parameter: | Description: | Optional: |
|---|
@@ -423,6 +466,49 @@ No
+
+
+
+
+
+
+term_dontaudit_search_ptys(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Do not audit attempts to search the
+contents of the /dev/pts directory.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
@@ -981,6 +1067,48 @@ No
+
+
+
+
+
+
+term_read_console(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Read from the console.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
diff --git a/www/api-docs/services.html b/www/api-docs/services.html
index f034e1aa..cd38764e 100644
--- a/www/api-docs/services.html
+++ b/www/api-docs/services.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
@@ -299,6 +329,11 @@
arpwatch
Ethernet activity monitor. |
+ |
+
+ automount |
+ Filesystem automounter service. |
+
|
avahi |
@@ -374,11 +409,21 @@
distcc
Distributed compiler daemon |
+ |
+
+ djbdns |
+ small and secure DNS daemon |
+
|
dovecot |
Dovecot POP and IMAP mail server |
+ |
+
+ fetchmail |
+ Remote-mail retrieval and forwarding utility |
+
|
finger |
@@ -479,6 +524,11 @@
ntp
Network time protocol daemon |
+ |
+
+ openct |
+ Service for handling smart card readers. |
+
|
pegasus |
@@ -514,6 +564,11 @@
procmail
Procmail mail delivery agent |
+ |
+
+ publicfile |
+ publicfile supplies files to the public through HTTP and FTP |
+
|
radius |
@@ -539,6 +594,11 @@
rlogin
Remote login daemon |
+ |
+
+ roundup |
+ Roundup Issue Tracking System policy |
+
|
rpc |
@@ -573,6 +633,16 @@ from Windows NT servers.
sendmail
Policy for sendmail. |
+ |
+
+ slrnpull |
+ Service for downloading news feeds the slrn newsreader. |
+
+ |
+
+ smartmon |
+ Smart disk monitoring daemon policy |
+
|
snmp |
@@ -598,6 +668,11 @@ from Windows NT servers.
stunnel
SSL Tunneling Proxy |
+ |
+
+ sysstat |
+ Policy for sysstat. Reports on various system states |
+
|
tcpd |
@@ -618,6 +693,11 @@ from Windows NT servers.
timidity
MIDI to WAV converter and player configured as a service |
+ |
+
+ ucspitcp |
+ ucspitcp policy |
+
|
uucp |
diff --git a/www/api-docs/services_apache.html b/www/api-docs/services_apache.html
index fbc55f37..2b2fcc10 100644
--- a/www/api-docs/services_apache.html
+++ b/www/api-docs/services_apache.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_apm.html b/www/api-docs/services_apm.html
index 77943dde..d169cd5c 100644
--- a/www/api-docs/services_apm.html
+++ b/www/api-docs/services_apm.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_arpwatch.html b/www/api-docs/services_arpwatch.html
index 383ae0ce..48266bf4 100644
--- a/www/api-docs/services_arpwatch.html
+++ b/www/api-docs/services_arpwatch.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_automount.html b/www/api-docs/services_automount.html
new file mode 100644
index 00000000..8b57fd2d
--- /dev/null
+++ b/www/api-docs/services_automount.html
@@ -0,0 +1,400 @@
+
+
+
+ Security Enhanced Linux Reference Policy
+
+
+
+
+
+
+
+
+
+ Layer: services
+ Module: automount
+
+ Description:
+
+ Filesystem automounter service.
+
+
+
+
+ Interfaces:
+
+
+
+
+
+
+
+automount_domtrans(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Execute automount in the automount domain.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+
+
+
+automount_exec_config(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Execute automount in the caller domain.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+ Return
+
+
+
+
+
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_bind.html b/www/api-docs/services_bind.html
index 7e4e3dc8..ce9952e9 100644
--- a/www/api-docs/services_bind.html
+++ b/www/api-docs/services_bind.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
@@ -511,6 +541,48 @@ Read DNSSEC keys.
+Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+
+
+
+bind_read_zone(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Read BIND zone files.
+
+
+
Parameters
| Parameter: | Description: | Optional: |
|---|
@@ -608,6 +680,48 @@ No
+
+
+
+
+
+
+bind_search_cache(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Search the BIND cache directory.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
diff --git a/www/api-docs/services_bluetooth.html b/www/api-docs/services_bluetooth.html
index 68cb9766..7d047a71 100644
--- a/www/api-docs/services_bluetooth.html
+++ b/www/api-docs/services_bluetooth.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
@@ -384,6 +414,48 @@ Read bluetooth helper files.
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+bluetooth_read_config(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Read bluetooth daemon configuration.
+
+
+
Parameters
| Parameter: | Description: | Optional: |
|---|
diff --git a/www/api-docs/services_canna.html b/www/api-docs/services_canna.html
index 265c4afd..65f98142 100644
--- a/www/api-docs/services_canna.html
+++ b/www/api-docs/services_canna.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_comsat.html b/www/api-docs/services_comsat.html
index 67bb85a2..94ba93d7 100644
--- a/www/api-docs/services_comsat.html
+++ b/www/api-docs/services_comsat.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_cpucontrol.html b/www/api-docs/services_cpucontrol.html
index 4efe63b9..1862b086 100644
--- a/www/api-docs/services_cpucontrol.html
+++ b/www/api-docs/services_cpucontrol.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_cron.html b/www/api-docs/services_cron.html
index 2c5558d7..edff2daa 100644
--- a/www/api-docs/services_cron.html
+++ b/www/api-docs/services_cron.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
@@ -405,6 +435,48 @@ No
+
+
+
+
+
+
+cron_dontaudit_write_pipe(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Do not audit attempts to write cron daemon unnamed pipes.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
diff --git a/www/api-docs/services_cups.html b/www/api-docs/services_cups.html
index a05da6cb..388b5014 100644
--- a/www/api-docs/services_cups.html
+++ b/www/api-docs/services_cups.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_cvs.html b/www/api-docs/services_cvs.html
index fced0b66..fa3eb7c4 100644
--- a/www/api-docs/services_cvs.html
+++ b/www/api-docs/services_cvs.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_cyrus.html b/www/api-docs/services_cyrus.html
index 92eeb123..5d91df8e 100644
--- a/www/api-docs/services_cyrus.html
+++ b/www/api-docs/services_cyrus.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_dbskk.html b/www/api-docs/services_dbskk.html
index 3a0af0f4..8eeb9dd8 100644
--- a/www/api-docs/services_dbskk.html
+++ b/www/api-docs/services_dbskk.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_dbus.html b/www/api-docs/services_dbus.html
index fc7d2286..87739f11 100644
--- a/www/api-docs/services_dbus.html
+++ b/www/api-docs/services_dbus.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
@@ -303,6 +333,48 @@ for service (acquire_svc).
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+dbus_read_config(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Read dbus configuration.
+
+
+
Parameters
| Parameter: | Description: | Optional: |
|---|
diff --git a/www/api-docs/services_dhcp.html b/www/api-docs/services_dhcp.html
index 9779a737..0974ce81 100644
--- a/www/api-docs/services_dhcp.html
+++ b/www/api-docs/services_dhcp.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_dictd.html b/www/api-docs/services_dictd.html
index 037b857f..b8e2fd63 100644
--- a/www/api-docs/services_dictd.html
+++ b/www/api-docs/services_dictd.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_distcc.html b/www/api-docs/services_distcc.html
index 2bd0e006..e774d378 100644
--- a/www/api-docs/services_distcc.html
+++ b/www/api-docs/services_distcc.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_djbdns.html b/www/api-docs/services_djbdns.html
new file mode 100644
index 00000000..d38b50c3
--- /dev/null
+++ b/www/api-docs/services_djbdns.html
@@ -0,0 +1,359 @@
+
+
+
+ Security Enhanced Linux Reference Policy
+
+
+
+
+
+
+
+
+
+ Layer: services
+ Module: djbdns
+
+ Description:
+
+ small and secure DNS daemon
+
+
+
+
+
+ Templates:
+
+
+
+
+
+
+
+djbdns_daemontools_domain_template(
+
+
+
+
+ prefix
+
+
+ )
+
+
+
+ Summary
+
+Create a set of derived types for djbdns
+components that are directly supervised by daemontools.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+prefix
+ |
+
+The prefix to be used for deriving type names.
+
+ |
+No
+ |
+
+
+
+
+
+
+ Return
+
+
+
+
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_fetchmail.html b/www/api-docs/services_fetchmail.html
new file mode 100644
index 00000000..2115aad2
--- /dev/null
+++ b/www/api-docs/services_fetchmail.html
@@ -0,0 +1,312 @@
+
+
+
+ Security Enhanced Linux Reference Policy
+
+
+
+
+
+
+
+
+
+ Layer: services
+ Module: fetchmail
+
+ Description:
+
+ Remote-mail retrieval and forwarding utility
+
+
+
+
+
+ No interfaces or templates.
+
+
+
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_ftp.html b/www/api-docs/services_ftp.html
index a468326f..34147add 100644
--- a/www/api-docs/services_ftp.html
+++ b/www/api-docs/services_ftp.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_gpm.html b/www/api-docs/services_gpm.html
index d858df8b..1e59ca46 100644
--- a/www/api-docs/services_gpm.html
+++ b/www/api-docs/services_gpm.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_hal.html b/www/api-docs/services_hal.html
index 29df8e31..0454f4c2 100644
--- a/www/api-docs/services_hal.html
+++ b/www/api-docs/services_hal.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_howl.html b/www/api-docs/services_howl.html
index c190610a..f1b1ad79 100644
--- a/www/api-docs/services_howl.html
+++ b/www/api-docs/services_howl.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_i18n_input.html b/www/api-docs/services_i18n_input.html
index f5e836d0..1f190c7b 100644
--- a/www/api-docs/services_i18n_input.html
+++ b/www/api-docs/services_i18n_input.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_inetd.html b/www/api-docs/services_inetd.html
index 66dee8ca..a1100896 100644
--- a/www/api-docs/services_inetd.html
+++ b/www/api-docs/services_inetd.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_inn.html b/www/api-docs/services_inn.html
index d38ac303..411f7196 100644
--- a/www/api-docs/services_inn.html
+++ b/www/api-docs/services_inn.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_irqbalance.html b/www/api-docs/services_irqbalance.html
index ca2a6ffb..97ee46be 100644
--- a/www/api-docs/services_irqbalance.html
+++ b/www/api-docs/services_irqbalance.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_kerberos.html b/www/api-docs/services_kerberos.html
index e0fac655..68ea859c 100644
--- a/www/api-docs/services_kerberos.html
+++ b/www/api-docs/services_kerberos.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_ktalk.html b/www/api-docs/services_ktalk.html
index c7a8ce20..8a667958 100644
--- a/www/api-docs/services_ktalk.html
+++ b/www/api-docs/services_ktalk.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_ldap.html b/www/api-docs/services_ldap.html
index 220f195d..4b9ace70 100644
--- a/www/api-docs/services_ldap.html
+++ b/www/api-docs/services_ldap.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_lpd.html b/www/api-docs/services_lpd.html
index 46f63e49..dafce81e 100644
--- a/www/api-docs/services_lpd.html
+++ b/www/api-docs/services_lpd.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_mailman.html b/www/api-docs/services_mailman.html
index 67db042a..133746d6 100644
--- a/www/api-docs/services_mailman.html
+++ b/www/api-docs/services_mailman.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_mta.html b/www/api-docs/services_mta.html
index 76b24684..05afb9d6 100644
--- a/www/api-docs/services_mta.html
+++ b/www/api-docs/services_mta.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
@@ -533,6 +563,133 @@ No
+
+
+
+
+
+
+mta_filetrans_etc_aliases(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Type transition files created in /etc
+to the mail address aliases type.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+mta_filetrans_spool(
+
+
+
+
+ domain
+
+
+
+ ,
+
+
+
+ private type
+
+
+
+ ,
+
+
+
+ [
+
+ object
+
+ ]
+
+
+ )
+
+
+
+ Summary
+
+Create private objects in the
+mail spool directory.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+|
+private type
+ |
+
+The type of the object to be created.
+
+ |
+No
+ |
+
+|
+object
+ |
+
+The object class of the object being created. If
+no class is specified, file will be used.
+
+ |
+yes
+ |
+
+
+
+
@@ -863,7 +1020,7 @@ Read mail address aliases.
domain
-The type of the process performing this action.
+Domain allowed access.
|
No
@@ -905,7 +1062,7 @@ Read mail server configuration.
domain
|
-The type of the process performing this action.
+Domain allowed access.
|
No
diff --git a/www/api-docs/services_mysql.html b/www/api-docs/services_mysql.html
index be814d6c..5bcafc7a 100644
--- a/www/api-docs/services_mysql.html
+++ b/www/api-docs/services_mysql.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_networkmanager.html b/www/api-docs/services_networkmanager.html
index cf5fac4b..4feec980 100644
--- a/www/api-docs/services_networkmanager.html
+++ b/www/api-docs/services_networkmanager.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_nis.html b/www/api-docs/services_nis.html
index 8d9caccc..22560d63 100644
--- a/www/api-docs/services_nis.html
+++ b/www/api-docs/services_nis.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_nscd.html b/www/api-docs/services_nscd.html
index 871381ac..c846b3bf 100644
--- a/www/api-docs/services_nscd.html
+++ b/www/api-docs/services_nscd.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_ntp.html b/www/api-docs/services_ntp.html
index 71a41ce1..3e478970 100644
--- a/www/api-docs/services_ntp.html
+++ b/www/api-docs/services_ntp.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_openct.html b/www/api-docs/services_openct.html
new file mode 100644
index 00000000..69539aad
--- /dev/null
+++ b/www/api-docs/services_openct.html
@@ -0,0 +1,312 @@
+
+
+
+ Security Enhanced Linux Reference Policy
+
+
+
+
+
+
+
+
+
+ Layer: services
+ Module: openct
+
+ Description:
+
+ Service for handling smart card readers.
+
+
+
+
+
+ No interfaces or templates.
+
+
+
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_portmap.html b/www/api-docs/services_portmap.html
index 81013555..ecd695a8 100644
--- a/www/api-docs/services_portmap.html
+++ b/www/api-docs/services_portmap.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_postfix.html b/www/api-docs/services_postfix.html
index 8e67eed0..d6bf20cc 100644
--- a/www/api-docs/services_postfix.html
+++ b/www/api-docs/services_postfix.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
@@ -278,90 +308,6 @@
Interfaces:
-
-
-
-
-
-
-postfix_create_config(
-
-
-
-
- domain
-
-
-
- ,
-
-
-
- private type
-
-
-
- ,
-
-
-
- [
-
- object
-
- ]
-
-
- )
-
-
-
- Summary
-
-Create files with the specified type in
-the postfix configuration directories.
-
-
-
- Parameters
-
-| Parameter: | Description: | Optional: |
|---|
-
-|
-domain
- |
-
-Domain allowed access.
-
- |
-No
- |
-
-|
-private type
- |
-
-The type of the object to be created.
-
- |
-No
- |
-
-|
-object
- |
-
-The object class of the object being created. If
-no class is specified, file will be used.
-
- |
-yes
- |
-
-
-
-
@@ -621,6 +567,90 @@ No
+
+
+
+
+
+
+postfix_filetrans_config(
+
+
+
+
+ domain
+
+
+
+ ,
+
+
+
+ private type
+
+
+
+ ,
+
+
+
+ [
+
+ object
+
+ ]
+
+
+ )
+
+
+
+ Summary
+
+Create files with the specified type in
+the postfix configuration directories.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+|
+private type
+ |
+
+The type of the object to be created.
+
+ |
+No
+ |
+
+|
+object
+ |
+
+The object class of the object being created. If
+no class is specified, file will be used.
+
+ |
+yes
+ |
+
+
+
+
diff --git a/www/api-docs/services_postgresql.html b/www/api-docs/services_postgresql.html
index 0ffd0a95..8cb81b1f 100644
--- a/www/api-docs/services_postgresql.html
+++ b/www/api-docs/services_postgresql.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_ppp.html b/www/api-docs/services_ppp.html
index 876852e3..a63f79c8 100644
--- a/www/api-docs/services_ppp.html
+++ b/www/api-docs/services_ppp.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_privoxy.html b/www/api-docs/services_privoxy.html
index a0bc64da..fa64e0e1 100644
--- a/www/api-docs/services_privoxy.html
+++ b/www/api-docs/services_privoxy.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_procmail.html b/www/api-docs/services_procmail.html
index 25e4adad..e9a58690 100644
--- a/www/api-docs/services_procmail.html
+++ b/www/api-docs/services_procmail.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_publicfile.html b/www/api-docs/services_publicfile.html
new file mode 100644
index 00000000..4cead327
--- /dev/null
+++ b/www/api-docs/services_publicfile.html
@@ -0,0 +1,312 @@
+
+
+
+ Security Enhanced Linux Reference Policy
+
+
+
+
+
+
+
+
+
+ Layer: services
+ Module: publicfile
+
+ Description:
+
+ publicfile supplies files to the public through HTTP and FTP
+
+
+
+
+
+ No interfaces or templates.
+
+
+
+
+
diff --git a/www/api-docs/services_radius.html b/www/api-docs/services_radius.html
index e3c2d6b7..349b8272 100644
--- a/www/api-docs/services_radius.html
+++ b/www/api-docs/services_radius.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_radvd.html b/www/api-docs/services_radvd.html
index 41b66e66..7a346fa7 100644
--- a/www/api-docs/services_radvd.html
+++ b/www/api-docs/services_radvd.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_rdisc.html b/www/api-docs/services_rdisc.html
index 362bf2e9..3083c2f7 100644
--- a/www/api-docs/services_rdisc.html
+++ b/www/api-docs/services_rdisc.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_remotelogin.html b/www/api-docs/services_remotelogin.html
index 760c912d..2c57654a 100644
--- a/www/api-docs/services_remotelogin.html
+++ b/www/api-docs/services_remotelogin.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_rlogin.html b/www/api-docs/services_rlogin.html
index 292758b1..a62d51f0 100644
--- a/www/api-docs/services_rlogin.html
+++ b/www/api-docs/services_rlogin.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_roundup.html b/www/api-docs/services_roundup.html
new file mode 100644
index 00000000..6c3088af
--- /dev/null
+++ b/www/api-docs/services_roundup.html
@@ -0,0 +1,312 @@
+
+
+
+ Security Enhanced Linux Reference Policy
+
+
+
+
+
+
+
+
+
+ Layer: services
+ Module: roundup
+
+ Description:
+
+ Roundup Issue Tracking System policy
+
+
+
+
+
+ No interfaces or templates.
+
+
+
+
+
diff --git a/www/api-docs/services_rpc.html b/www/api-docs/services_rpc.html
index f4550081..7b133836 100644
--- a/www/api-docs/services_rpc.html
+++ b/www/api-docs/services_rpc.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_rshd.html b/www/api-docs/services_rshd.html
index 949f13ce..add52d99 100644
--- a/www/api-docs/services_rshd.html
+++ b/www/api-docs/services_rshd.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_rsync.html b/www/api-docs/services_rsync.html
index ca7a406e..3c06a634 100644
--- a/www/api-docs/services_rsync.html
+++ b/www/api-docs/services_rsync.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_samba.html b/www/api-docs/services_samba.html
index 62b0a11e..bf7c0da8 100644
--- a/www/api-docs/services_samba.html
+++ b/www/api-docs/services_samba.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_sasl.html b/www/api-docs/services_sasl.html
index 83a2abcf..ea35ce25 100644
--- a/www/api-docs/services_sasl.html
+++ b/www/api-docs/services_sasl.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_sendmail.html b/www/api-docs/services_sendmail.html
index ad39a7b6..e545f234 100644
--- a/www/api-docs/services_sendmail.html
+++ b/www/api-docs/services_sendmail.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_slrnpull.html b/www/api-docs/services_slrnpull.html
new file mode 100644
index 00000000..830422d6
--- /dev/null
+++ b/www/api-docs/services_slrnpull.html
@@ -0,0 +1,401 @@
+
+
+
+ Security Enhanced Linux Reference Policy
+
+
+
+
+
+
+
+
+
+ Layer: services
+ Module: slrnpull
+
+ Description:
+
+ Service for downloading news feeds the slrn newsreader.
+
+
+
+
+ Interfaces:
+
+
+
+
+
+
+
+slrnpull_manage_spool(
+
+
+
+
+ pty_type
+
+
+ )
+
+
+
+ Summary
+
+Allow the domain to create, read,
+write, and delete slrnpull spools.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+pty_type
+ |
+
+domain allowed access
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+
+
+
+slrnpull_search_spool(
+
+
+
+
+ pty_type
+
+
+ )
+
+
+
+ Summary
+
+Allow the domain to search slrnpull spools.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+pty_type
+ |
+
+domain allowed access
+
+ |
+No
+ |
+
+
+
+
+
+
+ Return
+
+
+
+
+
+
+
diff --git a/www/api-docs/services_smartmon.html b/www/api-docs/services_smartmon.html
new file mode 100644
index 00000000..0429d466
--- /dev/null
+++ b/www/api-docs/services_smartmon.html
@@ -0,0 +1,358 @@
+
+
+
+ Security Enhanced Linux Reference Policy
+
+
+
+
+
+
+
+
+
+ Layer: services
+ Module: smartmon
+
+ Description:
+
+ Smart disk monitoring daemon policy
+
+
+
+
+ Interfaces:
+
+
+
+
+
+
+
+smartmon_read_tmp(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Allow caller to read smartmon temporary files.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+The process type reading the temporary files.
+
+ |
+No
+ |
+
+
+
+
+
+
+ Return
+
+
+
+
+
+
+
diff --git a/www/api-docs/services_snmp.html b/www/api-docs/services_snmp.html
index 22cd9080..bc0bbfb4 100644
--- a/www/api-docs/services_snmp.html
+++ b/www/api-docs/services_snmp.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_spamassassin.html b/www/api-docs/services_spamassassin.html
index e5ccfe84..ba8cf6d4 100644
--- a/www/api-docs/services_spamassassin.html
+++ b/www/api-docs/services_spamassassin.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_squid.html b/www/api-docs/services_squid.html
index 574ea67b..7019ea1a 100644
--- a/www/api-docs/services_squid.html
+++ b/www/api-docs/services_squid.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_ssh.html b/www/api-docs/services_ssh.html
index 788c409d..437a9af6 100644
--- a/www/api-docs/services_ssh.html
+++ b/www/api-docs/services_ssh.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_stunnel.html b/www/api-docs/services_stunnel.html
index 57b27b48..a17c45b9 100644
--- a/www/api-docs/services_stunnel.html
+++ b/www/api-docs/services_stunnel.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_sysstat.html b/www/api-docs/services_sysstat.html
new file mode 100644
index 00000000..4d7c576a
--- /dev/null
+++ b/www/api-docs/services_sysstat.html
@@ -0,0 +1,358 @@
+
+
+
+ Security Enhanced Linux Reference Policy
+
+
+
+
+
+
+
+
+
+ Layer: services
+ Module: sysstat
+
+ Description:
+
+ Policy for sysstat. Reports on various system states
+
+
+
+
+ Interfaces:
+
+
+
+
+
+
+
+sysstat_manage_log(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Manage sysstat logs.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+ Return
+
+
+
+
+
+
+
diff --git a/www/api-docs/services_tcpd.html b/www/api-docs/services_tcpd.html
index ccb75f16..e58c5dfa 100644
--- a/www/api-docs/services_tcpd.html
+++ b/www/api-docs/services_tcpd.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_telnet.html b/www/api-docs/services_telnet.html
index 51bdabaf..8a7ff0b5 100644
--- a/www/api-docs/services_telnet.html
+++ b/www/api-docs/services_telnet.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_tftp.html b/www/api-docs/services_tftp.html
index af6d73a6..8b0d5543 100644
--- a/www/api-docs/services_tftp.html
+++ b/www/api-docs/services_tftp.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_timidity.html b/www/api-docs/services_timidity.html
index 1fb3ea64..be9e71a7 100644
--- a/www/api-docs/services_timidity.html
+++ b/www/api-docs/services_timidity.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_ucspitcp.html b/www/api-docs/services_ucspitcp.html
new file mode 100644
index 00000000..c04cf987
--- /dev/null
+++ b/www/api-docs/services_ucspitcp.html
@@ -0,0 +1,380 @@
+
+
+
+ Security Enhanced Linux Reference Policy
+
+
+
+
+
+
+
+
+
+ Layer: services
+ Module: ucspitcp
+
+ Description:
+
+
+
+Policy for DJB's ucspi-tcpd
+
+
+
+
+
+
+ Interfaces:
+
+
+
+
+
+
+
+ucspitcp_service_domain(
+
+
+
+
+ domain
+
+
+
+ ,
+
+
+
+ entrypoint
+
+
+ )
+
+
+
+ Summary
+
+Define a specified domain as a ucspitcp service.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+|
+entrypoint
+ |
+
+The type associated with the process program.
+
+ |
+No
+ |
+
+
+
+
+
+
+ Return
+
+
+
+
+
+
+
diff --git a/www/api-docs/services_uucp.html b/www/api-docs/services_uucp.html
index 0a5a55c4..6836fa00 100644
--- a/www/api-docs/services_uucp.html
+++ b/www/api-docs/services_uucp.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_xdm.html b/www/api-docs/services_xdm.html
index 669cdace..01e00111 100644
--- a/www/api-docs/services_xdm.html
+++ b/www/api-docs/services_xdm.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_xfs.html b/www/api-docs/services_xfs.html
index eaf906a0..506bb31d 100644
--- a/www/api-docs/services_xfs.html
+++ b/www/api-docs/services_xfs.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/services_zebra.html b/www/api-docs/services_zebra.html
index 93f3d18b..ecc6a8a5 100644
--- a/www/api-docs/services_zebra.html
+++ b/www/api-docs/services_zebra.html
@@ -40,6 +40,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -85,9 +88,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -148,6 +157,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -169,6 +181,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -184,6 +199,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -202,6 +220,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -217,6 +241,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -229,6 +256,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
diff --git a/www/api-docs/system.html b/www/api-docs/system.html
index e55ad687..360a79c0 100644
--- a/www/api-docs/system.html
+++ b/www/api-docs/system.html
@@ -43,6 +43,9 @@
-
clock
+ -
+ daemontools
+
-
fstools
@@ -155,6 +158,11 @@
clock |
Policy for reading and setting the hardware clock. |
+ |
+
+ daemontools |
+ Collection of tools for managing UNIX services |
+
|
fstools |
diff --git a/www/api-docs/system_authlogin.html b/www/api-docs/system_authlogin.html
index 8353f149..dec0da34 100644
--- a/www/api-docs/system_authlogin.html
+++ b/www/api-docs/system_authlogin.html
@@ -43,6 +43,9 @@
-
clock
+ -
+ daemontools
+
-
fstools
@@ -263,13 +266,13 @@ No
-
+
-auth_create_login_records(
+auth_can_read_shadow_passwords(
@@ -617,6 +620,48 @@ No
+
+
+
+
+
+
+auth_dontaudit_exec_utempter(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Do not audit attemps to execute utempter executable.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain to not audit.
+
+ |
+No
+ |
+
+
+
+
@@ -829,6 +874,48 @@ No
+
+
+
+
+
+
+auth_filetrans_login_records(
+
+
+
+
+ ?
+
+
+ )
+
+
+
+ Summary
+
+Summary is missing!
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+?
+ |
+
+Parameter descriptions are missing!
+
+ |
+No
+ |
+
+
+
+
@@ -2074,6 +2161,90 @@ No
+
+
+
+
+
+
+auth_setattr_login_records(
+
+
+
+
+ ?
+
+
+ )
+
+
+
+ Summary
+
+Summary is missing!
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+?
+ |
+
+Parameter descriptions are missing!
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+auth_tunable_read_shadow(
+
+
+
+
+ ?
+
+
+ )
+
+
+
+ Summary
+
+Summary is missing!
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+?
+ |
+
+Parameter descriptions are missing!
+
+ |
+No
+ |
+
+
+
+
@@ -2293,6 +2464,57 @@ No
+
+
+
+
+
+
+authlogin_common_auth_domain_template(
+
+
+
+
+ userdomain_prefix
+
+
+ )
+
+
+
+ Summary
+
+Common template to create a domain for authentication.
+
+
+
+ Description
+
+
+This template creates a derived domain which is allowed
+to authenticate users by using PAM unix_chkpwd support.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+userdomain_prefix
+ |
+
+The prefix of the user domain (e.g., user
+is the prefix for user_t).
+
+ |
+No
+ |
+
+
+
+
diff --git a/www/api-docs/system_clock.html b/www/api-docs/system_clock.html
index f43a44bb..a33a0f3d 100644
--- a/www/api-docs/system_clock.html
+++ b/www/api-docs/system_clock.html
@@ -43,6 +43,9 @@
-
clock
+ -
+ daemontools
+
-
fstools
diff --git a/www/api-docs/system_daemontools.html b/www/api-docs/system_daemontools.html
new file mode 100644
index 00000000..ea91cb20
--- /dev/null
+++ b/www/api-docs/system_daemontools.html
@@ -0,0 +1,464 @@
+
+
+
+ Security Enhanced Linux Reference Policy
+
+
+
+
+
+
+
+
+
+ Layer: system
+ Module: daemontools
+
+ Description:
+
+
+
+Policy for DJB's daemontools
+
+
+
+
+
+
+ Interfaces:
+
+
+
+
+
+
+
+daemontools_domtrans_multilog(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Execute in the svc_multilog_t domain.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+
+
+
+daemontools_domtrans_run(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Execute in the svc_run_t domain.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+
+
+
+daemontools_domtrans_start(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Execute in the svc_start_t domain.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+
+
+
+daemontools_ipc_domain(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+An ipc channel between the supervised domain and svc_start_t
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access to svc_start_t.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+
+
+
+daemontools_manage_svc(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Allow a domain to create svc_svc_t files.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+
+
+
+daemontools_read_svc(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Allow a domain to read svc_svc_t files.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+
+
+
+daemontools_service_domain(
+
+
+
+
+ domain
+
+
+
+ ,
+
+
+
+ entrypoint
+
+
+ )
+
+
+
+ Summary
+
+Define a specified domain as a supervised service.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+|
+entrypoint
+ |
+
+The type associated with the process program.
+
+ |
+No
+ |
+
+
+
+
+
+
+ Return
+
+
+
+
+
+
+
diff --git a/www/api-docs/system_fstools.html b/www/api-docs/system_fstools.html
index fcf65883..984d2d23 100644
--- a/www/api-docs/system_fstools.html
+++ b/www/api-docs/system_fstools.html
@@ -43,6 +43,9 @@
-
clock
+ -
+ daemontools
+
-
fstools
diff --git a/www/api-docs/system_getty.html b/www/api-docs/system_getty.html
index 3db5f53f..d1fa34f3 100644
--- a/www/api-docs/system_getty.html
+++ b/www/api-docs/system_getty.html
@@ -43,6 +43,9 @@
-
clock
+ -
+ daemontools
+
-
fstools
diff --git a/www/api-docs/system_hostname.html b/www/api-docs/system_hostname.html
index 986c052a..71fa6cc9 100644
--- a/www/api-docs/system_hostname.html
+++ b/www/api-docs/system_hostname.html
@@ -43,6 +43,9 @@
-
clock
+ -
+ daemontools
+
-
fstools
diff --git a/www/api-docs/system_hotplug.html b/www/api-docs/system_hotplug.html
index b07fb79a..6f78a6c4 100644
--- a/www/api-docs/system_hotplug.html
+++ b/www/api-docs/system_hotplug.html
@@ -43,6 +43,9 @@
-
clock
+ -
+ daemontools
+
-
fstools
diff --git a/www/api-docs/system_init.html b/www/api-docs/system_init.html
index 28bd1f5a..63e09414 100644
--- a/www/api-docs/system_init.html
+++ b/www/api-docs/system_init.html
@@ -43,6 +43,9 @@
-
clock
+ -
+ daemontools
+
-
fstools
@@ -134,89 +137,6 @@
Interfaces:
-
-
-
-
-
-
-init_create_script_tmp(
-
-
-
-
- domain
-
-
-
- ,
-
-
-
- file_type
-
-
-
- ,
-
-
-
- [
-
- object_class
-
- ]
-
-
- )
-
-
-
- Summary
-
-Create files in a init script
-temporary data directory.
-
-
-
- Parameters
-
-| Parameter: | Description: | Optional: |
|---|
-
-|
-domain
- |
-
-Domain allowed access.
-
- |
-No
- |
-
-|
-file_type
- |
-
-The type of the object to be created
-
- |
-No
- |
-
-|
-object_class
- |
-
-The object class. If not specified, file is used.
-
- |
-yes
- |
-
-
-
-
-
@@ -507,6 +427,49 @@ No
+
+
+
+
+init_dontaudit_lock_pid(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Do not audit attempts to lock
+init script pid files.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
@@ -887,6 +850,89 @@ No
+
+
+
+
+
+
+init_filetrans_script_tmp(
+
+
+
+
+ domain
+
+
+
+ ,
+
+
+
+ file_type
+
+
+
+ ,
+
+
+
+ [
+
+ object_class
+
+ ]
+
+
+ )
+
+
+
+ Summary
+
+Create files in a init script
+temporary data directory.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+|
+file_type
+ |
+
+The type of the object to be created
+
+ |
+No
+ |
+
+|
+object_class
+ |
+
+The object class. If not specified, file is used.
+
+ |
+yes
+ |
+
+
+
+
diff --git a/www/api-docs/system_ipsec.html b/www/api-docs/system_ipsec.html
index 2b72ca46..e26d0a23 100644
--- a/www/api-docs/system_ipsec.html
+++ b/www/api-docs/system_ipsec.html
@@ -43,6 +43,9 @@
-
clock
+ -
+ daemontools
+
-
fstools
diff --git a/www/api-docs/system_iptables.html b/www/api-docs/system_iptables.html
index c06158ec..02b87015 100644
--- a/www/api-docs/system_iptables.html
+++ b/www/api-docs/system_iptables.html
@@ -43,6 +43,9 @@
-
clock
+ -
+ daemontools
+
-
fstools
diff --git a/www/api-docs/system_libraries.html b/www/api-docs/system_libraries.html
index 4240751e..c50a752d 100644
--- a/www/api-docs/system_libraries.html
+++ b/www/api-docs/system_libraries.html
@@ -43,6 +43,9 @@
-
clock
+ -
+ daemontools
+
-
fstools
@@ -346,6 +349,134 @@ No
+
+
+
+
+libs_manage_ld_so(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Create, read, write, and delete the
+dynamic link/loader.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+libs_manage_lib_files(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Create, read, write, and delete generic
+files in library directories.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+libs_manage_shared_libs(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Create, read, write, and delete shared libraries.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
@@ -389,6 +520,135 @@ No
+
+
+
+
+
+
+libs_relabel_ld_so(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Relabel to and from the type used for
+the dynamic link/loader.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+libs_relabel_lib_files(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Relabel to and from the type used
+for generic lib files.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+libs_relabel_shared_libs(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Relabel to and from the type used for
+shared libraries.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
diff --git a/www/api-docs/system_locallogin.html b/www/api-docs/system_locallogin.html
index 36811c3f..1bac3914 100644
--- a/www/api-docs/system_locallogin.html
+++ b/www/api-docs/system_locallogin.html
@@ -43,6 +43,9 @@
-
clock
+ -
+ daemontools
+
-
fstools
diff --git a/www/api-docs/system_logging.html b/www/api-docs/system_logging.html
index fb908820..a3ed0692 100644
--- a/www/api-docs/system_logging.html
+++ b/www/api-docs/system_logging.html
@@ -43,6 +43,9 @@
-
clock
+ -
+ daemontools
+
-
fstools
@@ -145,48 +148,6 @@
- ?
-
-
- )
-
-
- Summary
-
-Summary is missing!
-
-
-
- Parameters
-
-| Parameter: | Description: | Optional: |
|---|
-
-|
-?
- |
-
-Parameter descriptions are missing!
-
- |
-No
- |
-
-
-
-
-
-
-
-logging_create_log(
-
-
-
-
?
@@ -386,6 +347,48 @@ No
+
+
+
+
+logging_filetrans_log(
+
+
+
+
+ ?
+
+
+ )
+
+
+
+ Summary
+
+Summary is missing!
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+?
+ |
+
+Parameter descriptions are missing!
+
+ |
+No
+ |
+
+
+
+
@@ -598,6 +601,48 @@ No
+
+
+
+
+
+
+logging_read_audit_log(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Read the audit log.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
diff --git a/www/api-docs/system_lvm.html b/www/api-docs/system_lvm.html
index 305a7dba..25e356d2 100644
--- a/www/api-docs/system_lvm.html
+++ b/www/api-docs/system_lvm.html
@@ -43,6 +43,9 @@
-
clock
+ -
+ daemontools
+
-
fstools
diff --git a/www/api-docs/system_miscfiles.html b/www/api-docs/system_miscfiles.html
index 7606e111..6d68d019 100644
--- a/www/api-docs/system_miscfiles.html
+++ b/www/api-docs/system_miscfiles.html
@@ -43,6 +43,9 @@
-
clock
+ -
+ daemontools
+
-
fstools
diff --git a/www/api-docs/system_modutils.html b/www/api-docs/system_modutils.html
index 13115055..71e40c4f 100644
--- a/www/api-docs/system_modutils.html
+++ b/www/api-docs/system_modutils.html
@@ -43,6 +43,9 @@
-
clock
+ -
+ daemontools
+
-
fstools
diff --git a/www/api-docs/system_mount.html b/www/api-docs/system_mount.html
index 8e81b44c..cff208a5 100644
--- a/www/api-docs/system_mount.html
+++ b/www/api-docs/system_mount.html
@@ -43,6 +43,9 @@
-
clock
+ -
+ daemontools
+
-
fstools
@@ -158,6 +161,48 @@ Execute mount in the mount domain.
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+The type of the process performing this action.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+mount_exec(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Execute mount in the caller domain.
+
+
+
Parameters
| Parameter: | Description: | Optional: |
|---|
diff --git a/www/api-docs/system_pcmcia.html b/www/api-docs/system_pcmcia.html
index 84ae1f40..4b15f409 100644
--- a/www/api-docs/system_pcmcia.html
+++ b/www/api-docs/system_pcmcia.html
@@ -43,6 +43,9 @@
-
clock
+ -
+ daemontools
+
-
fstools
diff --git a/www/api-docs/system_raid.html b/www/api-docs/system_raid.html
index fd92e07f..368bb1b8 100644
--- a/www/api-docs/system_raid.html
+++ b/www/api-docs/system_raid.html
@@ -43,6 +43,9 @@
-
clock
+ -
+ daemontools
+
-
fstools
diff --git a/www/api-docs/system_selinuxutil.html b/www/api-docs/system_selinuxutil.html
index 40781ae6..e05bfada 100644
--- a/www/api-docs/system_selinuxutil.html
+++ b/www/api-docs/system_selinuxutil.html
@@ -43,6 +43,9 @@
-
clock
+ -
+ daemontools
+
-
fstools
diff --git a/www/api-docs/system_sysnetwork.html b/www/api-docs/system_sysnetwork.html
index a3379d9b..47a46554 100644
--- a/www/api-docs/system_sysnetwork.html
+++ b/www/api-docs/system_sysnetwork.html
@@ -43,6 +43,9 @@
-
clock
+ -
+ daemontools
+
-
fstools
@@ -134,143 +137,6 @@
Interfaces:
-
-
-
-
-
-
-sysnet_create_config(
-
-
-
-
- domain
-
-
- )
-
-
-
- Summary
-
-Create files in /etc with the type used for
-the network config files.
-
-
-
- Parameters
-
-| Parameter: | Description: | Optional: |
|---|
-
-|
-domain
- |
-
-The type of the process performing this action.
-
- |
-No
- |
-
-
-
-
-
-
-
-
-sysnet_create_dhcp_state(
-
-
-
-
- domain
-
-
-
- ,
-
-
-
- file_type
-
-
-
- ,
-
-
-
- [
-
- object_class
-
- ]
-
-
- )
-
-
-
- Summary
-
-Create DHCP state data.
-
-
-
- Description
-
-
-Create DHCP state data.
-
-
-This is added for DHCP server, as
-the server and client put their state
-files in the same directory.
-
-
-
- Parameters
-
-| Parameter: | Description: | Optional: |
|---|
-
-|
-domain
- |
-
-Domain allowed access.
-
- |
-No
- |
-
-|
-file_type
- |
-
-The type of the object to be created
-
- |
-No
- |
-
-|
-object_class
- |
-
-The object class. If not specified, file is used.
-
- |
-yes
- |
-
-
-
-
@@ -566,6 +432,143 @@ No
+
+
+
+
+
+
+sysnet_filetrans_config(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Create files in /etc with the type used for
+the network config files.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+The type of the process performing this action.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+sysnet_filetrans_dhcp_state(
+
+
+
+
+ domain
+
+
+
+ ,
+
+
+
+ file_type
+
+
+
+ ,
+
+
+
+ [
+
+ object_class
+
+ ]
+
+
+ )
+
+
+
+ Summary
+
+Create DHCP state data.
+
+
+
+ Description
+
+
+Create DHCP state data.
+
+
+This is added for DHCP server, as
+the server and client put their state
+files in the same directory.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+|
+file_type
+ |
+
+The type of the object to be created
+
+ |
+No
+ |
+
+|
+object_class
+ |
+
+The object class. If not specified, file is used.
+
+ |
+yes
+ |
+
+
+
+
diff --git a/www/api-docs/system_udev.html b/www/api-docs/system_udev.html
index cc9f68af..e87ec3d5 100644
--- a/www/api-docs/system_udev.html
+++ b/www/api-docs/system_udev.html
@@ -43,6 +43,9 @@
-
clock
+ -
+ daemontools
+
-
fstools
diff --git a/www/api-docs/system_unconfined.html b/www/api-docs/system_unconfined.html
index 15013f1d..c800befb 100644
--- a/www/api-docs/system_unconfined.html
+++ b/www/api-docs/system_unconfined.html
@@ -43,6 +43,9 @@
-
clock
+ -
+ daemontools
+
-
fstools
diff --git a/www/api-docs/system_userdomain.html b/www/api-docs/system_userdomain.html
index 7b079592..d20b6996 100644
--- a/www/api-docs/system_userdomain.html
+++ b/www/api-docs/system_userdomain.html
@@ -43,6 +43,9 @@
-
clock
+ -
+ daemontools
+
-
fstools
@@ -137,115 +140,6 @@
Interfaces:
-
-
-
-
-
-
-userdom_create_generic_user_home(
-
-
-
-
- domain
-
-
-
- ,
-
-
-
- [
-
- object_class
-
- ]
-
-
- )
-
-
-
- Summary
-
-Create objects in generic user home directories
-with automatic file type transition.
-
-
-
- Parameters
-
-| Parameter: | Description: | Optional: |
|---|
-
-|
-domain
- |
-
-Domain allowed access.
-
- |
-No
- |
-
-|
-object_class
- |
-
-The class of the object to be created.
-If not specified, file is used.
-
- |
-yes
- |
-
-
-
-
-
-
-
-
-
-
-
-userdom_create_generic_user_home_dir(
-
-
-
-
- domain
-
-
- )
-
-
-
- Summary
-
-Create generic user home directories
-with automatic file type transition.
-
-
-
- Parameters
-
-| Parameter: | Description: | Optional: |
|---|
-
-|
-domain
- |
-
-Domain allowed access.
-
- |
-No
- |
-
-
-
-
-
@@ -934,6 +828,115 @@ user ttys.
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+userdom_filetrans_generic_user_home(
+
+
+
+
+ domain
+
+
+
+ ,
+
+
+
+ [
+
+ object_class
+
+ ]
+
+
+ )
+
+
+
+ Summary
+
+Create objects in generic user home directories
+with automatic file type transition.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+|
+object_class
+ |
+
+The class of the object to be created.
+If not specified, file is used.
+
+ |
+yes
+ |
+
+
+
+
+
+
+
+
+userdom_filetrans_generic_user_home_dir(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Create generic user home directories
+with automatic file type transition.
+
+
+
Parameters
| Parameter: | Description: | Optional: |
|---|
@@ -1491,6 +1494,91 @@ links in generic user home directories.
+Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+
+
+
+userdom_manage_unpriv_user_semaphores(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Manage unpriviledged user SysV sempaphores.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+userdom_manage_unpriv_user_shared_mem(
+
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Manage unpriviledged user SysV shared
+memory segments.
+
+
+
Parameters
| Parameter: | Description: | Optional: |
|---|
@@ -2016,7 +2104,7 @@ Search the staff users home directory.
domain
-Domain to not audit.
+Domain allowed access.
|
No
@@ -3173,6 +3261,886 @@ yes
+
+
+
+
+
+
+userdom_create_user_pty(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Create a user pty.
+
+
+
+ Description
+
+
+Create a user pty.
+
+
+This is a templated interface, and should only
+be called from a per-userdomain template.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+userdomain_prefix
+ |
+
+The prefix of the user domain (e.g., user
+is the prefix for user_t).
+
+ |
+No
+ |
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+userdom_dontaudit_exec_user_home_files(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Do not audit attempts to execute user home files.
+
+
+
+ Description
+
+
+Do not audit attempts to execute user home files.
+
+
+This is a templated interface, and should only
+be called from a per-userdomain template.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+userdomain_prefix
+ |
+
+The prefix of the user domain (e.g., user
+is the prefix for user_t).
+
+ |
+No
+ |
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+userdom_dontaudit_list_user_home_dir(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Do not audit attempts to list user home subdirectories.
+
+
+
+ Description
+
+
+Do not audit attempts to list user home subdirectories.
+
+
+This is a templated interface, and should only
+be called from a per-userdomain template.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+userdomain_prefix
+ |
+
+The prefix of the user domain (e.g., user
+is the prefix for user_t).
+
+ |
+No
+ |
+
+|
+domain
+ |
+
+Domain to not audit
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+userdom_dontaudit_list_user_tmp(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Do not audit attempts to list user
+temporary directories.
+
+
+
+ Description
+
+
+Do not audit attempts to list user
+temporary directories.
+
+
+This is a templated interface, and should only
+be called from a per-userdomain template.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+userdomain_prefix
+ |
+
+The prefix of the user domain (e.g., user
+is the prefix for user_t).
+
+ |
+No
+ |
+
+|
+domain
+ |
+
+Domain to not audit.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+userdom_dontaudit_list_user_tmp_untrusted_content(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Do not audit attempts to list user
+temporary untrusted directories.
+
+
+
+ Description
+
+
+Do not audit attempts to list user
+temporary directories.
+
+
+This is a templated interface, and should only
+be called from a per-userdomain template.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+userdomain_prefix
+ |
+
+The prefix of the user domain (e.g., user
+is the prefix for user_t).
+
+ |
+No
+ |
+
+|
+domain
+ |
+
+Domain to not audit.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+userdom_dontaudit_list_user_untrusted_content(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Do not audit attempts to list user
+untrusted directories.
+
+
+
+ Description
+
+
+Do not audit attempts to read user
+untrusted directories.
+
+
+This is a templated interface, and should only
+be called from a per-userdomain template.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+userdomain_prefix
+ |
+
+The prefix of the user domain (e.g., user
+is the prefix for user_t).
+
+ |
+No
+ |
+
+|
+domain
+ |
+
+Domain to not audit.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+userdom_dontaudit_read_user_home_files(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Do not audit attempts to read user home files.
+
+
+
+ Description
+
+
+Do not audit attempts to read user home files.
+
+
+This is a templated interface, and should only
+be called from a per-userdomain template.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+userdomain_prefix
+ |
+
+The prefix of the user domain (e.g., user
+is the prefix for user_t).
+
+ |
+No
+ |
+
+|
+domain
+ |
+
+Domain to not audit.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+userdom_dontaudit_read_user_tmp_files(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Do not audit attempts to read users
+temporary files.
+
+
+
+ Description
+
+
+Do not audit attempts to read users
+temporary files.
+
+
+This is a templated interface, and should only
+be called from a per-userdomain template.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+userdomain_prefix
+ |
+
+The prefix of the user domain (e.g., user
+is the prefix for user_t).
+
+ |
+No
+ |
+
+|
+domain
+ |
+
+Domain to not audit.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+userdom_dontaudit_read_user_tmp_untrusted_content_files(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Do not audit attempts to read users
+temporary untrusted files.
+
+
+
+ Description
+
+
+Do not audit attempts to read users
+temporary untrusted files.
+
+
+This is a templated interface, and should only
+be called from a per-userdomain template.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+userdomain_prefix
+ |
+
+The prefix of the user domain (e.g., user
+is the prefix for user_t).
+
+ |
+No
+ |
+
+|
+domain
+ |
+
+Domain to not audit.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+userdom_dontaudit_read_user_untrusted_content_files(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Do not audit attempts to read users
+untrusted files.
+
+
+
+ Description
+
+
+Do not audit attempts to read users
+untrusted files.
+
+
+This is a templated interface, and should only
+be called from a per-userdomain template.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+userdomain_prefix
+ |
+
+The prefix of the user domain (e.g., user
+is the prefix for user_t).
+
+ |
+No
+ |
+
+|
+domain
+ |
+
+Domain to not audit.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+userdom_dontaudit_setattr_user_home_files(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Do not audit attempts to set the
+attributes of user home files.
+
+
+
+ Description
+
+
+Do not audit attempts to set the
+attributes of user home files.
+
+
+This is a templated interface, and should only
+be called from a per-userdomain template.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+userdomain_prefix
+ |
+
+The prefix of the user domain (e.g., user
+is the prefix for user_t).
+
+ |
+No
+ |
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+userdom_dontaudit_use_user_terminals(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Do not audit attempts to read and write
+a user domain tty and pty.
+
+
+
+ Description
+
+
+Do not audit attempts to read and write
+a user domain tty and pty.
+
+
+This is a templated interface, and should only
+be called from a per-userdomain template.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+userdomain_prefix
+ |
+
+The prefix of the user domain (e.g., user
+is the prefix for user_t).
+
+ |
+No
+ |
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
@@ -3320,6 +4288,222 @@ No
+
+
+
+
+
+
+userdom_list_user_tmp(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+List user temporary directories.
+
+
+
+ Description
+
+
+List user temporary directories.
+
+
+This is a templated interface, and should only
+be called from a per-userdomain template.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+userdomain_prefix
+ |
+
+The prefix of the user domain (e.g., user
+is the prefix for user_t).
+
+ |
+No
+ |
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+userdom_list_user_tmp_untrusted_content(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+List users temporary untrusted directories.
+
+
+
+ Description
+
+
+List users temporary untrusted directories.
+
+
+This is a templated interface, and should only
+be called from a per-userdomain template.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+userdomain_prefix
+ |
+
+The prefix of the user domain (e.g., user
+is the prefix for user_t).
+
+ |
+No
+ |
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+userdom_list_user_untrusted_content(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+List users untrusted directories.
+
+
+
+ Description
+
+
+List users untrusted directories.
+
+
+This is a templated interface, and should only
+be called from a per-userdomain template.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+userdomain_prefix
+ |
+
+The prefix of the user domain (e.g., user
+is the prefix for user_t).
+
+ |
+No
+ |
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
@@ -3644,7 +4828,7 @@ No
Summary
-Create, read, write, and delete symbolic links
+Create, read, write, and delete directories
in a user home subdirectory.
@@ -3652,7 +4836,7 @@ in a user home subdirectory.
Description
-Create, read, write, and delete symbolic links
+Create, read, write, and delete directories
in a user home subdirectory.
@@ -4132,6 +5316,512 @@ No
+
+
+
+
+userdom_read_user_home_symlinks(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Read user home subdirectory symbolic links.
+
+
+
+ Description
+
+
+Read user home subdirectory symbolic links.
+
+
+This is a templated interface, and should only
+be called from a per-userdomain template.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+userdomain_prefix
+ |
+
+The prefix of the user domain (e.g., user
+is the prefix for user_t).
+
+ |
+No
+ |
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+userdom_read_user_tmp_files(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Read user temporary files.
+
+
+
+ Description
+
+
+Read user temporary files.
+
+
+This is a templated interface, and should only
+be called from a per-userdomain template.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+userdomain_prefix
+ |
+
+The prefix of the user domain (e.g., user
+is the prefix for user_t).
+
+ |
+No
+ |
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+userdom_read_user_tmp_symlinks(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Read user
+temporary symbolic links.
+
+
+
+ Description
+
+
+Read user
+temporary symbolic links.
+
+
+This is a templated interface, and should only
+be called from a per-userdomain template.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+userdomain_prefix
+ |
+
+The prefix of the user domain (e.g., user
+is the prefix for user_t).
+
+ |
+No
+ |
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+userdom_read_user_tmp_untrusted_content_files(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Read user temporary untrusted files.
+
+
+
+ Description
+
+
+Read user temporary untrusted files.
+
+
+This is a templated interface, and should only
+be called from a per-userdomain template.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+userdomain_prefix
+ |
+
+The prefix of the user domain (e.g., user
+is the prefix for user_t).
+
+ |
+No
+ |
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+userdom_read_user_tmp_untrusted_content_symlinks(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Read user temporary untrusted symbolic links.
+
+
+
+ Description
+
+
+Read user temporary untrusted symbolic links.
+
+
+This is a templated interface, and should only
+be called from a per-userdomain template.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+userdomain_prefix
+ |
+
+The prefix of the user domain (e.g., user
+is the prefix for user_t).
+
+ |
+No
+ |
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+userdom_read_user_untrusted_content_files(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Read user untrusted files.
+
+
+
+ Description
+
+
+Read user untrusted files.
+
+
+This is a templated interface, and should only
+be called from a per-userdomain template.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+userdomain_prefix
+ |
+
+The prefix of the user domain (e.g., user
+is the prefix for user_t).
+
+ |
+No
+ |
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+userdom_read_user_untrusted_content_symlinks(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Read user untrusted symbolic links.
+
+
+
+ Description
+
+
+Read user untrusted symbolic links.
+
+
+This is a templated interface, and should only
+be called from a per-userdomain template.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+userdomain_prefix
+ |
+
+The prefix of the user domain (e.g., user
+is the prefix for user_t).
+
+ |
+No
+ |
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
@@ -4204,6 +5894,78 @@ No
+
+
+
+
+
+
+userdom_setattr_user_pty(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Set the attributes of a user pty.
+
+
+
+ Description
+
+
+Set the attributes of a user pty.
+
+
+This is a templated interface, and should only
+be called from a per-userdomain template.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+userdomain_prefix
+ |
+
+The prefix of the user domain (e.g., user
+is the prefix for user_t).
+
+ |
+No
+ |
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
@@ -4276,6 +6038,177 @@ No
+
+
+
+
+
+
+userdom_user_home_domtrans(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ source_domain
+
+
+
+ ,
+
+
+
+ target_domain
+
+
+ )
+
+
+
+ Summary
+
+Do a domain transition to the specified
+domain when executing a program in the
+user home directory.
+
+
+
+ Description
+
+
+Do a domain transition to the specified
+domain when executing a program in the
+user home directory.
+
+
+No interprocess communication (signals, pipes,
+etc.) is provided by this interface since
+the domains are not owned by this module.
+
+
+This is a templated interface, and should only
+be called from a per-userdomain template.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+userdomain_prefix
+ |
+
+The prefix of the user domain (e.g., user
+is the prefix for user_t).
+
+ |
+No
+ |
+
+|
+source_domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+|
+target_domain
+ |
+
+Domain to transition to.
+
+ |
+No
+ |
+
+
+
+
+
+
+
+
+userdom_write_user_tmp_sockets(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+ Summary
+
+Write to user temporary named sockets.
+
+
+
+ Description
+
+
+Write to user temporary named sockets.
+
+
+This is a templated interface, and should only
+be called from a per-userdomain template.
+
+
+
+ Parameters
+
+| Parameter: | Description: | Optional: |
|---|
+
+|
+userdomain_prefix
+ |
+
+The prefix of the user domain (e.g., user
+is the prefix for user_t).
+
+ |
+No
+ |
+
+|
+domain
+ |
+
+Domain allowed access.
+
+ |
+No
+ |
+
+
+
+
+ -
+ alsa
+
-
amanda
@@ -25,6 +28,9 @@
-
consoletype
+ -
+ ddcprobe
+
-
dmesg
@@ -40,12 +46,21 @@
-
logrotate
+ -
+ logwatch
+
-
netutils
+ -
+ prelink
+
-
quota
+ -
+ readahead
+
-
rpm
@@ -61,9 +76,15 @@
-
updfstab
+ -
+ usbmodules
+
-
usermanage
+ -
+ vbetool
+
-
vpn
@@ -73,12 +94,30 @@
apps
+ -
+ cdrecord
+
-
gpg
+ -
+ irc
+
+ -
+ java
+
-
loadkeys
+ -
+ lockdev
+
+ -
+ screen
+
+ -
+ slocate
+
-
webalizer
@@ -139,6 +178,9 @@
-
arpwatch
+ -
+ automount
+
-
avahi
@@ -184,9 +226,15 @@
-
distcc
+ -
+ djbdns
+
-
dovecot
+ -
+ fetchmail
+
-
finger
@@ -247,6 +295,9 @@
-
ntp
+ -
+ openct
+
-
pegasus
@@ -268,6 +319,9 @@
-
procmail
+ -
+ publicfile
+
-
radius
@@ -283,6 +337,9 @@
-
rlogin
+ -
+ roundup
+
-
rpc
@@ -301,6 +358,12 @@
-
sendmail
+ -
+ slrnpull
+
+ -
+ smartmon
+
-
snmp
@@ -316,6 +379,9 @@
-
stunnel
+ -
+ sysstat
+
-
tcpd
@@ -328,6 +394,9 @@
-
timidity
+ -
+ ucspitcp
+
-
uucp
@@ -352,6 +421,9 @@
-
clock
+ -
+ daemontools
+
-
fstools
@@ -563,6 +635,32 @@ for a user domain.
+Module:
+authlogin
+Layer:
+system
+
+
+authlogin_common_auth_domain_template(
+
+
+
+
+ userdomain_prefix
+
+
+ )
+
+
+
+
+Common template to create a domain for authentication.
+
+
+
+
Module:
authlogin
@@ -632,6 +730,48 @@ users and administrative users.
+Module:
+cdrecord
+Layer:
+apps
+
+
+cdrecord_per_userdomain_template(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ user_domain
+
+
+
+ ,
+
+
+
+ user_role
+
+
+ )
+
+
+
+
+The per user domain template for the cdrecord module.
+
+
+
+
Module:
cron
@@ -777,6 +917,33 @@ the system DBUS.
+Module:
+djbdns
+Layer:
+services
+
+
+djbdns_daemontools_domain_template(
+
+
+
+
+ prefix
+
+
+ )
+
+
+
+
+Create a set of derived types for djbdns
+components that are directly supervised by daemontools.
+
+
+
+
Module:
domain
@@ -897,6 +1064,132 @@ The per user domain template for the gpg module.
+Module:
+irc
+Layer:
+apps
+
+
+irc_per_userdomain_template(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ user_domain
+
+
+
+ ,
+
+
+
+ user_role
+
+
+ )
+
+
+
+
+The per user domain template for the irc module.
+
+
+
+
+Module:
+java
+Layer:
+apps
+
+
+java_per_userdomain_template(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ user_domain
+
+
+
+ ,
+
+
+
+ user_role
+
+
+ )
+
+
+
+
+The per user domain template for the java module.
+
+
+
+
+Module:
+lockdev
+Layer:
+apps
+
+
+lockdev_per_userdomain_template(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ user_domain
+
+
+
+ ,
+
+
+
+ user_role
+
+
+ )
+
+
+
+
+The per user domain template for the lockdev module.
+
+
+
+
Module:
mailman
@@ -1208,6 +1501,48 @@ The per user domain template for the samba module.
+Module:
+screen
+Layer:
+apps
+
+
+screen_per_userdomain_template(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ user_domain
+
+
+
+ ,
+
+
+
+ user_role
+
+
+ )
+
+
+
+
+The per user domain template for the screen module.
+
+
+
+
+Module:
+userdomain
+Layer:
+system
+
+
+userdom_create_user_pty(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+
+Create a user pty.
+
+
+
+
+Module:
+userdomain
+Layer:
+system
+
+
+userdom_dontaudit_exec_user_home_files(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+
+Do not audit attempts to execute user home files.
+
+
+
+
+Module:
+userdomain
+Layer:
+system
+
+
+userdom_dontaudit_list_user_home_dir(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+
+Do not audit attempts to list user home subdirectories.
+
+
+
+
+Module:
+userdomain
+Layer:
+system
+
+
+userdom_dontaudit_list_user_tmp(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+
+Do not audit attempts to list user
+temporary directories.
+
+
+
+
+Module:
+userdomain
+Layer:
+system
+
+
+userdom_dontaudit_list_user_tmp_untrusted_content(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+
+Do not audit attempts to list user
+temporary untrusted directories.
+
+
+
+
+Module:
+userdomain
+Layer:
+system
+
+
+userdom_dontaudit_list_user_untrusted_content(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+
+Do not audit attempts to list user
+untrusted directories.
+
+
+
+
+Module:
+userdomain
+Layer:
+system
+
+
+userdom_dontaudit_read_user_home_files(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+
+Do not audit attempts to read user home files.
+
+
+
+
+Module:
+userdomain
+Layer:
+system
+
+
+userdom_dontaudit_read_user_tmp_files(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+
+Do not audit attempts to read users
+temporary files.
+
+
+
+
+Module:
+userdomain
+Layer:
+system
+
+
+userdom_dontaudit_read_user_tmp_untrusted_content_files(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+
+Do not audit attempts to read users
+temporary untrusted files.
+
+
+
+
+Module:
+userdomain
+Layer:
+system
+
+
+userdom_dontaudit_read_user_untrusted_content_files(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+
+Do not audit attempts to read users
+untrusted files.
+
+
+
+
+Module:
+userdomain
+Layer:
+system
+
+
+userdom_dontaudit_setattr_user_home_files(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+
+Do not audit attempts to set the
+attributes of user home files.
+
+
+
+
+Module:
+userdomain
+Layer:
+system
+
+
+userdom_dontaudit_use_user_terminals(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+
+Do not audit attempts to read and write
+a user domain tty and pty.
+
+
+
+
Module:
userdomain
@@ -1607,6 +2358,108 @@ user home directory.
+Module:
+userdomain
+Layer:
+system
+
+
+userdom_list_user_tmp(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+
+List user temporary directories.
+
+
+
+
+Module:
+userdomain
+Layer:
+system
+
+
+userdom_list_user_tmp_untrusted_content(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+
+List users temporary untrusted directories.
+
+
+
+
+Module:
+userdomain
+Layer:
+system
+
+
+userdom_list_user_untrusted_content(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+
+List users untrusted directories.
+
+
+
+
Module:
userdomain
@@ -1775,7 +2628,7 @@ system
-Create, read, write, and delete symbolic links
+Create, read, write, and delete directories
in a user home subdirectory.
@@ -1991,6 +2844,245 @@ Read user home files.
+Module:
+userdomain
+Layer:
+system
+
+
+userdom_read_user_home_symlinks(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+
+Read user home subdirectory symbolic links.
+
+
+
+
+Module:
+userdomain
+Layer:
+system
+
+
+userdom_read_user_tmp_files(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+
+Read user temporary files.
+
+
+
+
+Module:
+userdomain
+Layer:
+system
+
+
+userdom_read_user_tmp_symlinks(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+
+Read user
+temporary symbolic links.
+
+
+
+
+Module:
+userdomain
+Layer:
+system
+
+
+userdom_read_user_tmp_untrusted_content_files(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+
+Read user temporary untrusted files.
+
+
+
+
+Module:
+userdomain
+Layer:
+system
+
+
+userdom_read_user_tmp_untrusted_content_symlinks(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+
+Read user temporary untrusted symbolic links.
+
+
+
+
+Module:
+userdomain
+Layer:
+system
+
+
+userdom_read_user_untrusted_content_files(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+
+Read user untrusted files.
+
+
+
+
+Module:
+userdomain
+Layer:
+system
+
+
+userdom_read_user_untrusted_content_symlinks(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+
+Read user untrusted symbolic links.
+
+
+
+
Module:
userdomain
@@ -2025,6 +3117,40 @@ Search user home directories.
+Module:
+userdomain
+Layer:
+system
+
+
+userdom_setattr_user_pty(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+
+Set the attributes of a user pty.
+
+
+
+
Module:
userdomain
@@ -2059,6 +3185,84 @@ Read and write a user domain tty and pty.
+Module:
+userdomain
+Layer:
+system
+
+
+userdom_user_home_domtrans(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ source_domain
+
+
+
+ ,
+
+
+
+ target_domain
+
+
+ )
+
+
+
+
+Do a domain transition to the specified
+domain when executing a program in the
+user home directory.
+
+
+
+
+Module:
+userdomain
+Layer:
+system
+
+
+userdom_write_user_tmp_sockets(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )
+
+
+
+
+Write to user temporary named sockets.
+
+
+
+ | | |