From 8b1125a766728853b6a0f468dbbde2f59fb70829 Mon Sep 17 00:00:00 2001 From: Chris PeBenito Date: Tue, 2 Aug 2005 17:21:46 +0000 Subject: [PATCH] update for release --- www/api-docs/admin.html | 15 +- www/api-docs/admin_consoletype.html | 14 +- www/api-docs/admin_dmesg.html | 22 +- www/api-docs/admin_logrotate.html | 16 +- www/api-docs/admin_netutils.html | 21 +- www/api-docs/admin_rpm.html | 146 +- www/api-docs/admin_usermanage.html | 21 +- www/api-docs/apps.html | 13 +- www/api-docs/apps_gpg.html | 11 +- www/api-docs/global_booleans.html | 226 + www/api-docs/global_tunables.html | 503 ++ www/api-docs/index.html | 66 +- www/api-docs/interfaces.html | 10551 ++++++++++++++++++++--- www/api-docs/kernel.html | 15 +- www/api-docs/kernel_bootloader.html | 145 +- www/api-docs/kernel_corenetwork.html | 3808 ++++++-- www/api-docs/kernel_devices.html | 437 +- www/api-docs/kernel_filesystem.html | 911 +- www/api-docs/kernel_kernel.html | 811 +- www/api-docs/kernel_selinux.html | 114 +- www/api-docs/kernel_storage.html | 83 +- www/api-docs/kernel_terminal.html | 218 +- www/api-docs/services.html | 24 +- www/api-docs/services_cron.html | 21 +- www/api-docs/services_inetd.html | 61 +- www/api-docs/services_kerberos.html | 31 +- www/api-docs/services_mta.html | 69 +- www/api-docs/services_nis.html | 18 +- www/api-docs/services_nscd.html | 314 + www/api-docs/services_remotelogin.html | 16 +- www/api-docs/services_sendmail.html | 16 +- www/api-docs/services_ssh.html | 18 +- www/api-docs/system.html | 39 +- www/api-docs/system_authlogin.html | 155 +- www/api-docs/system_clock.html | 25 +- www/api-docs/system_corecommands.html | 478 +- www/api-docs/system_domain.html | 348 +- www/api-docs/system_files.html | 1668 +++- www/api-docs/system_fstools.html | 24 +- www/api-docs/system_getty.html | 25 +- www/api-docs/system_hostname.html | 41 +- www/api-docs/system_hotplug.html | 115 +- www/api-docs/system_init.html | 50 +- www/api-docs/system_ipsec.html | 405 + www/api-docs/system_iptables.html | 24 +- www/api-docs/system_libraries.html | 32 +- www/api-docs/system_locallogin.html | 24 +- www/api-docs/system_logging.html | 76 +- www/api-docs/system_lvm.html | 24 +- www/api-docs/system_miscfiles.html | 172 +- www/api-docs/system_modutils.html | 32 +- www/api-docs/system_mount.html | 25 +- www/api-docs/system_pcmcia.html | 444 + www/api-docs/system_raid.html | 247 + www/api-docs/system_selinuxutil.html | 96 +- www/api-docs/system_sysnetwork.html | 75 +- www/api-docs/system_udev.html | 103 +- www/api-docs/system_unconfined.html | 206 +- www/api-docs/system_userdomain.html | 317 +- www/api-docs/templates.html | 48 +- 60 files changed, 21320 insertions(+), 2753 deletions(-) create mode 100644 www/api-docs/global_booleans.html create mode 100644 www/api-docs/global_tunables.html create mode 100644 www/api-docs/services_nscd.html create mode 100644 www/api-docs/system_ipsec.html create mode 100644 www/api-docs/system_pcmcia.html create mode 100644 www/api-docs/system_raid.html diff --git a/www/api-docs/admin.html b/www/api-docs/admin.html index 265235a2..c7480485 100644 --- a/www/api-docs/admin.html +++ b/www/api-docs/admin.html @@ -58,15 +58,26 @@

- * Interface Index + * Global Booleans 

- * Template Index + * Global Tunables  +


+ * Layer Index +

+ * Interface Index +

+ * Template Index

Layer: admin

+

+ Policy modules for administrative functions, such as package management. +


+ + diff --git a/www/api-docs/admin_consoletype.html b/www/api-docs/admin_consoletype.html index 8e965220..0729c958 100644 --- a/www/api-docs/admin_consoletype.html +++ b/www/api-docs/admin_consoletype.html @@ -58,9 +58,15 @@

- * Interface Index + * Global Booleans 

- * Template Index + * Global Tunables  +


+ * Layer Index +

+ * Interface Index +

+ * Template Index

@@ -68,8 +74,6 @@

Layer: admin

Module: consoletype

- -

Description:

@@ -81,6 +85,7 @@ Determine of the console connected to the controlling terminal.

Interfaces:

+
@@ -122,6 +127,7 @@ No
+
diff --git a/www/api-docs/admin_dmesg.html b/www/api-docs/admin_dmesg.html index 45c45d7a..962fc647 100644 --- a/www/api-docs/admin_dmesg.html +++ b/www/api-docs/admin_dmesg.html @@ -58,9 +58,15 @@

- * Interface Index + * Global Booleans 

- * Template Index + * Global Tunables  +


+ * Layer Index +

+ * Interface Index +

+ * Template Index

@@ -68,8 +74,6 @@

Layer: admin

Module: dmesg

- -

Description:

Policy for dmesg.

@@ -79,6 +83,7 @@

Interfaces:

+
@@ -96,12 +101,12 @@
- -
Description
+
Summary

Execute dmesg in the dmesg domain.

+
Parameters
Module:Description:
@@ -120,6 +125,7 @@ No +
@@ -137,12 +143,12 @@ No
- -
Description
+
Summary

Execute dmesg in the caller domain.

+
Parameters
Parameter:Description:Optional:
diff --git a/www/api-docs/admin_logrotate.html b/www/api-docs/admin_logrotate.html index 45547459..5e60ef89 100644 --- a/www/api-docs/admin_logrotate.html +++ b/www/api-docs/admin_logrotate.html @@ -58,9 +58,15 @@

- * Interface Index + * Global Booleans 

- * Template Index + * Global Tunables  +


+ * Layer Index +

+ * Interface Index +

+ * Template Index

@@ -68,8 +74,6 @@

Layer: admin

Module: logrotate

- -

Description:

Rotate and archive system logs

@@ -79,6 +83,7 @@

Interfaces:

+
@@ -120,6 +125,7 @@ No
+
@@ -161,6 +167,7 @@ No
+
@@ -202,6 +209,7 @@ No
+
diff --git a/www/api-docs/admin_netutils.html b/www/api-docs/admin_netutils.html index 5c42b384..e119d995 100644 --- a/www/api-docs/admin_netutils.html +++ b/www/api-docs/admin_netutils.html @@ -58,9 +58,15 @@

- * Interface Index + * Global Booleans 

- * Template Index + * Global Tunables  +


+ * Layer Index +

+ * Interface Index +

+ * Template Index

@@ -68,8 +74,6 @@

Layer: admin

Module: netutils

- -

Description:

Network analysis utilities

@@ -79,6 +83,7 @@

Interfaces:

+
@@ -120,6 +125,7 @@ No
+
@@ -161,6 +167,7 @@ No
+
@@ -202,6 +209,7 @@ No
+
@@ -243,6 +251,7 @@ No
+
@@ -284,6 +293,7 @@ No
+
@@ -325,6 +335,7 @@ No
+
@@ -403,6 +414,7 @@ No
+
@@ -481,6 +493,7 @@ No
+
diff --git a/www/api-docs/admin_rpm.html b/www/api-docs/admin_rpm.html index 285109bb..fe82ab7f 100644 --- a/www/api-docs/admin_rpm.html +++ b/www/api-docs/admin_rpm.html @@ -58,9 +58,15 @@

- * Interface Index + * Global Booleans 

- * Template Index + * Global Tunables  +


+ * Layer Index +

+ * Interface Index +

+ * Template Index

@@ -68,8 +74,6 @@

Layer: admin

Module: rpm

- -

Description:

Policy for the RPM package manager.

@@ -79,6 +83,7 @@

Interfaces:

+
@@ -120,6 +125,7 @@ No
+
@@ -161,6 +167,49 @@ No
+ +
+ + +
+ +rpm_manage_log( + + + + + domain + + + )
+
+
+ +
Summary
+

+Create, read, write, and delete the RPM log. +

+ + +
Parameters
+
Parameter:Description:Optional:
+ + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+ + +
@@ -202,6 +251,7 @@ No
+
@@ -221,7 +271,7 @@ No
Summary

-Read from a RPM pipe. +Read from an unnamed RPM pipe.

@@ -243,6 +293,7 @@ No
+
@@ -320,6 +371,49 @@ No
+ +
+ + +
+ +rpm_rw_pipe( + + + + + domain + + + )
+
+
+ +
Summary
+

+Read and write an unnamed RPM pipe. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ +
@@ -343,6 +437,48 @@ Inherit and use file descriptors from RPM.

+
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+ + + +
+ + +
+ +rpm_use_script_fd( + + + + + domain + + + )
+
+
+ +
Summary
+

+Inherit and use file descriptors from RPM scripts. +

+ +
Parameters
diff --git a/www/api-docs/admin_usermanage.html b/www/api-docs/admin_usermanage.html index a2b5a9af..05426c05 100644 --- a/www/api-docs/admin_usermanage.html +++ b/www/api-docs/admin_usermanage.html @@ -58,9 +58,15 @@

- * Interface Index + * Global Booleans 

- * Template Index + * Global Tunables  +


+ * Layer Index +

+ * Interface Index +

+ * Template Index

@@ -68,8 +74,6 @@

Layer: admin

Module: usermanage

- -

Description:

Policy for managing user accounts.

@@ -79,6 +83,7 @@

Interfaces:

+
@@ -120,6 +125,7 @@ No
+
@@ -161,6 +167,7 @@ No
+
@@ -202,6 +209,7 @@ No
+
@@ -243,6 +251,7 @@ No
+
@@ -284,6 +293,7 @@ No
+
@@ -362,6 +372,7 @@ No
+
@@ -440,6 +451,7 @@ No
+
@@ -518,6 +530,7 @@ No
+
diff --git a/www/api-docs/apps.html b/www/api-docs/apps.html index 85af5664..65fbd004 100644 --- a/www/api-docs/apps.html +++ b/www/api-docs/apps.html @@ -43,15 +43,24 @@

- * Interface Index + * Global Booleans 

- * Template Index + * Global Tunables  +


+ * Layer Index +

+ * Interface Index +

+ * Template Index

Layer: apps

+

Policy modules for applications


+ +
Parameter:Description:Optional:
diff --git a/www/api-docs/apps_gpg.html b/www/api-docs/apps_gpg.html index 47cd6fca..bd1790a8 100644 --- a/www/api-docs/apps_gpg.html +++ b/www/api-docs/apps_gpg.html @@ -43,9 +43,15 @@

- * Interface Index + * Global Booleans 

- * Template Index + * Global Tunables  +


+ * Layer Index +

+ * Interface Index +

+ * Template Index

@@ -63,6 +69,7 @@

Templates:

+
diff --git a/www/api-docs/global_booleans.html b/www/api-docs/global_booleans.html new file mode 100644 index 00000000..3e947262 --- /dev/null +++ b/www/api-docs/global_booleans.html @@ -0,0 +1,226 @@ + + + + Security Enhanced Linux Reference Policy + + + + + + + +
+

Global booleans:

+ + +
+
secure_mode
+
+
Default value
+

false

+ +
Description
+

+Enabling secure mode disallows programs, such as +newrole, from transitioning to administrative +user domains. +

+ +
+ + +
+ + diff --git a/www/api-docs/global_tunables.html b/www/api-docs/global_tunables.html new file mode 100644 index 00000000..6767b30a --- /dev/null +++ b/www/api-docs/global_tunables.html @@ -0,0 +1,503 @@ + + + + Security Enhanced Linux Reference Policy + + + + + + + +
+

Global tunables:

+ + +
+
allow_execmem
+
+
Default value
+

false

+ +
Description
+

+Allow execution of anonymous mappings, e.g. executable stack. +

+ +
+ +
+
allow_execmod
+
+
Default value
+

false

+ +
Description
+

+Support Share libraries with text relocations +

+ +
+ +
+
allow_gpg_execstack
+
+
Default value
+

false

+ +
Description
+

+Allow gpg executable stack +

+ +
+ +
+
allow_kerberos
+
+
Default value
+

false

+ +
Description
+

+Allow system to run with kerberos +

+ +
+ +
+
allow_ypbind
+
+
Default value
+

false

+ +
Description
+

+Allow system to run with NIS +

+ +
+ +
+
cron_can_relabel
+
+
Default value
+

false

+ +
Description
+

+Allow system cron jobs to relabel filesystem +for restoring file contexts. +

+ +
+ +
+
fcron_crond
+
+
Default value
+

false

+ +
Description
+

+Enable extra rules in the cron domain +to support fcron. +

+ +
+ +
+
read_default_t
+
+
Default value
+

false

+ +
Description
+

+Allow reading of default_t files. +

+ +
+ +
+
run_ssh_inetd
+
+
Default value
+

false

+ +
Description
+

+Allow ssh to run from inetd instead of as a daemon. +

+ +
+ +
+
ssh_sysadm_login
+
+
Default value
+

false

+ +
Description
+

+Allow ssh logins as sysadm_r:sysadm_t +

+ +
+ +
+
staff_read_sysadm_file
+
+
Default value
+

false

+ +
Description
+

+Allow staff_r users to search the sysadm home +dir and read files (such as ~/.bashrc) +

+ +
+ +
+
use_dns
+
+
Default value
+

false

+ +
Description
+

+Allow the use of DNS for name resolution. +

+ +
+ +
+
use_nfs_home_dirs
+
+
Default value
+

false

+ +
Description
+

+Support NFS home directories +

+ +
+ +
+
use_samba_home_dirs
+
+
Default value
+

false

+ +
Description
+

+Support SAMBA home directories +

+ +
+ +
+
user_direct_mouse
+
+
Default value
+

false

+ +
Description
+

+Allow regular users direct mouse access +

+ +
+ +
+
user_dmesg
+
+
Default value
+

false

+ +
Description
+

+Allow users to read system messages. +

+ +
+ +
+
user_net_control
+
+
Default value
+

false

+ +
Description
+

+Allow users to control network interfaces +(also needs USERCTL=true) +

+ +
+ +
+
user_ping
+
+
Default value
+

false

+ +
Description
+

+Control users use of ping and traceroute +

+ +
+ +
+
user_rw_noexattrfile
+
+
Default value
+

false

+ +
Description
+

+Allow user to r/w noextattrfile (FAT, CDROM, FLOPPY) +

+ +
+ +
+
user_rw_usb
+
+
Default value
+

false

+ +
Description
+

+Allow users to rw usb devices +

+ +
+ +
+
user_tcp_server
+
+
Default value
+

false

+ +
Description
+

+Allow users to run TCP servers (bind to ports and accept connection from +the same domain and outside users) disabling this forces FTP passive mode +and may change other protocols. +

+ +
+ +
+
user_ttyfile_stat
+
+
Default value
+

false

+ +
Description
+

+Allow w to display everyone +

+ +
+ + +
+ + diff --git a/www/api-docs/index.html b/www/api-docs/index.html index 76f05aa0..e4290fe5 100644 --- a/www/api-docs/index.html +++ b/www/api-docs/index.html @@ -91,6 +91,9 @@    -  nis
+    -  + nscd
+    -  remotelogin
@@ -136,6 +139,9 @@    -  init
+    -  + ipsec
+    -  iptables
@@ -160,6 +166,12 @@    -  mount
+    -  + pcmcia
+ +    -  + raid
+    -  selinuxutil
@@ -178,15 +190,26 @@

- * Interface Index + * Global Booleans 

- * Template Index + * Global Tunables  +


+ * Layer Index +

+ * Interface Index +

+ * Template Index

Layer: admin

+

+ Policy modules for administrative functions, such as package management. +


+ +
Module:Description:
@@ -242,6 +265,11 @@ Determine of the console connected to the controlling terminal.

Layer: kernel

+

+Policy for kernel threads, proc filesystem,and unlabeled processes and objects. +


+ +
Module:Description:
@@ -311,6 +339,9 @@ Policy for kernel security interface, in particular, selinuxfs.

Layer: apps

+

Policy modules for applications


+ +
Module:Description:
@@ -339,6 +370,11 @@ Policy for kernel security interface, in particular, selinuxfs.

Layer: system

+

+ Policy modules for system functions from init to multi-user login. +


+ +
Module:Description:
@@ -413,6 +449,11 @@ connection and disconnection of devices at runtime. init + + + @@ -453,6 +494,16 @@ connection and disconnection of devices at runtime. mount + + + + + + @@ -485,6 +536,12 @@ connection and disconnection of devices at runtime.

Layer: services

+

+ Policy modules for system services, like cron, and network services, + like sshd. +


+ +
Module:Description:

System initialization programs (init and init scripts).

+ + ipsec

TCP/IP encryption

iptables

Policy for mount.

+ + pcmcia

PCMCIA card management services

+ + raid

RAID array management tools

selinuxutil
@@ -523,6 +580,11 @@ connection and disconnection of devices at runtime. nis + + + diff --git a/www/api-docs/interfaces.html b/www/api-docs/interfaces.html index 38cd537f..6a441706 100644 --- a/www/api-docs/interfaces.html +++ b/www/api-docs/interfaces.html @@ -91,6 +91,9 @@    -  nis
+    -  + nscd
+    -  remotelogin
@@ -136,6 +139,9 @@    -  init
+    -  + ipsec
+    -  iptables
@@ -160,6 +166,12 @@    -  mount
+    -  + pcmcia
+ +    -  + raid
+    -  selinuxutil
@@ -178,9 +190,15 @@

- * Interface Index + * Global Booleans 

- * Template Index + * Global Tunables  +


+ * Layer Index +

+ * Interface Index +

+ * Template Index

@@ -188,7 +206,7 @@
-Module: +Module: authlogin

Layer: system

@@ -208,7 +226,7 @@ system

-Module: +Module: authlogin

Layer: system

@@ -228,7 +246,7 @@ system

-Module: +Module: authlogin

Layer: system

@@ -256,7 +274,7 @@ system

-Module: +Module: authlogin

Layer: system

@@ -276,7 +294,7 @@ system

-Module: +Module: authlogin

Layer: system

@@ -302,7 +320,7 @@ Summary is missing!

-Module: +Module: authlogin

Layer: system

@@ -322,7 +340,7 @@ system

-Module: +Module: authlogin

Layer: system

@@ -339,10 +357,17 @@ system

)

+
+

+Do not audit attempts to get the attributes +of the shadow passwords file. +

+
+
-Module: +Module: authlogin

Layer: system

@@ -362,7 +387,7 @@ system

-Module: +Module: authlogin

Layer: system

@@ -388,7 +413,7 @@ Summary is missing!

-Module: +Module: authlogin

Layer: system

@@ -408,7 +433,33 @@ system

-Module: +Module: +authlogin

+Layer: +system

+

+ +auth_getattr_shadow( + + + + + domain + + + )
+
+ +
+

+Get the attributes of the shadow passwords file. +

+
+ +
+ +
+Module: authlogin

Layer: system

@@ -434,7 +485,7 @@ Summary is missing!

-Module: +Module: authlogin

Layer: system

@@ -454,7 +505,7 @@ system

-Module: +Module: authlogin

Layer: system

@@ -486,7 +537,7 @@ system

-Module: +Module: authlogin

Layer: system

@@ -512,7 +563,7 @@ Summary is missing!

-Module: +Module: authlogin

Layer: system

@@ -538,7 +589,7 @@ Summary is missing!

-Module: +Module: authlogin

Layer: system

@@ -564,7 +615,7 @@ Summary is missing!

-Module: +Module: authlogin

Layer: system

@@ -590,7 +641,7 @@ Summary is missing!

-Module: +Module: authlogin

Layer: system

@@ -616,7 +667,7 @@ Summary is missing!

-Module: +Module: authlogin

Layer: system

@@ -642,7 +693,7 @@ Summary is missing!

-Module: +Module: authlogin

Layer: system

@@ -662,7 +713,7 @@ system

-Module: +Module: authlogin

Layer: system

@@ -694,7 +745,7 @@ system

-Module: +Module: authlogin

Layer: system

@@ -720,7 +771,7 @@ Summary is missing!

-Module: +Module: authlogin

Layer: system

@@ -756,7 +807,7 @@ system

-Module: +Module: authlogin

Layer: system

@@ -792,7 +843,7 @@ system

-Module: +Module: authlogin

Layer: system

@@ -818,7 +869,7 @@ Summary is missing!

-Module: +Module: authlogin

Layer: system

@@ -844,7 +895,7 @@ Summary is missing!

-Module: +Module: authlogin

Layer: system

@@ -870,7 +921,7 @@ Summary is missing!

-Module: +Module: authlogin

Layer: system

@@ -890,7 +941,33 @@ system

-Module: +Module: +authlogin

+Layer: +system

+

+ +auth_unconfined( + + + + + domain + + + )
+
+ +
+

+Unconfined access to the authlogin module. +

+
+ +
+ +
+Module: bootloader

Layer: kernel

@@ -907,10 +984,16 @@ kernel

)

+
+

+Install a kernel into the /boot directory. +

+
+
-Module: +Module: bootloader

Layer: kernel

@@ -927,10 +1010,16 @@ kernel

)

+
+

+Install a system.map into the /boot directory. +

+
+
-Module: +Module: bootloader

Layer: kernel

@@ -956,7 +1045,7 @@ Summary is missing!

-Module: +Module: bootloader

Layer: kernel

@@ -973,10 +1062,17 @@ kernel

)

+
+

+Read and write the bootloader +temporary data in /tmp. +

+
+
-Module: +Module: bootloader

Layer: kernel

@@ -993,10 +1089,16 @@ kernel

)

+
+

+Delete a kernel from /boot. +

+
+
-Module: +Module: bootloader

Layer: kernel

@@ -1013,10 +1115,16 @@ kernel

)

+
+

+Delete a system.map in the /boot directory. +

+
+
-Module: +Module: bootloader

Layer: kernel

@@ -1033,10 +1141,16 @@ kernel

)

+
+

+Execute bootloader in the bootloader domain. +

+
+
-Module: +Module: bootloader

Layer: kernel

@@ -1053,10 +1167,42 @@ kernel

)

+
+

+Do not audit attempts to search the /boot directory. +

+
+
-Module: +Module: +bootloader

+Layer: +kernel

+

+ +bootloader_getattr_kernel_modules( + + + + + domain + + + )
+
+ +
+

+Get the attributes of kernel module files. +

+
+ +
+ +
+Module: bootloader

Layer: kernel

@@ -1073,10 +1219,16 @@ kernel

)

+
+

+List the contents of the kernel module directories. +

+
+
-Module: +Module: bootloader

Layer: kernel

@@ -1093,10 +1245,17 @@ kernel

)

+
+

+Create, read, write, and delete +kernel module files. +

+
+
-Module: +Module: bootloader

Layer: kernel

@@ -1113,10 +1272,16 @@ kernel

)

+
+

+Read the bootloader configuration file. +

+
+
-Module: +Module: bootloader

Layer: kernel

@@ -1133,10 +1298,16 @@ kernel

)

+
+

+Read kernel module files. +

+
+
-Module: +Module: bootloader

Layer: kernel

@@ -1153,10 +1324,16 @@ kernel

)

+
+

+Read system.map in the /boot directory. +

+
+
-Module: +Module: bootloader

Layer: kernel

@@ -1189,10 +1366,17 @@ kernel

)

+
+

+Execute bootloader interactively and do +a domain transition to the bootloader domain. +

+
+
-Module: +Module: bootloader

Layer: kernel

@@ -1209,10 +1393,17 @@ kernel

)

+
+

+Read and write symbolic links +in the /boot directory. +

+
+
-Module: +Module: bootloader

Layer: kernel

@@ -1229,10 +1420,17 @@ kernel

)

+
+

+Read and write the bootloader +configuration file. +

+
+
-Module: +Module: bootloader

Layer: kernel

@@ -1249,10 +1447,17 @@ kernel

)

+
+

+Read and write the bootloader +temporary data in /tmp. +

+
+
-Module: +Module: bootloader

Layer: kernel

@@ -1269,10 +1474,16 @@ kernel

)

+
+

+Search the /boot directory. +

+
+
-Module: +Module: bootloader

Layer: kernel

@@ -1289,10 +1500,16 @@ kernel

)

+
+

+Write kernel module files. +

+
+
-Module: +Module: clock

Layer: system

@@ -1312,7 +1529,7 @@ system

-Module: +Module: clock

Layer: system

@@ -1332,7 +1549,7 @@ system

-Module: +Module: clock

Layer: system

@@ -1368,7 +1585,7 @@ system

-Module: +Module: clock

Layer: system

@@ -1388,7 +1605,7 @@ system

-Module: +Module: consoletype

Layer: admin

@@ -1408,7 +1625,7 @@ admin

-Module: +Module: consoletype

Layer: admin

@@ -1428,39 +1645,13 @@ admin

-Module: +Module: corecommands

Layer: system

-corecmd_chroot_exec_chroot( - - - - - ? - - - )
-
- -
-

-Summary is missing! -

-
- -
- -
-Module: -corecommands

-Layer: -system

-

- -corecmd_domtrans_shell( +corecmd_bin_domtrans( @@ -1479,10 +1670,17 @@ system

)

+
+

+Execute a file in a bin directory +in the specified domain. +

+
+
-Module: +Module: corecommands

Layer: system

@@ -1508,7 +1706,7 @@ Summary is missing!

-Module: +Module: corecommands

Layer: system

@@ -1534,7 +1732,33 @@ Summary is missing!

-Module: +Module: +corecommands

+Layer: +system

+

+ +corecmd_exec_chroot( + + + + + ? + + + )
+
+ +
+

+Summary is missing! +

+
+ +
+ +
+Module: corecommands

Layer: system

@@ -1560,7 +1784,7 @@ Summary is missing!

-Module: +Module: corecommands

Layer: system

@@ -1586,7 +1810,7 @@ Summary is missing!

-Module: +Module: corecommands

Layer: system

@@ -1612,7 +1836,7 @@ Summary is missing!

-Module: +Module: corecommands

Layer: system

@@ -1638,7 +1862,7 @@ Get the attributes of files in bin directories.

-Module: +Module: corecommands

Layer: system

@@ -1664,7 +1888,7 @@ Summary is missing!

-Module: +Module: corecommands

Layer: system

@@ -1690,7 +1914,7 @@ Summary is missing!

-Module: +Module: corecommands

Layer: system

@@ -1716,7 +1940,85 @@ Summary is missing!

-Module: +Module: +corecommands

+Layer: +system

+

+ +corecmd_read_bin_file( + + + + + domain + + + )
+
+ +
+

+Read files in bin directories. +

+
+ +
+ +
+Module: +corecommands

+Layer: +system

+

+ +corecmd_read_bin_pipe( + + + + + domain + + + )
+
+ +
+

+Read pipes in bin directories. +

+
+ +
+ +
+Module: +corecommands

+Layer: +system

+

+ +corecmd_read_bin_socket( + + + + + domain + + + )
+
+ +
+

+Read named sockets in bin directories. +

+
+ +
+ +
+Module: corecommands

Layer: system

@@ -1742,7 +2044,85 @@ Read symbolic links in bin directories.

-Module: +Module: +corecommands

+Layer: +system

+

+ +corecmd_read_sbin_file( + + + + + domain + + + )
+
+ +
+

+Read files in sbin directories. +

+
+ +
+ +
+Module: +corecommands

+Layer: +system

+

+ +corecmd_read_sbin_pipe( + + + + + domain + + + )
+
+ +
+

+Read named pipes in sbin directories. +

+
+ +
+ +
+Module: +corecommands

+Layer: +system

+

+ +corecmd_read_sbin_socket( + + + + + domain + + + )
+
+ +
+

+Read named sockets in sbin directories. +

+
+ +
+ +
+Module: corecommands

Layer: system

@@ -1768,7 +2148,7 @@ Read symbolic links in sbin directories.

-Module: +Module: corecommands

Layer: system

@@ -1794,7 +2174,7 @@ Summary is missing!

-Module: +Module: corecommands

Layer: system

@@ -1820,7 +2200,41 @@ Summary is missing!

-Module: +Module: +corecommands

+Layer: +system

+

+ +corecmd_shell_domtrans( + + + + + domain + + + + , + + + + target_domain + + + )
+
+ +
+

+Execute a shell in the specified domain. +

+
+ +
+ +
+Module: corecommands

Layer: system

@@ -1846,7 +2260,7 @@ Make the shell an entrypoint for the specified domain.

-Module: +Module: corecommands

Layer: system

@@ -1874,7 +2288,7 @@ system

-Module: +Module: corenetwork

Layer: kernel

@@ -1900,7 +2314,7 @@ Do not audit attempts to bind TCP sockets to all reserved ports.

-Module: +Module: corenetwork

Layer: kernel

@@ -1926,7 +2340,7 @@ Do not audit attempts to bind UDP sockets to all reserved ports.

-Module: +Module: corenetwork

Layer: kernel

@@ -1952,7 +2366,7 @@ Receive raw IP packets on all interfaces.

-Module: +Module: corenetwork

Layer: kernel

@@ -1978,7 +2392,7 @@ Receive raw IP packets on all nodes.

-Module: +Module: corenetwork

Layer: kernel

@@ -1995,10 +2409,16 @@ kernel

)

+
+

+Receive raw IP packets on the compat_ipv4 node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -2015,10 +2435,16 @@ kernel

)

+
+

+Receive raw IP packets on the eth0 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -2035,10 +2461,16 @@ kernel

)

+
+

+Receive raw IP packets on the eth1 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -2055,10 +2487,16 @@ kernel

)

+
+

+Receive raw IP packets on the eth2 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -2084,7 +2522,7 @@ Receive raw IP packets on generic interfaces.

-Module: +Module: corenetwork

Layer: kernel

@@ -2110,7 +2548,7 @@ Receive raw IP packets on generic nodes.

-Module: +Module: corenetwork

Layer: kernel

@@ -2127,10 +2565,16 @@ kernel

)

+
+

+Receive raw IP packets on the inaddr_any node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -2147,10 +2591,16 @@ kernel

)

+
+

+Receive raw IP packets on the ippp0 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -2167,10 +2617,16 @@ kernel

)

+
+

+Receive raw IP packets on the ipsec0 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -2187,10 +2643,16 @@ kernel

)

+
+

+Receive raw IP packets on the ipsec1 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -2207,10 +2669,16 @@ kernel

)

+
+

+Receive raw IP packets on the ipsec2 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -2227,10 +2695,16 @@ kernel

)

+
+

+Receive raw IP packets on the link_local node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -2247,10 +2721,16 @@ kernel

)

+
+

+Receive raw IP packets on the lo interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -2267,10 +2747,16 @@ kernel

)

+
+

+Receive raw IP packets on the lo node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -2287,10 +2773,16 @@ kernel

)

+
+

+Receive raw IP packets on the mapped_ipv4 node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -2307,10 +2799,16 @@ kernel

)

+
+

+Receive raw IP packets on the multicast node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -2327,10 +2825,16 @@ kernel

)

+
+

+Receive raw IP packets on the site_local node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -2347,10 +2851,16 @@ kernel

)

+
+

+Receive raw IP packets on the unspec node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -2376,7 +2886,7 @@ Send raw IP packets on all interfaces.

-Module: +Module: corenetwork

Layer: kernel

@@ -2402,7 +2912,7 @@ Send raw IP packets on all nodes.

-Module: +Module: corenetwork

Layer: kernel

@@ -2419,10 +2929,16 @@ kernel

)

+
+

+Send raw IP packets on the compat_ipv4 node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -2439,10 +2955,16 @@ kernel

)

+
+

+Send raw IP packets on the eth0 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -2459,10 +2981,16 @@ kernel

)

+
+

+Send raw IP packets on the eth1 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -2479,10 +3007,16 @@ kernel

)

+
+

+Send raw IP packets on the eth2 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -2508,7 +3042,7 @@ Send raw IP packets on generic interfaces.

-Module: +Module: corenetwork

Layer: kernel

@@ -2534,7 +3068,7 @@ Send raw IP packets on generic nodes.

-Module: +Module: corenetwork

Layer: kernel

@@ -2551,10 +3085,16 @@ kernel

)

+
+

+Send raw IP packets on the inaddr_any node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -2571,10 +3111,16 @@ kernel

)

+
+

+Send raw IP packets on the ippp0 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -2591,10 +3137,16 @@ kernel

)

+
+

+Send raw IP packets on the ipsec0 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -2611,10 +3163,16 @@ kernel

)

+
+

+Send raw IP packets on the ipsec1 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -2631,10 +3189,16 @@ kernel

)

+
+

+Send raw IP packets on the ipsec2 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -2651,10 +3215,16 @@ kernel

)

+
+

+Send raw IP packets on the link_local node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -2671,10 +3241,16 @@ kernel

)

+
+

+Send raw IP packets on the lo interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -2691,10 +3267,16 @@ kernel

)

+
+

+Send raw IP packets on the lo node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -2711,10 +3293,16 @@ kernel

)

+
+

+Send raw IP packets on the mapped_ipv4 node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -2731,10 +3319,16 @@ kernel

)

+
+

+Send raw IP packets on the multicast node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -2751,10 +3345,16 @@ kernel

)

+
+

+Send raw IP packets on the site_local node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -2771,10 +3371,16 @@ kernel

)

+
+

+Send raw IP packets on the unspec node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -2800,7 +3406,7 @@ Send and receive raw IP packets on all interfaces.

-Module: +Module: corenetwork

Layer: kernel

@@ -2826,7 +3432,7 @@ Send and receive raw IP packets on all nodes.

-Module: +Module: corenetwork

Layer: kernel

@@ -2843,10 +3449,16 @@ kernel

)

+
+

+Send and receive raw IP packets on the compat_ipv4 node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -2863,10 +3475,16 @@ kernel

)

+
+

+Send and receive raw IP packets on the eth0 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -2883,10 +3501,16 @@ kernel

)

+
+

+Send and receive raw IP packets on the eth1 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -2903,10 +3527,16 @@ kernel

)

+
+

+Send and receive raw IP packets on the eth2 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -2932,7 +3562,7 @@ Send and receive raw IP packets on generic interfaces.

-Module: +Module: corenetwork

Layer: kernel

@@ -2958,7 +3588,7 @@ Send and receive raw IP packets on generic nodes.

-Module: +Module: corenetwork

Layer: kernel

@@ -2975,10 +3605,16 @@ kernel

)

+
+

+Send and receive raw IP packets on the inaddr_any node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -2995,10 +3631,16 @@ kernel

)

+
+

+Send and receive raw IP packets on the ippp0 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3015,10 +3657,16 @@ kernel

)

+
+

+Send and receive raw IP packets on the ipsec0 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3035,10 +3683,16 @@ kernel

)

+
+

+Send and receive raw IP packets on the ipsec1 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3055,10 +3709,16 @@ kernel

)

+
+

+Send and receive raw IP packets on the ipsec2 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3075,10 +3735,16 @@ kernel

)

+
+

+Send and receive raw IP packets on the link_local node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3095,10 +3761,16 @@ kernel

)

+
+

+Send and receive raw IP packets on the lo interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3115,10 +3787,16 @@ kernel

)

+
+

+Send and receive raw IP packets on the lo node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3135,10 +3813,16 @@ kernel

)

+
+

+Send and receive raw IP packets on the mapped_ipv4 node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3155,10 +3839,16 @@ kernel

)

+
+

+Send and receive raw IP packets on the multicast node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3175,10 +3865,16 @@ kernel

)

+
+

+Send and receive raw IP packets on the site_local node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3195,10 +3891,16 @@ kernel

)

+
+

+Send and receive raw IP packets on the unspec node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3224,7 +3926,7 @@ Bind TCP sockets to all nodes.

-Module: +Module: corenetwork

Layer: kernel

@@ -3250,7 +3952,7 @@ Bind TCP sockets to all ports.

-Module: +Module: corenetwork

Layer: kernel

@@ -3276,7 +3978,7 @@ Bind TCP sockets to all reserved ports.

-Module: +Module: corenetwork

Layer: kernel

@@ -3293,10 +3995,16 @@ kernel

)

+
+

+Bind TCP sockets to the amanda port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3313,10 +4021,16 @@ kernel

)

+
+

+Bind TCP sockets to node compat_ipv4. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3333,10 +4047,16 @@ kernel

)

+
+

+Bind TCP sockets to the dbskkd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3353,10 +4073,16 @@ kernel

)

+
+

+Bind TCP sockets to the dhcpc port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3373,10 +4099,16 @@ kernel

)

+
+

+Bind TCP sockets to the dhcpd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3393,10 +4125,16 @@ kernel

)

+
+

+Bind TCP sockets to the dict port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3413,10 +4151,16 @@ kernel

)

+
+

+Bind TCP sockets to the dns port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3433,10 +4177,16 @@ kernel

)

+
+

+Bind TCP sockets to the fingerd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3453,10 +4203,16 @@ kernel

)

+
+

+Bind TCP sockets to the ftp_data port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3473,10 +4229,16 @@ kernel

)

+
+

+Bind TCP sockets to the ftp port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3502,7 +4264,7 @@ Bind TCP sockets to generic nodes.

-Module: +Module: corenetwork

Layer: kernel

@@ -3528,7 +4290,7 @@ Bind TCP sockets to generic ports.

-Module: +Module: corenetwork

Layer: kernel

@@ -3545,10 +4307,16 @@ kernel

)

+
+

+Bind TCP sockets to the howl port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3565,10 +4333,16 @@ kernel

)

+
+

+Bind TCP sockets to the http_cache port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3585,10 +4359,16 @@ kernel

)

+
+

+Bind TCP sockets to the http port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3605,10 +4385,16 @@ kernel

)

+
+

+Bind TCP sockets to node inaddr_any. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3625,10 +4411,16 @@ kernel

)

+
+

+Bind TCP sockets to the inetd_child port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3645,10 +4437,16 @@ kernel

)

+
+

+Bind TCP sockets to the innd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3665,10 +4463,16 @@ kernel

)

+
+

+Bind TCP sockets to the ipp port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3685,10 +4489,16 @@ kernel

)

+
+

+Bind TCP sockets to the kerberos_admin port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3705,10 +4515,16 @@ kernel

)

+
+

+Bind TCP sockets to the kerberos_master port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3725,10 +4541,16 @@ kernel

)

+
+

+Bind TCP sockets to the kerberos port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3745,10 +4567,16 @@ kernel

)

+
+

+Bind TCP sockets to the ktalkd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3765,10 +4593,16 @@ kernel

)

+
+

+Bind TCP sockets to the ldap port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3785,10 +4619,16 @@ kernel

)

+
+

+Bind TCP sockets to node link_local. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3805,10 +4645,16 @@ kernel

)

+
+

+Bind TCP sockets to node lo. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3825,10 +4671,16 @@ kernel

)

+
+

+Bind TCP sockets to the mail port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3845,10 +4697,16 @@ kernel

)

+
+

+Bind TCP sockets to node mapped_ipv4. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3865,10 +4723,16 @@ kernel

)

+
+

+Bind TCP sockets to node multicast. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3885,10 +4749,16 @@ kernel

)

+
+

+Bind TCP sockets to the mysqld port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3905,10 +4775,16 @@ kernel

)

+
+

+Bind TCP sockets to the nmbd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3925,10 +4801,16 @@ kernel

)

+
+

+Bind TCP sockets to the pop port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3945,10 +4827,16 @@ kernel

)

+
+

+Bind TCP sockets to the portmap port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3965,10 +4853,16 @@ kernel

)

+
+

+Bind TCP sockets to the postgresql port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -3985,10 +4879,16 @@ kernel

)

+
+

+Bind TCP sockets to the printer port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -4005,10 +4905,16 @@ kernel

)

+
+

+Bind TCP sockets to the pxe port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -4025,10 +4931,16 @@ kernel

)

+
+

+Bind TCP sockets to the radacct port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -4045,10 +4957,16 @@ kernel

)

+
+

+Bind TCP sockets to the radius port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -4074,7 +4992,7 @@ Bind TCP sockets to generic reserved ports.

-Module: +Module: corenetwork

Layer: kernel

@@ -4091,10 +5009,16 @@ kernel

)

+
+

+Bind TCP sockets to the rsh port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -4111,10 +5035,16 @@ kernel

)

+
+

+Bind TCP sockets to the rsync port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -4131,10 +5061,16 @@ kernel

)

+
+

+Bind TCP sockets to node site_local. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -4151,10 +5087,16 @@ kernel

)

+
+

+Bind TCP sockets to the smbd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -4171,10 +5113,16 @@ kernel

)

+
+

+Bind TCP sockets to the smtp port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -4191,10 +5139,16 @@ kernel

)

+
+

+Bind TCP sockets to the snmp port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -4211,10 +5165,16 @@ kernel

)

+
+

+Bind TCP sockets to the ssh port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -4231,10 +5191,16 @@ kernel

)

+
+

+Bind TCP sockets to the swat port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -4251,10 +5217,16 @@ kernel

)

+
+

+Bind TCP sockets to the syslogd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -4271,10 +5243,16 @@ kernel

)

+
+

+Bind TCP sockets to the telnetd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -4291,10 +5269,16 @@ kernel

)

+
+

+Bind TCP sockets to the tftp port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -4311,10 +5295,16 @@ kernel

)

+
+

+Bind TCP sockets to node unspec. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -4331,10 +5321,16 @@ kernel

)

+
+

+Bind TCP sockets to the vnc port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -4351,10 +5347,16 @@ kernel

)

+
+

+Bind TCP sockets to the xserver port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -4371,10 +5373,1134 @@ kernel

)

+
+

+Bind TCP sockets to the zebra port. +

+
+
-Module: +Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_amanda_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the amanda port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_dbskkd_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the dbskkd port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_dhcpc_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the dhcpc port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_dhcpd_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the dhcpd port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_dict_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the dict port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_dns_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the dns port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_fingerd_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the fingerd port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_ftp_data_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the ftp_data port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_ftp_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the ftp port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_howl_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the howl port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_http_cache_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the http_cache port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_http_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the http port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_inetd_child_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the inetd_child port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_innd_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the innd port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_ipp_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the ipp port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_kerberos_admin_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the kerberos_admin port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_kerberos_master_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the kerberos_master port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_kerberos_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the kerberos port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_ktalkd_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the ktalkd port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_ldap_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the ldap port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_mail_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the mail port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_mysqld_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the mysqld port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_nmbd_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the nmbd port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_pop_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the pop port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_portmap_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the portmap port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_postgresql_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the postgresql port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_printer_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the printer port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_pxe_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the pxe port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_radacct_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the radacct port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_radius_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the radius port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_rsh_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the rsh port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_rsync_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the rsync port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_smbd_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the smbd port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_smtp_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the smtp port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_snmp_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the snmp port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_ssh_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the ssh port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_swat_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the swat port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_syslogd_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the syslogd port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_telnetd_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the telnetd port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_tftp_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the tftp port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_vnc_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the vnc port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_xserver_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the xserver port. +

+
+ +
+ +
+Module: +corenetwork

+Layer: +kernel

+

+ +corenet_tcp_connect_zebra_port( + + + + + domain + + + )
+
+ +
+

+Make a TCP connection to the zebra port. +

+
+ +
+ +
+Module: corenetwork

Layer: kernel

@@ -4400,7 +6526,7 @@ Send and receive TCP network traffic on all interfaces.

-Module: +Module: corenetwork

Layer: kernel

@@ -4426,7 +6552,7 @@ Send and receive TCP network traffic on all nodes.

-Module: +Module: corenetwork

Layer: kernel

@@ -4452,7 +6578,7 @@ Send and receive TCP network traffic on all ports.

-Module: +Module: corenetwork

Layer: kernel

@@ -4478,7 +6604,7 @@ Send and receive TCP network traffic on all reserved ports.

-Module: +Module: corenetwork

Layer: kernel

@@ -4495,10 +6621,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the amanda port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -4515,10 +6647,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the compat_ipv4 node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -4535,10 +6673,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the dbskkd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -4555,10 +6699,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the dhcpc port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -4575,10 +6725,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the dhcpd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -4595,10 +6751,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the dict port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -4615,10 +6777,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the dns port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -4635,10 +6803,16 @@ kernel

)

+
+

+Send and receive TCP network traffic on the eth0 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -4655,10 +6829,16 @@ kernel

)

+
+

+Send and receive TCP network traffic on the eth1 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -4675,10 +6855,16 @@ kernel

)

+
+

+Send and receive TCP network traffic on the eth2 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -4695,10 +6881,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the fingerd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -4715,10 +6907,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the ftp_data port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -4735,10 +6933,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the ftp port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -4764,7 +6968,7 @@ Send and receive TCP network traffic on the generic interfaces.

-Module: +Module: corenetwork

Layer: kernel

@@ -4790,7 +6994,7 @@ Send and receive TCP network traffic on generic nodes.

-Module: +Module: corenetwork

Layer: kernel

@@ -4816,7 +7020,7 @@ Send and receive TCP network traffic on generic ports.

-Module: +Module: corenetwork

Layer: kernel

@@ -4833,10 +7037,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the howl port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -4853,10 +7063,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the http_cache port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -4873,10 +7089,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the http port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -4893,10 +7115,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the inaddr_any node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -4913,10 +7141,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the inetd_child port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -4933,10 +7167,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the innd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -4953,10 +7193,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the ipp port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -4973,10 +7219,16 @@ kernel

)

+
+

+Send and receive TCP network traffic on the ippp0 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -4993,10 +7245,16 @@ kernel

)

+
+

+Send and receive TCP network traffic on the ipsec0 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5013,10 +7271,16 @@ kernel

)

+
+

+Send and receive TCP network traffic on the ipsec1 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5033,10 +7297,16 @@ kernel

)

+
+

+Send and receive TCP network traffic on the ipsec2 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5053,10 +7323,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the kerberos_admin port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5073,10 +7349,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the kerberos_master port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5093,10 +7375,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the kerberos port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5113,10 +7401,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the ktalkd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5133,10 +7427,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the ldap port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5153,10 +7453,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the link_local node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5173,10 +7479,16 @@ kernel

)

+
+

+Send and receive TCP network traffic on the lo interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5193,10 +7505,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the lo node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5213,10 +7531,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the mail port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5233,10 +7557,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the mapped_ipv4 node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5253,10 +7583,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the multicast node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5273,10 +7609,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the mysqld port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5293,10 +7635,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the nmbd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5313,10 +7661,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the pop port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5333,10 +7687,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the portmap port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5353,10 +7713,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the postgresql port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5373,10 +7739,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the printer port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5393,10 +7765,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the pxe port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5413,10 +7791,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the radacct port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5433,10 +7817,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the radius port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5462,7 +7852,7 @@ Send and receive TCP network traffic on generic reserved ports.

-Module: +Module: corenetwork

Layer: kernel

@@ -5479,10 +7869,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the rsh port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5499,10 +7895,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the rsync port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5519,10 +7921,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the site_local node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5539,10 +7947,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the smbd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5559,10 +7973,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the smtp port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5579,10 +7999,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the snmp port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5599,10 +8025,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the ssh port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5619,10 +8051,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the swat port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5639,10 +8077,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the syslogd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5659,10 +8103,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the telnetd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5679,10 +8129,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the tftp port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5699,10 +8155,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the unspec node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5719,10 +8181,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the vnc port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5739,10 +8207,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the xserver port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5759,10 +8233,16 @@ kernel

)

+
+

+Send and receive TCP traffic on the zebra port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5788,7 +8268,7 @@ Bind UDP sockets to all nodes.

-Module: +Module: corenetwork

Layer: kernel

@@ -5814,7 +8294,7 @@ Bind UDP sockets to all ports.

-Module: +Module: corenetwork

Layer: kernel

@@ -5840,7 +8320,7 @@ Bind UDP sockets to all reserved ports.

-Module: +Module: corenetwork

Layer: kernel

@@ -5857,10 +8337,16 @@ kernel

)

+
+

+Bind UDP sockets to the amanda port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5877,10 +8363,16 @@ kernel

)

+
+

+Bind UDP sockets to the compat_ipv4 node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5897,10 +8389,16 @@ kernel

)

+
+

+Bind UDP sockets to the dbskkd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5917,10 +8415,16 @@ kernel

)

+
+

+Bind UDP sockets to the dhcpc port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5937,10 +8441,16 @@ kernel

)

+
+

+Bind UDP sockets to the dhcpd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5957,10 +8467,16 @@ kernel

)

+
+

+Bind UDP sockets to the dict port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5977,10 +8493,16 @@ kernel

)

+
+

+Bind UDP sockets to the dns port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -5997,10 +8519,16 @@ kernel

)

+
+

+Bind UDP sockets to the fingerd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6017,10 +8545,16 @@ kernel

)

+
+

+Bind UDP sockets to the ftp_data port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6037,10 +8571,16 @@ kernel

)

+
+

+Bind UDP sockets to the ftp port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6066,7 +8606,7 @@ Bind UDP sockets to generic nodes.

-Module: +Module: corenetwork

Layer: kernel

@@ -6092,7 +8632,7 @@ Bind UDP sockets to generic ports.

-Module: +Module: corenetwork

Layer: kernel

@@ -6109,10 +8649,16 @@ kernel

)

+
+

+Bind UDP sockets to the howl port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6129,10 +8675,16 @@ kernel

)

+
+

+Bind UDP sockets to the http_cache port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6149,10 +8701,16 @@ kernel

)

+
+

+Bind UDP sockets to the http port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6169,10 +8727,16 @@ kernel

)

+
+

+Bind UDP sockets to the inaddr_any node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6189,10 +8753,16 @@ kernel

)

+
+

+Bind UDP sockets to the inetd_child port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6209,10 +8779,16 @@ kernel

)

+
+

+Bind UDP sockets to the innd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6229,10 +8805,16 @@ kernel

)

+
+

+Bind UDP sockets to the ipp port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6249,10 +8831,16 @@ kernel

)

+
+

+Bind UDP sockets to the kerberos_admin port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6269,10 +8857,16 @@ kernel

)

+
+

+Bind UDP sockets to the kerberos_master port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6289,10 +8883,16 @@ kernel

)

+
+

+Bind UDP sockets to the kerberos port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6309,10 +8909,16 @@ kernel

)

+
+

+Bind UDP sockets to the ktalkd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6329,10 +8935,16 @@ kernel

)

+
+

+Bind UDP sockets to the ldap port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6349,10 +8961,16 @@ kernel

)

+
+

+Bind UDP sockets to the link_local node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6369,10 +8987,16 @@ kernel

)

+
+

+Bind UDP sockets to the lo node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6389,10 +9013,16 @@ kernel

)

+
+

+Bind UDP sockets to the mail port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6409,10 +9039,16 @@ kernel

)

+
+

+Bind UDP sockets to the mapped_ipv4 node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6429,10 +9065,16 @@ kernel

)

+
+

+Bind UDP sockets to the multicast node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6449,10 +9091,16 @@ kernel

)

+
+

+Bind UDP sockets to the mysqld port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6469,10 +9117,16 @@ kernel

)

+
+

+Bind UDP sockets to the nmbd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6489,10 +9143,16 @@ kernel

)

+
+

+Bind UDP sockets to the pop port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6509,10 +9169,16 @@ kernel

)

+
+

+Bind UDP sockets to the portmap port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6529,10 +9195,16 @@ kernel

)

+
+

+Bind UDP sockets to the postgresql port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6549,10 +9221,16 @@ kernel

)

+
+

+Bind UDP sockets to the printer port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6569,10 +9247,16 @@ kernel

)

+
+

+Bind UDP sockets to the pxe port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6589,10 +9273,16 @@ kernel

)

+
+

+Bind UDP sockets to the radacct port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6609,10 +9299,16 @@ kernel

)

+
+

+Bind UDP sockets to the radius port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6638,7 +9334,7 @@ Bind UDP sockets to generic reserved ports.

-Module: +Module: corenetwork

Layer: kernel

@@ -6655,10 +9351,16 @@ kernel

)

+
+

+Bind UDP sockets to the rsh port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6675,10 +9377,16 @@ kernel

)

+
+

+Bind UDP sockets to the rsync port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6695,10 +9403,16 @@ kernel

)

+
+

+Bind UDP sockets to the site_local node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6715,10 +9429,16 @@ kernel

)

+
+

+Bind UDP sockets to the smbd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6735,10 +9455,16 @@ kernel

)

+
+

+Bind UDP sockets to the smtp port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6755,10 +9481,16 @@ kernel

)

+
+

+Bind UDP sockets to the snmp port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6775,10 +9507,16 @@ kernel

)

+
+

+Bind UDP sockets to the ssh port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6795,10 +9533,16 @@ kernel

)

+
+

+Bind UDP sockets to the swat port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6815,10 +9559,16 @@ kernel

)

+
+

+Bind UDP sockets to the syslogd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6835,10 +9585,16 @@ kernel

)

+
+

+Bind UDP sockets to the telnetd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6855,10 +9611,16 @@ kernel

)

+
+

+Bind UDP sockets to the tftp port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6875,10 +9637,16 @@ kernel

)

+
+

+Bind UDP sockets to the unspec node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6895,10 +9663,16 @@ kernel

)

+
+

+Bind UDP sockets to the vnc port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6915,10 +9689,16 @@ kernel

)

+
+

+Bind UDP sockets to the xserver port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6935,10 +9715,16 @@ kernel

)

+
+

+Bind UDP sockets to the zebra port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -6964,7 +9750,7 @@ Receive UDP network traffic on all interfaces.

-Module: +Module: corenetwork

Layer: kernel

@@ -6990,7 +9776,7 @@ Receive UDP network traffic on all nodes.

-Module: +Module: corenetwork

Layer: kernel

@@ -7016,7 +9802,7 @@ Receive UDP network traffic on all ports.

-Module: +Module: corenetwork

Layer: kernel

@@ -7042,7 +9828,7 @@ Receive UDP network traffic on all reserved ports.

-Module: +Module: corenetwork

Layer: kernel

@@ -7059,10 +9845,16 @@ kernel

)

+
+

+Receive UDP traffic on the amanda port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7079,10 +9871,16 @@ kernel

)

+
+

+Receive UDP traffic on the compat_ipv4 node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7099,10 +9897,16 @@ kernel

)

+
+

+Receive UDP traffic on the dbskkd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7119,10 +9923,16 @@ kernel

)

+
+

+Receive UDP traffic on the dhcpc port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7139,10 +9949,16 @@ kernel

)

+
+

+Receive UDP traffic on the dhcpd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7159,10 +9975,16 @@ kernel

)

+
+

+Receive UDP traffic on the dict port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7179,10 +10001,16 @@ kernel

)

+
+

+Receive UDP traffic on the dns port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7199,10 +10027,16 @@ kernel

)

+
+

+Receive UDP network traffic on the eth0 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7219,10 +10053,16 @@ kernel

)

+
+

+Receive UDP network traffic on the eth1 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7239,10 +10079,16 @@ kernel

)

+
+

+Receive UDP network traffic on the eth2 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7259,10 +10105,16 @@ kernel

)

+
+

+Receive UDP traffic on the fingerd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7279,10 +10131,16 @@ kernel

)

+
+

+Receive UDP traffic on the ftp_data port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7299,10 +10157,16 @@ kernel

)

+
+

+Receive UDP traffic on the ftp port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7328,7 +10192,7 @@ Receive UDP network traffic on generic interfaces.

-Module: +Module: corenetwork

Layer: kernel

@@ -7354,7 +10218,7 @@ Receive UDP network traffic on generic nodes.

-Module: +Module: corenetwork

Layer: kernel

@@ -7380,7 +10244,7 @@ Receive UDP network traffic on generic ports.

-Module: +Module: corenetwork

Layer: kernel

@@ -7397,10 +10261,16 @@ kernel

)

+
+

+Receive UDP traffic on the howl port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7417,10 +10287,16 @@ kernel

)

+
+

+Receive UDP traffic on the http_cache port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7437,10 +10313,16 @@ kernel

)

+
+

+Receive UDP traffic on the http port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7457,10 +10339,16 @@ kernel

)

+
+

+Receive UDP traffic on the inaddr_any node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7477,10 +10365,16 @@ kernel

)

+
+

+Receive UDP traffic on the inetd_child port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7497,10 +10391,16 @@ kernel

)

+
+

+Receive UDP traffic on the innd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7517,10 +10417,16 @@ kernel

)

+
+

+Receive UDP traffic on the ipp port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7537,10 +10443,16 @@ kernel

)

+
+

+Receive UDP network traffic on the ippp0 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7557,10 +10469,16 @@ kernel

)

+
+

+Receive UDP network traffic on the ipsec0 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7577,10 +10495,16 @@ kernel

)

+
+

+Receive UDP network traffic on the ipsec1 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7597,10 +10521,16 @@ kernel

)

+
+

+Receive UDP network traffic on the ipsec2 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7617,10 +10547,16 @@ kernel

)

+
+

+Receive UDP traffic on the kerberos_admin port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7637,10 +10573,16 @@ kernel

)

+
+

+Receive UDP traffic on the kerberos_master port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7657,10 +10599,16 @@ kernel

)

+
+

+Receive UDP traffic on the kerberos port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7677,10 +10625,16 @@ kernel

)

+
+

+Receive UDP traffic on the ktalkd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7697,10 +10651,16 @@ kernel

)

+
+

+Receive UDP traffic on the ldap port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7717,10 +10677,16 @@ kernel

)

+
+

+Receive UDP traffic on the link_local node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7737,10 +10703,16 @@ kernel

)

+
+

+Receive UDP network traffic on the lo interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7757,10 +10729,16 @@ kernel

)

+
+

+Receive UDP traffic on the lo node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7777,10 +10755,16 @@ kernel

)

+
+

+Receive UDP traffic on the mail port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7797,10 +10781,16 @@ kernel

)

+
+

+Receive UDP traffic on the mapped_ipv4 node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7817,10 +10807,16 @@ kernel

)

+
+

+Receive UDP traffic on the multicast node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7837,10 +10833,16 @@ kernel

)

+
+

+Receive UDP traffic on the mysqld port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7857,10 +10859,16 @@ kernel

)

+
+

+Receive UDP traffic on the nmbd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7877,10 +10885,16 @@ kernel

)

+
+

+Receive UDP traffic on the pop port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7897,10 +10911,16 @@ kernel

)

+
+

+Receive UDP traffic on the portmap port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7917,10 +10937,16 @@ kernel

)

+
+

+Receive UDP traffic on the postgresql port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7937,10 +10963,16 @@ kernel

)

+
+

+Receive UDP traffic on the printer port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7957,10 +10989,16 @@ kernel

)

+
+

+Receive UDP traffic on the pxe port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7977,10 +11015,16 @@ kernel

)

+
+

+Receive UDP traffic on the radacct port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -7997,10 +11041,16 @@ kernel

)

+
+

+Receive UDP traffic on the radius port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -8026,7 +11076,7 @@ Receive UDP network traffic on generic reserved ports.

-Module: +Module: corenetwork

Layer: kernel

@@ -8043,10 +11093,16 @@ kernel

)

+
+

+Receive UDP traffic on the rsh port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -8063,10 +11119,16 @@ kernel

)

+
+

+Receive UDP traffic on the rsync port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -8083,10 +11145,16 @@ kernel

)

+
+

+Receive UDP traffic on the site_local node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -8103,10 +11171,16 @@ kernel

)

+
+

+Receive UDP traffic on the smbd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -8123,10 +11197,16 @@ kernel

)

+
+

+Receive UDP traffic on the smtp port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -8143,10 +11223,16 @@ kernel

)

+
+

+Receive UDP traffic on the snmp port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -8163,10 +11249,16 @@ kernel

)

+
+

+Receive UDP traffic on the ssh port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -8183,10 +11275,16 @@ kernel

)

+
+

+Receive UDP traffic on the swat port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -8203,10 +11301,16 @@ kernel

)

+
+

+Receive UDP traffic on the syslogd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -8223,10 +11327,16 @@ kernel

)

+
+

+Receive UDP traffic on the telnetd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -8243,10 +11353,16 @@ kernel

)

+
+

+Receive UDP traffic on the tftp port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -8263,10 +11379,16 @@ kernel

)

+
+

+Receive UDP traffic on the unspec node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -8283,10 +11405,16 @@ kernel

)

+
+

+Receive UDP traffic on the vnc port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -8303,10 +11431,16 @@ kernel

)

+
+

+Receive UDP traffic on the xserver port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -8323,10 +11457,16 @@ kernel

)

+
+

+Receive UDP traffic on the zebra port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -8352,7 +11492,7 @@ Send UDP network traffic on all interfaces.

-Module: +Module: corenetwork

Layer: kernel

@@ -8378,7 +11518,7 @@ Send UDP network traffic on all nodes.

-Module: +Module: corenetwork

Layer: kernel

@@ -8404,7 +11544,7 @@ Send UDP network traffic on all ports.

-Module: +Module: corenetwork

Layer: kernel

@@ -8430,7 +11570,7 @@ Send UDP network traffic on all reserved ports.

-Module: +Module: corenetwork

Layer: kernel

@@ -8447,10 +11587,16 @@ kernel

)

+
+

+Send UDP traffic on the amanda port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -8467,10 +11613,16 @@ kernel

)

+
+

+Send UDP traffic on the compat_ipv4 node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -8487,10 +11639,16 @@ kernel

)

+
+

+Send UDP traffic on the dbskkd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -8507,10 +11665,16 @@ kernel

)

+
+

+Send UDP traffic on the dhcpc port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -8527,10 +11691,16 @@ kernel

)

+
+

+Send UDP traffic on the dhcpd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -8547,10 +11717,16 @@ kernel

)

+
+

+Send UDP traffic on the dict port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -8567,10 +11743,16 @@ kernel

)

+
+

+Send UDP traffic on the dns port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -8587,10 +11769,16 @@ kernel

)

+
+

+Send UDP network traffic on the eth0 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -8607,10 +11795,16 @@ kernel

)

+
+

+Send UDP network traffic on the eth1 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -8627,10 +11821,16 @@ kernel

)

+
+

+Send UDP network traffic on the eth2 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -8647,10 +11847,16 @@ kernel

)

+
+

+Send UDP traffic on the fingerd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -8667,10 +11873,16 @@ kernel

)

+
+

+Send UDP traffic on the ftp_data port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -8687,10 +11899,16 @@ kernel

)

+
+

+Send UDP traffic on the ftp port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -8716,7 +11934,7 @@ Send UDP network traffic on generic interfaces.

-Module: +Module: corenetwork

Layer: kernel

@@ -8742,7 +11960,7 @@ Send UDP network traffic on generic nodes.

-Module: +Module: corenetwork

Layer: kernel

@@ -8768,7 +11986,7 @@ Send UDP network traffic on generic ports.

-Module: +Module: corenetwork

Layer: kernel

@@ -8785,10 +12003,16 @@ kernel

)

+
+

+Send UDP traffic on the howl port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -8805,10 +12029,16 @@ kernel

)

+
+

+Send UDP traffic on the http_cache port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -8825,10 +12055,16 @@ kernel

)

+
+

+Send UDP traffic on the http port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -8845,10 +12081,16 @@ kernel

)

+
+

+Send UDP traffic on the inaddr_any node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -8865,10 +12107,16 @@ kernel

)

+
+

+Send UDP traffic on the inetd_child port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -8885,10 +12133,16 @@ kernel

)

+
+

+Send UDP traffic on the innd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -8905,10 +12159,16 @@ kernel

)

+
+

+Send UDP traffic on the ipp port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -8925,10 +12185,16 @@ kernel

)

+
+

+Send UDP network traffic on the ippp0 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -8945,10 +12211,16 @@ kernel

)

+
+

+Send UDP network traffic on the ipsec0 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -8965,10 +12237,16 @@ kernel

)

+
+

+Send UDP network traffic on the ipsec1 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -8985,10 +12263,16 @@ kernel

)

+
+

+Send UDP network traffic on the ipsec2 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9005,10 +12289,16 @@ kernel

)

+
+

+Send UDP traffic on the kerberos_admin port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9025,10 +12315,16 @@ kernel

)

+
+

+Send UDP traffic on the kerberos_master port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9045,10 +12341,16 @@ kernel

)

+
+

+Send UDP traffic on the kerberos port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9065,10 +12367,16 @@ kernel

)

+
+

+Send UDP traffic on the ktalkd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9085,10 +12393,16 @@ kernel

)

+
+

+Send UDP traffic on the ldap port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9105,10 +12419,16 @@ kernel

)

+
+

+Send UDP traffic on the link_local node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9125,10 +12445,16 @@ kernel

)

+
+

+Send UDP network traffic on the lo interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9145,10 +12471,16 @@ kernel

)

+
+

+Send UDP traffic on the lo node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9165,10 +12497,16 @@ kernel

)

+
+

+Send UDP traffic on the mail port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9185,10 +12523,16 @@ kernel

)

+
+

+Send UDP traffic on the mapped_ipv4 node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9205,10 +12549,16 @@ kernel

)

+
+

+Send UDP traffic on the multicast node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9225,10 +12575,16 @@ kernel

)

+
+

+Send UDP traffic on the mysqld port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9245,10 +12601,16 @@ kernel

)

+
+

+Send UDP traffic on the nmbd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9265,10 +12627,16 @@ kernel

)

+
+

+Send UDP traffic on the pop port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9285,10 +12653,16 @@ kernel

)

+
+

+Send UDP traffic on the portmap port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9305,10 +12679,16 @@ kernel

)

+
+

+Send UDP traffic on the postgresql port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9325,10 +12705,16 @@ kernel

)

+
+

+Send UDP traffic on the printer port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9345,10 +12731,16 @@ kernel

)

+
+

+Send UDP traffic on the pxe port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9365,10 +12757,16 @@ kernel

)

+
+

+Send UDP traffic on the radacct port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9385,10 +12783,16 @@ kernel

)

+
+

+Send UDP traffic on the radius port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9414,7 +12818,7 @@ Send UDP network traffic on generic reserved ports.

-Module: +Module: corenetwork

Layer: kernel

@@ -9431,10 +12835,16 @@ kernel

)

+
+

+Send UDP traffic on the rsh port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9451,10 +12861,16 @@ kernel

)

+
+

+Send UDP traffic on the rsync port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9471,10 +12887,16 @@ kernel

)

+
+

+Send UDP traffic on the site_local node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9491,10 +12913,16 @@ kernel

)

+
+

+Send UDP traffic on the smbd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9511,10 +12939,16 @@ kernel

)

+
+

+Send UDP traffic on the smtp port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9531,10 +12965,16 @@ kernel

)

+
+

+Send UDP traffic on the snmp port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9551,10 +12991,16 @@ kernel

)

+
+

+Send UDP traffic on the ssh port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9571,10 +13017,16 @@ kernel

)

+
+

+Send UDP traffic on the swat port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9591,10 +13043,16 @@ kernel

)

+
+

+Send UDP traffic on the syslogd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9611,10 +13069,16 @@ kernel

)

+
+

+Send UDP traffic on the telnetd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9631,10 +13095,16 @@ kernel

)

+
+

+Send UDP traffic on the tftp port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9651,10 +13121,16 @@ kernel

)

+
+

+Send UDP traffic on the unspec node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9671,10 +13147,16 @@ kernel

)

+
+

+Send UDP traffic on the vnc port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9691,10 +13173,16 @@ kernel

)

+
+

+Send UDP traffic on the xserver port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9711,10 +13199,16 @@ kernel

)

+
+

+Send UDP traffic on the zebra port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9740,7 +13234,7 @@ Send and receive UDP network traffic on all interfaces.

-Module: +Module: corenetwork

Layer: kernel

@@ -9766,7 +13260,7 @@ Send and receive UDP network traffic on all nodes.

-Module: +Module: corenetwork

Layer: kernel

@@ -9792,7 +13286,7 @@ Send and receive UDP network traffic on all ports.

-Module: +Module: corenetwork

Layer: kernel

@@ -9818,7 +13312,7 @@ Send and receive UDP network traffic on all reserved ports.

-Module: +Module: corenetwork

Layer: kernel

@@ -9835,10 +13329,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the amanda port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9855,10 +13355,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the compat_ipv4 node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9875,10 +13381,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the dbskkd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9895,10 +13407,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the dhcpc port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9915,10 +13433,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the dhcpd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9935,10 +13459,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the dict port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9955,10 +13485,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the dns port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9975,10 +13511,16 @@ kernel

)

+
+

+Send and receive UDP network traffic on the eth0 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -9995,10 +13537,16 @@ kernel

)

+
+

+Send and receive UDP network traffic on the eth1 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10015,10 +13563,16 @@ kernel

)

+
+

+Send and receive UDP network traffic on the eth2 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10035,10 +13589,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the fingerd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10055,10 +13615,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the ftp_data port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10075,10 +13641,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the ftp port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10104,7 +13676,7 @@ Send and Receive UDP network traffic on generic interfaces.

-Module: +Module: corenetwork

Layer: kernel

@@ -10130,7 +13702,7 @@ Send and receive UDP network traffic on generic nodes.

-Module: +Module: corenetwork

Layer: kernel

@@ -10156,7 +13728,7 @@ Send and receive UDP network traffic on generic ports.

-Module: +Module: corenetwork

Layer: kernel

@@ -10173,10 +13745,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the howl port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10193,10 +13771,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the http_cache port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10213,10 +13797,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the http port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10233,10 +13823,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the inaddr_any node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10253,10 +13849,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the inetd_child port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10273,10 +13875,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the innd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10293,10 +13901,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the ipp port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10313,10 +13927,16 @@ kernel

)

+
+

+Send and receive UDP network traffic on the ippp0 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10333,10 +13953,16 @@ kernel

)

+
+

+Send and receive UDP network traffic on the ipsec0 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10353,10 +13979,16 @@ kernel

)

+
+

+Send and receive UDP network traffic on the ipsec1 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10373,10 +14005,16 @@ kernel

)

+
+

+Send and receive UDP network traffic on the ipsec2 interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10393,10 +14031,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the kerberos_admin port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10413,10 +14057,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the kerberos_master port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10433,10 +14083,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the kerberos port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10453,10 +14109,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the ktalkd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10473,10 +14135,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the ldap port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10493,10 +14161,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the link_local node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10513,10 +14187,16 @@ kernel

)

+
+

+Send and receive UDP network traffic on the lo interface. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10533,10 +14213,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the lo node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10553,10 +14239,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the mail port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10573,10 +14265,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the mapped_ipv4 node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10593,10 +14291,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the multicast node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10613,10 +14317,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the mysqld port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10633,10 +14343,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the nmbd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10653,10 +14369,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the pop port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10673,10 +14395,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the portmap port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10693,10 +14421,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the postgresql port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10713,10 +14447,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the printer port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10733,10 +14473,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the pxe port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10753,10 +14499,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the radacct port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10773,10 +14525,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the radius port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10802,7 +14560,7 @@ Send and receive UDP network traffic on generic reserved ports.

-Module: +Module: corenetwork

Layer: kernel

@@ -10819,10 +14577,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the rsh port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10839,10 +14603,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the rsync port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10859,10 +14629,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the site_local node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10879,10 +14655,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the smbd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10899,10 +14681,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the smtp port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10919,10 +14707,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the snmp port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10939,10 +14733,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the ssh port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10959,10 +14759,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the swat port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10979,10 +14785,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the syslogd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -10999,10 +14811,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the telnetd port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -11019,10 +14837,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the tftp port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -11039,10 +14863,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the unspec node. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -11059,10 +14889,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the vnc port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -11079,10 +14915,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the xserver port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -11099,10 +14941,16 @@ kernel

)

+
+

+Send and receive UDP traffic on the zebra port. +

+
+
-Module: +Module: corenetwork

Layer: kernel

@@ -11128,7 +14976,7 @@ Unconfined access to network objects.

-Module: +Module: corenetwork

Layer: kernel

@@ -11154,7 +15002,7 @@ Read and write the TUN/TAP virtual network device.

-Module: +Module: cron

Layer: services

@@ -11180,7 +15028,7 @@ Read a cron daemon unnamed pipe

-Module: +Module: cron

Layer: services

@@ -11206,7 +15054,7 @@ Read and write the cron daemon log files.

-Module: +Module: cron

Layer: services

@@ -11232,7 +15080,7 @@ Search the directory containing user cron tables.

-Module: +Module: cron

Layer: services

@@ -11267,7 +15115,7 @@ from the system cron jobs.

-Module: +Module: devices

Layer: kernel

@@ -11310,7 +15158,7 @@ will be transitioned to the type provided.

-Module: +Module: devices

Layer: kernel

@@ -11336,7 +15184,7 @@ Create a directory in the device directory.

-Module: +Module: devices

Layer: kernel

@@ -11362,7 +15210,7 @@ Allow read, write, and create for generic character device files.

-Module: +Module: devices

Layer: kernel

@@ -11388,7 +15236,7 @@ Delete symbolic links in device directories.

-Module: +Module: devices

Layer: kernel

@@ -11414,7 +15262,7 @@ Delete the lvm control device.

-Module: +Module: devices

Layer: kernel

@@ -11440,7 +15288,7 @@ Dontaudit getattr on all block file device nodes.

-Module: +Module: devices

Layer: kernel

@@ -11466,7 +15314,7 @@ Dontaudit getattr on all character file device nodes.

-Module: +Module: devices

Layer: kernel

@@ -11493,7 +15341,7 @@ the apm bios device node.

-Module: +Module: devices

Layer: kernel

@@ -11519,7 +15367,7 @@ Dontaudit getattr on generic block devices.

-Module: +Module: devices

Layer: kernel

@@ -11545,7 +15393,7 @@ Dontaudit getattr for generic character device files.

-Module: +Module: devices

Layer: kernel

@@ -11571,7 +15419,7 @@ Dontaudit getattr on generic pipes.

-Module: +Module: devices

Layer: kernel

@@ -11598,7 +15446,7 @@ of miscellaneous devices.

-Module: +Module: devices

Layer: kernel

@@ -11625,7 +15473,7 @@ the scanner device.

-Module: +Module: devices

Layer: kernel

@@ -11652,7 +15500,7 @@ of video4linux device nodes.

-Module: +Module: devices

Layer: kernel

@@ -11678,7 +15526,7 @@ Dontaudit attempts to list all device nodes.

-Module: +Module: devices

Layer: kernel

@@ -11704,7 +15552,34 @@ Do not audit attempts to read the framebuffer.

-Module: +Module: +devices

+Layer: +kernel

+

+ +dev_dontaudit_rw_cardmgr( + + + + + domain + + + )
+
+ +
+

+Do not audit attempts to read and +write the PCMCIA card manager device. +

+
+ +
+ +
+Module: devices

Layer: kernel

@@ -11730,7 +15605,7 @@ Dontaudit read and write on the dri devices.

-Module: +Module: devices

Layer: kernel

@@ -11756,7 +15631,7 @@ Dontaudit getattr for generic device files.

-Module: +Module: devices

Layer: kernel

@@ -11782,7 +15657,7 @@ Do not audit attempts to search sysfs.

-Module: +Module: devices

Layer: kernel

@@ -11809,7 +15684,7 @@ the apm bios device node.

-Module: +Module: devices

Layer: kernel

@@ -11836,7 +15711,7 @@ of the framebuffer device node.

-Module: +Module: devices

Layer: kernel

@@ -11862,7 +15737,7 @@ Dontaudit setattr on generic block devices.

-Module: +Module: devices

Layer: kernel

@@ -11888,7 +15763,34 @@ Dontaudit setattr for generic character device files.

-Module: +Module: +devices

+Layer: +kernel

+

+ +dev_dontaudit_setattr_generic_symlink( + + + + + domain + + + )
+
+ +
+

+Do not audit attempts to set the attributes +of symbolic links in device directories (/dev). +

+
+ +
+ +
+Module: devices

Layer: kernel

@@ -11915,7 +15817,7 @@ of miscellaneous devices.

-Module: +Module: devices

Layer: kernel

@@ -11942,7 +15844,7 @@ the scanner device.

-Module: +Module: devices

Layer: kernel

@@ -11969,7 +15871,7 @@ of video4linux device nodes.

-Module: +Module: devices

Layer: kernel

@@ -11995,7 +15897,7 @@ Getattr the agp devices.

-Module: +Module: devices

Layer: kernel

@@ -12021,7 +15923,7 @@ Getattr on all block file device nodes.

-Module: +Module: devices

Layer: kernel

@@ -12047,7 +15949,7 @@ Getattr on all character file device nodes.

-Module: +Module: devices

Layer: kernel

@@ -12073,7 +15975,7 @@ Get the attributes of the apm bios device node.

-Module: +Module: devices

Layer: kernel

@@ -12099,7 +16001,7 @@ Get the attributes of the framebuffer device node.

-Module: +Module: devices

Layer: kernel

@@ -12125,7 +16027,7 @@ Allow getattr on generic block devices.

-Module: +Module: devices

Layer: kernel

@@ -12151,7 +16053,7 @@ Allow getattr for generic character device files.

-Module: +Module: devices

Layer: kernel

@@ -12177,7 +16079,7 @@ Get the attributes of miscellaneous devices.

-Module: +Module: devices

Layer: kernel

@@ -12203,7 +16105,7 @@ Get the attributes of the mouse devices.

-Module: +Module: devices

Layer: kernel

@@ -12229,7 +16131,7 @@ Get the attributes of the the power management device.

-Module: +Module: devices

Layer: kernel

@@ -12255,7 +16157,7 @@ Get the attributes of the scanner device.

-Module: +Module: devices

Layer: kernel

@@ -12281,7 +16183,7 @@ Get the attributes of the sound devices.

-Module: +Module: devices

Layer: kernel

@@ -12307,7 +16209,33 @@ Get the attributes of sysfs directories.

-Module: +Module: +devices

+Layer: +kernel

+

+ +dev_getattr_usbfs_dir( + + + + + domain + + + )
+
+ +
+

+Get the attributes of a directory in the usb filesystem. +

+
+ +
+ +
+Module: devices

Layer: kernel

@@ -12333,7 +16261,7 @@ Get the attributes of video4linux devices.

-Module: +Module: devices

Layer: kernel

@@ -12359,7 +16287,33 @@ List all of the device nodes in a device directory.

-Module: +Module: +devices

+Layer: +kernel

+

+ +dev_list_sysfs( + + + + + domain + + + )
+
+ +
+

+List the contents of the sysfs directories. +

+
+ +
+ +
+Module: devices

Layer: kernel

@@ -12385,7 +16339,7 @@ Allow caller to get a list of usb hardware.

-Module: +Module: devices

Layer: kernel

@@ -12411,7 +16365,7 @@ Read, write, create, and delete all block device files.

-Module: +Module: devices

Layer: kernel

@@ -12437,7 +16391,7 @@ Read, write, create, and delete all character device files.

-Module: +Module: devices

Layer: kernel

@@ -12463,7 +16417,7 @@ Create, delete, read, and write device nodes in device directories.

-Module: +Module: devices

Layer: kernel

@@ -12490,7 +16444,7 @@ block files.

-Module: +Module: devices

Layer: kernel

@@ -12516,7 +16470,7 @@ Create, delete, read, and write block device files.

-Module: +Module: devices

Layer: kernel

@@ -12542,7 +16496,7 @@ Create, delete, read, and write character device files.

-Module: +Module: devices

Layer: kernel

@@ -12568,7 +16522,7 @@ Create, delete, read, and write symbolic links in device directories.

-Module: +Module: devices

Layer: kernel

@@ -12594,7 +16548,7 @@ Mount a usbfs filesystem.

-Module: +Module: devices

Layer: kernel

@@ -12621,7 +16575,7 @@ use on device nodes (usually files in /dev).

-Module: +Module: devices

Layer: kernel

@@ -12640,14 +16594,14 @@ kernel

-Read the multiplexed input device (/dev/input). +Read the CPU identity.

-Module: +Module: devices

Layer: kernel

@@ -12673,7 +16627,7 @@ Read the framebuffer.

-Module: +Module: devices

Layer: kernel

@@ -12692,14 +16646,14 @@ kernel

-Read the multiplexed input device (/dev/input). +Read input event devices (/dev/input).

-Module: +Module: devices

Layer: kernel

@@ -12725,7 +16679,7 @@ Read the lvm comtrol device.

-Module: +Module: devices

Layer: kernel

@@ -12751,7 +16705,7 @@ Read miscellaneous devices.

-Module: +Module: devices

Layer: kernel

@@ -12777,7 +16731,7 @@ Read the mouse devices.

-Module: +Module: devices

Layer: kernel

@@ -12803,7 +16757,7 @@ Read the mtrr device.

-Module: +Module: devices

Layer: kernel

@@ -12829,7 +16783,7 @@ Read from random devices (e.g., /dev/random)

-Module: +Module: devices

Layer: kernel

@@ -12855,7 +16809,7 @@ Read raw memory devices (e.g. /dev/mem).

-Module: +Module: devices

Layer: kernel

@@ -12881,7 +16835,7 @@ Read the realtime clock (/dev/rtc).

-Module: +Module: devices

Layer: kernel

@@ -12907,7 +16861,7 @@ Read the sound devices.

-Module: +Module: devices

Layer: kernel

@@ -12933,7 +16887,7 @@ Read the sound mixer devices.

-Module: +Module: devices

Layer: kernel

@@ -12959,7 +16913,7 @@ Allow caller to read hardware state information.

-Module: +Module: devices

Layer: kernel

@@ -12985,7 +16939,7 @@ Read from pseudo random devices (e.g., /dev/urandom)

-Module: +Module: devices

Layer: kernel

@@ -13012,7 +16966,7 @@ the usbfs filesystem interface.

-Module: +Module: devices

Layer: kernel

@@ -13038,7 +16992,7 @@ Allow full relabeling (to and from) of all device nodes.

-Module: +Module: devices

Layer: kernel

@@ -13064,7 +17018,7 @@ Allow full relabeling (to and from) of directories in /dev.

-Module: +Module: devices

Layer: kernel

@@ -13090,7 +17044,7 @@ Relabel symbolic links in device directories.

-Module: +Module: devices

Layer: kernel

@@ -13116,7 +17070,7 @@ Read and write the agp devices.

-Module: +Module: devices

Layer: kernel

@@ -13142,7 +17096,7 @@ Read and write the apm bios.

-Module: +Module: devices

Layer: kernel

@@ -13161,15 +17115,15 @@ kernel

-Read and write the the cpu microcode device. This -is required to load cpu microcode. +Read and write the the CPU microcode device. This +is required to load CPU microcode.

-Module: +Module: devices

Layer: kernel

@@ -13195,7 +17149,33 @@ Read and write the dri devices.

-Module: +Module: +devices

+Layer: +kernel

+

+ +dev_rw_generic_file( + + + + + domain + + + )
+
+ +
+

+Read and write generic files in /dev. +

+
+ +
+ +
+Module: devices

Layer: kernel

@@ -13221,7 +17201,7 @@ Read and write the lvm control device.

-Module: +Module: devices

Layer: kernel

@@ -13247,7 +17227,7 @@ Read and write to the null device (/dev/null).

-Module: +Module: devices

Layer: kernel

@@ -13273,7 +17253,7 @@ Read and write the the power management device.

-Module: +Module: devices

Layer: kernel

@@ -13292,14 +17272,14 @@ kernel

-Read the realtime clock (/dev/rtc). +Read and set the realtime clock (/dev/rtc).

-Module: +Module: devices

Layer: kernel

@@ -13325,7 +17305,7 @@ Read and write the scanner device.

-Module: +Module: devices

Layer: kernel

@@ -13351,7 +17331,7 @@ Allow caller to modify hardware state information.

-Module: +Module: devices

Layer: kernel

@@ -13377,7 +17357,7 @@ Allow caller to modify usb hardware configuration files.

-Module: +Module: devices

Layer: kernel

@@ -13403,7 +17383,7 @@ Read and write to the zero device (/dev/zero).

-Module: +Module: devices

Layer: kernel

@@ -13429,7 +17409,7 @@ Read, write, and execute the zero device (/dev/zero).

-Module: +Module: devices

Layer: kernel

@@ -13455,7 +17435,7 @@ Read and execute raw memory devices (e.g. /dev/mem).

-Module: +Module: devices

Layer: kernel

@@ -13474,14 +17454,14 @@ kernel

-Search sysfs. +Search the sysfs directories.

-Module: +Module: devices

Layer: kernel

@@ -13507,7 +17487,7 @@ Search the directory containing USB hardware information.

-Module: +Module: devices

Layer: kernel

@@ -13533,7 +17513,7 @@ Setattr on all block file device nodes.

-Module: +Module: devices

Layer: kernel

@@ -13559,7 +17539,7 @@ Setattr on all character file device nodes.

-Module: +Module: devices

Layer: kernel

@@ -13585,7 +17565,33 @@ Set the attributes of the apm bios device node.

-Module: +Module: +devices

+Layer: +kernel

+

+ +dev_setattr_dev_dir( + + + + + domain + + + )
+
+ +
+

+Set the attributes of /dev directories. +

+
+ +
+ +
+Module: devices

Layer: kernel

@@ -13611,7 +17617,7 @@ Set the attributes of the framebuffer device node.

-Module: +Module: devices

Layer: kernel

@@ -13637,7 +17643,7 @@ Set the attributes of miscellaneous devices.

-Module: +Module: devices

Layer: kernel

@@ -13663,7 +17669,7 @@ Set the attributes of the mouse devices.

-Module: +Module: devices

Layer: kernel

@@ -13689,7 +17695,33 @@ Set the attributes of the the power management device.

-Module: +Module: +devices

+Layer: +kernel

+

+ +dev_setattr_printer( + + + + + domain + + + )
+
+ +
+

+Set the attributes of the printer device nodes. +

+
+ +
+ +
+Module: devices

Layer: kernel

@@ -13715,7 +17747,7 @@ Set the attributes of the scanner device.

-Module: +Module: devices

Layer: kernel

@@ -13741,7 +17773,7 @@ Set the attributes of the sound devices.

-Module: +Module: devices

Layer: kernel

@@ -13767,7 +17799,7 @@ Set the attributes of video4linux device nodes.

-Module: +Module: devices

Layer: kernel

@@ -13793,7 +17825,7 @@ Unconfined access to devices.

-Module: +Module: devices

Layer: kernel

@@ -13819,7 +17851,7 @@ Write the framebuffer.

-Module: +Module: devices

Layer: kernel

@@ -13845,7 +17877,7 @@ Write miscellaneous devices.

-Module: +Module: devices

Layer: kernel

@@ -13871,7 +17903,7 @@ Write the mtrr device.

-Module: +Module: devices

Layer: kernel

@@ -13899,7 +17931,7 @@ random device.

-Module: +Module: devices

Layer: kernel

@@ -13925,7 +17957,7 @@ Write raw memory devices (e.g. /dev/mem).

-Module: +Module: devices

Layer: kernel

@@ -13944,14 +17976,14 @@ kernel

-Read the realtime clock (/dev/rtc). +Set the realtime clock (/dev/rtc).

-Module: +Module: devices

Layer: kernel

@@ -13977,7 +18009,7 @@ Write the sound devices.

-Module: +Module: devices

Layer: kernel

@@ -14003,7 +18035,7 @@ Write the sound mixer devices.

-Module: +Module: devices

Layer: kernel

@@ -14030,7 +18062,7 @@ sets the random number generator seed.

-Module: +Module: devices

Layer: kernel

@@ -14056,7 +18088,7 @@ Write and execute raw memory devices (e.g. /dev/mem).

-Module: +Module: dmesg

Layer: admin

@@ -14073,10 +18105,16 @@ admin

)

+
+

+Execute dmesg in the dmesg domain. +

+
+
-Module: +Module: dmesg

Layer: admin

@@ -14093,10 +18131,16 @@ admin

)

+
+

+Execute dmesg in the caller domain. +

+
+
-Module: +Module: domain

Layer: system

@@ -14122,7 +18166,34 @@ Summary is missing!

-Module: +Module: +domain

+Layer: +system

+

+ +domain_dontaudit_getattr_all_sockets( + + + + + domain + + + )
+
+ +
+

+Do not audit attempts to get the attributes +of all domains sockets, for all socket types. +

+
+ +
+ +
+Module: domain

Layer: system

@@ -14139,10 +18210,17 @@ system

)

+
+

+Do not audit attempts to get the attributes +of all domains TCP sockets. +

+
+
-Module: +Module: domain

Layer: system

@@ -14159,10 +18237,17 @@ system

)

+
+

+Do not audit attempts to get the attributes +of all domains UDP sockets. +

+
+
-Module: +Module: domain

Layer: system

@@ -14182,7 +18267,7 @@ system

-Module: +Module: domain

Layer: system

@@ -14202,7 +18287,34 @@ system

-Module: +Module: +domain

+Layer: +system

+

+ +domain_dontaudit_getsession_all_domains( + + + + + domain + + + )
+
+ +
+

+Do not audit attempts to get the +session ID of all domains. +

+
+ +
+ +
+Module: domain

Layer: system

@@ -14222,7 +18334,88 @@ system

-Module: +Module: +domain

+Layer: +system

+

+ +domain_dontaudit_read_all_domains_state( + + + + + domain + + + )
+
+ +
+

+Do not audit attempts to read the process +state (/proc/pid) of all domains. +

+
+ +
+ +
+Module: +domain

+Layer: +system

+

+ +domain_dontaudit_rw_all_key_sockets( + + + + + domain + + + )
+
+ +
+

+Do not audit attempts to read or write +all domains key sockets. +

+
+ +
+ +
+Module: +domain

+Layer: +system

+

+ +domain_dontaudit_rw_all_udp_sockets( + + + + + domain + + + )
+
+ +
+

+Do not audit attempts to read or write +all domains UDP sockets. +

+
+ +
+ +
+Module: domain

Layer: system

@@ -14248,7 +18441,7 @@ Summary is missing!

-Module: +Module: domain

Layer: system

@@ -14274,7 +18467,7 @@ Summary is missing!

-Module: +Module: domain

Layer: system

@@ -14300,7 +18493,7 @@ Summary is missing!

-Module: +Module: domain

Layer: system

@@ -14326,7 +18519,34 @@ Summary is missing!

-Module: +Module: +domain

+Layer: +system

+

+ +domain_getattr_all_sockets( + + + + + domain + + + )
+
+ +
+

+Get the attributes of all domains +sockets, for all socket types. +

+
+ +
+ +
+Module: domain

Layer: system

@@ -14343,10 +18563,16 @@ system

)

+
+

+Get the session ID of all domains. +

+
+
-Module: +Module: domain

Layer: system

@@ -14366,7 +18592,7 @@ system

-Module: +Module: domain

Layer: system

@@ -14386,7 +18612,7 @@ system

-Module: +Module: domain

Layer: system

@@ -14403,10 +18629,16 @@ system

)

+
+

+Read the process state (/proc/pid) of all domains. +

+
+
-Module: +Module: domain

Layer: system

@@ -14432,7 +18664,7 @@ Summary is missing!

-Module: +Module: domain

Layer: system

@@ -14452,7 +18684,7 @@ system

-Module: +Module: domain

Layer: system

@@ -14478,7 +18710,7 @@ Summary is missing!

-Module: +Module: domain

Layer: system

@@ -14498,7 +18730,7 @@ system

-Module: +Module: domain

Layer: system

@@ -14525,7 +18757,7 @@ discriptors are widely inheritable.

-Module: +Module: domain

Layer: system

@@ -14545,7 +18777,7 @@ system

-Module: +Module: domain

Layer: system

@@ -14565,7 +18797,7 @@ system

-Module: +Module: domain

Layer: system

@@ -14585,7 +18817,7 @@ system

-Module: +Module: domain

Layer: system

@@ -14605,7 +18837,7 @@ system

-Module: +Module: domain

Layer: system

@@ -14631,7 +18863,7 @@ Summary is missing!

-Module: +Module: domain

Layer: system

@@ -14657,7 +18889,7 @@ Unconfined access to domains.

-Module: +Module: domain

Layer: system

@@ -14683,7 +18915,7 @@ Summary is missing!

-Module: +Module: domain

Layer: system

@@ -14709,7 +18941,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -14735,7 +18967,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -14761,7 +18993,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -14795,7 +19027,7 @@ Create home directories

-Module: +Module: files

Layer: system

@@ -14821,7 +19053,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -14847,7 +19079,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -14888,10 +19120,18 @@ system

)

+
+

+Create an object in the root directory, with a private +type. If no object class is specified, the +default is file. +

+
+
-Module: +Module: files

Layer: system

@@ -14917,7 +19157,53 @@ Summary is missing!

-Module: +Module: +files

+Layer: +system

+

+ +files_create_var_lib( + + + + + domain + + + + , + + + + file_type + + + + , + + + + [ + + object_class + + ] + + + )
+
+ +
+

+Create objects in the /var/lib directory +

+
+ +
+ +
+Module: files

Layer: system

@@ -14943,7 +19229,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -14969,7 +19255,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -14995,7 +19281,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -15012,10 +19298,16 @@ system

)

+
+

+Delete system configuration files in /etc. +

+
+
-Module: +Module: files

Layer: system

@@ -15041,7 +19333,223 @@ Summary is missing!

-Module: +Module: +files

+Layer: +system

+

+ +files_dontaudit_getattr_all_dirs( + + + + + domain + + + )
+
+ +
+

+Do not audit attempts to get the attributes +of all directories. +

+
+ +
+ +
+Module: +files

+Layer: +system

+

+ +files_dontaudit_getattr_all_files( + + + + + domain + + + )
+
+ +
+

+Do not audit attempts to get the attributes +of all files. +

+
+ +
+ +
+Module: +files

+Layer: +system

+

+ +files_dontaudit_getattr_all_pipes( + + + + + domain + + + )
+
+ +
+

+Do not audit attempts to get the attributes +of all named pipes. +

+
+ +
+ +
+Module: +files

+Layer: +system

+

+ +files_dontaudit_getattr_all_sockets( + + + + + domain + + + )
+
+ +
+

+Do not audit attempts to get the attributes +of all named sockets. +

+
+ +
+ +
+Module: +files

+Layer: +system

+

+ +files_dontaudit_getattr_all_symlinks( + + + + + domain + + + )
+
+ +
+

+Do not audit attempts to get the attributes +of all symbolic links. +

+
+ +
+ +
+Module: +files

+Layer: +system

+

+ +files_dontaudit_getattr_default_dir( + + + + + domain + + + )
+
+ +
+

+Do not audit attempts to get the attributes of +directories with the default file type. +

+
+ +
+ +
+Module: +files

+Layer: +system

+

+ +files_dontaudit_getattr_default_files( + + + + + domain + + + )
+
+ +
+

+Do not audit attempts to get the attributes of +files with the default file type. +

+
+ +
+ +
+Module: +files

+Layer: +system

+

+ +files_dontaudit_getattr_pid_dir( + + + + + domain + + + )
+
+ +
+

+Do not audit attempts to get the attributes +of the /var/run directory. +

+
+ +
+ +
+Module: files

Layer: system

@@ -15058,10 +19566,16 @@ system

)

+
+

+Do not audit attempts to ioctl daemon runtime data files. +

+
+
-Module: +Module: files

Layer: system

@@ -15087,7 +19601,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -15113,7 +19627,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -15139,7 +19653,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -15165,7 +19679,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -15192,7 +19706,34 @@ that have not yet been labeled.

-Module: +Module: +files

+Layer: +system

+

+ +files_dontaudit_search_locks( + + + + + domain + + + )
+
+ +
+

+Do not audit attempts to search the +locks directory (/var/lock). +

+
+ +
+ +
+Module: files

Layer: system

@@ -15218,7 +19759,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -15244,7 +19785,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -15261,10 +19802,16 @@ system

)

+
+

+Do not audit attempts to write to daemon runtime data files. +

+
+
-Module: +Module: files

Layer: system

@@ -15290,7 +19837,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -15307,10 +19854,42 @@ system

)

+
+

+Execute programs in /usr/src in the caller domain. +

+
+
-Module: +Module: +files

+Layer: +system

+

+ +files_getattr_all_dirs( + + + + + domain + + + )
+
+ +
+

+Get the attributes of all directories. +

+
+ +
+ +
+Module: files

Layer: system

@@ -15336,7 +19915,85 @@ Summary is missing!

-Module: +Module: +files

+Layer: +system

+

+ +files_getattr_all_pipes( + + + + + domain + + + )
+
+ +
+

+Get the attributes of all named pipes. +

+
+ +
+ +
+Module: +files

+Layer: +system

+

+ +files_getattr_all_sockets( + + + + + domain + + + )
+
+ +
+

+Get the attributes of all named sockets. +

+
+ +
+ +
+Module: +files

+Layer: +system

+

+ +files_getattr_all_symlinks( + + + + + domain + + + )
+
+ +
+

+Get the attributes of all symbolic links. +

+
+ +
+ +
+Module: files

Layer: system

@@ -15362,7 +20019,33 @@ Summary is missing!

-Module: +Module: +files

+Layer: +system

+

+ +files_getattr_var_lib_dir( + + + + + domain + + + )
+
+ +
+

+Get the attributes of the /var/lib directory. +

+
+ +
+ +
+Module: files

Layer: system

@@ -15388,7 +20071,33 @@ Summary is missing!

-Module: +Module: +files

+Layer: +system

+

+ +files_list_default( + + + + + domain + + + )
+
+ +
+

+List contents of directories with the default file type. +

+
+ +
+ +
+Module: files

Layer: system

@@ -15414,7 +20123,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -15440,7 +20149,34 @@ Get listing of home directories.

-Module: +Module: +files

+Layer: +system

+

+ +files_list_isid_type_dir( + + + + + domain + + + )
+
+ +
+

+List the contents of directories on new filesystems +that have not yet been labeled. +

+
+ +
+ +
+Module: files

Layer: system

@@ -15466,7 +20202,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -15492,7 +20228,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -15518,7 +20254,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -15544,7 +20280,33 @@ Summary is missing!

-Module: +Module: +files

+Layer: +system

+

+ +files_list_world_readable( + + + + + domain + + + )
+
+ +
+

+List world-readable directories. +

+
+ +
+ +
+Module: files

Layer: system

@@ -15570,7 +20332,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -15599,10 +20361,17 @@ system

)

+
+

+Manage all files on the filesystem, except +the listed exceptions. +

+
+
-Module: +Module: files

Layer: system

@@ -15628,7 +20397,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -15654,7 +20423,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -15680,7 +20449,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -15706,7 +20475,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -15732,7 +20501,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -15759,7 +20528,7 @@ on new filesystems that have not yet been labeled.

-Module: +Module: files

Layer: system

@@ -15786,7 +20555,7 @@ on new filesystems that have not yet been labeled.

-Module: +Module: files

Layer: system

@@ -15813,7 +20582,7 @@ on new filesystems that have not yet been labeled.

-Module: +Module: files

Layer: system

@@ -15840,7 +20609,7 @@ on new filesystems that have not yet been labeled.

-Module: +Module: files

Layer: system

@@ -15867,7 +20636,7 @@ on new filesystems that have not yet been labeled.

-Module: +Module: files

Layer: system

@@ -15894,7 +20663,33 @@ lost+found directories.

-Module: +Module: +files

+Layer: +system

+

+ +files_manage_mnt_dirs( + + + + + domain + + + )
+
+ +
+

+Create, read, write, and delete directories in /mnt. +

+
+ +
+ +
+Module: files

Layer: system

@@ -15920,7 +20715,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -15946,7 +20741,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -15972,7 +20767,60 @@ Summary is missing!

-Module: +Module: +files

+Layer: +system

+

+ +files_mounton_default( + + + + + domain + + + )
+
+ +
+

+Mount a filesystem on a directory with the default file type. +

+
+ +
+ +
+Module: +files

+Layer: +system

+

+ +files_mounton_isid_type_dir( + + + + + domain + + + )
+
+ +
+

+Mount a filesystem on a directory on new filesystems +that has not yet been labeled. +

+
+ +
+ +
+Module: files

Layer: system

@@ -15998,7 +20846,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -16024,7 +20872,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -16050,7 +20898,111 @@ Summary is missing!

-Module: +Module: +files

+Layer: +system

+

+ +files_read_default_files( + + + + + domain + + + )
+
+ +
+

+Read files with the default file type. +

+
+ +
+ +
+Module: +files

+Layer: +system

+

+ +files_read_default_pipes( + + + + + domain + + + )
+
+ +
+

+Read named pipes with the default file type. +

+
+ +
+ +
+Module: +files

+Layer: +system

+

+ +files_read_default_sockets( + + + + + domain + + + )
+
+ +
+

+Read sockets with the default file type. +

+
+ +
+ +
+Module: +files

+Layer: +system

+

+ +files_read_default_symlinks( + + + + + domain + + + )
+
+ +
+

+Read symbolic links with the default file type. +

+
+ +
+ +
+Module: files

Layer: system

@@ -16076,7 +21028,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -16102,7 +21054,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -16128,7 +21080,34 @@ Summary is missing!

-Module: +Module: +files

+Layer: +system

+

+ +files_read_isid_type_file( + + + + + domain + + + )
+
+ +
+

+Read files on new filesystems +that have not yet been labeled. +

+
+ +
+ +
+Module: files

Layer: system

@@ -16154,7 +21133,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -16180,7 +21159,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -16206,7 +21185,163 @@ Read files in the /var directory.

-Module: +Module: +files

+Layer: +system

+

+ +files_read_var_lib_files( + + + + + domain + + + )
+
+ +
+

+Read generic files in /var/lib +

+
+ +
+ +
+Module: +files

+Layer: +system

+

+ +files_read_var_symlink( + + + + + domain + + + )
+
+ +
+

+Read symbolic links in the /var directory. +

+
+ +
+ +
+Module: +files

+Layer: +system

+

+ +files_read_world_readable_files( + + + + + domain + + + )
+
+ +
+

+Read world-readable files. +

+
+ +
+ +
+Module: +files

+Layer: +system

+

+ +files_read_world_readable_pipes( + + + + + domain + + + )
+
+ +
+

+Read world-readable named pipes. +

+
+ +
+ +
+Module: +files

+Layer: +system

+

+ +files_read_world_readable_sockets( + + + + + domain + + + )
+
+ +
+

+Read world-readable sockets. +

+
+ +
+ +
+Module: +files

+Layer: +system

+

+ +files_read_world_readable_symlinks( + + + + + domain + + + )
+
+ +
+

+Read world-readable symbolic links. +

+
+ +
+ +
+Module: files

Layer: system

@@ -16235,10 +21370,17 @@ system

)

+
+

+Relabel all files on the filesystem, except +the listed exceptions. +

+
+
-Module: +Module: files

Layer: system

@@ -16264,7 +21406,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -16290,7 +21432,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -16316,7 +21458,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -16343,7 +21485,7 @@ that have not yet been labeled.

-Module: +Module: files

Layer: system

@@ -16370,7 +21512,7 @@ that have not yet been labeled.

-Module: +Module: files

Layer: system

@@ -16396,7 +21538,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -16422,33 +21564,7 @@ Summary is missing!

-Module: -files

-Layer: -system

-

- -files_search_generic_locks( - - - - - ? - - - )
-
- -
-

-Summary is missing! -

-
- -
- -
-Module: +Module: files

Layer: system

@@ -16474,7 +21590,33 @@ Search home directories.

-Module: +Module: +files

+Layer: +system

+

+ +files_search_locks( + + + + + ? + + + )
+
+ +
+

+Summary is missing! +

+
+ +
+ +
+Module: files

Layer: system

@@ -16500,7 +21642,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -16526,7 +21668,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -16552,7 +21694,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -16578,7 +21720,7 @@ Search the tmp directory (/tmp)

-Module: +Module: files

Layer: system

@@ -16604,7 +21746,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -16630,7 +21772,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -16647,10 +21789,42 @@ system

)

+
+

+Search the /var/lib directory. +

+
+
-Module: +Module: +files

+Layer: +system

+

+ +files_setattr_etc_dir( + + + + + domain + + + )
+
+ +
+

+Set the attributes of the /etc directories. +

+
+ +
+ +
+Module: files

Layer: system

@@ -16676,7 +21850,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -16693,10 +21867,17 @@ system

)

+
+

+Transform the type into a file, for use on a +virtual memory filesystem (tmpfs). +

+
+
-Module: +Module: files

Layer: system

@@ -16722,7 +21903,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -16748,7 +21929,7 @@ Unconfined access to files.

-Module: +Module: files

Layer: system

@@ -16774,7 +21955,7 @@ Summary is missing!

-Module: +Module: files

Layer: system

@@ -16800,7 +21981,7 @@ Summary is missing!

-Module: +Module: filesystem

Layer: kernel

@@ -16817,10 +21998,19 @@ kernel

)

+
+

+Associate the specified file type to persistent +filesystems with extended attributes. This +allows a file of this type to be created on +a filesystem such as ext3, JFS, and XFS. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -16837,10 +22027,20 @@ kernel

)

+
+

+Associate the specified file type to +filesystems which lack extended attributes +support. This allows a file of this type +to be created on a filesystem such as +FAT32, and NFS. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -16857,10 +22057,51 @@ kernel

)

+
+

+Allow the type to associate to tmpfs filesystems. +

+
+
-Module: +Module: +filesystem

+Layer: +kernel

+

+ +fs_cifs_domtrans( + + + + + domain + + + + , + + + + target_domain + + + )
+
+ +
+

+Execute a file on a CIFS or SMB filesystem +in the specified domain. +

+
+ +
+ +
+Module: filesystem

Layer: kernel

@@ -16886,7 +22127,7 @@ Summary is missing!

-Module: +Module: filesystem

Layer: kernel

@@ -16903,10 +22144,17 @@ kernel

)

+
+

+Do not audit attempts to get the attributes +all filesystems. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -16923,10 +22171,46 @@ kernel

)

+
+

+Do not audit attempts to +get the attributes of a persistent +filesystem which has extended +attributes, such as ext3, JFS, or XFS. +

+
+
-Module: +Module: +filesystem

+Layer: +kernel

+

+ +fs_dontaudit_list_tmpfs( + + + + + domain + + + )
+
+ +
+

+Do not audit attempts to list the +contents of generic tmpfs directories. +

+
+ +
+ +
+Module: filesystem

Layer: kernel

@@ -16943,10 +22227,17 @@ kernel

)

+
+

+Do not audit attempts to read or +write files on a CIFS or SMB filesystem. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -16963,10 +22254,44 @@ kernel

)

+
+

+Do not audit attempts to read or +write files on a NFS filesystem. +

+
+
-Module: +Module: +filesystem

+Layer: +kernel

+

+ +fs_exec_noxattr( + + + + + domain + + + )
+
+ +
+

+Execute files on a filesystem that does +not support extended attributes. +

+
+ +
+ +
+Module: filesystem

Layer: kernel

@@ -16983,10 +22308,18 @@ kernel

)

+
+

+Execute files on a CIFS or SMB +network filesystem, in the caller +domain. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17003,10 +22336,16 @@ kernel

)

+
+

+Execute files on a NFS filesystem. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17023,10 +22362,16 @@ kernel

)

+
+

+Get the quotas of all filesystems. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17052,7 +22397,7 @@ Summary is missing!

-Module: +Module: filesystem

Layer: kernel

@@ -17069,10 +22414,17 @@ kernel

)

+
+

+Get the attributes of all persistent +filesystems. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17089,10 +22441,17 @@ kernel

)

+
+

+Get the attributes of an automount +pseudo filesystem. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17109,10 +22468,17 @@ kernel

)

+
+

+Get the attributes of a CIFS or +SMB network filesystem. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17129,10 +22495,17 @@ kernel

)

+
+

+Get the attributes of a DOS +filesystem, such as FAT32 or NTFS. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17149,10 +22522,17 @@ kernel

)

+
+

+Get the attributes of an iso9660 +filesystem, which is usually used on CDs. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17169,10 +22549,16 @@ kernel

)

+
+

+Get the attributes of a NFS filesystem. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17189,10 +22575,17 @@ kernel

)

+
+

+Get the attributes of a NFS server +pseudo filesystem. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17209,10 +22602,16 @@ kernel

)

+
+

+Get the attributes of a RAM filesystem. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17229,10 +22628,17 @@ kernel

)

+
+

+Get the attributes of a ROM +filesystem. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17249,10 +22655,17 @@ kernel

)

+
+

+Get the attributes of a RPC pipe +filesystem. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17269,10 +22682,43 @@ kernel

)

+
+

+Get the attributes of a tmpfs +filesystem. +

+
+
-Module: +Module: +filesystem

+Layer: +kernel

+

+ +fs_getattr_tmpfs_dir( + + + + + domain + + + )
+
+ +
+

+Get the attributes of tmpfs directories. +

+
+ +
+ +
+Module: filesystem

Layer: kernel

@@ -17289,10 +22735,70 @@ kernel

)

+
+

+Get the attributes of a persistent +filesystem which has extended +attributes, such as ext3, JFS, or XFS. +

+
+
-Module: +Module: +filesystem

+Layer: +kernel

+

+ +fs_list_all( + + + + + domain + + + )
+
+ +
+

+List all directories with a filesystem type. +

+
+ +
+ +
+Module: +filesystem

+Layer: +kernel

+

+ +fs_list_tmpfs( + + + + + domain + + + )
+
+ +
+

+List the contents of generic tmpfs directories. +

+
+ +
+ +
+Module: filesystem

Layer: kernel

@@ -17309,10 +22815,18 @@ kernel

)

+
+

+Transform specified type into a filesystem +type which does not have extended attribute +support. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17329,10 +22843,17 @@ kernel

)

+
+

+Create, read, write, and delete directories +on a CIFS or SMB network filesystem. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17349,10 +22870,17 @@ kernel

)

+
+

+Create, read, write, and delete files +on a CIFS or SMB network filesystem. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17369,10 +22897,17 @@ kernel

)

+
+

+Create, read, write, and delete named pipes +on a CIFS or SMB network filesystem. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17389,10 +22924,17 @@ kernel

)

+
+

+Create, read, write, and delete named sockets +on a CIFS or SMB network filesystem. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17409,10 +22951,17 @@ kernel

)

+
+

+Create, read, write, and delete symbolic links +on a CIFS or SMB network filesystem. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17429,10 +22978,17 @@ kernel

)

+
+

+Create, read, write, and delete directories +on a NFS filesystem. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17449,10 +23005,17 @@ kernel

)

+
+

+Create, read, write, and delete files +on a NFS filesystem. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17469,10 +23032,17 @@ kernel

)

+
+

+Create, read, write, and delete named pipes +on a NFS filesystem. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17489,10 +23059,17 @@ kernel

)

+
+

+Create, read, write, and delete named sockets +on a NFS filesystem. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17509,10 +23086,17 @@ kernel

)

+
+

+Create, read, write, and delete symbolic links +on a CIFS or SMB network filesystem. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17529,10 +23113,17 @@ kernel

)

+
+

+Read and write, create and delete block nodes +on tmpfs filesystems. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17549,10 +23140,17 @@ kernel

)

+
+

+Read and write, create and delete character +nodes on tmpfs filesystems. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17569,10 +23167,17 @@ kernel

)

+
+

+Read and write, create and delete socket +files on tmpfs filesystems. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17589,10 +23194,17 @@ kernel

)

+
+

+Read and write, create and delete symbolic +links on tmpfs filesystems. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17609,10 +23221,16 @@ kernel

)

+
+

+Mount all filesystems. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17629,10 +23247,16 @@ kernel

)

+
+

+Mount an automount pseudo filesystem. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17649,10 +23273,16 @@ kernel

)

+
+

+Mount a CIFS or SMB network filesystem. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17669,10 +23299,17 @@ kernel

)

+
+

+Mount a DOS filesystem, such as +FAT32 or NTFS. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17689,10 +23326,17 @@ kernel

)

+
+

+Mount an iso9660 filesystem, which +is usually used on CDs. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17709,10 +23353,16 @@ kernel

)

+
+

+Mount a NFS filesystem. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17729,10 +23379,16 @@ kernel

)

+
+

+Mount a NFS server pseudo filesystem. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17749,10 +23405,16 @@ kernel

)

+
+

+Mount a RAM filesystem. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17769,10 +23431,16 @@ kernel

)

+
+

+Mount a ROM filesystem. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17789,10 +23457,16 @@ kernel

)

+
+

+Mount a RPC pipe filesystem. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17809,10 +23483,16 @@ kernel

)

+
+

+Mount a tmpfs filesystem. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17829,10 +23509,53 @@ kernel

)

+
+

+Mount a persistent filesystem which +has extended attributes, such as +ext3, JFS, or XFS. +

+
+
-Module: +Module: +filesystem

+Layer: +kernel

+

+ +fs_nfs_domtrans( + + + + + domain + + + + , + + + + target_domain + + + )
+
+ +
+

+Execute a file on a NFS filesystem +in the specified domain. +

+
+ +
+ +
+Module: filesystem

Layer: kernel

@@ -17849,10 +23572,16 @@ kernel

)

+
+

+Read files on a CIFS or SMB filesystem. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17869,10 +23598,17 @@ kernel

)

+
+

+Do not audit attempts to read or +write files on a CIFS or SMB filesystems. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17889,10 +23625,16 @@ kernel

)

+
+

+Read symbolic links on a CIFS or SMB filesystem. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17909,10 +23651,16 @@ kernel

)

+
+

+Read files on a NFS filesystem. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17929,10 +23677,16 @@ kernel

)

+
+

+Read symbolic links on a NFS filesystem. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17949,10 +23703,22 @@ kernel

)

+
+

+Register an interpreter for new binary +file types, using the kernel binfmt_misc +support. A common use for this is to +register a JVM as an interpreter for +Java byte code. Registered binaries +can be directly executed on a command line +without specifying the interpreter. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17969,10 +23735,16 @@ kernel

)

+
+

+Relabel block nodes on tmpfs filesystems. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -17989,10 +23761,16 @@ kernel

)

+
+

+Relabel character nodes on tmpfs filesystems. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -18009,10 +23787,17 @@ kernel

)

+
+

+Allow changing of the label of a +DOS filesystem using the context= mount option. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -18029,10 +23814,18 @@ kernel

)

+
+

+Allow changing of the label of a +filesystem with extended attributes +using the context= mount option. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -18049,10 +23842,17 @@ kernel

)

+
+

+Remount all filesystems. This +allows some mount options to be changed. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -18069,10 +23869,17 @@ kernel

)

+
+

+Remount an automount pseudo filesystem +This allows some mount options to be changed. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -18089,10 +23896,17 @@ kernel

)

+
+

+Remount a CIFS or SMB network filesystem. +This allows some mount options to be changed. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -18109,10 +23923,18 @@ kernel

)

+
+

+Remount a DOS filesystem, such as +FAT32 or NTFS. This allows +some mount options to be changed. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -18129,10 +23951,18 @@ kernel

)

+
+

+Remount an iso9660 filesystem, which +is usually used on CDs. This allows +some mount options to be changed. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -18149,10 +23979,17 @@ kernel

)

+
+

+Remount a NFS filesystem. This allows +some mount options to be changed. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -18169,10 +24006,17 @@ kernel

)

+
+

+Mount a NFS server pseudo filesystem. +This allows some mount options to be changed. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -18189,10 +24033,17 @@ kernel

)

+
+

+Remount a RAM filesystem. This allows +some mount options to be changed. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -18209,10 +24060,17 @@ kernel

)

+
+

+Remount a ROM filesystem. This allows +some mount options to be changed. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -18229,10 +24087,17 @@ kernel

)

+
+

+Remount a RPC pipe filesystem. This +allows some mount option to be changed. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -18249,10 +24114,16 @@ kernel

)

+
+

+Remount a tmpfs filesystem. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -18269,10 +24140,19 @@ kernel

)

+
+

+Remount a persistent filesystem which +has extended attributes, such as +ext3, JFS, or XFS. This allows +some mount options to be changed. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -18299,7 +24179,33 @@ mounted filesystems.

-Module: +Module: +filesystem

+Layer: +kernel

+

+ +fs_search_tmpfs( + + + + + domain + + + )
+
+ +
+

+Search tmpfs directories. +

+
+ +
+ +
+Module: filesystem

Layer: kernel

@@ -18316,10 +24222,42 @@ kernel

)

+
+

+Set the quotas of all filesystems. +

+
+
-Module: +Module: +filesystem

+Layer: +kernel

+

+ +fs_setattr_tmpfs_dir( + + + + + domain + + + )
+
+ +
+

+Set the attributes of tmpfs directories. +

+
+ +
+ +
+Module: filesystem

Layer: kernel

@@ -18336,10 +24274,16 @@ kernel

)

+
+

+Transform specified type into a filesystem type. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -18365,7 +24309,7 @@ Unconfined access to filesystems

-Module: +Module: filesystem

Layer: kernel

@@ -18382,10 +24326,16 @@ kernel

)

+
+

+Unmount all filesystems. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -18402,10 +24352,16 @@ kernel

)

+
+

+Unmount an automount pseudo filesystem. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -18422,10 +24378,16 @@ kernel

)

+
+

+Unmount a CIFS or SMB network filesystem. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -18442,10 +24404,17 @@ kernel

)

+
+

+Unmount a DOS filesystem, such as +FAT32 or NTFS. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -18462,10 +24431,17 @@ kernel

)

+
+

+Unmount an iso9660 filesystem, which +is usually used on CDs. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -18482,10 +24458,16 @@ kernel

)

+
+

+Unmount a NFS filesystem. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -18502,10 +24484,16 @@ kernel

)

+
+

+Unmount a NFS server pseudo filesystem. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -18522,10 +24510,16 @@ kernel

)

+
+

+Unmount a RAM filesystem. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -18542,10 +24536,16 @@ kernel

)

+
+

+Unmount a ROM filesystem. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -18562,10 +24562,16 @@ kernel

)

+
+

+Unmount a RPC pipe filesystem. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -18582,10 +24588,16 @@ kernel

)

+
+

+Unmount a tmpfs filesystem. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -18602,10 +24614,18 @@ kernel

)

+
+

+Unmount a persistent filesystem which +has extended attributes, such as +ext3, JFS, or XFS. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -18622,10 +24642,16 @@ kernel

)

+
+

+Read and write block nodes on tmpfs filesystems. +

+
+
-Module: +Module: filesystem

Layer: kernel

@@ -18642,10 +24668,16 @@ kernel

)

+
+

+Read and write character nodes on tmpfs filesystems. +

+
+
-Module: +Module: fstools

Layer: system

@@ -18665,7 +24697,7 @@ system

-Module: +Module: fstools

Layer: system

@@ -18685,7 +24717,7 @@ system

-Module: +Module: fstools

Layer: system

@@ -18721,7 +24753,7 @@ system

-Module: +Module: getty

Layer: system

@@ -18741,7 +24773,7 @@ system

-Module: +Module: getty

Layer: system

@@ -18761,7 +24793,7 @@ system

-Module: +Module: getty

Layer: system

@@ -18781,7 +24813,7 @@ system

-Module: +Module: getty

Layer: system

@@ -18801,7 +24833,7 @@ system

-Module: +Module: hostname

Layer: system

@@ -18818,10 +24850,16 @@ system

)

+
+

+Execute hostname in the hostname domain. +

+
+
-Module: +Module: hostname

Layer: system

@@ -18838,10 +24876,16 @@ system

)

+
+

+ Execute hostname in the caller domain. +

+
+
-Module: +Module: hostname

Layer: system

@@ -18874,10 +24918,17 @@ system

)

+
+

+Execute hostname in the hostname domain, and +allow the specified role the hostname domain. +

+
+
-Module: +Module: hotplug

Layer: system

@@ -18903,7 +24954,7 @@ Summary is missing!

-Module: +Module: hotplug

Layer: system

@@ -18929,7 +24980,7 @@ Summary is missing!

-Module: +Module: hotplug

Layer: system

@@ -18955,7 +25006,7 @@ Summary is missing!

-Module: +Module: hotplug

Layer: system

@@ -18981,7 +25032,33 @@ Summary is missing!

-Module: +Module: +hotplug

+Layer: +system

+

+ +hotplug_getattr_config_dir( + + + + + domain + + + )
+
+ +
+

+Get the attributes of the hotplug configuration directory. +

+
+ +
+ +
+Module: hotplug

Layer: system

@@ -18998,10 +25075,42 @@ system

)

+
+

+Read the configuration files for hotplug. +

+
+
-Module: +Module: +hotplug

+Layer: +system

+

+ +hotplug_search_config( + + + + + domain + + + )
+
+ +
+

+Search the hotplug configuration directory. +

+
+ +
+ +
+Module: hotplug

Layer: system

@@ -19027,7 +25136,7 @@ Summary is missing!

-Module: +Module: inetd

Layer: services

@@ -19061,7 +25170,7 @@ Define the specified domain as a inetd service.

-Module: +Module: inetd

Layer: services

@@ -19095,7 +25204,33 @@ Define the specified domain as a TCP and UDP inetd service.

-Module: +Module: +inetd

+Layer: +services

+

+ +inetd_tcp_connectto( + + + + + domain + + + )
+
+ +
+

+Connect to the inetd service using a TCP connection. +

+
+ +
+ +
+Module: inetd

Layer: services

@@ -19129,7 +25264,7 @@ Define the specified domain as a TCP inetd service.

-Module: +Module: inetd

Layer: services

@@ -19163,7 +25298,7 @@ Define the specified domain as a UDP inetd service.

-Module: +Module: init

Layer: system

@@ -19198,7 +25333,7 @@ Create a domain for long running processes

-Module: +Module: init

Layer: system

@@ -19232,7 +25367,7 @@ Create a domain which can be started by init.

-Module: +Module: init

Layer: system

@@ -19258,7 +25393,7 @@ Summary is missing!

-Module: +Module: init

Layer: system

@@ -19284,7 +25419,7 @@ Summary is missing!

-Module: +Module: init

Layer: system

@@ -19310,7 +25445,7 @@ Summary is missing!

-Module: +Module: init

Layer: system

@@ -19336,7 +25471,7 @@ Summary is missing!

-Module: +Module: init

Layer: system

@@ -19362,7 +25497,7 @@ Summary is missing!

-Module: +Module: init

Layer: system

@@ -19388,7 +25523,7 @@ Summary is missing!

-Module: +Module: init

Layer: system

@@ -19414,7 +25549,7 @@ Summary is missing!

-Module: +Module: init

Layer: system

@@ -19440,7 +25575,7 @@ Summary is missing!

-Module: +Module: init

Layer: system

@@ -19466,7 +25601,7 @@ Summary is missing!

-Module: +Module: init

Layer: system

@@ -19492,7 +25627,7 @@ Summary is missing!

-Module: +Module: init

Layer: system

@@ -19518,7 +25653,7 @@ Summary is missing!

-Module: +Module: init

Layer: system

@@ -19544,7 +25679,7 @@ Summary is missing!

-Module: +Module: init

Layer: system

@@ -19570,7 +25705,7 @@ Summary is missing!

-Module: +Module: init

Layer: system

@@ -19596,7 +25731,7 @@ Summary is missing!

-Module: +Module: init

Layer: system

@@ -19622,7 +25757,7 @@ Read the process state (/proc/pid) of the init scripts.

-Module: +Module: init

Layer: system

@@ -19658,7 +25793,7 @@ system

-Module: +Module: init

Layer: system

@@ -19684,7 +25819,7 @@ Summary is missing!

-Module: +Module: init

Layer: system

@@ -19710,7 +25845,7 @@ Read and write init script unnamed pipes.

-Module: +Module: init

Layer: system

@@ -19736,7 +25871,7 @@ Read and write init script temporary data.

-Module: +Module: init

Layer: system

@@ -19762,7 +25897,7 @@ Summary is missing!

-Module: +Module: init

Layer: system

@@ -19797,7 +25932,7 @@ which can be started by init scripts.

-Module: +Module: init

Layer: system

@@ -19823,7 +25958,7 @@ Send UDP network traffic to init scripts.

-Module: +Module: init

Layer: system

@@ -19849,7 +25984,7 @@ Summary is missing!

-Module: +Module: init

Layer: system

@@ -19875,7 +26010,7 @@ Summary is missing!

-Module: +Module: init

Layer: system

@@ -19901,7 +26036,7 @@ Summary is missing!

-Module: +Module: init

Layer: system

@@ -19927,7 +26062,7 @@ Summary is missing!

-Module: +Module: init

Layer: system

@@ -19953,7 +26088,163 @@ Summary is missing!

-Module: +Module: +ipsec

+Layer: +system

+

+ +ipsec_connectto_unix_stream_socket( + + + + + domain + + + )
+
+ +
+

+Connect to an IPSEC unix domain stream socket. +

+
+ +
+ +
+Module: +ipsec

+Layer: +system

+

+ +ipsec_domtrans( + + + + + domain + + + )
+
+ +
+

+Execute ipsec in the ipsec domain. +

+
+ +
+ +
+Module: +ipsec

+Layer: +system

+

+ +ipsec_exec_mgmt( + + + + + domain + + + )
+
+ +
+

+Execute the IPSEC management program in the caller domain. +

+
+ +
+ +
+Module: +ipsec

+Layer: +system

+

+ +ipsec_getattr_key_socket( + + + + + domain + + + )
+
+ +
+

+Get the attributes of an IPSEC key socket. +

+
+ +
+ +
+Module: +ipsec

+Layer: +system

+

+ +ipsec_manage_pid( + + + + + domain + + + )
+
+ +
+

+Create, read, write, and delete the IPSEC pid files. +

+
+ +
+ +
+Module: +ipsec

+Layer: +system

+

+ +ipsec_read_config( + + + + + domain + + + )
+
+ +
+

+Read the IPSEC configuration +

+
+ +
+ +
+Module: iptables

Layer: system

@@ -19973,7 +26264,7 @@ system

-Module: +Module: iptables

Layer: system

@@ -19993,7 +26284,7 @@ system

-Module: +Module: iptables

Layer: system

@@ -20029,7 +26320,7 @@ system

-Module: +Module: kerberos

Layer: services

@@ -20055,7 +26346,7 @@ Read the kerberos configuration file (/etc/krb5.conf).

-Module: +Module: kerberos

Layer: services

@@ -20081,7 +26372,7 @@ Use kerberos services

-Module: +Module: kernel

Layer: kernel

@@ -20107,7 +26398,7 @@ Change the level of kernel messages logged to the console.

-Module: +Module: kernel

Layer: kernel

@@ -20124,10 +26415,16 @@ kernel

)

+
+

+Allows the caller to clear the ring buffer. +

+
+
-Module: +Module: kernel

Layer: kernel

@@ -20144,10 +26441,17 @@ kernel

)

+
+

+Do not audit attempts to get the attributes of +core kernel interfaces. +

+
+
-Module: +Module: kernel

Layer: kernel

@@ -20164,10 +26468,17 @@ kernel

)

+
+

+Do not audit attempts by caller to get the attributes of kernel +message interfaces. +

+
+
-Module: +Module: kernel

Layer: kernel

@@ -20184,10 +26495,17 @@ kernel

)

+
+

+Do not audit attempts by caller to get attributes for +unlabeled block devices. +

+
+
-Module: +Module: kernel

Layer: kernel

@@ -20204,10 +26522,16 @@ kernel

)

+
+

+Do not audit attempts to read the ring buffer. +

+
+
-Module: +Module: kernel

Layer: kernel

@@ -20224,10 +26548,17 @@ kernel

)

+
+

+Do not audit attempts by caller to +read system state information in proc. +

+
+
-Module: +Module: kernel

Layer: kernel

@@ -20244,10 +26575,16 @@ kernel

)

+
+

+Do not audit attempts by caller to search sysctl network directories. +

+
+
-Module: +Module: kernel

Layer: kernel

@@ -20264,10 +26601,16 @@ kernel

)

+
+

+Do not audit attempts by caller to search the sysctl directory. +

+
+
-Module: +Module: kernel

Layer: kernel

@@ -20284,10 +26627,17 @@ kernel

)

+
+

+Do not audit attempts to use +kernel file descriptors. +

+
+
-Module: +Module: kernel

Layer: kernel

@@ -20304,10 +26654,16 @@ kernel

)

+
+

+Get information on all System V IPC objects. +

+
+
-Module: +Module: kernel

Layer: kernel

@@ -20324,10 +26680,16 @@ kernel

)

+
+

+Allows caller to get attribues of core kernel interface. +

+
+
-Module: +Module: kernel

Layer: kernel

@@ -20344,10 +26706,43 @@ kernel

)

+
+

+Allow caller to get the attributes of kernel message +interface (/proc/kmsg). +

+
+
-Module: +Module: +kernel

+Layer: +kernel

+

+ +kernel_getattr_proc( + + + + + domain + + + )
+
+ +
+

+Get the attributes of the proc filesystem. +

+
+ +
+ +
+Module: kernel

Layer: kernel

@@ -20364,10 +26759,68 @@ kernel

)

+
+

+Send a kill signal to unlabeled processes. +

+
+
-Module: +Module: +kernel

+Layer: +kernel

+

+ +kernel_list_proc( + + + + + domain + + + )
+
+ +
+

+List the contents of directories in /proc. +

+
+ +
+ +
+Module: +kernel

+Layer: +kernel

+

+ +kernel_list_unlabeled( + + + + + domain + + + )
+
+ +
+

+List unlabeled directories. +

+
+ +
+ +
+Module: kernel

Layer: kernel

@@ -20384,10 +26837,16 @@ kernel

)

+
+

+Allows caller to load kernel modules +

+
+
-Module: +Module: kernel

Layer: kernel

@@ -20404,10 +26863,16 @@ kernel

)

+
+

+Allow caller to read all sysctls. +

+
+
-Module: +Module: kernel

Layer: kernel

@@ -20424,10 +26889,16 @@ kernel

)

+
+

+Allow caller to read the device sysctls. +

+
+
-Module: +Module: kernel

Layer: kernel

@@ -20444,10 +26915,16 @@ kernel

)

+
+

+Read filesystem sysctls. +

+
+
-Module: +Module: kernel

Layer: kernel

@@ -20464,10 +26941,16 @@ kernel

)

+
+

+Read the hotplug sysctl. +

+
+
-Module: +Module: kernel

Layer: kernel

@@ -20484,10 +26967,16 @@ kernel

)

+
+

+Read IRQ sysctls. +

+
+
-Module: +Module: kernel

Layer: kernel

@@ -20504,10 +26993,16 @@ kernel

)

+
+

+Read generic kernel sysctls. +

+
+
-Module: +Module: kernel

Layer: kernel

@@ -20524,10 +27019,17 @@ kernel

)

+
+

+Allow caller to read kernel messages +using the /proc/kmsg interface. +

+
+
-Module: +Module: kernel

Layer: kernel

@@ -20544,10 +27046,16 @@ kernel

)

+
+

+Read the modprobe sysctl. +

+
+
-Module: +Module: kernel

Layer: kernel

@@ -20564,10 +27072,16 @@ kernel

)

+
+

+Allow caller to read network sysctls. +

+
+
-Module: +Module: kernel

Layer: kernel

@@ -20584,10 +27098,42 @@ kernel

)

+
+

+Allow caller to read the network state information. +

+
+
-Module: +Module: +kernel

+Layer: +kernel

+

+ +kernel_read_proc_symlinks( + + + + + domain + + + )
+
+ +
+

+Read symbolic links in /proc. +

+
+ +
+ +
+Module: kernel

Layer: kernel

@@ -20604,10 +27150,16 @@ kernel

)

+
+

+Allows caller to read the ring buffer. +

+
+
-Module: +Module: kernel

Layer: kernel

@@ -20633,7 +27185,7 @@ Summary is missing!

-Module: +Module: kernel

Layer: kernel

@@ -20650,10 +27202,16 @@ kernel

)

+
+

+Allow caller to read the state information for software raid. +

+
+
-Module: +Module: kernel

Layer: kernel

@@ -20670,10 +27228,16 @@ kernel

)

+
+

+Allows caller to read system state information in proc. +

+
+
-Module: +Module: kernel

Layer: kernel

@@ -20690,10 +27254,17 @@ kernel

)

+
+

+Allow caller to read unix domain +socket sysctls. +

+
+
-Module: +Module: kernel

Layer: kernel

@@ -20710,10 +27281,16 @@ kernel

)

+
+

+Allow caller to read virtual memory sysctls. +

+
+
-Module: +Module: kernel

Layer: kernel

@@ -20730,10 +27307,16 @@ kernel

)

+
+

+Allow caller to relabel unlabeled objects. +

+
+
-Module: +Module: kernel

Layer: kernel

@@ -20750,10 +27333,17 @@ kernel

)

+
+

+Allows the kernel to mount filesystems on +the specified directory type. +

+
+
-Module: +Module: kernel

Layer: kernel

@@ -20770,10 +27360,16 @@ kernel

)

+
+

+Read and write all sysctls. +

+
+
-Module: +Module: kernel

Layer: kernel

@@ -20790,10 +27386,16 @@ kernel

)

+
+

+Read and write device sysctls. +

+
+
-Module: +Module: kernel

Layer: kernel

@@ -20810,10 +27412,16 @@ kernel

)

+
+

+Read and write fileystem sysctls. +

+
+
-Module: +Module: kernel

Layer: kernel

@@ -20830,10 +27438,16 @@ kernel

)

+
+

+Read and write the hotplug sysctl. +

+
+
-Module: +Module: kernel

Layer: kernel

@@ -20850,10 +27464,16 @@ kernel

)

+
+

+Read and write IRQ sysctls. +

+
+
-Module: +Module: kernel

Layer: kernel

@@ -20870,10 +27490,16 @@ kernel

)

+
+

+Read and write generic kernel sysctls. +

+
+
-Module: +Module: kernel

Layer: kernel

@@ -20890,10 +27516,16 @@ kernel

)

+
+

+Read and write the modprobe sysctl. +

+
+
-Module: +Module: kernel

Layer: kernel

@@ -20910,10 +27542,42 @@ kernel

)

+
+

+Allow caller to modiry contents of sysctl network files. +

+
+
-Module: +Module: +kernel

+Layer: +kernel

+

+ +kernel_rw_pipe( + + + + + domain + + + )
+
+ +
+

+Read and write kernel unnamed pipes. +

+
+ +
+ +
+Module: kernel

Layer: kernel

@@ -20939,7 +27603,59 @@ Summary is missing!

-Module: +Module: +kernel

+Layer: +kernel

+

+ +kernel_rw_software_raid_state( + + + + + domain + + + )
+
+ +
+

+Allow caller to read and set the state information for software raid. +

+
+ +
+ +
+Module: +kernel

+Layer: +kernel

+

+ +kernel_rw_unix_dgram_socket( + + + + + domain + + + )
+
+ +
+

+Read and write kernel unix datagram sockets. +

+
+ +
+ +
+Module: kernel

Layer: kernel

@@ -20956,10 +27672,43 @@ kernel

)

+
+

+Read and write unix domain +socket sysctls. +

+
+
-Module: +Module: +kernel

+Layer: +kernel

+

+ +kernel_rw_unlabeled_dir( + + + + + domain + + + )
+
+ +
+

+Read and write unlabeled directories. +

+
+ +
+ +
+Module: kernel

Layer: kernel

@@ -20976,10 +27725,68 @@ kernel

)

+
+

+Read and write virtual memory sysctls. +

+
+
-Module: +Module: +kernel

+Layer: +kernel

+

+ +kernel_search_proc( + + + + + domain + + + )
+
+ +
+

+Search directories in /proc. +

+
+ +
+ +
+Module: +kernel

+Layer: +kernel

+

+ +kernel_sendto_unix_dgram_socket( + + + + + domain + + + )
+
+ +
+

+Send messages to kernel unix datagram sockets. +

+
+ +
+ +
+Module: kernel

Layer: kernel

@@ -20996,10 +27803,17 @@ kernel

)

+
+

+Allows the kernel to share state information with +the caller. +

+
+
-Module: +Module: kernel

Layer: kernel

@@ -21016,10 +27830,16 @@ kernel

)

+
+

+Send a SIGCHLD signal to kernel threads. +

+
+
-Module: +Module: kernel

Layer: kernel

@@ -21036,10 +27856,16 @@ kernel

)

+
+

+Send a child terminated signal to unlabeled processes. +

+
+
-Module: +Module: kernel

Layer: kernel

@@ -21056,10 +27882,16 @@ kernel

)

+
+

+Send general signals to unlabeled processes. +

+
+
-Module: +Module: kernel

Layer: kernel

@@ -21076,10 +27908,16 @@ kernel

)

+
+

+Send a null signal to unlabeled processes. +

+
+
-Module: +Module: kernel

Layer: kernel

@@ -21096,10 +27934,68 @@ kernel

)

+
+

+Send a stop signal to unlabeled processes. +

+
+
-Module: +Module: +kernel

+Layer: +kernel

+

+ +kernel_tcp_recvfrom( + + + + + domain + + + )
+
+ +
+

+Receive messages from kernel TCP sockets. +

+
+ +
+ +
+Module: +kernel

+Layer: +kernel

+

+ +kernel_udp_recvfrom( + + + + + domain + + + )
+
+ +
+

+Receive messages from kernel UDP sockets. +

+
+ +
+ +
+Module: kernel

Layer: kernel

@@ -21125,7 +28021,7 @@ Unconfined access to the kernel.

-Module: +Module: kernel

Layer: kernel

@@ -21142,10 +28038,42 @@ kernel

)

+
+

+Permits caller to use kernel file descriptors. +

+
+
-Module: +Module: +kernel

+Layer: +kernel

+

+ +kernel_use_unlabeled_blk_dev( + + + + + domain + + + )
+
+ +
+

+Read and write unlabeled block device nodes. +

+
+ +
+ +
+Module: kernel

Layer: kernel

@@ -21170,10 +28098,17 @@ kernel

)

+
+

+Allows to start userland processes +by transitioning to the specified domain. +

+
+
-Module: +Module: libraries

Layer: system

@@ -21199,7 +28134,7 @@ Execute ldconfig in the ldconfig domain.

-Module: +Module: libraries

Layer: system

@@ -21225,7 +28160,7 @@ Execute the dynamic link/loader in the caller's domain.

-Module: +Module: libraries

Layer: system

@@ -21251,7 +28186,7 @@ Execute library scripts in the caller domain.

-Module: +Module: libraries

Layer: system

@@ -21278,7 +28213,7 @@ of shared libraries with legacy support.

-Module: +Module: libraries

Layer: system

@@ -21305,7 +28240,7 @@ with legacy support.

-Module: +Module: libraries

Layer: system

@@ -21332,7 +28267,7 @@ as static libraries.

-Module: +Module: libraries

Layer: system

@@ -21374,7 +28309,7 @@ Execute ldconfig in the ldconfig domain.

-Module: +Module: libraries

Layer: system

@@ -21401,7 +28336,7 @@ of shared libraries.

-Module: +Module: libraries

Layer: system

@@ -21427,7 +28362,7 @@ Search lib directories.

-Module: +Module: libraries

Layer: system

@@ -21454,7 +28389,7 @@ of shared libraries.

-Module: +Module: libraries

Layer: system

@@ -21480,7 +28415,7 @@ Load and execute functions from shared libraries.

-Module: +Module: locallogin

Layer: system

@@ -21506,7 +28441,7 @@ Execute local logins in the local login domain.

-Module: +Module: locallogin

Layer: system

@@ -21532,7 +28467,7 @@ Send a null signal to local login processes.

-Module: +Module: locallogin

Layer: system

@@ -21558,7 +28493,7 @@ Allow processes to inherit local login file descriptors

-Module: +Module: logging

Layer: system

@@ -21584,7 +28519,7 @@ Summary is missing!

-Module: +Module: logging

Layer: system

@@ -21610,7 +28545,33 @@ Summary is missing!

-Module: +Module: +logging

+Layer: +system

+

+ +logging_domtrans_syslog( + + + + + domain + + + )
+
+ +
+

+Execute syslogd in the syslog domain. +

+
+ +
+ +
+Module: logging

Layer: system

@@ -21636,7 +28597,7 @@ Summary is missing!

-Module: +Module: logging

Layer: system

@@ -21662,7 +28623,7 @@ Execute all log files in the caller domain.

-Module: +Module: logging

Layer: system

@@ -21688,7 +28649,7 @@ Summary is missing!

-Module: +Module: logging

Layer: system

@@ -21714,7 +28675,7 @@ Summary is missing!

-Module: +Module: logging

Layer: system

@@ -21740,7 +28701,7 @@ Summary is missing!

-Module: +Module: logging

Layer: system

@@ -21766,7 +28727,7 @@ Summary is missing!

-Module: +Module: logging

Layer: system

@@ -21792,7 +28753,7 @@ Summary is missing!

-Module: +Module: logging

Layer: system

@@ -21818,7 +28779,7 @@ Read and write the generic log directory (/var/log).

-Module: +Module: logging

Layer: system

@@ -21838,7 +28799,7 @@ system

-Module: +Module: logging

Layer: system

@@ -21864,7 +28825,7 @@ Summary is missing!

-Module: +Module: logging

Layer: system

@@ -21890,7 +28851,7 @@ Summary is missing!

-Module: +Module: logrotate

Layer: admin

@@ -21916,7 +28877,7 @@ Execute logrotate in the logrotate domain.

-Module: +Module: logrotate

Layer: admin

@@ -21942,7 +28903,7 @@ Do not audit attempts to inherit logrotate file descriptors.

-Module: +Module: logrotate

Layer: admin

@@ -21968,7 +28929,7 @@ Execute logrotate in the caller domain.

-Module: +Module: logrotate

Layer: admin

@@ -22011,7 +28972,7 @@ allow the specified role the logrotate domain.

-Module: +Module: lvm

Layer: system

@@ -22031,7 +28992,7 @@ system

-Module: +Module: lvm

Layer: system

@@ -22051,7 +29012,7 @@ system

-Module: +Module: lvm

Layer: system

@@ -22087,7 +29048,33 @@ system

-Module: +Module: +miscfiles

+Layer: +system

+

+ +miscfiles_exec_tetex_data( + + + + + domain + + + )
+
+ +
+

+Execute TeX data programs in the caller domain. +

+
+ +
+ +
+Module: miscfiles

Layer: system

@@ -22104,10 +29091,16 @@ system

)

+
+

+Allow process to read legacy time localization info +

+
+
-Module: +Module: miscfiles

Layer: system

@@ -22124,10 +29117,16 @@ system

)

+
+

+Read fonts +

+
+
-Module: +Module: miscfiles

Layer: system

@@ -22144,10 +29143,16 @@ system

)

+
+

+Allow process to read localization info +

+
+
-Module: +Module: miscfiles

Layer: system

@@ -22164,10 +29169,42 @@ system

)

+
+

+Allow process to read man pages +

+
+
-Module: +Module: +miscfiles

+Layer: +system

+

+ +miscfiles_read_tetex_data( + + + + + domain + + + )
+
+ +
+

+Read TeX data +

+
+ +
+ +
+Module: miscfiles

Layer: system

@@ -22184,10 +29221,17 @@ system

)

+
+

+Allow process to create files and dirs in /var/cache/man +and /var/catman/ +

+
+
-Module: +Module: modutils

Layer: system

@@ -22207,7 +29251,7 @@ system

-Module: +Module: modutils

Layer: system

@@ -22227,7 +29271,7 @@ system

-Module: +Module: modutils

Layer: system

@@ -22247,7 +29291,7 @@ system

-Module: +Module: modutils

Layer: system

@@ -22273,7 +29317,7 @@ Summary is missing!

-Module: +Module: modutils

Layer: system

@@ -22299,7 +29343,7 @@ Summary is missing!

-Module: +Module: modutils

Layer: system

@@ -22325,7 +29369,7 @@ Summary is missing!

-Module: +Module: modutils

Layer: system

@@ -22345,7 +29389,7 @@ system

-Module: +Module: modutils

Layer: system

@@ -22365,7 +29409,7 @@ system

-Module: +Module: modutils

Layer: system

@@ -22401,7 +29445,7 @@ system

-Module: +Module: modutils

Layer: system

@@ -22437,7 +29481,7 @@ system

-Module: +Module: modutils

Layer: system

@@ -22473,7 +29517,7 @@ system

-Module: +Module: mount

Layer: system

@@ -22493,7 +29537,7 @@ system

-Module: +Module: mount

Layer: system

@@ -22529,7 +29573,7 @@ system

-Module: +Module: mount

Layer: system

@@ -22549,7 +29593,7 @@ system

-Module: +Module: mount

Layer: system

@@ -22569,7 +29613,34 @@ system

-Module: +Module: +mta

+Layer: +services

+

+ +mta_dontaudit_read_spool_symlink( + + + + + domain + + + )
+
+ +
+

+Do not audit attempts to read a symlink +in the mail spool. +

+
+ +
+ +
+Module: mta

Layer: services

@@ -22595,7 +29666,7 @@ Summary is missing!

-Module: +Module: mta

Layer: services

@@ -22621,7 +29692,7 @@ Summary is missing!

-Module: +Module: mta

Layer: services

@@ -22647,7 +29718,7 @@ Summary is missing!

-Module: +Module: mta

Layer: services

@@ -22673,7 +29744,7 @@ Summary is missing!

-Module: +Module: mta

Layer: services

@@ -22699,7 +29770,7 @@ Summary is missing!

-Module: +Module: mta

Layer: services

@@ -22719,7 +29790,7 @@ services

-Module: +Module: mta

Layer: services

@@ -22745,7 +29816,7 @@ Summary is missing!

-Module: +Module: mta

Layer: services

@@ -22771,7 +29842,7 @@ Summary is missing!

-Module: +Module: mta

Layer: services

@@ -22797,7 +29868,7 @@ Summary is missing!

-Module: +Module: mta

Layer: services

@@ -22832,7 +29903,7 @@ sendmail daemon use.

-Module: +Module: netutils

Layer: admin

@@ -22858,7 +29929,7 @@ Execute network utilities in the netutils domain.

-Module: +Module: netutils

Layer: admin

@@ -22884,7 +29955,7 @@ Execute ping in the ping domain.

-Module: +Module: netutils

Layer: admin

@@ -22910,7 +29981,7 @@ Execute traceroute in the traceroute domain.

-Module: +Module: netutils

Layer: admin

@@ -22936,7 +30007,7 @@ Execute network utilities in the caller domain.

-Module: +Module: netutils

Layer: admin

@@ -22962,7 +30033,7 @@ Execute ping in the caller domain.

-Module: +Module: netutils

Layer: admin

@@ -22988,7 +30059,7 @@ Execute traceroute in the caller domain.

-Module: +Module: netutils

Layer: admin

@@ -23031,7 +30102,7 @@ allow the specified role the netutils domain.

-Module: +Module: netutils

Layer: admin

@@ -23074,7 +30145,7 @@ allow the specified role the ping domain.

-Module: +Module: netutils

Layer: admin

@@ -23117,7 +30188,7 @@ allow the specified role the traceroute domain.

-Module: +Module: nis

Layer: services

@@ -23143,7 +30214,7 @@ Send UDP network traffic to NIS clients.

-Module: +Module: nis

Layer: services

@@ -23169,7 +30240,7 @@ Send UDP network traffic to NIS clients.

-Module: +Module: nis

Layer: services

@@ -23195,7 +30266,366 @@ Use the ypbind service to access NIS services.

-Module: +Module: +nscd

+Layer: +services

+

+ +nscd_domtrans( + + + + + domain + + + )
+
+ +
+

+Execute NSCD in the nscd domain. +

+
+ +
+ +
+Module: +nscd

+Layer: +services

+

+ +nscd_read_pid( + + + + + domain + + + )
+
+ +
+

+Read NSCD pid file. +

+
+ +
+ +
+Module: +nscd

+Layer: +services

+

+ +nscd_unconfined( + + + + + domain + + + )
+
+ +
+

+Unconfined access to NSCD services. +

+
+ +
+ +
+Module: +nscd

+Layer: +services

+

+ +nscd_use_shared_mem( + + + + + domain + + + )
+
+ +
+

+Use NSCD services by mapping the database from +an inherited NSCD file descriptor. +

+
+ +
+ +
+Module: +nscd

+Layer: +services

+

+ +nscd_use_socket( + + + + + domain + + + )
+
+ +
+

+Use NSCD services by connecting using +a unix stream socket. +

+
+ +
+ +
+Module: +pcmcia

+Layer: +system

+

+ +pcmcia_domtrans_cardctl( + + + + + domain + + + )
+
+ +
+

+Execute cardctl in the cardmgr domain. +

+
+ +
+ +
+Module: +pcmcia

+Layer: +system

+

+ +pcmcia_domtrans_cardmgr( + + + + + domain + + + )
+
+ +
+

+Execute cardmgr in the cardmgr domain. +

+
+ +
+ +
+Module: +pcmcia

+Layer: +system

+

+ +pcmcia_manage_pid( + + + + + domain + + + )
+
+ +
+

+Create, read, write, and delete +cardmgr pid files. +

+
+ +
+ +
+Module: +pcmcia

+Layer: +system

+

+ +pcmcia_manage_runtime_chr( + + + + + domain + + + )
+
+ +
+

+Create, read, write, and delete +cardmgr runtime character nodes. +

+
+ +
+ +
+Module: +pcmcia

+Layer: +system

+

+ +pcmcia_read_pid( + + + + + domain + + + )
+
+ +
+

+Read cardmgr pid files. +

+
+ +
+ +
+Module: +pcmcia

+Layer: +system

+

+ +pcmcia_run_cardctl( + + + + + domain + + + + , + + + + role + + + + , + + + + terminal + + + )
+
+ +
+

+Execute cardmgr in the cardctl domain, and +allow the specified role the cardmgr domain. +

+
+ +
+ +
+Module: +raid

+Layer: +system

+

+ +raid_domtrans_mdadm( + + + + + domain + + + )
+
+ +
+

+Execute software raid tools in the mdadm domain. +

+
+ +
+ +
+Module: +raid

+Layer: +system

+

+ +raid_manage_mdadm_pid( + + + + + domain + + + )
+
+ +
+

+Create, read, write, and delete the mdadm pid files. +

+
+ +
+ +
+Module: remotelogin

Layer: services

@@ -23215,7 +30645,7 @@ services

-Module: +Module: rpm

Layer: admin

@@ -23241,7 +30671,7 @@ Execute rpm programs in the rpm domain.

-Module: +Module: rpm

Layer: admin

@@ -23267,7 +30697,33 @@ Create, read, write, and delete the RPM package database.

-Module: +Module: +rpm

+Layer: +admin

+

+ +rpm_manage_log( + + + + + domain + + + )
+
+ +
+

+Create, read, write, and delete the RPM log. +

+
+ +
+ +
+Module: rpm

Layer: admin

@@ -23293,7 +30749,7 @@ Read the RPM package database.

-Module: +Module: rpm

Layer: admin

@@ -23312,14 +30768,14 @@ admin

-Read from a RPM pipe. +Read from an unnamed RPM pipe.

-Module: +Module: rpm

Layer: admin

@@ -23361,7 +30817,33 @@ Execute RPM programs in the RPM domain.

-Module: +Module: +rpm

+Layer: +admin

+

+ +rpm_rw_pipe( + + + + + domain + + + )
+
+ +
+

+Read and write an unnamed RPM pipe. +

+
+ +
+ +
+Module: rpm

Layer: admin

@@ -23387,7 +30869,33 @@ Inherit and use file descriptors from RPM.

-Module: +Module: +rpm

+Layer: +admin

+

+ +rpm_use_script_fd( + + + + + domain + + + )
+
+ +
+

+Inherit and use file descriptors from RPM scripts. +

+
+ +
+ +
+Module: selinux

Layer: kernel

@@ -23404,10 +30912,16 @@ kernel

)

+
+

+Allows caller to compute an access vector. +

+
+
-Module: +Module: selinux

Layer: kernel

@@ -23424,10 +30938,16 @@ kernel

)

+
+

+ +

+
+
-Module: +Module: selinux

Layer: kernel

@@ -23444,10 +30964,16 @@ kernel

)

+
+

+ +

+
+
-Module: +Module: selinux

Layer: kernel

@@ -23464,10 +30990,42 @@ kernel

)

+
+

+Allows caller to compute possible contexts for a user. +

+
+
-Module: +Module: +selinux

+Layer: +kernel

+

+ +selinux_dontaudit_search_fs( + + + + + domain + + + )
+
+ +
+

+Do not audit attempts to search selinuxfs. +

+
+ +
+ +
+Module: selinux

Layer: kernel

@@ -23484,10 +31042,17 @@ kernel

)

+
+

+Allows the caller to get the mode of policy enforcement +(enforcing or permissive mode). +

+
+
-Module: +Module: selinux

Layer: kernel

@@ -23504,10 +31069,16 @@ kernel

)

+
+

+Gets the caller the mountpoint of the selinuxfs filesystem. +

+
+
-Module: +Module: selinux

Layer: kernel

@@ -23524,10 +31095,16 @@ kernel

)

+
+

+Allow caller to load the policy into the kernel. +

+
+
-Module: +Module: selinux

Layer: kernel

@@ -23556,10 +31133,17 @@ kernel

)

+
+

+Allow caller to set the state of Booleans to +enable or disable conditional portions of the policy. +

+
+
-Module: +Module: selinux

Layer: kernel

@@ -23576,10 +31160,17 @@ kernel

)

+
+

+Allow caller to set the mode of policy enforcement +(enforcing or permissive mode). +

+
+
-Module: +Module: selinux

Layer: kernel

@@ -23596,10 +31187,16 @@ kernel

)

+
+

+Allow caller to set selinux security parameters. +

+
+
-Module: +Module: selinux

Layer: kernel

@@ -23616,10 +31213,16 @@ kernel

)

+
+

+Unconfined access to the SELinux security server. +

+
+
-Module: +Module: selinux

Layer: kernel

@@ -23636,10 +31239,16 @@ kernel

)

+
+

+Allows caller to validate security contexts. +

+
+
-Module: +Module: sendmail

Layer: services

@@ -23659,7 +31268,7 @@ services

-Module: +Module: selinuxutil

Layer: system

@@ -23685,7 +31294,7 @@ Summary is missing!

-Module: +Module: selinuxutil

Layer: system

@@ -23705,7 +31314,7 @@ system

-Module: +Module: selinuxutil

Layer: system

@@ -23725,7 +31334,7 @@ system

-Module: +Module: selinuxutil

Layer: system

@@ -23745,7 +31354,7 @@ system

-Module: +Module: selinuxutil

Layer: system

@@ -23765,7 +31374,7 @@ system

-Module: +Module: selinuxutil

Layer: system

@@ -23785,7 +31394,7 @@ system

-Module: +Module: selinuxutil

Layer: system

@@ -23805,7 +31414,34 @@ system

-Module: +Module: +selinuxutil

+Layer: +system

+

+ +seutil_dontaudit_search_config( + + + + + domain + + + )
+
+ +
+

+Do not audit attempts to search the SELinux +configuration directory (/etc/selinux). +

+
+ +
+ +
+Module: selinuxutil

Layer: system

@@ -23825,7 +31461,7 @@ system

-Module: +Module: selinuxutil

Layer: system

@@ -23851,7 +31487,7 @@ Summary is missing!

-Module: +Module: selinuxutil

Layer: system

@@ -23877,7 +31513,7 @@ Summary is missing!

-Module: +Module: selinuxutil

Layer: system

@@ -23903,7 +31539,7 @@ Summary is missing!

-Module: +Module: selinuxutil

Layer: system

@@ -23929,7 +31565,7 @@ Summary is missing!

-Module: +Module: selinuxutil

Layer: system

@@ -23955,7 +31591,7 @@ Summary is missing!

-Module: +Module: selinuxutil

Layer: system

@@ -23981,7 +31617,7 @@ Summary is missing!

-Module: +Module: selinuxutil

Layer: system

@@ -24007,7 +31643,7 @@ Summary is missing!

-Module: +Module: selinuxutil

Layer: system

@@ -24033,7 +31669,7 @@ Summary is missing!

-Module: +Module: selinuxutil

Layer: system

@@ -24059,7 +31695,7 @@ Summary is missing!

-Module: +Module: selinuxutil

Layer: system

@@ -24085,7 +31721,7 @@ Summary is missing!

-Module: +Module: selinuxutil

Layer: system

@@ -24111,7 +31747,7 @@ Summary is missing!

-Module: +Module: selinuxutil

Layer: system

@@ -24137,7 +31773,7 @@ Summary is missing!

-Module: +Module: selinuxutil

Layer: system

@@ -24163,7 +31799,7 @@ Summary is missing!

-Module: +Module: selinuxutil

Layer: system

@@ -24183,7 +31819,7 @@ system

-Module: +Module: selinuxutil

Layer: system

@@ -24219,7 +31855,7 @@ system

-Module: +Module: selinuxutil

Layer: system

@@ -24255,7 +31891,7 @@ system

-Module: +Module: selinuxutil

Layer: system

@@ -24291,7 +31927,7 @@ system

-Module: +Module: selinuxutil

Layer: system

@@ -24327,7 +31963,7 @@ system

-Module: +Module: selinuxutil

Layer: system

@@ -24363,7 +31999,7 @@ system

-Module: +Module: selinuxutil

Layer: system

@@ -24399,7 +32035,7 @@ system

-Module: +Module: selinuxutil

Layer: system

@@ -24425,7 +32061,7 @@ Search the policy directory with default_context files.

-Module: +Module: selinuxutil

Layer: system

@@ -24451,7 +32087,7 @@ Summary is missing!

-Module: +Module: selinuxutil

Layer: system

@@ -24477,7 +32113,7 @@ Summary is missing!

-Module: +Module: selinuxutil

Layer: system

@@ -24503,7 +32139,7 @@ Summary is missing!

-Module: +Module: ssh

Layer: services

@@ -24527,7 +32163,7 @@ services

-Module: +Module: storage

Layer: kernel

@@ -24553,7 +32189,33 @@ Create block devices in /dev with the fixed disk type.

-Module: +Module: +storage

+Layer: +kernel

+

+ +storage_create_fixed_disk_tmpfs( + + + + + domain + + + )
+
+ +
+

+Create fixed disk device nodes on a tmpfs filesystem. +

+
+ +
+ +
+Module: storage

Layer: kernel

@@ -24580,7 +32242,7 @@ the attributes of fixed disk device nodes.

-Module: +Module: storage

Layer: kernel

@@ -24607,7 +32269,7 @@ the attributes of removable devices device nodes.

-Module: +Module: storage

Layer: kernel

@@ -24634,7 +32296,7 @@ the attributes of fixed disk device nodes.

-Module: +Module: storage

Layer: kernel

@@ -24661,7 +32323,7 @@ the attributes of removable devices device nodes.

-Module: +Module: storage

Layer: kernel

@@ -24688,7 +32350,7 @@ device nodes.

-Module: +Module: storage

Layer: kernel

@@ -24715,7 +32377,7 @@ devices device nodes.

-Module: +Module: storage

Layer: kernel

@@ -24742,7 +32404,7 @@ the generic SCSI interface device nodes.

-Module: +Module: storage

Layer: kernel

@@ -24769,7 +32431,7 @@ for the SCSI generic inerface.

-Module: +Module: storage

Layer: kernel

@@ -24796,7 +32458,7 @@ of device nodes of tape devices.

-Module: +Module: storage

Layer: kernel

@@ -24822,7 +32484,7 @@ Create, read, write, and delete fixed disk device nodes.

-Module: +Module: storage

Layer: kernel

@@ -24851,7 +32513,7 @@ should only be used by trusted domains.

-Module: +Module: storage

Layer: kernel

@@ -24880,7 +32542,7 @@ should only be used by trusted domains.

-Module: +Module: storage

Layer: kernel

@@ -24910,7 +32572,7 @@ should only be used by trusted domains.

-Module: +Module: storage

Layer: kernel

@@ -24939,7 +32601,7 @@ should only be used by trusted domains.

-Module: +Module: storage

Layer: kernel

@@ -24968,7 +32630,7 @@ should only be used by trusted domains.

-Module: +Module: storage

Layer: kernel

@@ -24998,7 +32660,7 @@ should only be used by trusted domains.

-Module: +Module: storage

Layer: kernel

@@ -25028,7 +32690,7 @@ should only be used by trusted domains.

-Module: +Module: storage

Layer: kernel

@@ -25055,7 +32717,7 @@ a tape device.

-Module: +Module: storage

Layer: kernel

@@ -25081,7 +32743,7 @@ Relabel fixed disk device nodes.

-Module: +Module: storage

Layer: kernel

@@ -25108,7 +32770,7 @@ for the SCSI generic inerface.

-Module: +Module: storage

Layer: kernel

@@ -25135,7 +32797,7 @@ device nodes.

-Module: +Module: storage

Layer: kernel

@@ -25162,7 +32824,7 @@ devices device nodes.

-Module: +Module: storage

Layer: kernel

@@ -25189,7 +32851,7 @@ the generic SCSI interface device nodes.

-Module: +Module: storage

Layer: kernel

@@ -25216,7 +32878,7 @@ of device nodes of tape devices.

-Module: +Module: storage

Layer: kernel

@@ -25242,7 +32904,7 @@ Enable a fixed disk device as swap space

-Module: +Module: storage

Layer: kernel

@@ -25268,7 +32930,7 @@ Unconfined access to storage devices.

-Module: +Module: storage

Layer: kernel

@@ -25298,7 +32960,7 @@ should only be used by trusted domains.

-Module: +Module: storage

Layer: kernel

@@ -25325,7 +32987,7 @@ a tape device.

-Module: +Module: sysnetwork

Layer: system

@@ -25345,7 +33007,7 @@ system

-Module: +Module: sysnetwork

Layer: system

@@ -25365,7 +33027,7 @@ system

-Module: +Module: sysnetwork

Layer: system

@@ -25391,7 +33053,33 @@ Send a kill signal to the dhcp client.

-Module: +Module: +sysnetwork

+Layer: +system

+

+ +sysnet_manage_config( + + + + + domain + + + )
+
+ +
+

+Create, read, write, and delete network config files. +

+
+ +
+ +
+Module: sysnetwork

Layer: system

@@ -25417,7 +33105,7 @@ Allow network init to read network config files.

-Module: +Module: sysnetwork

Layer: system

@@ -25443,7 +33131,7 @@ Read the dhcp client pid file.

-Module: +Module: sysnetwork

Layer: system

@@ -25469,7 +33157,7 @@ Read dhcp client state files.

-Module: +Module: sysnetwork

Layer: system

@@ -25505,7 +33193,7 @@ system

-Module: +Module: sysnetwork

Layer: system

@@ -25531,7 +33219,7 @@ Read and write dhcp configuration files.

-Module: +Module: sysnetwork

Layer: system

@@ -25557,7 +33245,7 @@ Send a SIGCHLD signal to the dhcp client.

-Module: +Module: sysnetwork

Layer: system

@@ -25583,7 +33271,7 @@ Send a generic signal to the dhcp client.

-Module: +Module: sysnetwork

Layer: system

@@ -25609,7 +33297,7 @@ Send a null signal to the dhcp client.

-Module: +Module: sysnetwork

Layer: system

@@ -25635,7 +33323,7 @@ Send a SIGSTOP signal to the dhcp client.

-Module: +Module: terminal

Layer: kernel

@@ -25663,7 +33351,27 @@ kernel

-Module: +Module: +terminal

+Layer: +kernel

+

+ +term_dontaudit_getattr_all_user_ptys( + + + + + domain + + + )
+
+ +
+ +
+Module: terminal

Layer: kernel

@@ -25683,7 +33391,27 @@ kernel

-Module: +Module: +terminal

+Layer: +kernel

+

+ +term_dontaudit_getattr_unallocated_ttys( + + + + + domain + + + )
+
+ +
+ +
+Module: terminal

Layer: kernel

@@ -25703,7 +33431,7 @@ kernel

-Module: +Module: terminal

Layer: kernel

@@ -25723,7 +33451,7 @@ kernel

-Module: +Module: terminal

Layer: kernel

@@ -25743,7 +33471,7 @@ kernel

-Module: +Module: terminal

Layer: kernel

@@ -25763,7 +33491,7 @@ kernel

-Module: +Module: terminal

Layer: kernel

@@ -25783,7 +33511,7 @@ kernel

-Module: +Module: terminal

Layer: kernel

@@ -25803,7 +33531,7 @@ kernel

-Module: +Module: terminal

Layer: kernel

@@ -25823,7 +33551,7 @@ kernel

-Module: +Module: terminal

Layer: kernel

@@ -25843,7 +33571,7 @@ kernel

-Module: +Module: terminal

Layer: kernel

@@ -25863,7 +33591,7 @@ kernel

-Module: +Module: terminal

Layer: kernel

@@ -25883,7 +33611,7 @@ kernel

-Module: +Module: terminal

Layer: kernel

@@ -25903,7 +33631,7 @@ kernel

-Module: +Module: terminal

Layer: kernel

@@ -25923,7 +33651,7 @@ kernel

-Module: +Module: terminal

Layer: kernel

@@ -25943,7 +33671,7 @@ kernel

-Module: +Module: terminal

Layer: kernel

@@ -25963,7 +33691,7 @@ kernel

-Module: +Module: terminal

Layer: kernel

@@ -25983,7 +33711,7 @@ kernel

-Module: +Module: terminal

Layer: kernel

@@ -26003,7 +33731,33 @@ kernel

-Module: +Module: +terminal

+Layer: +kernel

+

+ +term_relabelto_all_user_ptys( + + + + + domain + + + )
+
+ +
+

+Relabel to all user ptys. +

+
+ +
+ +
+Module: terminal

Layer: kernel

@@ -26023,7 +33777,34 @@ kernel

-Module: +Module: +terminal

+Layer: +kernel

+

+ +term_setattr_all_user_ptys( + + + + + domain + + + )
+
+ +
+

+Set the attributes of all user +pty device nodes. +

+
+ +
+ +
+Module: terminal

Layer: kernel

@@ -26043,7 +33824,7 @@ kernel

-Module: +Module: terminal

Layer: kernel

@@ -26063,7 +33844,7 @@ kernel

-Module: +Module: terminal

Layer: kernel

@@ -26083,7 +33864,7 @@ kernel

-Module: +Module: terminal

Layer: kernel

@@ -26103,7 +33884,7 @@ kernel

-Module: +Module: terminal

Layer: kernel

@@ -26123,7 +33904,7 @@ kernel

-Module: +Module: terminal

Layer: kernel

@@ -26143,7 +33924,7 @@ kernel

-Module: +Module: terminal

Layer: kernel

@@ -26163,7 +33944,7 @@ kernel

-Module: +Module: terminal

Layer: kernel

@@ -26183,7 +33964,7 @@ kernel

-Module: +Module: terminal

Layer: kernel

@@ -26203,7 +33984,7 @@ kernel

-Module: +Module: terminal

Layer: kernel

@@ -26223,7 +34004,7 @@ kernel

-Module: +Module: terminal

Layer: kernel

@@ -26243,7 +34024,7 @@ kernel

-Module: +Module: terminal

Layer: kernel

@@ -26271,7 +34052,7 @@ kernel

-Module: +Module: terminal

Layer: kernel

@@ -26291,7 +34072,7 @@ kernel

-Module: +Module: terminal

Layer: kernel

@@ -26311,7 +34092,7 @@ kernel

-Module: +Module: terminal

Layer: kernel

@@ -26331,7 +34112,7 @@ kernel

-Module: +Module: udev

Layer: system

@@ -26348,10 +34129,43 @@ system

)

+
+

+Execute udev in the udev domain. +

+
+
-Module: +Module: +udev

+Layer: +system

+

+ +udev_donaudit_rw_unix_dgram_socket( + + + + + domain + + + )
+
+ +
+

+Do not audit attempts to read or write +to a udev unix datagram socket. +

+
+ +
+ +
+Module: udev

Layer: system

@@ -26368,10 +34182,16 @@ system

)

+
+

+Allow process to read list of devices. +

+
+
-Module: +Module: udev

Layer: system

@@ -26388,16 +34208,22 @@ system

)

+
+

+Allow process to modify list of devices. +

+
+
-Module: +Module: unconfined

Layer: system

-unconfined_domtrans_shell( +unconfined_domtrans( @@ -26410,14 +34236,41 @@ system

-Transition to the unconfined domain by executing a shell. +Transition to the unconfined domain.

-Module: +Module: +unconfined

+Layer: +system

+

+ +unconfined_dontaudit_rw_tcp_socket( + + + + + domain + + + )
+
+ +
+

+Do not audit attempts to read or write +unconfined domain tcp sockets. +

+
+ +
+ +
+Module: unconfined

Layer: system

@@ -26443,7 +34296,43 @@ Add the unconfined domain to the specified role.

-Module: +Module: +unconfined

+Layer: +system

+

+ +unconfined_run( + + + + + domain + + + + , + + + + role + + + + , + + + + terminal + + + )
+
+ +
+ +
+Module: unconfined

Layer: system

@@ -26469,7 +34358,33 @@ Read and write unconfined domain unnamed pipes.

-Module: +Module: +unconfined

+Layer: +system

+

+ +unconfined_shell_domtrans( + + + + + domain + + + )
+
+ +
+

+Transition to the unconfined domain by executing a shell. +

+
+ +
+ +
+Module: unconfined

Layer: system

@@ -26495,7 +34410,7 @@ Send a SIGCHLD signal to the unconfined domain.

-Module: +Module: unconfined

Layer: system

@@ -26521,7 +34436,87 @@ Inherit file descriptors from the unconfined domain.

-Module: +Module: +userdomain

+Layer: +system

+

+ +userdom_dontaudit_search_all_users_home( + + + + + domain + + + )
+
+ +
+

+Do not audit attempts to search all users home directories. +

+
+ +
+ +
+Module: +userdomain

+Layer: +system

+

+ +userdom_dontaudit_search_staff_home_dir( + + + + + domain + + + )
+
+ +
+

+Do not audit attempts to search the staff +users home directory. +

+
+ +
+ +
+Module: +userdomain

+Layer: +system

+

+ +userdom_dontaudit_search_sysadm_home_dir( + + + + + domain + + + )
+
+ +
+

+Do not audit attempts to search the sysadm +users home directory. +

+
+ +
+ +
+Module: userdomain

Layer: system

@@ -26540,14 +34535,40 @@ system

-Do not audit attempts to use admin ttys and ptys. +Do not audit attempts to use sysadm ttys and ptys.

-Module: +Module: +userdomain

+Layer: +system

+

+ +userdom_dontaudit_use_sysadm_tty( + + + + + domain + + + )
+
+ +
+

+Do not audit attempts to use sysadm ttys. +

+
+ +
+ +
+Module: userdomain

Layer: system

@@ -26574,7 +34595,7 @@ file descriptors from all user domains.

-Module: +Module: userdomain

Layer: system

@@ -26601,7 +34622,7 @@ user ttys.

-Module: +Module: userdomain

Layer: system

@@ -26627,7 +34648,7 @@ Read all files in all users home directories.

-Module: +Module: userdomain

Layer: system

@@ -26653,7 +34674,7 @@ Read files in the staff users home directory.

-Module: +Module: userdomain

Layer: system

@@ -26679,7 +34700,7 @@ Read files in the sysadm users home directory.

-Module: +Module: userdomain

Layer: system

@@ -26705,7 +34726,7 @@ Read and write sysadm user unnamed pipes.

-Module: +Module: userdomain

Layer: system

@@ -26731,7 +34752,59 @@ Search all users home directories.

-Module: +Module: +userdomain

+Layer: +system

+

+ +userdom_search_staff_home_dir( + + + + + domain + + + )
+
+ +
+

+Search the staff users home directory. +

+
+ +
+ +
+Module: +userdomain

+Layer: +system

+

+ +userdom_search_sysadm_home_dir( + + + + + domain + + + )
+
+ +
+

+Search the sysadm users home directory. +

+
+ +
+ +
+Module: userdomain

Layer: system

@@ -26757,7 +34830,7 @@ Execute a shell in the sysadm domain.

-Module: +Module: userdomain

Layer: system

@@ -26783,7 +34856,7 @@ Send general signals to all user domains.

-Module: +Module: userdomain

Layer: system

@@ -26809,7 +34882,7 @@ Send general signals to unprivileged user domains.

-Module: +Module: userdomain

Layer: system

@@ -26837,7 +34910,7 @@ caller to use setexeccon().

-Module: +Module: userdomain

Layer: system

@@ -26865,7 +34938,7 @@ caller to use setexeccon().

-Module: +Module: userdomain

Layer: system

@@ -26891,7 +34964,7 @@ Unconfined access to user domains.

-Module: +Module: userdomain

Layer: system

@@ -26917,7 +34990,7 @@ Inherit the file descriptors from all user domains

-Module: +Module: userdomain

Layer: system

@@ -26943,7 +35016,7 @@ Inherit and use sysadm file descriptors

-Module: +Module: userdomain

Layer: system

@@ -26969,7 +35042,7 @@ Read and write sysadm ptys.

-Module: +Module: userdomain

Layer: system

@@ -26995,7 +35068,7 @@ Read and write sysadm ttys and ptys.

-Module: +Module: userdomain

Layer: system

@@ -27021,7 +35094,7 @@ Read and write sysadm ttys.

-Module: +Module: userdomain

Layer: system

@@ -27047,7 +35120,7 @@ Inherit the file descriptors from unprivileged user domains.

-Module: +Module: userdomain

Layer: system

@@ -27073,7 +35146,7 @@ Write all unprivileged users files in /tmp

-Module: +Module: usermanage

Layer: admin

@@ -27093,7 +35166,7 @@ admin

-Module: +Module: usermanage

Layer: admin

@@ -27113,7 +35186,7 @@ admin

-Module: +Module: usermanage

Layer: admin

@@ -27133,7 +35206,7 @@ admin

-Module: +Module: usermanage

Layer: admin

@@ -27153,7 +35226,7 @@ admin

-Module: +Module: usermanage

Layer: admin

@@ -27179,7 +35252,7 @@ Read the crack database.

-Module: +Module: usermanage

Layer: admin

@@ -27215,7 +35288,7 @@ admin

-Module: +Module: usermanage

Layer: admin

@@ -27251,7 +35324,7 @@ admin

-Module: +Module: usermanage

Layer: admin

@@ -27287,7 +35360,7 @@ admin

-Module: +Module: usermanage

Layer: admin

diff --git a/www/api-docs/kernel.html b/www/api-docs/kernel.html index bac7cf25..6ede3e3f 100644 --- a/www/api-docs/kernel.html +++ b/www/api-docs/kernel.html @@ -64,15 +64,26 @@


- * Interface Index + * Global Booleans 

- * Template Index + * Global Tunables  +


+ * Layer Index +

+ * Interface Index +

+ * Template Index

Layer: kernel

+

+Policy for kernel threads, proc filesystem,and unlabeled processes and objects. +


+ +
Module:Description:

Policy for NIS (YP) servers and clients

+ + nscd

Name service cache daemon

remotelogin
diff --git a/www/api-docs/kernel_bootloader.html b/www/api-docs/kernel_bootloader.html index 1eb1921e..d9fd8531 100644 --- a/www/api-docs/kernel_bootloader.html +++ b/www/api-docs/kernel_bootloader.html @@ -64,9 +64,15 @@

- * Interface Index + * Global Booleans 

- * Template Index + * Global Tunables  +


+ * Layer Index +

+ * Interface Index +

+ * Template Index

@@ -74,8 +80,6 @@

Layer: kernel

Module: bootloader

- -

Description:

Policy for the kernel modules, kernel image, and bootloader.

@@ -85,6 +89,7 @@

Interfaces:

+
@@ -102,12 +107,12 @@
- -
Description
+
Summary

Install a kernel into the /boot directory.

+
Parameters
Module:Description:
@@ -126,6 +131,7 @@ No +
@@ -143,12 +149,12 @@ No
- -
Description
+
Summary

Install a system.map into the /boot directory.

+
Parameters
Parameter:Description:Optional:
@@ -167,6 +173,7 @@ No +
@@ -208,6 +215,7 @@ No
+
@@ -225,13 +233,13 @@ No
- -
Description
+
Summary

Read and write the bootloader temporary data in /tmp.

+
Parameters
Parameter:Description:Optional:
@@ -250,6 +258,7 @@ No +
@@ -267,12 +276,12 @@ No
- -
Description
+
Summary

Delete a kernel from /boot.

+
Parameters
Parameter:Description:Optional:
@@ -291,6 +300,7 @@ No +
@@ -308,12 +318,12 @@ No
- -
Description
+
Summary

Delete a system.map in the /boot directory.

+
Parameters
Parameter:Description:Optional:
@@ -332,6 +342,7 @@ No +
@@ -349,12 +360,12 @@ No
- -
Description
+
Summary

Execute bootloader in the bootloader domain.

+
Parameters
Parameter:Description:Optional:
@@ -373,6 +384,7 @@ No +
@@ -390,12 +402,12 @@ No
- -
Description
+
Summary

Do not audit attempts to search the /boot directory.

+
Parameters
Parameter:Description:Optional:
@@ -414,6 +426,49 @@ No + +
+ + +
+ +bootloader_getattr_kernel_modules( + + + + + domain + + + )
+
+
+ +
Summary
+

+Get the attributes of kernel module files. +

+ + +
Parameters
+
Parameter:Description:Optional:
+ + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ +
@@ -431,12 +486,12 @@ No
- -
Description
+
Summary

List the contents of the kernel module directories.

+
Parameters
@@ -455,6 +510,7 @@ No +
@@ -472,13 +528,13 @@ No
- -
Description
+
Summary

Create, read, write, and delete kernel module files.

+
Parameters
Parameter:Description:Optional:
@@ -497,6 +553,7 @@ No +
@@ -514,12 +571,12 @@ No
- -
Description
+
Summary

Read the bootloader configuration file.

+
Parameters
Parameter:Description:Optional:
@@ -538,6 +595,7 @@ No +
@@ -555,12 +613,12 @@ No
- -
Description
+
Summary

Read kernel module files.

+
Parameters
Parameter:Description:Optional:
@@ -579,6 +637,7 @@ No +
@@ -596,12 +655,12 @@ No
- -
Description
+
Summary

Read system.map in the /boot directory.

+
Parameters
Parameter:Description:Optional:
@@ -620,6 +679,7 @@ No +
@@ -653,13 +713,13 @@ No
- -
Description
+
Summary

Execute bootloader interactively and do a domain transition to the bootloader domain.

+
Parameters
Parameter:Description:Optional:
@@ -698,6 +758,7 @@ No +
@@ -715,13 +776,13 @@ No
- -
Description
+
Summary

Read and write symbolic links in the /boot directory.

+
Parameters
Parameter:Description:Optional:
@@ -740,6 +801,7 @@ No +
@@ -757,13 +819,13 @@ No
- -
Description
+
Summary

Read and write the bootloader configuration file.

+
Parameters
Parameter:Description:Optional:
@@ -782,6 +844,7 @@ No +
@@ -799,13 +862,13 @@ No
- -
Description
+
Summary

Read and write the bootloader temporary data in /tmp.

+
Parameters
Parameter:Description:Optional:
@@ -824,6 +887,7 @@ No +
@@ -841,12 +905,12 @@ No
- -
Description
+
Summary

Search the /boot directory.

+
Parameters
Parameter:Description:Optional:
@@ -865,6 +929,7 @@ No +
@@ -882,12 +947,12 @@ No
- -
Description
+
Summary

Write kernel module files.

+
Parameters
Parameter:Description:Optional:
diff --git a/www/api-docs/kernel_corenetwork.html b/www/api-docs/kernel_corenetwork.html index 94444caf..5f60547c 100644 --- a/www/api-docs/kernel_corenetwork.html +++ b/www/api-docs/kernel_corenetwork.html @@ -64,9 +64,15 @@

- * Interface Index + * Global Booleans 

- * Template Index + * Global Tunables  +


+ * Layer Index +

+ * Interface Index +

+ * Template Index

@@ -74,8 +80,6 @@

Layer: kernel

Module: corenetwork

- -

Description:

Policy controlling access to network objects

@@ -87,6 +91,7 @@

Interfaces:

+
@@ -128,6 +133,7 @@ No
+
@@ -169,6 +175,7 @@ No
+
@@ -210,6 +217,7 @@ No
+
@@ -251,6 +259,7 @@ No
+
@@ -268,12 +277,12 @@ No
- -
Description
+
Summary

Receive raw IP packets on the compat_ipv4 node.

+
Parameters
Parameter:Description:Optional:
@@ -292,6 +301,7 @@ No +
@@ -309,12 +319,12 @@ No
- -
Description
+
Summary

Receive raw IP packets on the eth0 interface.

+
Parameters
Parameter:Description:Optional:
@@ -333,6 +343,7 @@ No +
@@ -350,12 +361,12 @@ No
- -
Description
+
Summary

Receive raw IP packets on the eth1 interface.

+
Parameters
Parameter:Description:Optional:
@@ -374,6 +385,7 @@ No +
@@ -391,12 +403,12 @@ No
- -
Description
+
Summary

Receive raw IP packets on the eth2 interface.

+
Parameters
Parameter:Description:Optional:
@@ -415,6 +427,7 @@ No +
@@ -456,6 +469,7 @@ No
+
@@ -497,6 +511,7 @@ No
+
@@ -514,12 +529,12 @@ No
- -
Description
+
Summary

Receive raw IP packets on the inaddr_any node.

+
Parameters
Parameter:Description:Optional:
@@ -538,6 +553,7 @@ No +
@@ -555,12 +571,12 @@ No
- -
Description
+
Summary

Receive raw IP packets on the ippp0 interface.

+
Parameters
Parameter:Description:Optional:
@@ -579,6 +595,7 @@ No +
@@ -596,12 +613,12 @@ No
- -
Description
+
Summary

Receive raw IP packets on the ipsec0 interface.

+
Parameters
Parameter:Description:Optional:
@@ -620,6 +637,7 @@ No +
@@ -637,12 +655,12 @@ No
- -
Description
+
Summary

Receive raw IP packets on the ipsec1 interface.

+
Parameters
Parameter:Description:Optional:
@@ -661,6 +679,7 @@ No +
@@ -678,12 +697,12 @@ No
- -
Description
+
Summary

Receive raw IP packets on the ipsec2 interface.

+
Parameters
Parameter:Description:Optional:
@@ -702,6 +721,7 @@ No +
@@ -719,12 +739,12 @@ No
- -
Description
+
Summary

Receive raw IP packets on the link_local node.

+
Parameters
Parameter:Description:Optional:
@@ -743,6 +763,7 @@ No +
@@ -760,12 +781,12 @@ No
- -
Description
+
Summary

Receive raw IP packets on the lo interface.

+
Parameters
Parameter:Description:Optional:
@@ -784,6 +805,7 @@ No +
@@ -801,12 +823,12 @@ No
- -
Description
+
Summary

Receive raw IP packets on the lo node.

+
Parameters
Parameter:Description:Optional:
@@ -825,6 +847,7 @@ No +
@@ -842,12 +865,12 @@ No
- -
Description
+
Summary

Receive raw IP packets on the mapped_ipv4 node.

+
Parameters
Parameter:Description:Optional:
@@ -866,6 +889,7 @@ No +
@@ -883,12 +907,12 @@ No
- -
Description
+
Summary

Receive raw IP packets on the multicast node.

+
Parameters
Parameter:Description:Optional:
@@ -907,6 +931,7 @@ No +
@@ -924,12 +949,12 @@ No
- -
Description
+
Summary

Receive raw IP packets on the site_local node.

+
Parameters
Parameter:Description:Optional:
@@ -948,6 +973,7 @@ No +
@@ -965,12 +991,12 @@ No
- -
Description
+
Summary

Receive raw IP packets on the unspec node.

+
Parameters
Parameter:Description:Optional:
@@ -989,6 +1015,7 @@ No +
@@ -1030,6 +1057,7 @@ No
+
@@ -1071,6 +1099,7 @@ No
+
@@ -1088,12 +1117,12 @@ No
- -
Description
+
Summary

Send raw IP packets on the compat_ipv4 node.

+
Parameters
Parameter:Description:Optional:
@@ -1112,6 +1141,7 @@ No +
@@ -1129,12 +1159,12 @@ No
- -
Description
+
Summary

Send raw IP packets on the eth0 interface.

+
Parameters
Parameter:Description:Optional:
@@ -1153,6 +1183,7 @@ No +
@@ -1170,12 +1201,12 @@ No
- -
Description
+
Summary

Send raw IP packets on the eth1 interface.

+
Parameters
Parameter:Description:Optional:
@@ -1194,6 +1225,7 @@ No +
@@ -1211,12 +1243,12 @@ No
- -
Description
+
Summary

Send raw IP packets on the eth2 interface.

+
Parameters
Parameter:Description:Optional:
@@ -1235,6 +1267,7 @@ No +
@@ -1276,6 +1309,7 @@ No
+
@@ -1317,6 +1351,7 @@ No
+
@@ -1334,12 +1369,12 @@ No
- -
Description
+
Summary

Send raw IP packets on the inaddr_any node.

+
Parameters
Parameter:Description:Optional:
@@ -1358,6 +1393,7 @@ No +
@@ -1375,12 +1411,12 @@ No
- -
Description
+
Summary

Send raw IP packets on the ippp0 interface.

+
Parameters
Parameter:Description:Optional:
@@ -1399,6 +1435,7 @@ No +
@@ -1416,12 +1453,12 @@ No
- -
Description
+
Summary

Send raw IP packets on the ipsec0 interface.

+
Parameters
Parameter:Description:Optional:
@@ -1440,6 +1477,7 @@ No +
@@ -1457,12 +1495,12 @@ No
- -
Description
+
Summary

Send raw IP packets on the ipsec1 interface.

+
Parameters
Parameter:Description:Optional:
@@ -1481,6 +1519,7 @@ No +
@@ -1498,12 +1537,12 @@ No
- -
Description
+
Summary

Send raw IP packets on the ipsec2 interface.

+
Parameters
Parameter:Description:Optional:
@@ -1522,6 +1561,7 @@ No +
@@ -1539,12 +1579,12 @@ No
- -
Description
+
Summary

Send raw IP packets on the link_local node.

+
Parameters
Parameter:Description:Optional:
@@ -1563,6 +1603,7 @@ No +
@@ -1580,12 +1621,12 @@ No
- -
Description
+
Summary

Send raw IP packets on the lo interface.

+
Parameters
Parameter:Description:Optional:
@@ -1604,6 +1645,7 @@ No +
@@ -1621,12 +1663,12 @@ No
- -
Description
+
Summary

Send raw IP packets on the lo node.

+
Parameters
Parameter:Description:Optional:
@@ -1645,6 +1687,7 @@ No +
@@ -1662,12 +1705,12 @@ No
- -
Description
+
Summary

Send raw IP packets on the mapped_ipv4 node.

+
Parameters
Parameter:Description:Optional:
@@ -1686,6 +1729,7 @@ No +
@@ -1703,12 +1747,12 @@ No
- -
Description
+
Summary

Send raw IP packets on the multicast node.

+
Parameters
Parameter:Description:Optional:
@@ -1727,6 +1771,7 @@ No +
@@ -1744,12 +1789,12 @@ No
- -
Description
+
Summary

Send raw IP packets on the site_local node.

+
Parameters
Parameter:Description:Optional:
@@ -1768,6 +1813,7 @@ No +
@@ -1785,12 +1831,12 @@ No
- -
Description
+
Summary

Send raw IP packets on the unspec node.

+
Parameters
Parameter:Description:Optional:
@@ -1809,6 +1855,7 @@ No +
@@ -1850,6 +1897,7 @@ No
+
@@ -1891,6 +1939,7 @@ No
+
@@ -1908,12 +1957,12 @@ No
- -
Description
+
Summary

Send and receive raw IP packets on the compat_ipv4 node.

+
Parameters
Parameter:Description:Optional:
@@ -1932,6 +1981,7 @@ No +
@@ -1949,12 +1999,12 @@ No
- -
Description
+
Summary

Send and receive raw IP packets on the eth0 interface.

+
Parameters
Parameter:Description:Optional:
@@ -1973,6 +2023,7 @@ No +
@@ -1990,12 +2041,12 @@ No
- -
Description
+
Summary

Send and receive raw IP packets on the eth1 interface.

+
Parameters
Parameter:Description:Optional:
@@ -2014,6 +2065,7 @@ No +
@@ -2031,12 +2083,12 @@ No
- -
Description
+
Summary

Send and receive raw IP packets on the eth2 interface.

+
Parameters
Parameter:Description:Optional:
@@ -2055,6 +2107,7 @@ No +
@@ -2096,6 +2149,7 @@ No
+
@@ -2137,6 +2191,7 @@ No
+
@@ -2154,12 +2209,12 @@ No
- -
Description
+
Summary

Send and receive raw IP packets on the inaddr_any node.

+
Parameters
Parameter:Description:Optional:
@@ -2178,6 +2233,7 @@ No +
@@ -2195,12 +2251,12 @@ No
- -
Description
+
Summary

Send and receive raw IP packets on the ippp0 interface.

+
Parameters
Parameter:Description:Optional:
@@ -2219,6 +2275,7 @@ No +
@@ -2236,12 +2293,12 @@ No
- -
Description
+
Summary

Send and receive raw IP packets on the ipsec0 interface.

+
Parameters
Parameter:Description:Optional:
@@ -2260,6 +2317,7 @@ No +
@@ -2277,12 +2335,12 @@ No
- -
Description
+
Summary

Send and receive raw IP packets on the ipsec1 interface.

+
Parameters
Parameter:Description:Optional:
@@ -2301,6 +2359,7 @@ No +
@@ -2318,12 +2377,12 @@ No
- -
Description
+
Summary

Send and receive raw IP packets on the ipsec2 interface.

+
Parameters
Parameter:Description:Optional:
@@ -2342,6 +2401,7 @@ No +
@@ -2359,12 +2419,12 @@ No
- -
Description
+
Summary

Send and receive raw IP packets on the link_local node.

+
Parameters
Parameter:Description:Optional:
@@ -2383,6 +2443,7 @@ No +
@@ -2400,12 +2461,12 @@ No
- -
Description
+
Summary

Send and receive raw IP packets on the lo interface.

+
Parameters
Parameter:Description:Optional:
@@ -2424,6 +2485,7 @@ No +
@@ -2441,12 +2503,12 @@ No
- -
Description
+
Summary

Send and receive raw IP packets on the lo node.

+
Parameters
Parameter:Description:Optional:
@@ -2465,6 +2527,7 @@ No +
@@ -2482,12 +2545,12 @@ No
- -
Description
+
Summary

Send and receive raw IP packets on the mapped_ipv4 node.

+
Parameters
Parameter:Description:Optional:
@@ -2506,6 +2569,7 @@ No +
@@ -2523,12 +2587,12 @@ No
- -
Description
+
Summary

Send and receive raw IP packets on the multicast node.

+
Parameters
Parameter:Description:Optional:
@@ -2547,6 +2611,7 @@ No +
@@ -2564,12 +2629,12 @@ No
- -
Description
+
Summary

Send and receive raw IP packets on the site_local node.

+
Parameters
Parameter:Description:Optional:
@@ -2588,6 +2653,7 @@ No +
@@ -2605,12 +2671,12 @@ No
- -
Description
+
Summary

Send and receive raw IP packets on the unspec node.

+
Parameters
Parameter:Description:Optional:
@@ -2629,6 +2695,7 @@ No +
@@ -2670,6 +2737,7 @@ No
+
@@ -2711,6 +2779,7 @@ No
+
@@ -2752,6 +2821,7 @@ No
+
@@ -2769,12 +2839,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the amanda port.

+
Parameters
Parameter:Description:Optional:
@@ -2793,6 +2863,7 @@ No +
@@ -2810,12 +2881,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to node compat_ipv4.

+
Parameters
Parameter:Description:Optional:
@@ -2834,6 +2905,7 @@ No +
@@ -2851,12 +2923,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the dbskkd port.

+
Parameters
Parameter:Description:Optional:
@@ -2875,6 +2947,7 @@ No +
@@ -2892,12 +2965,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the dhcpc port.

+
Parameters
Parameter:Description:Optional:
@@ -2916,6 +2989,7 @@ No +
@@ -2933,12 +3007,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the dhcpd port.

+
Parameters
Parameter:Description:Optional:
@@ -2957,6 +3031,7 @@ No +
@@ -2974,12 +3049,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the dict port.

+
Parameters
Parameter:Description:Optional:
@@ -2998,6 +3073,7 @@ No +
@@ -3015,12 +3091,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the dns port.

+
Parameters
Parameter:Description:Optional:
@@ -3039,6 +3115,7 @@ No +
@@ -3056,12 +3133,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the fingerd port.

+
Parameters
Parameter:Description:Optional:
@@ -3080,6 +3157,7 @@ No +
@@ -3097,12 +3175,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the ftp_data port.

+
Parameters
Parameter:Description:Optional:
@@ -3121,6 +3199,7 @@ No +
@@ -3138,12 +3217,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the ftp port.

+
Parameters
Parameter:Description:Optional:
@@ -3162,6 +3241,7 @@ No +
@@ -3203,6 +3283,7 @@ No
+
@@ -3244,6 +3325,7 @@ No
+
@@ -3261,12 +3343,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the howl port.

+
Parameters
Parameter:Description:Optional:
@@ -3285,6 +3367,7 @@ No +
@@ -3302,12 +3385,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the http_cache port.

+
Parameters
Parameter:Description:Optional:
@@ -3326,6 +3409,7 @@ No +
@@ -3343,12 +3427,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the http port.

+
Parameters
Parameter:Description:Optional:
@@ -3367,6 +3451,7 @@ No +
@@ -3384,12 +3469,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to node inaddr_any.

+
Parameters
Parameter:Description:Optional:
@@ -3408,6 +3493,7 @@ No +
@@ -3425,12 +3511,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the inetd_child port.

+
Parameters
Parameter:Description:Optional:
@@ -3449,6 +3535,7 @@ No +
@@ -3466,12 +3553,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the innd port.

+
Parameters
Parameter:Description:Optional:
@@ -3490,6 +3577,7 @@ No +
@@ -3507,12 +3595,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the ipp port.

+
Parameters
Parameter:Description:Optional:
@@ -3531,6 +3619,7 @@ No +
@@ -3548,12 +3637,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the kerberos_admin port.

+
Parameters
Parameter:Description:Optional:
@@ -3572,6 +3661,7 @@ No +
@@ -3589,12 +3679,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the kerberos_master port.

+
Parameters
Parameter:Description:Optional:
@@ -3613,6 +3703,7 @@ No +
@@ -3630,12 +3721,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the kerberos port.

+
Parameters
Parameter:Description:Optional:
@@ -3654,6 +3745,7 @@ No +
@@ -3671,12 +3763,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the ktalkd port.

+
Parameters
Parameter:Description:Optional:
@@ -3695,6 +3787,7 @@ No +
@@ -3712,12 +3805,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the ldap port.

+
Parameters
Parameter:Description:Optional:
@@ -3736,6 +3829,7 @@ No +
@@ -3753,12 +3847,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to node link_local.

+
Parameters
Parameter:Description:Optional:
@@ -3777,6 +3871,7 @@ No +
@@ -3794,12 +3889,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to node lo.

+
Parameters
Parameter:Description:Optional:
@@ -3818,6 +3913,7 @@ No +
@@ -3835,12 +3931,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the mail port.

+
Parameters
Parameter:Description:Optional:
@@ -3859,6 +3955,7 @@ No +
@@ -3876,12 +3973,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to node mapped_ipv4.

+
Parameters
Parameter:Description:Optional:
@@ -3900,6 +3997,7 @@ No +
@@ -3917,12 +4015,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to node multicast.

+
Parameters
Parameter:Description:Optional:
@@ -3941,6 +4039,7 @@ No +
@@ -3958,12 +4057,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the mysqld port.

+
Parameters
Parameter:Description:Optional:
@@ -3982,6 +4081,7 @@ No +
@@ -3999,12 +4099,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the nmbd port.

+
Parameters
Parameter:Description:Optional:
@@ -4023,6 +4123,7 @@ No +
@@ -4040,12 +4141,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the pop port.

+
Parameters
Parameter:Description:Optional:
@@ -4064,6 +4165,7 @@ No +
@@ -4081,12 +4183,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the portmap port.

+
Parameters
Parameter:Description:Optional:
@@ -4105,6 +4207,7 @@ No +
@@ -4122,12 +4225,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the postgresql port.

+
Parameters
Parameter:Description:Optional:
@@ -4146,6 +4249,7 @@ No +
@@ -4163,12 +4267,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the printer port.

+
Parameters
Parameter:Description:Optional:
@@ -4187,6 +4291,7 @@ No +
@@ -4204,12 +4309,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the pxe port.

+
Parameters
Parameter:Description:Optional:
@@ -4228,6 +4333,7 @@ No +
@@ -4245,12 +4351,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the radacct port.

+
Parameters
Parameter:Description:Optional:
@@ -4269,6 +4375,7 @@ No +
@@ -4286,12 +4393,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the radius port.

+
Parameters
Parameter:Description:Optional:
@@ -4310,6 +4417,7 @@ No +
@@ -4351,6 +4459,7 @@ No
+
@@ -4368,12 +4477,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the rsh port.

+
Parameters
Parameter:Description:Optional:
@@ -4392,6 +4501,7 @@ No +
@@ -4409,12 +4519,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the rsync port.

+
Parameters
Parameter:Description:Optional:
@@ -4433,6 +4543,7 @@ No +
@@ -4450,12 +4561,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to node site_local.

+
Parameters
Parameter:Description:Optional:
@@ -4474,6 +4585,7 @@ No +
@@ -4491,12 +4603,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the smbd port.

+
Parameters
Parameter:Description:Optional:
@@ -4515,6 +4627,7 @@ No +
@@ -4532,12 +4645,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the smtp port.

+
Parameters
Parameter:Description:Optional:
@@ -4556,6 +4669,7 @@ No +
@@ -4573,12 +4687,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the snmp port.

+
Parameters
Parameter:Description:Optional:
@@ -4597,6 +4711,7 @@ No +
@@ -4614,12 +4729,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the ssh port.

+
Parameters
Parameter:Description:Optional:
@@ -4638,6 +4753,7 @@ No +
@@ -4655,12 +4771,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the swat port.

+
Parameters
Parameter:Description:Optional:
@@ -4679,6 +4795,7 @@ No +
@@ -4696,12 +4813,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the syslogd port.

+
Parameters
Parameter:Description:Optional:
@@ -4720,6 +4837,7 @@ No +
@@ -4737,12 +4855,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the telnetd port.

+
Parameters
Parameter:Description:Optional:
@@ -4761,6 +4879,7 @@ No +
@@ -4778,12 +4897,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the tftp port.

+
Parameters
Parameter:Description:Optional:
@@ -4802,6 +4921,7 @@ No +
@@ -4819,12 +4939,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to node unspec.

+
Parameters
Parameter:Description:Optional:
@@ -4843,6 +4963,7 @@ No +
@@ -4860,12 +4981,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the vnc port.

+
Parameters
Parameter:Description:Optional:
@@ -4884,6 +5005,7 @@ No +
@@ -4901,12 +5023,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the xserver port.

+
Parameters
Parameter:Description:Optional:
@@ -4925,6 +5047,7 @@ No +
@@ -4942,12 +5065,12 @@ No
- -
Description
+
Summary

Bind TCP sockets to the zebra port.

+
Parameters
Parameter:Description:Optional:
@@ -4966,6 +5089,1813 @@ No + +
+ + +
+ +corenet_tcp_connect_amanda_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the amanda port. +

+ + +
Parameters
+
Parameter:Description:Optional:
+ + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+ + + +
+ + +
+ +corenet_tcp_connect_dbskkd_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the dbskkd port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corenet_tcp_connect_dhcpc_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the dhcpc port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corenet_tcp_connect_dhcpd_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the dhcpd port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corenet_tcp_connect_dict_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the dict port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corenet_tcp_connect_dns_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the dns port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corenet_tcp_connect_fingerd_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the fingerd port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corenet_tcp_connect_ftp_data_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the ftp_data port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corenet_tcp_connect_ftp_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the ftp port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corenet_tcp_connect_howl_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the howl port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corenet_tcp_connect_http_cache_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the http_cache port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corenet_tcp_connect_http_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the http port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corenet_tcp_connect_inetd_child_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the inetd_child port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corenet_tcp_connect_innd_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the innd port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corenet_tcp_connect_ipp_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the ipp port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corenet_tcp_connect_kerberos_admin_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the kerberos_admin port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corenet_tcp_connect_kerberos_master_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the kerberos_master port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corenet_tcp_connect_kerberos_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the kerberos port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corenet_tcp_connect_ktalkd_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the ktalkd port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corenet_tcp_connect_ldap_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the ldap port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corenet_tcp_connect_mail_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the mail port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corenet_tcp_connect_mysqld_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the mysqld port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corenet_tcp_connect_nmbd_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the nmbd port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corenet_tcp_connect_pop_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the pop port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corenet_tcp_connect_portmap_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the portmap port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corenet_tcp_connect_postgresql_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the postgresql port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corenet_tcp_connect_printer_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the printer port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corenet_tcp_connect_pxe_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the pxe port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corenet_tcp_connect_radacct_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the radacct port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corenet_tcp_connect_radius_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the radius port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corenet_tcp_connect_rsh_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the rsh port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corenet_tcp_connect_rsync_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the rsync port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corenet_tcp_connect_smbd_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the smbd port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corenet_tcp_connect_smtp_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the smtp port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corenet_tcp_connect_snmp_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the snmp port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corenet_tcp_connect_ssh_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the ssh port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corenet_tcp_connect_swat_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the swat port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corenet_tcp_connect_syslogd_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the syslogd port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corenet_tcp_connect_telnetd_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the telnetd port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corenet_tcp_connect_tftp_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the tftp port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corenet_tcp_connect_vnc_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the vnc port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corenet_tcp_connect_xserver_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the xserver port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corenet_tcp_connect_zebra_port( + + + + + domain + + + )
+
+
+ +
Summary
+

+Make a TCP connection to the zebra port. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ +
@@ -5007,6 +6937,7 @@ No
+
@@ -5048,6 +6979,7 @@ No
+
@@ -5089,6 +7021,7 @@ No
+
@@ -5130,6 +7063,7 @@ No
+
@@ -5147,12 +7081,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the amanda port.

+
Parameters
@@ -5171,6 +7105,7 @@ No +
@@ -5188,12 +7123,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the compat_ipv4 node.

+
Parameters
Parameter:Description:Optional:
@@ -5212,6 +7147,7 @@ No +
@@ -5229,12 +7165,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the dbskkd port.

+
Parameters
Parameter:Description:Optional:
@@ -5253,6 +7189,7 @@ No +
@@ -5270,12 +7207,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the dhcpc port.

+
Parameters
Parameter:Description:Optional:
@@ -5294,6 +7231,7 @@ No +
@@ -5311,12 +7249,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the dhcpd port.

+
Parameters
Parameter:Description:Optional:
@@ -5335,6 +7273,7 @@ No +
@@ -5352,12 +7291,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the dict port.

+
Parameters
Parameter:Description:Optional:
@@ -5376,6 +7315,7 @@ No +
@@ -5393,12 +7333,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the dns port.

+
Parameters
Parameter:Description:Optional:
@@ -5417,6 +7357,7 @@ No +
@@ -5434,12 +7375,12 @@ No
- -
Description
+
Summary

Send and receive TCP network traffic on the eth0 interface.

+
Parameters
Parameter:Description:Optional:
@@ -5458,6 +7399,7 @@ No +
@@ -5475,12 +7417,12 @@ No
- -
Description
+
Summary

Send and receive TCP network traffic on the eth1 interface.

+
Parameters
Parameter:Description:Optional:
@@ -5499,6 +7441,7 @@ No +
@@ -5516,12 +7459,12 @@ No
- -
Description
+
Summary

Send and receive TCP network traffic on the eth2 interface.

+
Parameters
Parameter:Description:Optional:
@@ -5540,6 +7483,7 @@ No +
@@ -5557,12 +7501,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the fingerd port.

+
Parameters
Parameter:Description:Optional:
@@ -5581,6 +7525,7 @@ No +
@@ -5598,12 +7543,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the ftp_data port.

+
Parameters
Parameter:Description:Optional:
@@ -5622,6 +7567,7 @@ No +
@@ -5639,12 +7585,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the ftp port.

+
Parameters
Parameter:Description:Optional:
@@ -5663,6 +7609,7 @@ No +
@@ -5704,6 +7651,7 @@ No
+
@@ -5745,6 +7693,7 @@ No
+
@@ -5786,6 +7735,7 @@ No
+
@@ -5803,12 +7753,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the howl port.

+
Parameters
Parameter:Description:Optional:
@@ -5827,6 +7777,7 @@ No +
@@ -5844,12 +7795,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the http_cache port.

+
Parameters
Parameter:Description:Optional:
@@ -5868,6 +7819,7 @@ No +
@@ -5885,12 +7837,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the http port.

+
Parameters
Parameter:Description:Optional:
@@ -5909,6 +7861,7 @@ No +
@@ -5926,12 +7879,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the inaddr_any node.

+
Parameters
Parameter:Description:Optional:
@@ -5950,6 +7903,7 @@ No +
@@ -5967,12 +7921,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the inetd_child port.

+
Parameters
Parameter:Description:Optional:
@@ -5991,6 +7945,7 @@ No +
@@ -6008,12 +7963,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the innd port.

+
Parameters
Parameter:Description:Optional:
@@ -6032,6 +7987,7 @@ No +
@@ -6049,12 +8005,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the ipp port.

+
Parameters
Parameter:Description:Optional:
@@ -6073,6 +8029,7 @@ No +
@@ -6090,12 +8047,12 @@ No
- -
Description
+
Summary

Send and receive TCP network traffic on the ippp0 interface.

+
Parameters
Parameter:Description:Optional:
@@ -6114,6 +8071,7 @@ No +
@@ -6131,12 +8089,12 @@ No
- -
Description
+
Summary

Send and receive TCP network traffic on the ipsec0 interface.

+
Parameters
Parameter:Description:Optional:
@@ -6155,6 +8113,7 @@ No +
@@ -6172,12 +8131,12 @@ No
- -
Description
+
Summary

Send and receive TCP network traffic on the ipsec1 interface.

+
Parameters
Parameter:Description:Optional:
@@ -6196,6 +8155,7 @@ No +
@@ -6213,12 +8173,12 @@ No
- -
Description
+
Summary

Send and receive TCP network traffic on the ipsec2 interface.

+
Parameters
Parameter:Description:Optional:
@@ -6237,6 +8197,7 @@ No +
@@ -6254,12 +8215,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the kerberos_admin port.

+
Parameters
Parameter:Description:Optional:
@@ -6278,6 +8239,7 @@ No +
@@ -6295,12 +8257,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the kerberos_master port.

+
Parameters
Parameter:Description:Optional:
@@ -6319,6 +8281,7 @@ No +
@@ -6336,12 +8299,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the kerberos port.

+
Parameters
Parameter:Description:Optional:
@@ -6360,6 +8323,7 @@ No +
@@ -6377,12 +8341,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the ktalkd port.

+
Parameters
Parameter:Description:Optional:
@@ -6401,6 +8365,7 @@ No +
@@ -6418,12 +8383,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the ldap port.

+
Parameters
Parameter:Description:Optional:
@@ -6442,6 +8407,7 @@ No +
@@ -6459,12 +8425,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the link_local node.

+
Parameters
Parameter:Description:Optional:
@@ -6483,6 +8449,7 @@ No +
@@ -6500,12 +8467,12 @@ No
- -
Description
+
Summary

Send and receive TCP network traffic on the lo interface.

+
Parameters
Parameter:Description:Optional:
@@ -6524,6 +8491,7 @@ No +
@@ -6541,12 +8509,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the lo node.

+
Parameters
Parameter:Description:Optional:
@@ -6565,6 +8533,7 @@ No +
@@ -6582,12 +8551,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the mail port.

+
Parameters
Parameter:Description:Optional:
@@ -6606,6 +8575,7 @@ No +
@@ -6623,12 +8593,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the mapped_ipv4 node.

+
Parameters
Parameter:Description:Optional:
@@ -6647,6 +8617,7 @@ No +
@@ -6664,12 +8635,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the multicast node.

+
Parameters
Parameter:Description:Optional:
@@ -6688,6 +8659,7 @@ No +
@@ -6705,12 +8677,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the mysqld port.

+
Parameters
Parameter:Description:Optional:
@@ -6729,6 +8701,7 @@ No +
@@ -6746,12 +8719,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the nmbd port.

+
Parameters
Parameter:Description:Optional:
@@ -6770,6 +8743,7 @@ No +
@@ -6787,12 +8761,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the pop port.

+
Parameters
Parameter:Description:Optional:
@@ -6811,6 +8785,7 @@ No +
@@ -6828,12 +8803,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the portmap port.

+
Parameters
Parameter:Description:Optional:
@@ -6852,6 +8827,7 @@ No +
@@ -6869,12 +8845,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the postgresql port.

+
Parameters
Parameter:Description:Optional:
@@ -6893,6 +8869,7 @@ No +
@@ -6910,12 +8887,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the printer port.

+
Parameters
Parameter:Description:Optional:
@@ -6934,6 +8911,7 @@ No +
@@ -6951,12 +8929,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the pxe port.

+
Parameters
Parameter:Description:Optional:
@@ -6975,6 +8953,7 @@ No +
@@ -6992,12 +8971,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the radacct port.

+
Parameters
Parameter:Description:Optional:
@@ -7016,6 +8995,7 @@ No +
@@ -7033,12 +9013,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the radius port.

+
Parameters
Parameter:Description:Optional:
@@ -7057,6 +9037,7 @@ No +
@@ -7098,6 +9079,7 @@ No
+
@@ -7115,12 +9097,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the rsh port.

+
Parameters
Parameter:Description:Optional:
@@ -7139,6 +9121,7 @@ No +
@@ -7156,12 +9139,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the rsync port.

+
Parameters
Parameter:Description:Optional:
@@ -7180,6 +9163,7 @@ No +
@@ -7197,12 +9181,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the site_local node.

+
Parameters
Parameter:Description:Optional:
@@ -7221,6 +9205,7 @@ No +
@@ -7238,12 +9223,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the smbd port.

+
Parameters
Parameter:Description:Optional:
@@ -7262,6 +9247,7 @@ No +
@@ -7279,12 +9265,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the smtp port.

+
Parameters
Parameter:Description:Optional:
@@ -7303,6 +9289,7 @@ No +
@@ -7320,12 +9307,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the snmp port.

+
Parameters
Parameter:Description:Optional:
@@ -7344,6 +9331,7 @@ No +
@@ -7361,12 +9349,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the ssh port.

+
Parameters
Parameter:Description:Optional:
@@ -7385,6 +9373,7 @@ No +
@@ -7402,12 +9391,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the swat port.

+
Parameters
Parameter:Description:Optional:
@@ -7426,6 +9415,7 @@ No +
@@ -7443,12 +9433,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the syslogd port.

+
Parameters
Parameter:Description:Optional:
@@ -7467,6 +9457,7 @@ No +
@@ -7484,12 +9475,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the telnetd port.

+
Parameters
Parameter:Description:Optional:
@@ -7508,6 +9499,7 @@ No +
@@ -7525,12 +9517,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the tftp port.

+
Parameters
Parameter:Description:Optional:
@@ -7549,6 +9541,7 @@ No +
@@ -7566,12 +9559,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the unspec node.

+
Parameters
Parameter:Description:Optional:
@@ -7590,6 +9583,7 @@ No +
@@ -7607,12 +9601,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the vnc port.

+
Parameters
Parameter:Description:Optional:
@@ -7631,6 +9625,7 @@ No +
@@ -7648,12 +9643,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the xserver port.

+
Parameters
Parameter:Description:Optional:
@@ -7672,6 +9667,7 @@ No +
@@ -7689,12 +9685,12 @@ No
- -
Description
+
Summary

Send and receive TCP traffic on the zebra port.

+
Parameters
Parameter:Description:Optional:
@@ -7713,6 +9709,7 @@ No +
@@ -7754,6 +9751,7 @@ No
+
@@ -7795,6 +9793,7 @@ No
+
@@ -7836,6 +9835,7 @@ No
+
@@ -7853,12 +9853,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the amanda port.

+
Parameters
Parameter:Description:Optional:
@@ -7877,6 +9877,7 @@ No +
@@ -7894,12 +9895,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the compat_ipv4 node.

+
Parameters
Parameter:Description:Optional:
@@ -7918,6 +9919,7 @@ No +
@@ -7935,12 +9937,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the dbskkd port.

+
Parameters
Parameter:Description:Optional:
@@ -7959,6 +9961,7 @@ No +
@@ -7976,12 +9979,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the dhcpc port.

+
Parameters
Parameter:Description:Optional:
@@ -8000,6 +10003,7 @@ No +
@@ -8017,12 +10021,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the dhcpd port.

+
Parameters
Parameter:Description:Optional:
@@ -8041,6 +10045,7 @@ No +
@@ -8058,12 +10063,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the dict port.

+
Parameters
Parameter:Description:Optional:
@@ -8082,6 +10087,7 @@ No +
@@ -8099,12 +10105,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the dns port.

+
Parameters
Parameter:Description:Optional:
@@ -8123,6 +10129,7 @@ No +
@@ -8140,12 +10147,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the fingerd port.

+
Parameters
Parameter:Description:Optional:
@@ -8164,6 +10171,7 @@ No +
@@ -8181,12 +10189,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the ftp_data port.

+
Parameters
Parameter:Description:Optional:
@@ -8205,6 +10213,7 @@ No +
@@ -8222,12 +10231,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the ftp port.

+
Parameters
Parameter:Description:Optional:
@@ -8246,6 +10255,7 @@ No +
@@ -8287,6 +10297,7 @@ No
+
@@ -8328,6 +10339,7 @@ No
+
@@ -8345,12 +10357,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the howl port.

+
Parameters
Parameter:Description:Optional:
@@ -8369,6 +10381,7 @@ No +
@@ -8386,12 +10399,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the http_cache port.

+
Parameters
Parameter:Description:Optional:
@@ -8410,6 +10423,7 @@ No +
@@ -8427,12 +10441,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the http port.

+
Parameters
Parameter:Description:Optional:
@@ -8451,6 +10465,7 @@ No +
@@ -8468,12 +10483,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the inaddr_any node.

+
Parameters
Parameter:Description:Optional:
@@ -8492,6 +10507,7 @@ No +
@@ -8509,12 +10525,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the inetd_child port.

+
Parameters
Parameter:Description:Optional:
@@ -8533,6 +10549,7 @@ No +
@@ -8550,12 +10567,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the innd port.

+
Parameters
Parameter:Description:Optional:
@@ -8574,6 +10591,7 @@ No +
@@ -8591,12 +10609,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the ipp port.

+
Parameters
Parameter:Description:Optional:
@@ -8615,6 +10633,7 @@ No +
@@ -8632,12 +10651,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the kerberos_admin port.

+
Parameters
Parameter:Description:Optional:
@@ -8656,6 +10675,7 @@ No +
@@ -8673,12 +10693,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the kerberos_master port.

+
Parameters
Parameter:Description:Optional:
@@ -8697,6 +10717,7 @@ No +
@@ -8714,12 +10735,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the kerberos port.

+
Parameters
Parameter:Description:Optional:
@@ -8738,6 +10759,7 @@ No +
@@ -8755,12 +10777,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the ktalkd port.

+
Parameters
Parameter:Description:Optional:
@@ -8779,6 +10801,7 @@ No +
@@ -8796,12 +10819,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the ldap port.

+
Parameters
Parameter:Description:Optional:
@@ -8820,6 +10843,7 @@ No +
@@ -8837,12 +10861,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the link_local node.

+
Parameters
Parameter:Description:Optional:
@@ -8861,6 +10885,7 @@ No +
@@ -8878,12 +10903,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the lo node.

+
Parameters
Parameter:Description:Optional:
@@ -8902,6 +10927,7 @@ No +
@@ -8919,12 +10945,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the mail port.

+
Parameters
Parameter:Description:Optional:
@@ -8943,6 +10969,7 @@ No +
@@ -8960,12 +10987,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the mapped_ipv4 node.

+
Parameters
Parameter:Description:Optional:
@@ -8984,6 +11011,7 @@ No +
@@ -9001,12 +11029,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the multicast node.

+
Parameters
Parameter:Description:Optional:
@@ -9025,6 +11053,7 @@ No +
@@ -9042,12 +11071,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the mysqld port.

+
Parameters
Parameter:Description:Optional:
@@ -9066,6 +11095,7 @@ No +
@@ -9083,12 +11113,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the nmbd port.

+
Parameters
Parameter:Description:Optional:
@@ -9107,6 +11137,7 @@ No +
@@ -9124,12 +11155,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the pop port.

+
Parameters
Parameter:Description:Optional:
@@ -9148,6 +11179,7 @@ No +
@@ -9165,12 +11197,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the portmap port.

+
Parameters
Parameter:Description:Optional:
@@ -9189,6 +11221,7 @@ No +
@@ -9206,12 +11239,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the postgresql port.

+
Parameters
Parameter:Description:Optional:
@@ -9230,6 +11263,7 @@ No +
@@ -9247,12 +11281,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the printer port.

+
Parameters
Parameter:Description:Optional:
@@ -9271,6 +11305,7 @@ No +
@@ -9288,12 +11323,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the pxe port.

+
Parameters
Parameter:Description:Optional:
@@ -9312,6 +11347,7 @@ No +
@@ -9329,12 +11365,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the radacct port.

+
Parameters
Parameter:Description:Optional:
@@ -9353,6 +11389,7 @@ No +
@@ -9370,12 +11407,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the radius port.

+
Parameters
Parameter:Description:Optional:
@@ -9394,6 +11431,7 @@ No +
@@ -9435,6 +11473,7 @@ No
+
@@ -9452,12 +11491,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the rsh port.

+
Parameters
Parameter:Description:Optional:
@@ -9476,6 +11515,7 @@ No +
@@ -9493,12 +11533,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the rsync port.

+
Parameters
Parameter:Description:Optional:
@@ -9517,6 +11557,7 @@ No +
@@ -9534,12 +11575,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the site_local node.

+
Parameters
Parameter:Description:Optional:
@@ -9558,6 +11599,7 @@ No +
@@ -9575,12 +11617,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the smbd port.

+
Parameters
Parameter:Description:Optional:
@@ -9599,6 +11641,7 @@ No +
@@ -9616,12 +11659,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the smtp port.

+
Parameters
Parameter:Description:Optional:
@@ -9640,6 +11683,7 @@ No +
@@ -9657,12 +11701,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the snmp port.

+
Parameters
Parameter:Description:Optional:
@@ -9681,6 +11725,7 @@ No +
@@ -9698,12 +11743,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the ssh port.

+
Parameters
Parameter:Description:Optional:
@@ -9722,6 +11767,7 @@ No +
@@ -9739,12 +11785,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the swat port.

+
Parameters
Parameter:Description:Optional:
@@ -9763,6 +11809,7 @@ No +
@@ -9780,12 +11827,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the syslogd port.

+
Parameters
Parameter:Description:Optional:
@@ -9804,6 +11851,7 @@ No +
@@ -9821,12 +11869,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the telnetd port.

+
Parameters
Parameter:Description:Optional:
@@ -9845,6 +11893,7 @@ No +
@@ -9862,12 +11911,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the tftp port.

+
Parameters
Parameter:Description:Optional:
@@ -9886,6 +11935,7 @@ No +
@@ -9903,12 +11953,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the unspec node.

+
Parameters
Parameter:Description:Optional:
@@ -9927,6 +11977,7 @@ No +
@@ -9944,12 +11995,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the vnc port.

+
Parameters
Parameter:Description:Optional:
@@ -9968,6 +12019,7 @@ No +
@@ -9985,12 +12037,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the xserver port.

+
Parameters
Parameter:Description:Optional:
@@ -10009,6 +12061,7 @@ No +
@@ -10026,12 +12079,12 @@ No
- -
Description
+
Summary

Bind UDP sockets to the zebra port.

+
Parameters
Parameter:Description:Optional:
@@ -10050,6 +12103,7 @@ No +
@@ -10091,6 +12145,7 @@ No
+
@@ -10132,6 +12187,7 @@ No
+
@@ -10173,6 +12229,7 @@ No
+
@@ -10214,6 +12271,7 @@ No
+
@@ -10231,12 +12289,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the amanda port.

+
Parameters
Parameter:Description:Optional:
@@ -10255,6 +12313,7 @@ No +
@@ -10272,12 +12331,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the compat_ipv4 node.

+
Parameters
Parameter:Description:Optional:
@@ -10296,6 +12355,7 @@ No +
@@ -10313,12 +12373,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the dbskkd port.

+
Parameters
Parameter:Description:Optional:
@@ -10337,6 +12397,7 @@ No +
@@ -10354,12 +12415,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the dhcpc port.

+
Parameters
Parameter:Description:Optional:
@@ -10378,6 +12439,7 @@ No +
@@ -10395,12 +12457,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the dhcpd port.

+
Parameters
Parameter:Description:Optional:
@@ -10419,6 +12481,7 @@ No +
@@ -10436,12 +12499,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the dict port.

+
Parameters
Parameter:Description:Optional:
@@ -10460,6 +12523,7 @@ No +
@@ -10477,12 +12541,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the dns port.

+
Parameters
Parameter:Description:Optional:
@@ -10501,6 +12565,7 @@ No +
@@ -10518,12 +12583,12 @@ No
- -
Description
+
Summary

Receive UDP network traffic on the eth0 interface.

+
Parameters
Parameter:Description:Optional:
@@ -10542,6 +12607,7 @@ No +
@@ -10559,12 +12625,12 @@ No
- -
Description
+
Summary

Receive UDP network traffic on the eth1 interface.

+
Parameters
Parameter:Description:Optional:
@@ -10583,6 +12649,7 @@ No +
@@ -10600,12 +12667,12 @@ No
- -
Description
+
Summary

Receive UDP network traffic on the eth2 interface.

+
Parameters
Parameter:Description:Optional:
@@ -10624,6 +12691,7 @@ No +
@@ -10641,12 +12709,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the fingerd port.

+
Parameters
Parameter:Description:Optional:
@@ -10665,6 +12733,7 @@ No +
@@ -10682,12 +12751,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the ftp_data port.

+
Parameters
Parameter:Description:Optional:
@@ -10706,6 +12775,7 @@ No +
@@ -10723,12 +12793,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the ftp port.

+
Parameters
Parameter:Description:Optional:
@@ -10747,6 +12817,7 @@ No +
@@ -10788,6 +12859,7 @@ No
+
@@ -10829,6 +12901,7 @@ No
+
@@ -10870,6 +12943,7 @@ No
+
@@ -10887,12 +12961,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the howl port.

+
Parameters
Parameter:Description:Optional:
@@ -10911,6 +12985,7 @@ No +
@@ -10928,12 +13003,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the http_cache port.

+
Parameters
Parameter:Description:Optional:
@@ -10952,6 +13027,7 @@ No +
@@ -10969,12 +13045,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the http port.

+
Parameters
Parameter:Description:Optional:
@@ -10993,6 +13069,7 @@ No +
@@ -11010,12 +13087,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the inaddr_any node.

+
Parameters
Parameter:Description:Optional:
@@ -11034,6 +13111,7 @@ No +
@@ -11051,12 +13129,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the inetd_child port.

+
Parameters
Parameter:Description:Optional:
@@ -11075,6 +13153,7 @@ No +
@@ -11092,12 +13171,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the innd port.

+
Parameters
Parameter:Description:Optional:
@@ -11116,6 +13195,7 @@ No +
@@ -11133,12 +13213,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the ipp port.

+
Parameters
Parameter:Description:Optional:
@@ -11157,6 +13237,7 @@ No +
@@ -11174,12 +13255,12 @@ No
- -
Description
+
Summary

Receive UDP network traffic on the ippp0 interface.

+
Parameters
Parameter:Description:Optional:
@@ -11198,6 +13279,7 @@ No +
@@ -11215,12 +13297,12 @@ No
- -
Description
+
Summary

Receive UDP network traffic on the ipsec0 interface.

+
Parameters
Parameter:Description:Optional:
@@ -11239,6 +13321,7 @@ No +
@@ -11256,12 +13339,12 @@ No
- -
Description
+
Summary

Receive UDP network traffic on the ipsec1 interface.

+
Parameters
Parameter:Description:Optional:
@@ -11280,6 +13363,7 @@ No +
@@ -11297,12 +13381,12 @@ No
- -
Description
+
Summary

Receive UDP network traffic on the ipsec2 interface.

+
Parameters
Parameter:Description:Optional:
@@ -11321,6 +13405,7 @@ No +
@@ -11338,12 +13423,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the kerberos_admin port.

+
Parameters
Parameter:Description:Optional:
@@ -11362,6 +13447,7 @@ No +
@@ -11379,12 +13465,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the kerberos_master port.

+
Parameters
Parameter:Description:Optional:
@@ -11403,6 +13489,7 @@ No +
@@ -11420,12 +13507,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the kerberos port.

+
Parameters
Parameter:Description:Optional:
@@ -11444,6 +13531,7 @@ No +
@@ -11461,12 +13549,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the ktalkd port.

+
Parameters
Parameter:Description:Optional:
@@ -11485,6 +13573,7 @@ No +
@@ -11502,12 +13591,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the ldap port.

+
Parameters
Parameter:Description:Optional:
@@ -11526,6 +13615,7 @@ No +
@@ -11543,12 +13633,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the link_local node.

+
Parameters
Parameter:Description:Optional:
@@ -11567,6 +13657,7 @@ No +
@@ -11584,12 +13675,12 @@ No
- -
Description
+
Summary

Receive UDP network traffic on the lo interface.

+
Parameters
Parameter:Description:Optional:
@@ -11608,6 +13699,7 @@ No +
@@ -11625,12 +13717,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the lo node.

+
Parameters
Parameter:Description:Optional:
@@ -11649,6 +13741,7 @@ No +
@@ -11666,12 +13759,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the mail port.

+
Parameters
Parameter:Description:Optional:
@@ -11690,6 +13783,7 @@ No +
@@ -11707,12 +13801,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the mapped_ipv4 node.

+
Parameters
Parameter:Description:Optional:
@@ -11731,6 +13825,7 @@ No +
@@ -11748,12 +13843,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the multicast node.

+
Parameters
Parameter:Description:Optional:
@@ -11772,6 +13867,7 @@ No +
@@ -11789,12 +13885,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the mysqld port.

+
Parameters
Parameter:Description:Optional:
@@ -11813,6 +13909,7 @@ No +
@@ -11830,12 +13927,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the nmbd port.

+
Parameters
Parameter:Description:Optional:
@@ -11854,6 +13951,7 @@ No +
@@ -11871,12 +13969,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the pop port.

+
Parameters
Parameter:Description:Optional:
@@ -11895,6 +13993,7 @@ No +
@@ -11912,12 +14011,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the portmap port.

+
Parameters
Parameter:Description:Optional:
@@ -11936,6 +14035,7 @@ No +
@@ -11953,12 +14053,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the postgresql port.

+
Parameters
Parameter:Description:Optional:
@@ -11977,6 +14077,7 @@ No +
@@ -11994,12 +14095,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the printer port.

+
Parameters
Parameter:Description:Optional:
@@ -12018,6 +14119,7 @@ No +
@@ -12035,12 +14137,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the pxe port.

+
Parameters
Parameter:Description:Optional:
@@ -12059,6 +14161,7 @@ No +
@@ -12076,12 +14179,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the radacct port.

+
Parameters
Parameter:Description:Optional:
@@ -12100,6 +14203,7 @@ No +
@@ -12117,12 +14221,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the radius port.

+
Parameters
Parameter:Description:Optional:
@@ -12141,6 +14245,7 @@ No +
@@ -12182,6 +14287,7 @@ No
+
@@ -12199,12 +14305,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the rsh port.

+
Parameters
Parameter:Description:Optional:
@@ -12223,6 +14329,7 @@ No +
@@ -12240,12 +14347,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the rsync port.

+
Parameters
Parameter:Description:Optional:
@@ -12264,6 +14371,7 @@ No +
@@ -12281,12 +14389,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the site_local node.

+
Parameters
Parameter:Description:Optional:
@@ -12305,6 +14413,7 @@ No +
@@ -12322,12 +14431,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the smbd port.

+
Parameters
Parameter:Description:Optional:
@@ -12346,6 +14455,7 @@ No +
@@ -12363,12 +14473,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the smtp port.

+
Parameters
Parameter:Description:Optional:
@@ -12387,6 +14497,7 @@ No +
@@ -12404,12 +14515,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the snmp port.

+
Parameters
Parameter:Description:Optional:
@@ -12428,6 +14539,7 @@ No +
@@ -12445,12 +14557,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the ssh port.

+
Parameters
Parameter:Description:Optional:
@@ -12469,6 +14581,7 @@ No +
@@ -12486,12 +14599,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the swat port.

+
Parameters
Parameter:Description:Optional:
@@ -12510,6 +14623,7 @@ No +
@@ -12527,12 +14641,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the syslogd port.

+
Parameters
Parameter:Description:Optional:
@@ -12551,6 +14665,7 @@ No +
@@ -12568,12 +14683,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the telnetd port.

+
Parameters
Parameter:Description:Optional:
@@ -12592,6 +14707,7 @@ No +
@@ -12609,12 +14725,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the tftp port.

+
Parameters
Parameter:Description:Optional:
@@ -12633,6 +14749,7 @@ No +
@@ -12650,12 +14767,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the unspec node.

+
Parameters
Parameter:Description:Optional:
@@ -12674,6 +14791,7 @@ No +
@@ -12691,12 +14809,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the vnc port.

+
Parameters
Parameter:Description:Optional:
@@ -12715,6 +14833,7 @@ No +
@@ -12732,12 +14851,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the xserver port.

+
Parameters
Parameter:Description:Optional:
@@ -12756,6 +14875,7 @@ No +
@@ -12773,12 +14893,12 @@ No
- -
Description
+
Summary

Receive UDP traffic on the zebra port.

+
Parameters
Parameter:Description:Optional:
@@ -12797,6 +14917,7 @@ No +
@@ -12838,6 +14959,7 @@ No
+
@@ -12879,6 +15001,7 @@ No
+
@@ -12920,6 +15043,7 @@ No
+
@@ -12961,6 +15085,7 @@ No
+
@@ -12978,12 +15103,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the amanda port.

+
Parameters
Parameter:Description:Optional:
@@ -13002,6 +15127,7 @@ No +
@@ -13019,12 +15145,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the compat_ipv4 node.

+
Parameters
Parameter:Description:Optional:
@@ -13043,6 +15169,7 @@ No +
@@ -13060,12 +15187,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the dbskkd port.

+
Parameters
Parameter:Description:Optional:
@@ -13084,6 +15211,7 @@ No +
@@ -13101,12 +15229,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the dhcpc port.

+
Parameters
Parameter:Description:Optional:
@@ -13125,6 +15253,7 @@ No +
@@ -13142,12 +15271,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the dhcpd port.

+
Parameters
Parameter:Description:Optional:
@@ -13166,6 +15295,7 @@ No +
@@ -13183,12 +15313,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the dict port.

+
Parameters
Parameter:Description:Optional:
@@ -13207,6 +15337,7 @@ No +
@@ -13224,12 +15355,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the dns port.

+
Parameters
Parameter:Description:Optional:
@@ -13248,6 +15379,7 @@ No +
@@ -13265,12 +15397,12 @@ No
- -
Description
+
Summary

Send UDP network traffic on the eth0 interface.

+
Parameters
Parameter:Description:Optional:
@@ -13289,6 +15421,7 @@ No +
@@ -13306,12 +15439,12 @@ No
- -
Description
+
Summary

Send UDP network traffic on the eth1 interface.

+
Parameters
Parameter:Description:Optional:
@@ -13330,6 +15463,7 @@ No +
@@ -13347,12 +15481,12 @@ No
- -
Description
+
Summary

Send UDP network traffic on the eth2 interface.

+
Parameters
Parameter:Description:Optional:
@@ -13371,6 +15505,7 @@ No +
@@ -13388,12 +15523,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the fingerd port.

+
Parameters
Parameter:Description:Optional:
@@ -13412,6 +15547,7 @@ No +
@@ -13429,12 +15565,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the ftp_data port.

+
Parameters
Parameter:Description:Optional:
@@ -13453,6 +15589,7 @@ No +
@@ -13470,12 +15607,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the ftp port.

+
Parameters
Parameter:Description:Optional:
@@ -13494,6 +15631,7 @@ No +
@@ -13535,6 +15673,7 @@ No
+
@@ -13576,6 +15715,7 @@ No
+
@@ -13617,6 +15757,7 @@ No
+
@@ -13634,12 +15775,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the howl port.

+
Parameters
Parameter:Description:Optional:
@@ -13658,6 +15799,7 @@ No +
@@ -13675,12 +15817,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the http_cache port.

+
Parameters
Parameter:Description:Optional:
@@ -13699,6 +15841,7 @@ No +
@@ -13716,12 +15859,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the http port.

+
Parameters
Parameter:Description:Optional:
@@ -13740,6 +15883,7 @@ No +
@@ -13757,12 +15901,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the inaddr_any node.

+
Parameters
Parameter:Description:Optional:
@@ -13781,6 +15925,7 @@ No +
@@ -13798,12 +15943,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the inetd_child port.

+
Parameters
Parameter:Description:Optional:
@@ -13822,6 +15967,7 @@ No +
@@ -13839,12 +15985,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the innd port.

+
Parameters
Parameter:Description:Optional:
@@ -13863,6 +16009,7 @@ No +
@@ -13880,12 +16027,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the ipp port.

+
Parameters
Parameter:Description:Optional:
@@ -13904,6 +16051,7 @@ No +
@@ -13921,12 +16069,12 @@ No
- -
Description
+
Summary

Send UDP network traffic on the ippp0 interface.

+
Parameters
Parameter:Description:Optional:
@@ -13945,6 +16093,7 @@ No +
@@ -13962,12 +16111,12 @@ No
- -
Description
+
Summary

Send UDP network traffic on the ipsec0 interface.

+
Parameters
Parameter:Description:Optional:
@@ -13986,6 +16135,7 @@ No +
@@ -14003,12 +16153,12 @@ No
- -
Description
+
Summary

Send UDP network traffic on the ipsec1 interface.

+
Parameters
Parameter:Description:Optional:
@@ -14027,6 +16177,7 @@ No +
@@ -14044,12 +16195,12 @@ No
- -
Description
+
Summary

Send UDP network traffic on the ipsec2 interface.

+
Parameters
Parameter:Description:Optional:
@@ -14068,6 +16219,7 @@ No +
@@ -14085,12 +16237,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the kerberos_admin port.

+
Parameters
Parameter:Description:Optional:
@@ -14109,6 +16261,7 @@ No +
@@ -14126,12 +16279,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the kerberos_master port.

+
Parameters
Parameter:Description:Optional:
@@ -14150,6 +16303,7 @@ No +
@@ -14167,12 +16321,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the kerberos port.

+
Parameters
Parameter:Description:Optional:
@@ -14191,6 +16345,7 @@ No +
@@ -14208,12 +16363,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the ktalkd port.

+
Parameters
Parameter:Description:Optional:
@@ -14232,6 +16387,7 @@ No +
@@ -14249,12 +16405,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the ldap port.

+
Parameters
Parameter:Description:Optional:
@@ -14273,6 +16429,7 @@ No +
@@ -14290,12 +16447,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the link_local node.

+
Parameters
Parameter:Description:Optional:
@@ -14314,6 +16471,7 @@ No +
@@ -14331,12 +16489,12 @@ No
- -
Description
+
Summary

Send UDP network traffic on the lo interface.

+
Parameters
Parameter:Description:Optional:
@@ -14355,6 +16513,7 @@ No +
@@ -14372,12 +16531,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the lo node.

+
Parameters
Parameter:Description:Optional:
@@ -14396,6 +16555,7 @@ No +
@@ -14413,12 +16573,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the mail port.

+
Parameters
Parameter:Description:Optional:
@@ -14437,6 +16597,7 @@ No +
@@ -14454,12 +16615,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the mapped_ipv4 node.

+
Parameters
Parameter:Description:Optional:
@@ -14478,6 +16639,7 @@ No +
@@ -14495,12 +16657,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the multicast node.

+
Parameters
Parameter:Description:Optional:
@@ -14519,6 +16681,7 @@ No +
@@ -14536,12 +16699,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the mysqld port.

+
Parameters
Parameter:Description:Optional:
@@ -14560,6 +16723,7 @@ No +
@@ -14577,12 +16741,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the nmbd port.

+
Parameters
Parameter:Description:Optional:
@@ -14601,6 +16765,7 @@ No +
@@ -14618,12 +16783,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the pop port.

+
Parameters
Parameter:Description:Optional:
@@ -14642,6 +16807,7 @@ No +
@@ -14659,12 +16825,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the portmap port.

+
Parameters
Parameter:Description:Optional:
@@ -14683,6 +16849,7 @@ No +
@@ -14700,12 +16867,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the postgresql port.

+
Parameters
Parameter:Description:Optional:
@@ -14724,6 +16891,7 @@ No +
@@ -14741,12 +16909,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the printer port.

+
Parameters
Parameter:Description:Optional:
@@ -14765,6 +16933,7 @@ No +
@@ -14782,12 +16951,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the pxe port.

+
Parameters
Parameter:Description:Optional:
@@ -14806,6 +16975,7 @@ No +
@@ -14823,12 +16993,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the radacct port.

+
Parameters
Parameter:Description:Optional:
@@ -14847,6 +17017,7 @@ No +
@@ -14864,12 +17035,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the radius port.

+
Parameters
Parameter:Description:Optional:
@@ -14888,6 +17059,7 @@ No +
@@ -14929,6 +17101,7 @@ No
+
@@ -14946,12 +17119,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the rsh port.

+
Parameters
Parameter:Description:Optional:
@@ -14970,6 +17143,7 @@ No +
@@ -14987,12 +17161,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the rsync port.

+
Parameters
Parameter:Description:Optional:
@@ -15011,6 +17185,7 @@ No +
@@ -15028,12 +17203,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the site_local node.

+
Parameters
Parameter:Description:Optional:
@@ -15052,6 +17227,7 @@ No +
@@ -15069,12 +17245,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the smbd port.

+
Parameters
Parameter:Description:Optional:
@@ -15093,6 +17269,7 @@ No +
@@ -15110,12 +17287,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the smtp port.

+
Parameters
Parameter:Description:Optional:
@@ -15134,6 +17311,7 @@ No +
@@ -15151,12 +17329,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the snmp port.

+
Parameters
Parameter:Description:Optional:
@@ -15175,6 +17353,7 @@ No +
@@ -15192,12 +17371,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the ssh port.

+
Parameters
Parameter:Description:Optional:
@@ -15216,6 +17395,7 @@ No +
@@ -15233,12 +17413,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the swat port.

+
Parameters
Parameter:Description:Optional:
@@ -15257,6 +17437,7 @@ No +
@@ -15274,12 +17455,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the syslogd port.

+
Parameters
Parameter:Description:Optional:
@@ -15298,6 +17479,7 @@ No +
@@ -15315,12 +17497,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the telnetd port.

+
Parameters
Parameter:Description:Optional:
@@ -15339,6 +17521,7 @@ No +
@@ -15356,12 +17539,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the tftp port.

+
Parameters
Parameter:Description:Optional:
@@ -15380,6 +17563,7 @@ No +
@@ -15397,12 +17581,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the unspec node.

+
Parameters
Parameter:Description:Optional:
@@ -15421,6 +17605,7 @@ No +
@@ -15438,12 +17623,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the vnc port.

+
Parameters
Parameter:Description:Optional:
@@ -15462,6 +17647,7 @@ No +
@@ -15479,12 +17665,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the xserver port.

+
Parameters
Parameter:Description:Optional:
@@ -15503,6 +17689,7 @@ No +
@@ -15520,12 +17707,12 @@ No
- -
Description
+
Summary

Send UDP traffic on the zebra port.

+
Parameters
Parameter:Description:Optional:
@@ -15544,6 +17731,7 @@ No +
@@ -15585,6 +17773,7 @@ No
+
@@ -15626,6 +17815,7 @@ No
+
@@ -15667,6 +17857,7 @@ No
+
@@ -15708,6 +17899,7 @@ No
+
@@ -15725,12 +17917,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the amanda port.

+
Parameters
Parameter:Description:Optional:
@@ -15749,6 +17941,7 @@ No +
@@ -15766,12 +17959,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the compat_ipv4 node.

+
Parameters
Parameter:Description:Optional:
@@ -15790,6 +17983,7 @@ No +
@@ -15807,12 +18001,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the dbskkd port.

+
Parameters
Parameter:Description:Optional:
@@ -15831,6 +18025,7 @@ No +
@@ -15848,12 +18043,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the dhcpc port.

+
Parameters
Parameter:Description:Optional:
@@ -15872,6 +18067,7 @@ No +
@@ -15889,12 +18085,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the dhcpd port.

+
Parameters
Parameter:Description:Optional:
@@ -15913,6 +18109,7 @@ No +
@@ -15930,12 +18127,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the dict port.

+
Parameters
Parameter:Description:Optional:
@@ -15954,6 +18151,7 @@ No +
@@ -15971,12 +18169,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the dns port.

+
Parameters
Parameter:Description:Optional:
@@ -15995,6 +18193,7 @@ No +
@@ -16012,12 +18211,12 @@ No
- -
Description
+
Summary

Send and receive UDP network traffic on the eth0 interface.

+
Parameters
Parameter:Description:Optional:
@@ -16036,6 +18235,7 @@ No +
@@ -16053,12 +18253,12 @@ No
- -
Description
+
Summary

Send and receive UDP network traffic on the eth1 interface.

+
Parameters
Parameter:Description:Optional:
@@ -16077,6 +18277,7 @@ No +
@@ -16094,12 +18295,12 @@ No
- -
Description
+
Summary

Send and receive UDP network traffic on the eth2 interface.

+
Parameters
Parameter:Description:Optional:
@@ -16118,6 +18319,7 @@ No +
@@ -16135,12 +18337,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the fingerd port.

+
Parameters
Parameter:Description:Optional:
@@ -16159,6 +18361,7 @@ No +
@@ -16176,12 +18379,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the ftp_data port.

+
Parameters
Parameter:Description:Optional:
@@ -16200,6 +18403,7 @@ No +
@@ -16217,12 +18421,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the ftp port.

+
Parameters
Parameter:Description:Optional:
@@ -16241,6 +18445,7 @@ No +
@@ -16282,6 +18487,7 @@ No
+
@@ -16323,6 +18529,7 @@ No
+
@@ -16364,6 +18571,7 @@ No
+
@@ -16381,12 +18589,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the howl port.

+
Parameters
Parameter:Description:Optional:
@@ -16405,6 +18613,7 @@ No +
@@ -16422,12 +18631,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the http_cache port.

+
Parameters
Parameter:Description:Optional:
@@ -16446,6 +18655,7 @@ No +
@@ -16463,12 +18673,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the http port.

+
Parameters
Parameter:Description:Optional:
@@ -16487,6 +18697,7 @@ No +
@@ -16504,12 +18715,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the inaddr_any node.

+
Parameters
Parameter:Description:Optional:
@@ -16528,6 +18739,7 @@ No +
@@ -16545,12 +18757,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the inetd_child port.

+
Parameters
Parameter:Description:Optional:
@@ -16569,6 +18781,7 @@ No +
@@ -16586,12 +18799,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the innd port.

+
Parameters
Parameter:Description:Optional:
@@ -16610,6 +18823,7 @@ No +
@@ -16627,12 +18841,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the ipp port.

+
Parameters
Parameter:Description:Optional:
@@ -16651,6 +18865,7 @@ No +
@@ -16668,12 +18883,12 @@ No
- -
Description
+
Summary

Send and receive UDP network traffic on the ippp0 interface.

+
Parameters
Parameter:Description:Optional:
@@ -16692,6 +18907,7 @@ No +
@@ -16709,12 +18925,12 @@ No
- -
Description
+
Summary

Send and receive UDP network traffic on the ipsec0 interface.

+
Parameters
Parameter:Description:Optional:
@@ -16733,6 +18949,7 @@ No +
@@ -16750,12 +18967,12 @@ No
- -
Description
+
Summary

Send and receive UDP network traffic on the ipsec1 interface.

+
Parameters
Parameter:Description:Optional:
@@ -16774,6 +18991,7 @@ No +
@@ -16791,12 +19009,12 @@ No
- -
Description
+
Summary

Send and receive UDP network traffic on the ipsec2 interface.

+
Parameters
Parameter:Description:Optional:
@@ -16815,6 +19033,7 @@ No +
@@ -16832,12 +19051,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the kerberos_admin port.

+
Parameters
Parameter:Description:Optional:
@@ -16856,6 +19075,7 @@ No +
@@ -16873,12 +19093,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the kerberos_master port.

+
Parameters
Parameter:Description:Optional:
@@ -16897,6 +19117,7 @@ No +
@@ -16914,12 +19135,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the kerberos port.

+
Parameters
Parameter:Description:Optional:
@@ -16938,6 +19159,7 @@ No +
@@ -16955,12 +19177,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the ktalkd port.

+
Parameters
Parameter:Description:Optional:
@@ -16979,6 +19201,7 @@ No +
@@ -16996,12 +19219,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the ldap port.

+
Parameters
Parameter:Description:Optional:
@@ -17020,6 +19243,7 @@ No +
@@ -17037,12 +19261,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the link_local node.

+
Parameters
Parameter:Description:Optional:
@@ -17061,6 +19285,7 @@ No +
@@ -17078,12 +19303,12 @@ No
- -
Description
+
Summary

Send and receive UDP network traffic on the lo interface.

+
Parameters
Parameter:Description:Optional:
@@ -17102,6 +19327,7 @@ No +
@@ -17119,12 +19345,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the lo node.

+
Parameters
Parameter:Description:Optional:
@@ -17143,6 +19369,7 @@ No +
@@ -17160,12 +19387,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the mail port.

+
Parameters
Parameter:Description:Optional:
@@ -17184,6 +19411,7 @@ No +
@@ -17201,12 +19429,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the mapped_ipv4 node.

+
Parameters
Parameter:Description:Optional:
@@ -17225,6 +19453,7 @@ No +
@@ -17242,12 +19471,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the multicast node.

+
Parameters
Parameter:Description:Optional:
@@ -17266,6 +19495,7 @@ No +
@@ -17283,12 +19513,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the mysqld port.

+
Parameters
Parameter:Description:Optional:
@@ -17307,6 +19537,7 @@ No +
@@ -17324,12 +19555,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the nmbd port.

+
Parameters
Parameter:Description:Optional:
@@ -17348,6 +19579,7 @@ No +
@@ -17365,12 +19597,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the pop port.

+
Parameters
Parameter:Description:Optional:
@@ -17389,6 +19621,7 @@ No +
@@ -17406,12 +19639,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the portmap port.

+
Parameters
Parameter:Description:Optional:
@@ -17430,6 +19663,7 @@ No +
@@ -17447,12 +19681,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the postgresql port.

+
Parameters
Parameter:Description:Optional:
@@ -17471,6 +19705,7 @@ No +
@@ -17488,12 +19723,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the printer port.

+
Parameters
Parameter:Description:Optional:
@@ -17512,6 +19747,7 @@ No +
@@ -17529,12 +19765,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the pxe port.

+
Parameters
Parameter:Description:Optional:
@@ -17553,6 +19789,7 @@ No +
@@ -17570,12 +19807,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the radacct port.

+
Parameters
Parameter:Description:Optional:
@@ -17594,6 +19831,7 @@ No +
@@ -17611,12 +19849,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the radius port.

+
Parameters
Parameter:Description:Optional:
@@ -17635,6 +19873,7 @@ No +
@@ -17676,6 +19915,7 @@ No
+
@@ -17693,12 +19933,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the rsh port.

+
Parameters
Parameter:Description:Optional:
@@ -17717,6 +19957,7 @@ No +
@@ -17734,12 +19975,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the rsync port.

+
Parameters
Parameter:Description:Optional:
@@ -17758,6 +19999,7 @@ No +
@@ -17775,12 +20017,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the site_local node.

+
Parameters
Parameter:Description:Optional:
@@ -17799,6 +20041,7 @@ No +
@@ -17816,12 +20059,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the smbd port.

+
Parameters
Parameter:Description:Optional:
@@ -17840,6 +20083,7 @@ No +
@@ -17857,12 +20101,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the smtp port.

+
Parameters
Parameter:Description:Optional:
@@ -17881,6 +20125,7 @@ No +
@@ -17898,12 +20143,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the snmp port.

+
Parameters
Parameter:Description:Optional:
@@ -17922,6 +20167,7 @@ No +
@@ -17939,12 +20185,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the ssh port.

+
Parameters
Parameter:Description:Optional:
@@ -17963,6 +20209,7 @@ No +
@@ -17980,12 +20227,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the swat port.

+
Parameters
Parameter:Description:Optional:
@@ -18004,6 +20251,7 @@ No +
@@ -18021,12 +20269,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the syslogd port.

+
Parameters
Parameter:Description:Optional:
@@ -18045,6 +20293,7 @@ No +
@@ -18062,12 +20311,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the telnetd port.

+
Parameters
Parameter:Description:Optional:
@@ -18086,6 +20335,7 @@ No +
@@ -18103,12 +20353,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the tftp port.

+
Parameters
Parameter:Description:Optional:
@@ -18127,6 +20377,7 @@ No +
@@ -18144,12 +20395,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the unspec node.

+
Parameters
Parameter:Description:Optional:
@@ -18168,6 +20419,7 @@ No +
@@ -18185,12 +20437,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the vnc port.

+
Parameters
Parameter:Description:Optional:
@@ -18209,6 +20461,7 @@ No +
@@ -18226,12 +20479,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the xserver port.

+
Parameters
Parameter:Description:Optional:
@@ -18250,6 +20503,7 @@ No +
@@ -18267,12 +20521,12 @@ No
- -
Description
+
Summary

Send and receive UDP traffic on the zebra port.

+
Parameters
Parameter:Description:Optional:
@@ -18291,6 +20545,7 @@ No +
@@ -18332,6 +20587,7 @@ No
+
diff --git a/www/api-docs/kernel_devices.html b/www/api-docs/kernel_devices.html index 120e3ba2..9a037228 100644 --- a/www/api-docs/kernel_devices.html +++ b/www/api-docs/kernel_devices.html @@ -64,9 +64,15 @@

- * Interface Index + * Global Booleans 

- * Template Index + * Global Tunables  +


+ * Layer Index +

+ * Interface Index +

+ * Template Index

@@ -74,8 +80,6 @@

Layer: kernel

Module: devices

- -

Description:

@@ -92,8 +96,13 @@ are used to label device nodes should use the dev_node macro.

Additionally, this module controls access to three things: -

  • the device directories containing device nodes
  • device nodes as a group
  • individual access to specific device nodes covered by - this module.

+

    +

  • the device directories containing device nodes

  • +

  • device nodes as a group

  • +

  • individual access to specific device nodes covered by + this module.

  • +

+

@@ -101,6 +110,7 @@ Additionally, this module controls access to three things:

Interfaces:

+
@@ -180,6 +190,7 @@ No
+
@@ -221,6 +232,7 @@ No
+
@@ -262,6 +274,7 @@ No
+
@@ -303,6 +316,7 @@ No
+
@@ -344,6 +358,7 @@ No
+
@@ -385,6 +400,7 @@ No
+
@@ -426,6 +442,7 @@ No
+
@@ -468,6 +485,7 @@ No
+
@@ -509,6 +527,7 @@ No
+
@@ -550,6 +569,7 @@ No
+
@@ -591,6 +611,7 @@ No
+
@@ -633,6 +654,7 @@ No
+
@@ -675,6 +697,7 @@ No
+
@@ -717,6 +740,7 @@ No
+
@@ -758,6 +782,7 @@ No
+
@@ -799,6 +824,50 @@ No
+ +
+ + +
+ +dev_dontaudit_rw_cardmgr( + + + + + domain + + + )
+
+
+ +
Summary
+

+Do not audit attempts to read and +write the PCMCIA card manager device. +

+ + +
Parameters
+
Parameter:Description:Optional:
+ + + + +
Parameter:Description:Optional:
+domain + + +Domain to not audit. + + +No +
+
+ + +
@@ -840,6 +909,7 @@ No
+
@@ -881,6 +951,7 @@ No
+
@@ -922,6 +993,7 @@ No
+
@@ -964,6 +1036,7 @@ No
+
@@ -1006,6 +1079,7 @@ No
+
@@ -1047,6 +1121,7 @@ No
+
@@ -1088,6 +1163,50 @@ No
+ +
+ + +
+ +dev_dontaudit_setattr_generic_symlink( + + + + + domain + + + )
+
+
+ +
Summary
+

+Do not audit attempts to set the attributes +of symbolic links in device directories (/dev). +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +Domain to not audit. + + +No +
+
+
+ +
@@ -1130,6 +1249,7 @@ No
+
@@ -1172,6 +1292,7 @@ No
+
@@ -1214,6 +1335,7 @@ No
+
@@ -1255,6 +1377,7 @@ No
+
@@ -1296,6 +1419,7 @@ No
+
@@ -1337,6 +1461,7 @@ No
+
@@ -1378,6 +1503,7 @@ No
+
@@ -1419,6 +1545,7 @@ No
+
@@ -1460,6 +1587,7 @@ No
+
@@ -1501,6 +1629,7 @@ No
+
@@ -1542,6 +1671,7 @@ No
+
@@ -1583,6 +1713,7 @@ No
+
@@ -1624,6 +1755,7 @@ No
+
@@ -1665,6 +1797,7 @@ No
+
@@ -1706,6 +1839,7 @@ No
+
@@ -1747,6 +1881,49 @@ No
+ +
+ + +
+ +dev_getattr_usbfs_dir( + + + + + domain + + + )
+
+
+ +
Summary
+

+Get the attributes of a directory in the usb filesystem. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +Domain allowed access. + + +No +
+
+
+ +
@@ -1788,6 +1965,7 @@ No
+
@@ -1829,6 +2007,49 @@ No
+ +
+ + +
+ +dev_list_sysfs( + + + + + domain + + + )
+
+
+ +
Summary
+

+List the contents of the sysfs directories. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ +
@@ -1870,6 +2091,7 @@ No
+
@@ -1911,6 +2133,7 @@ No
+
@@ -1952,6 +2175,7 @@ No
+
@@ -1993,6 +2217,7 @@ No
+
@@ -2035,6 +2260,7 @@ No
+
@@ -2076,6 +2302,7 @@ No
+
@@ -2117,6 +2344,7 @@ No
+
@@ -2158,6 +2386,7 @@ No
+
@@ -2199,6 +2428,7 @@ No
+
@@ -2241,6 +2471,7 @@ No
+
@@ -2260,7 +2491,7 @@ No
Summary

-Read the multiplexed input device (/dev/input). +Read the CPU identity.

@@ -2282,6 +2513,7 @@ No
+
@@ -2323,6 +2555,7 @@ No
+
@@ -2342,7 +2575,7 @@ No
Summary

-Read the multiplexed input device (/dev/input). +Read input event devices (/dev/input).

@@ -2364,6 +2597,7 @@ No
+
@@ -2405,6 +2639,7 @@ No
+
@@ -2446,6 +2681,7 @@ No
+
@@ -2487,6 +2723,7 @@ No
+
@@ -2528,6 +2765,7 @@ No
+
@@ -2569,6 +2807,7 @@ No
+
@@ -2610,6 +2849,7 @@ No
+
@@ -2651,6 +2891,7 @@ No
+
@@ -2692,6 +2933,7 @@ No
+
@@ -2733,6 +2975,7 @@ No
+
@@ -2774,6 +3017,7 @@ No
+
@@ -2815,6 +3059,7 @@ No
+
@@ -2857,6 +3102,7 @@ No
+
@@ -2898,6 +3144,7 @@ No
+
@@ -2939,6 +3186,7 @@ No
+
@@ -2980,6 +3228,7 @@ No
+
@@ -3021,6 +3270,7 @@ No
+
@@ -3062,6 +3312,7 @@ No
+
@@ -3081,8 +3332,8 @@ No
Summary

-Read and write the the cpu microcode device. This -is required to load cpu microcode. +Read and write the the CPU microcode device. This +is required to load CPU microcode.

@@ -3104,6 +3355,7 @@ No
+
@@ -3145,6 +3397,49 @@ No
+ +
+ + +
+ +dev_rw_generic_file( + + + + + domain + + + )
+
+
+ +
Summary
+

+Read and write generic files in /dev. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +Domain allowed access. + + +No +
+
+
+ +
@@ -3186,6 +3481,7 @@ No
+
@@ -3227,6 +3523,7 @@ No
+
@@ -3268,6 +3565,7 @@ No
+
@@ -3287,7 +3585,7 @@ No
Summary

-Read the realtime clock (/dev/rtc). +Read and set the realtime clock (/dev/rtc).

@@ -3309,6 +3607,7 @@ No
+
@@ -3350,6 +3649,7 @@ No
+
@@ -3391,6 +3691,7 @@ No
+
@@ -3432,6 +3733,7 @@ No
+
@@ -3473,6 +3775,7 @@ No
+
@@ -3514,6 +3817,7 @@ No
+
@@ -3555,6 +3859,7 @@ No
+
@@ -3574,7 +3879,7 @@ No
Summary

-Search sysfs. +Search the sysfs directories.

@@ -3596,6 +3901,7 @@ No
+
@@ -3637,6 +3943,7 @@ No
+
@@ -3678,6 +3985,7 @@ No
+
@@ -3719,6 +4027,7 @@ No
+
@@ -3760,6 +4069,49 @@ No
+ +
+ + +
+ +dev_setattr_dev_dir( + + + + + domain + + + )
+
+
+ +
Summary
+

+Set the attributes of /dev directories. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +Domain allowed access. + + +No +
+
+
+ +
@@ -3801,6 +4153,7 @@ No
+
@@ -3842,6 +4195,7 @@ No
+
@@ -3883,6 +4237,7 @@ No
+
@@ -3924,6 +4279,49 @@ No
+ +
+ + +
+ +dev_setattr_printer( + + + + + domain + + + )
+
+
+ +
Summary
+

+Set the attributes of the printer device nodes. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +Domain allowed access. + + +No +
+
+
+ +
@@ -3965,6 +4363,7 @@ No
+
@@ -4006,6 +4405,7 @@ No
+
@@ -4047,6 +4447,7 @@ No
+
@@ -4088,6 +4489,7 @@ No
+
@@ -4129,6 +4531,7 @@ No
+
@@ -4170,6 +4573,7 @@ No
+
@@ -4211,6 +4615,7 @@ No
+
@@ -4254,6 +4659,7 @@ No
+
@@ -4295,6 +4701,7 @@ No
+
@@ -4314,7 +4721,7 @@ No
Summary

-Read the realtime clock (/dev/rtc). +Set the realtime clock (/dev/rtc).

@@ -4336,6 +4743,7 @@ No
+
@@ -4377,6 +4785,7 @@ No
+
@@ -4418,6 +4827,7 @@ No
+
@@ -4460,6 +4870,7 @@ No
+
diff --git a/www/api-docs/kernel_filesystem.html b/www/api-docs/kernel_filesystem.html index a443856a..8486a7a6 100644 --- a/www/api-docs/kernel_filesystem.html +++ b/www/api-docs/kernel_filesystem.html @@ -64,9 +64,15 @@

- * Interface Index + * Global Booleans 

- * Template Index + * Global Tunables  +


+ * Layer Index +

+ * Interface Index +

+ * Template Index

@@ -74,8 +80,6 @@

Layer: kernel

Module: filesystem

- -

Description:

Policy for filesystems.

@@ -87,6 +91,7 @@

Interfaces:

+
@@ -104,8 +109,7 @@
- -
Description
+
Summary

Associate the specified file type to persistent filesystems with extended attributes. This @@ -113,6 +117,7 @@ allows a file of this type to be created on a filesystem such as ext3, JFS, and XFS.

+
Parameters
@@ -131,6 +136,7 @@ No +
@@ -148,8 +154,7 @@ No
- -
Description
+
Summary

Associate the specified file type to filesystems which lack extended attributes @@ -158,6 +163,7 @@ to be created on a filesystem such as FAT32, and NFS.

+
Parameters
Parameter:Description:Optional:
@@ -176,6 +182,7 @@ No +
@@ -193,12 +200,12 @@ No
- -
Description
+
Summary

Allow the type to associate to tmpfs filesystems.

+
Parameters
Parameter:Description:Optional:
@@ -217,6 +224,89 @@ No + +
+ + +
+ +fs_cifs_domtrans( + + + + + domain + + + + , + + + + target_domain + + + )
+
+
+ +
Summary
+

+Execute a file on a CIFS or SMB filesystem +in the specified domain. +

+ + +
Description
+

+

+Execute a file on a CIFS or SMB filesystem +in the specified domain. This allows +the specified domain to execute any file +on these filesystems in the specified +domain. This is not suggested. +

+

+No interprocess communication (signals, pipes, +etc.) is provided by this interface since +the domains are not owned by this module. +

+

+This interface was added to handle +home directories on CIFS/SMB filesystems, +in particular used by the ssh-agent policy. +

+

+ +
Parameters
+
Parameter:Description:Optional:
+ + + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+target_domain + + +The type of the new process. + + +No +
+
+
+ +
@@ -258,6 +348,7 @@ No
+
@@ -275,13 +366,13 @@ No
- -
Description
+
Summary

Do not audit attempts to get the attributes all filesystems.

+
Parameters
@@ -300,6 +391,7 @@ No +
@@ -317,8 +409,7 @@ No
- -
Description
+
Summary

Do not audit attempts to get the attributes of a persistent @@ -326,6 +417,7 @@ filesystem which has extended attributes, such as ext3, JFS, or XFS.

+
Parameters
Parameter:Description:Optional:
@@ -344,6 +436,50 @@ No + +
+ + +
+ +fs_dontaudit_list_tmpfs( + + + + + domain + + + )
+
+
+ +
Summary
+

+Do not audit attempts to list the +contents of generic tmpfs directories. +

+ + +
Parameters
+
Parameter:Description:Optional:
+ + + + +
Parameter:Description:Optional:
+domain + + +Domain to not audit. + + +No +
+
+ + +
@@ -361,13 +497,13 @@ No
- -
Description
+
Summary

Do not audit attempts to read or write files on a CIFS or SMB filesystem.

+
Parameters
@@ -386,6 +522,7 @@ No +
@@ -403,13 +540,13 @@ No
- -
Description
+
Summary

Do not audit attempts to read or write files on a NFS filesystem.

+
Parameters
Parameter:Description:Optional:
@@ -428,6 +565,50 @@ No + +
+ + +
+ +fs_exec_noxattr( + + + + + domain + + + )
+
+
+ +
Summary
+

+Execute files on a filesystem that does +not support extended attributes. +

+ + +
Parameters
+
Parameter:Description:Optional:
+ + + + +
Parameter:Description:Optional:
+domain + + +Domain allowed access. + + +No +
+
+ + +
@@ -445,14 +626,14 @@ No
- -
Description
+
Summary

Execute files on a CIFS or SMB network filesystem, in the caller domain.

+
Parameters
@@ -471,6 +652,7 @@ No +
@@ -488,12 +670,12 @@ No
- -
Description
+
Summary

Execute files on a NFS filesystem.

+
Parameters
Parameter:Description:Optional:
@@ -512,6 +694,7 @@ No +
@@ -529,12 +712,12 @@ No
- -
Description
+
Summary

Get the quotas of all filesystems.

+
Parameters
Parameter:Description:Optional:
@@ -553,6 +736,7 @@ No +
@@ -594,6 +778,7 @@ No
+
@@ -611,13 +796,13 @@ No
- -
Description
+
Summary

Get the attributes of all persistent filesystems.

+
Parameters
Parameter:Description:Optional:
@@ -637,6 +822,7 @@ No +
@@ -654,13 +840,13 @@ No
- -
Description
+
Summary

Get the attributes of an automount pseudo filesystem.

+
Parameters
Parameter:Description:Optional:
@@ -680,6 +866,7 @@ No +
@@ -697,13 +884,13 @@ No
- -
Description
+
Summary

Get the attributes of a CIFS or SMB network filesystem.

+
Parameters
Parameter:Description:Optional:
@@ -723,6 +910,7 @@ No +
@@ -740,13 +928,13 @@ No
- -
Description
+
Summary

Get the attributes of a DOS filesystem, such as FAT32 or NTFS.

+
Parameters
Parameter:Description:Optional:
@@ -766,6 +954,7 @@ No +
@@ -783,13 +972,13 @@ No
- -
Description
+
Summary

Get the attributes of an iso9660 filesystem, which is usually used on CDs.

+
Parameters
Parameter:Description:Optional:
@@ -809,6 +998,7 @@ No +
@@ -826,12 +1016,12 @@ No
- -
Description
+
Summary

Get the attributes of a NFS filesystem.

+
Parameters
Parameter:Description:Optional:
@@ -851,6 +1041,7 @@ No +
@@ -868,13 +1059,13 @@ No
- -
Description
+
Summary

Get the attributes of a NFS server pseudo filesystem.

+
Parameters
Parameter:Description:Optional:
@@ -894,6 +1085,7 @@ No +
@@ -911,12 +1103,12 @@ No
- -
Description
+
Summary

Get the attributes of a RAM filesystem.

+
Parameters
Parameter:Description:Optional:
@@ -936,6 +1128,7 @@ No +
@@ -953,13 +1146,13 @@ No
- -
Description
+
Summary

Get the attributes of a ROM filesystem.

+
Parameters
Parameter:Description:Optional:
@@ -979,6 +1172,7 @@ No +
@@ -996,13 +1190,13 @@ No
- -
Description
+
Summary

Get the attributes of a RPC pipe filesystem.

+
Parameters
Parameter:Description:Optional:
@@ -1022,6 +1216,7 @@ No +
@@ -1039,13 +1234,13 @@ No
- -
Description
+
Summary

Get the attributes of a tmpfs filesystem.

+
Parameters
Parameter:Description:Optional:
@@ -1065,6 +1260,49 @@ No + +
+ + +
+ +fs_getattr_tmpfs_dir( + + + + + domain + + + )
+
+
+ +
Summary
+

+Get the attributes of tmpfs directories. +

+ + +
Parameters
+
Parameter:Description:Optional:
+ + + + +
Parameter:Description:Optional:
+domain + + +Domain allowed access. + + +No +
+
+ + +
@@ -1082,14 +1320,14 @@ No
- -
Description
+
Summary

Get the attributes of a persistent filesystem which has extended attributes, such as ext3, JFS, or XFS.

+
Parameters
@@ -1109,6 +1347,91 @@ No + +
+ + +
+ +fs_list_all( + + + + + domain + + + )
+
+
+ +
Summary
+

+List all directories with a filesystem type. +

+ + +
Parameters
+
Parameter:Description:Optional:
+ + + + +
Parameter:Description:Optional:
+domain + + +Domain allowed access. + + +No +
+
+ + + +
+ + +
+ +fs_list_tmpfs( + + + + + domain + + + )
+
+
+ +
Summary
+

+List the contents of generic tmpfs directories. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +Domain allowed access. + + +No +
+
+
+ +
@@ -1126,14 +1449,14 @@ No
- -
Description
+
Summary

Transform specified type into a filesystem type which does not have extended attribute support.

+
Parameters
@@ -1152,6 +1475,7 @@ No +
@@ -1169,13 +1493,13 @@ No
- -
Description
+
Summary

Create, read, write, and delete directories on a CIFS or SMB network filesystem.

+
Parameters
Parameter:Description:Optional:
@@ -1194,6 +1518,7 @@ No +
@@ -1211,13 +1536,13 @@ No
- -
Description
+
Summary

Create, read, write, and delete files on a CIFS or SMB network filesystem.

+
Parameters
Parameter:Description:Optional:
@@ -1236,6 +1561,7 @@ No +
@@ -1253,13 +1579,13 @@ No
- -
Description
+
Summary

Create, read, write, and delete named pipes on a CIFS or SMB network filesystem.

+
Parameters
Parameter:Description:Optional:
@@ -1278,6 +1604,7 @@ No +
@@ -1295,13 +1622,13 @@ No
- -
Description
+
Summary

Create, read, write, and delete named sockets on a CIFS or SMB network filesystem.

+
Parameters
Parameter:Description:Optional:
@@ -1320,6 +1647,7 @@ No +
@@ -1337,13 +1665,13 @@ No
- -
Description
+
Summary

Create, read, write, and delete symbolic links on a CIFS or SMB network filesystem.

+
Parameters
Parameter:Description:Optional:
@@ -1362,6 +1690,7 @@ No +
@@ -1379,13 +1708,13 @@ No
- -
Description
+
Summary

Create, read, write, and delete directories on a NFS filesystem.

+
Parameters
Parameter:Description:Optional:
@@ -1404,6 +1733,7 @@ No +
@@ -1421,13 +1751,13 @@ No
- -
Description
+
Summary

Create, read, write, and delete files on a NFS filesystem.

+
Parameters
Parameter:Description:Optional:
@@ -1446,6 +1776,7 @@ No +
@@ -1463,13 +1794,13 @@ No
- -
Description
+
Summary

Create, read, write, and delete named pipes on a NFS filesystem.

+
Parameters
Parameter:Description:Optional:
@@ -1488,6 +1819,7 @@ No +
@@ -1505,13 +1837,13 @@ No
- -
Description
+
Summary

Create, read, write, and delete named sockets on a NFS filesystem.

+
Parameters
Parameter:Description:Optional:
@@ -1530,6 +1862,7 @@ No +
@@ -1547,13 +1880,13 @@ No
- -
Description
+
Summary

Create, read, write, and delete symbolic links on a CIFS or SMB network filesystem.

+
Parameters
Parameter:Description:Optional:
@@ -1572,6 +1905,7 @@ No +
@@ -1589,13 +1923,13 @@ No
- -
Description
+
Summary

Read and write, create and delete block nodes on tmpfs filesystems.

+
Parameters
Parameter:Description:Optional:
@@ -1614,6 +1948,7 @@ No +
@@ -1631,13 +1966,13 @@ No
- -
Description
+
Summary

Read and write, create and delete character nodes on tmpfs filesystems.

+
Parameters
Parameter:Description:Optional:
@@ -1656,6 +1991,7 @@ No +
@@ -1673,13 +2009,13 @@ No
- -
Description
+
Summary

Read and write, create and delete socket files on tmpfs filesystems.

+
Parameters
Parameter:Description:Optional:
@@ -1698,6 +2034,7 @@ No +
@@ -1715,13 +2052,13 @@ No
- -
Description
+
Summary

Read and write, create and delete symbolic links on tmpfs filesystems.

+
Parameters
Parameter:Description:Optional:
@@ -1740,6 +2077,7 @@ No +
@@ -1757,12 +2095,12 @@ No
- -
Description
+
Summary

Mount all filesystems.

+
Parameters
Parameter:Description:Optional:
@@ -1781,6 +2119,7 @@ No +
@@ -1798,12 +2137,12 @@ No
- -
Description
+
Summary

Mount an automount pseudo filesystem.

+
Parameters
Parameter:Description:Optional:
@@ -1822,6 +2161,7 @@ No +
@@ -1839,12 +2179,12 @@ No
- -
Description
+
Summary

Mount a CIFS or SMB network filesystem.

+
Parameters
Parameter:Description:Optional:
@@ -1863,6 +2203,7 @@ No +
@@ -1880,13 +2221,13 @@ No
- -
Description
+
Summary

Mount a DOS filesystem, such as FAT32 or NTFS.

+
Parameters
Parameter:Description:Optional:
@@ -1905,6 +2246,7 @@ No +
@@ -1922,13 +2264,13 @@ No
- -
Description
+
Summary

Mount an iso9660 filesystem, which is usually used on CDs.

+
Parameters
Parameter:Description:Optional:
@@ -1947,6 +2289,7 @@ No +
@@ -1964,12 +2307,12 @@ No
- -
Description
+
Summary

Mount a NFS filesystem.

+
Parameters
Parameter:Description:Optional:
@@ -1988,6 +2331,7 @@ No +
@@ -2005,12 +2349,12 @@ No
- -
Description
+
Summary

Mount a NFS server pseudo filesystem.

+
Parameters
Parameter:Description:Optional:
@@ -2029,6 +2373,7 @@ No +
@@ -2046,12 +2391,12 @@ No
- -
Description
+
Summary

Mount a RAM filesystem.

+
Parameters
Parameter:Description:Optional:
@@ -2070,6 +2415,7 @@ No +
@@ -2087,12 +2433,12 @@ No
- -
Description
+
Summary

Mount a ROM filesystem.

+
Parameters
Parameter:Description:Optional:
@@ -2111,6 +2457,7 @@ No +
@@ -2128,12 +2475,12 @@ No
- -
Description
+
Summary

Mount a RPC pipe filesystem.

+
Parameters
Parameter:Description:Optional:
@@ -2152,6 +2499,7 @@ No +
@@ -2169,12 +2517,12 @@ No
- -
Description
+
Summary

Mount a tmpfs filesystem.

+
Parameters
Parameter:Description:Optional:
@@ -2193,6 +2541,7 @@ No +
@@ -2210,14 +2559,14 @@ No
- -
Description
+
Summary

Mount a persistent filesystem which has extended attributes, such as ext3, JFS, or XFS.

+
Parameters
Parameter:Description:Optional:
@@ -2236,6 +2585,89 @@ No + +
+ + +
+ +fs_nfs_domtrans( + + + + + domain + + + + , + + + + target_domain + + + )
+
+
+ +
Summary
+

+Execute a file on a NFS filesystem +in the specified domain. +

+ + +
Description
+

+

+Execute a file on a NFS filesystem +in the specified domain. This allows +the specified domain to execute any file +on a NFS filesystem in the specified +domain. This is not suggested. +

+

+No interprocess communication (signals, pipes, +etc.) is provided by this interface since +the domains are not owned by this module. +

+

+This interface was added to handle +home directories on NFS filesystems, +in particular used by the ssh-agent policy. +

+

+ +
Parameters
+
Parameter:Description:Optional:
+ + + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+target_domain + + +The type of the new process. + + +No +
+
+ + +
@@ -2253,12 +2685,12 @@ No
- -
Description
+
Summary

Read files on a CIFS or SMB filesystem.

+
Parameters
@@ -2277,6 +2709,7 @@ No +
@@ -2294,13 +2727,13 @@ No
- -
Description
+
Summary

Do not audit attempts to read or write files on a CIFS or SMB filesystems.

+
Parameters
Parameter:Description:Optional:
@@ -2319,6 +2752,7 @@ No +
@@ -2336,12 +2770,12 @@ No
- -
Description
+
Summary

Read symbolic links on a CIFS or SMB filesystem.

+
Parameters
Parameter:Description:Optional:
@@ -2360,6 +2794,7 @@ No +
@@ -2377,12 +2812,12 @@ No
- -
Description
+
Summary

Read files on a NFS filesystem.

+
Parameters
Parameter:Description:Optional:
@@ -2401,6 +2836,7 @@ No +
@@ -2418,12 +2854,12 @@ No
- -
Description
+
Summary

Read symbolic links on a NFS filesystem.

+
Parameters
Parameter:Description:Optional:
@@ -2442,6 +2878,7 @@ No +
@@ -2459,8 +2896,7 @@ No
- -
Description
+
Summary

Register an interpreter for new binary file types, using the kernel binfmt_misc @@ -2471,6 +2907,7 @@ can be directly executed on a command line without specifying the interpreter.

+
Parameters
Parameter:Description:Optional:
@@ -2490,6 +2927,7 @@ No +
@@ -2507,12 +2945,12 @@ No
- -
Description
+
Summary

Relabel block nodes on tmpfs filesystems.

+
Parameters
Parameter:Description:Optional:
@@ -2531,6 +2969,7 @@ No +
@@ -2548,12 +2987,12 @@ No
- -
Description
+
Summary

Relabel character nodes on tmpfs filesystems.

+
Parameters
Parameter:Description:Optional:
@@ -2572,6 +3011,7 @@ No +
@@ -2589,13 +3029,13 @@ No
- -
Description
+
Summary

Allow changing of the label of a DOS filesystem using the context= mount option.

+
Parameters
Parameter:Description:Optional:
@@ -2614,6 +3054,7 @@ No +
@@ -2631,14 +3072,14 @@ No
- -
Description
+
Summary

Allow changing of the label of a filesystem with extended attributes using the context= mount option.

+
Parameters
Parameter:Description:Optional:
@@ -2657,6 +3098,7 @@ No +
@@ -2674,13 +3116,13 @@ No
- -
Description
+
Summary

Remount all filesystems. This allows some mount options to be changed.

+
Parameters
Parameter:Description:Optional:
@@ -2699,6 +3141,7 @@ No +
@@ -2716,13 +3159,13 @@ No
- -
Description
+
Summary

Remount an automount pseudo filesystem This allows some mount options to be changed.

+
Parameters
Parameter:Description:Optional:
@@ -2741,6 +3184,7 @@ No +
@@ -2758,13 +3202,13 @@ No
- -
Description
+
Summary

Remount a CIFS or SMB network filesystem. This allows some mount options to be changed.

+
Parameters
Parameter:Description:Optional:
@@ -2783,6 +3227,7 @@ No +
@@ -2800,14 +3245,14 @@ No
- -
Description
+
Summary

Remount a DOS filesystem, such as FAT32 or NTFS. This allows some mount options to be changed.

+
Parameters
Parameter:Description:Optional:
@@ -2826,6 +3271,7 @@ No +
@@ -2843,14 +3289,14 @@ No
- -
Description
+
Summary

Remount an iso9660 filesystem, which is usually used on CDs. This allows some mount options to be changed.

+
Parameters
Parameter:Description:Optional:
@@ -2869,6 +3315,7 @@ No +
@@ -2886,13 +3333,13 @@ No
- -
Description
+
Summary

Remount a NFS filesystem. This allows some mount options to be changed.

+
Parameters
Parameter:Description:Optional:
@@ -2911,6 +3358,7 @@ No +
@@ -2928,13 +3376,13 @@ No
- -
Description
+
Summary

Mount a NFS server pseudo filesystem. This allows some mount options to be changed.

+
Parameters
Parameter:Description:Optional:
@@ -2953,6 +3401,7 @@ No +
@@ -2970,13 +3419,13 @@ No
- -
Description
+
Summary

Remount a RAM filesystem. This allows some mount options to be changed.

+
Parameters
Parameter:Description:Optional:
@@ -2995,6 +3444,7 @@ No +
@@ -3012,13 +3462,13 @@ No
- -
Description
+
Summary

Remount a ROM filesystem. This allows some mount options to be changed.

+
Parameters
Parameter:Description:Optional:
@@ -3037,6 +3487,7 @@ No +
@@ -3054,13 +3505,13 @@ No
- -
Description
+
Summary

Remount a RPC pipe filesystem. This allows some mount option to be changed.

+
Parameters
Parameter:Description:Optional:
@@ -3079,6 +3530,7 @@ No +
@@ -3096,12 +3548,12 @@ No
- -
Description
+
Summary

Remount a tmpfs filesystem.

+
Parameters
Parameter:Description:Optional:
@@ -3120,6 +3572,7 @@ No +
@@ -3137,8 +3590,7 @@ No
- -
Description
+
Summary

Remount a persistent filesystem which has extended attributes, such as @@ -3146,6 +3598,7 @@ ext3, JFS, or XFS. This allows some mount options to be changed.

+
Parameters
Parameter:Description:Optional:
@@ -3164,6 +3617,7 @@ No +
@@ -3206,6 +3660,49 @@ No
+ +
+ + +
+ +fs_search_tmpfs( + + + + + domain + + + )
+
+
+ +
Summary
+

+Search tmpfs directories. +

+ + +
Parameters
+
Parameter:Description:Optional:
+ + + + +
Parameter:Description:Optional:
+domain + + +Domain allowed access. + + +No +
+
+ + +
@@ -3223,12 +3720,12 @@ No
- -
Description
+
Summary

Set the quotas of all filesystems.

+
Parameters
@@ -3247,6 +3744,49 @@ No + +
+ + +
+ +fs_setattr_tmpfs_dir( + + + + + domain + + + )
+
+
+ +
Summary
+

+Set the attributes of tmpfs directories. +

+ + +
Parameters
+
Parameter:Description:Optional:
+ + + + +
Parameter:Description:Optional:
+domain + + +Domain allowed access. + + +No +
+
+ + +
@@ -3264,12 +3804,12 @@ No
- -
Description
+
Summary

Transform specified type into a filesystem type.

+
Parameters
@@ -3288,6 +3828,7 @@ No +
@@ -3329,6 +3870,7 @@ No
+
@@ -3346,12 +3888,12 @@ No
- -
Description
+
Summary

Unmount all filesystems.

+
Parameters
Parameter:Description:Optional:
@@ -3370,6 +3912,7 @@ No +
@@ -3387,12 +3930,12 @@ No
- -
Description
+
Summary

Unmount an automount pseudo filesystem.

+
Parameters
Parameter:Description:Optional:
@@ -3411,6 +3954,7 @@ No +
@@ -3428,12 +3972,12 @@ No
- -
Description
+
Summary

Unmount a CIFS or SMB network filesystem.

+
Parameters
Parameter:Description:Optional:
@@ -3452,6 +3996,7 @@ No +
@@ -3469,13 +4014,13 @@ No
- -
Description
+
Summary

Unmount a DOS filesystem, such as FAT32 or NTFS.

+
Parameters
Parameter:Description:Optional:
@@ -3494,6 +4039,7 @@ No +
@@ -3511,13 +4057,13 @@ No
- -
Description
+
Summary

Unmount an iso9660 filesystem, which is usually used on CDs.

+
Parameters
Parameter:Description:Optional:
@@ -3536,6 +4082,7 @@ No +
@@ -3553,12 +4100,12 @@ No
- -
Description
+
Summary

Unmount a NFS filesystem.

+
Parameters
Parameter:Description:Optional:
@@ -3577,6 +4124,7 @@ No +
@@ -3594,12 +4142,12 @@ No
- -
Description
+
Summary

Unmount a NFS server pseudo filesystem.

+
Parameters
Parameter:Description:Optional:
@@ -3618,6 +4166,7 @@ No +
@@ -3635,12 +4184,12 @@ No
- -
Description
+
Summary

Unmount a RAM filesystem.

+
Parameters
Parameter:Description:Optional:
@@ -3659,6 +4208,7 @@ No +
@@ -3676,12 +4226,12 @@ No
- -
Description
+
Summary

Unmount a ROM filesystem.

+
Parameters
Parameter:Description:Optional:
@@ -3700,6 +4250,7 @@ No +
@@ -3717,12 +4268,12 @@ No
- -
Description
+
Summary

Unmount a RPC pipe filesystem.

+
Parameters
Parameter:Description:Optional:
@@ -3741,6 +4292,7 @@ No +
@@ -3758,12 +4310,12 @@ No
- -
Description
+
Summary

Unmount a tmpfs filesystem.

+
Parameters
Parameter:Description:Optional:
@@ -3782,6 +4334,7 @@ No +
@@ -3799,14 +4352,14 @@ No
- -
Description
+
Summary

Unmount a persistent filesystem which has extended attributes, such as ext3, JFS, or XFS.

+
Parameters
Parameter:Description:Optional:
@@ -3825,6 +4378,7 @@ No +
@@ -3842,12 +4396,12 @@ No
- -
Description
+
Summary

Read and write block nodes on tmpfs filesystems.

+
Parameters
Parameter:Description:Optional:
@@ -3866,6 +4420,7 @@ No +
@@ -3883,12 +4438,12 @@ No
- -
Description
+
Summary

Read and write character nodes on tmpfs filesystems.

+
Parameters
Parameter:Description:Optional:
diff --git a/www/api-docs/kernel_kernel.html b/www/api-docs/kernel_kernel.html index f2594a2c..2c9989bb 100644 --- a/www/api-docs/kernel_kernel.html +++ b/www/api-docs/kernel_kernel.html @@ -64,9 +64,15 @@

- * Interface Index + * Global Booleans 

- * Template Index + * Global Tunables  +


+ * Layer Index +

+ * Interface Index +

+ * Template Index

@@ -74,8 +80,6 @@

Layer: kernel

Module: kernel

- -

Description:

@@ -89,6 +93,7 @@ Policy for kernel threads, proc filesystem,and unlabeled processes and objects.

Interfaces:

+
@@ -130,6 +135,7 @@ No
+
@@ -147,12 +153,12 @@ No
- -
Description
+
Summary

Allows the caller to clear the ring buffer.

+
Parameters
Parameter:Description:Optional:
@@ -171,6 +177,7 @@ No +
@@ -188,13 +195,13 @@ No
- -
Description
+
Summary

Do not audit attempts to get the attributes of core kernel interfaces.

+
Parameters
Parameter:Description:Optional:
@@ -213,6 +220,7 @@ No +
@@ -230,13 +238,13 @@ No
- -
Description
+
Summary

Do not audit attempts by caller to get the attributes of kernel message interfaces.

+
Parameters
Parameter:Description:Optional:
@@ -255,6 +263,7 @@ No +
@@ -272,13 +281,13 @@ No
- -
Description
+
Summary

Do not audit attempts by caller to get attributes for unlabeled block devices.

+
Parameters
Parameter:Description:Optional:
@@ -297,6 +306,7 @@ No +
@@ -314,12 +324,12 @@ No
- -
Description
+
Summary

Do not audit attempts to read the ring buffer.

+
Parameters
Parameter:Description:Optional:
@@ -338,6 +348,7 @@ No +
@@ -355,13 +366,13 @@ No
- -
Description
+
Summary

Do not audit attempts by caller to -read system state information. +read system state information in proc.

+
Parameters
Parameter:Description:Optional:
@@ -380,6 +391,7 @@ No +
@@ -397,12 +409,12 @@ No
- -
Description
+
Summary

Do not audit attempts by caller to search sysctl network directories.

+
Parameters
Parameter:Description:Optional:
@@ -421,6 +433,7 @@ No +
@@ -438,12 +451,12 @@ No
- -
Description
+
Summary

Do not audit attempts by caller to search the sysctl directory.

+
Parameters
Parameter:Description:Optional:
@@ -462,6 +475,7 @@ No +
@@ -479,13 +493,13 @@ No
- -
Description
+
Summary

Do not audit attempts to use kernel file descriptors.

+
Parameters
Parameter:Description:Optional:
@@ -504,6 +518,7 @@ No +
@@ -521,12 +536,12 @@ No
- -
Description
+
Summary

Get information on all System V IPC objects.

+
Parameters
Parameter:Description:Optional:
@@ -545,6 +560,7 @@ No +
@@ -562,12 +578,12 @@ No
- -
Description
+
Summary

Allows caller to get attribues of core kernel interface.

+
Parameters
Parameter:Description:Optional:
@@ -586,6 +602,7 @@ No +
@@ -603,13 +620,13 @@ No
- -
Description
+
Summary

Allow caller to get the attributes of kernel message interface (/proc/kmsg).

+
Parameters
Parameter:Description:Optional:
@@ -628,6 +645,49 @@ No + +
+ + +
+ +kernel_getattr_proc( + + + + + domain + + + )
+
+
+ +
Summary
+

+Get the attributes of the proc filesystem. +

+ + +
Parameters
+
Parameter:Description:Optional:
+ + + + +
Parameter:Description:Optional:
+domain + + +Domain allowed access. + + +No +
+
+ + +
@@ -645,12 +705,12 @@ No
- -
Description
+
Summary

Send a kill signal to unlabeled processes.

+
Parameters
@@ -669,6 +729,91 @@ No + +
+ + +
+ +kernel_list_proc( + + + + + domain + + + )
+
+
+ +
Summary
+

+List the contents of directories in /proc. +

+ + +
Parameters
+
Parameter:Description:Optional:
+ + + + +
Parameter:Description:Optional:
+domain + + +Domain allowed access. + + +No +
+
+ + + +
+ + +
+ +kernel_list_unlabeled( + + + + + domain + + + )
+
+
+ +
Summary
+

+List unlabeled directories. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +Domain allowed access. + + +No +
+
+
+ +
@@ -686,12 +831,12 @@ No
- -
Description
+
Summary

Allows caller to load kernel modules

+
Parameters
@@ -710,6 +855,7 @@ No +
@@ -727,12 +873,12 @@ No
- -
Description
+
Summary

Allow caller to read all sysctls.

+
Parameters
Parameter:Description:Optional:
@@ -751,6 +897,7 @@ No +
@@ -768,12 +915,12 @@ No
- -
Description
+
Summary

Allow caller to read the device sysctls.

+
Parameters
Parameter:Description:Optional:
@@ -792,6 +939,7 @@ No +
@@ -809,12 +957,12 @@ No
- -
Description
+
Summary

Read filesystem sysctls.

+
Parameters
Parameter:Description:Optional:
@@ -833,6 +981,7 @@ No +
@@ -850,12 +999,12 @@ No
- -
Description
+
Summary

Read the hotplug sysctl.

+
Parameters
Parameter:Description:Optional:
@@ -874,6 +1023,7 @@ No +
@@ -891,12 +1041,12 @@ No
- -
Description
+
Summary

Read IRQ sysctls.

+
Parameters
Parameter:Description:Optional:
@@ -915,6 +1065,7 @@ No +
@@ -932,12 +1083,12 @@ No
- -
Description
+
Summary

Read generic kernel sysctls.

+
Parameters
Parameter:Description:Optional:
@@ -956,6 +1107,7 @@ No +
@@ -973,13 +1125,13 @@ No
- -
Description
+
Summary

Allow caller to read kernel messages using the /proc/kmsg interface.

+
Parameters
Parameter:Description:Optional:
@@ -998,6 +1150,7 @@ No +
@@ -1015,12 +1168,12 @@ No
- -
Description
+
Summary

Read the modprobe sysctl.

+
Parameters
Parameter:Description:Optional:
@@ -1039,6 +1192,7 @@ No +
@@ -1056,12 +1210,12 @@ No
- -
Description
+
Summary

Allow caller to read network sysctls.

+
Parameters
Parameter:Description:Optional:
@@ -1080,6 +1234,7 @@ No +
@@ -1097,12 +1252,12 @@ No
- -
Description
+
Summary

Allow caller to read the network state information.

+
Parameters
Parameter:Description:Optional:
@@ -1121,6 +1276,49 @@ No + +
+ + +
+ +kernel_read_proc_symlinks( + + + + + domain + + + )
+
+
+ +
Summary
+

+Read symbolic links in /proc. +

+ + +
Parameters
+
Parameter:Description:Optional:
+ + + + +
Parameter:Description:Optional:
+domain + + +Domain allowed access. + + +No +
+
+ + +
@@ -1138,12 +1336,12 @@ No
- -
Description
+
Summary

Allows caller to read the ring buffer.

+
Parameters
@@ -1162,6 +1360,7 @@ No +
@@ -1203,6 +1402,7 @@ No
+
@@ -1220,12 +1420,12 @@ No
- -
Description
+
Summary

Allow caller to read the state information for software raid.

+
Parameters
Parameter:Description:Optional:
@@ -1244,6 +1444,7 @@ No +
@@ -1261,12 +1462,12 @@ No
- -
Description
+
Summary

-Allows caller to read system state information. +Allows caller to read system state information in proc.

+
Parameters
Parameter:Description:Optional:
@@ -1285,6 +1486,7 @@ No +
@@ -1302,13 +1504,13 @@ No
- -
Description
+
Summary

Allow caller to read unix domain socket sysctls.

+
Parameters
Parameter:Description:Optional:
@@ -1327,6 +1529,7 @@ No +
@@ -1344,12 +1547,12 @@ No
- -
Description
+
Summary

Allow caller to read virtual memory sysctls.

+
Parameters
Parameter:Description:Optional:
@@ -1368,6 +1571,7 @@ No +
@@ -1385,12 +1589,12 @@ No
- -
Description
+
Summary

Allow caller to relabel unlabeled objects.

+
Parameters
Parameter:Description:Optional:
@@ -1409,6 +1613,7 @@ No +
@@ -1426,13 +1631,13 @@ No
- -
Description
+
Summary

Allows the kernel to mount filesystems on the specified directory type.

+
Parameters
Parameter:Description:Optional:
@@ -1451,6 +1656,7 @@ No +
@@ -1468,12 +1674,12 @@ No
- -
Description
+
Summary

Read and write all sysctls.

+
Parameters
Parameter:Description:Optional:
@@ -1492,6 +1698,7 @@ No +
@@ -1509,12 +1716,12 @@ No
- -
Description
+
Summary

Read and write device sysctls.

+
Parameters
Parameter:Description:Optional:
@@ -1533,6 +1740,7 @@ No +
@@ -1550,12 +1758,12 @@ No
- -
Description
+
Summary

Read and write fileystem sysctls.

+
Parameters
Parameter:Description:Optional:
@@ -1574,6 +1782,7 @@ No +
@@ -1591,12 +1800,12 @@ No
- -
Description
+
Summary

Read and write the hotplug sysctl.

+
Parameters
Parameter:Description:Optional:
@@ -1615,6 +1824,7 @@ No +
@@ -1632,12 +1842,12 @@ No
- -
Description
+
Summary

Read and write IRQ sysctls.

+
Parameters
Parameter:Description:Optional:
@@ -1656,6 +1866,7 @@ No +
@@ -1673,12 +1884,12 @@ No
- -
Description
+
Summary

Read and write generic kernel sysctls.

+
Parameters
Parameter:Description:Optional:
@@ -1697,6 +1908,7 @@ No +
@@ -1714,12 +1926,12 @@ No
- -
Description
+
Summary

Read and write the modprobe sysctl.

+
Parameters
Parameter:Description:Optional:
@@ -1738,6 +1950,7 @@ No +
@@ -1755,12 +1968,12 @@ No
- -
Description
+
Summary

Allow caller to modiry contents of sysctl network files.

+
Parameters
Parameter:Description:Optional:
@@ -1779,6 +1992,49 @@ No + +
+ + +
+ +kernel_rw_pipe( + + + + + domain + + + )
+
+
+ +
Summary
+

+Read and write kernel unnamed pipes. +

+ + +
Parameters
+
Parameter:Description:Optional:
+ + + + +
Parameter:Description:Optional:
+domain + + +Domain allowed access. + + +No +
+
+ + +
@@ -1820,6 +2076,91 @@ No
+ +
+ + +
+ +kernel_rw_software_raid_state( + + + + + domain + + + )
+
+
+ +
Summary
+

+Allow caller to read and set the state information for software raid. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The process type reading software raid state. + + +No +
+
+
+ + +
+ + +
+ +kernel_rw_unix_dgram_socket( + + + + + domain + + + )
+
+
+ +
Summary
+

+Read and write kernel unix datagram sockets. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +Domain allowed access. + + +No +
+
+
+ +
@@ -1837,13 +2178,13 @@ No
- -
Description
+
Summary

Read and write unix domain socket sysctls.

+
Parameters
@@ -1862,6 +2203,49 @@ No + +
+ + +
+ +kernel_rw_unlabeled_dir( + + + + + domain + + + )
+
+
+ +
Summary
+

+Read and write unlabeled directories. +

+ + +
Parameters
+
Parameter:Description:Optional:
+ + + + +
Parameter:Description:Optional:
+domain + + +Domain allowed access. + + +No +
+
+ + +
@@ -1879,12 +2263,12 @@ No
- -
Description
+
Summary

Read and write virtual memory sysctls.

+
Parameters
@@ -1903,6 +2287,91 @@ No + +
+ + +
+ +kernel_search_proc( + + + + + domain + + + )
+
+
+ +
Summary
+

+Search directories in /proc. +

+ + +
Parameters
+
Parameter:Description:Optional:
+ + + + +
Parameter:Description:Optional:
+domain + + +Domain allowed access. + + +No +
+
+ + + +
+ + +
+ +kernel_sendto_unix_dgram_socket( + + + + + domain + + + )
+
+
+ +
Summary
+

+Send messages to kernel unix datagram sockets. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +Domain allowed access. + + +No +
+
+
+ +
@@ -1920,13 +2389,13 @@ No
- -
Description
+
Summary

Allows the kernel to share state information with the caller.

+
Parameters
@@ -1945,6 +2414,7 @@ No +
@@ -1962,12 +2432,12 @@ No
- -
Description
+
Summary

Send a SIGCHLD signal to kernel threads.

+
Parameters
Parameter:Description:Optional:
@@ -1986,6 +2456,7 @@ No +
@@ -2003,12 +2474,12 @@ No
- -
Description
+
Summary

Send a child terminated signal to unlabeled processes.

+
Parameters
Parameter:Description:Optional:
@@ -2027,6 +2498,7 @@ No +
@@ -2044,12 +2516,12 @@ No
- -
Description
+
Summary

Send general signals to unlabeled processes.

+
Parameters
Parameter:Description:Optional:
@@ -2068,6 +2540,7 @@ No +
@@ -2085,12 +2558,12 @@ No
- -
Description
+
Summary

Send a null signal to unlabeled processes.

+
Parameters
Parameter:Description:Optional:
@@ -2109,6 +2582,7 @@ No +
@@ -2126,12 +2600,12 @@ No
- -
Description
+
Summary

Send a stop signal to unlabeled processes.

+
Parameters
Parameter:Description:Optional:
@@ -2150,6 +2624,91 @@ No + +
+ + +
+ +kernel_tcp_recvfrom( + + + + + domain + + + )
+
+
+ +
Summary
+

+Receive messages from kernel TCP sockets. +

+ + +
Parameters
+
Parameter:Description:Optional:
+ + + + +
Parameter:Description:Optional:
+domain + + +Domain allowed access. + + +No +
+
+ + + +
+ + +
+ +kernel_udp_recvfrom( + + + + + domain + + + )
+
+
+ +
Summary
+

+Receive messages from kernel UDP sockets. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +Domain allowed access. + + +No +
+
+
+ +
@@ -2191,6 +2750,7 @@ No
+
@@ -2208,12 +2768,12 @@ No
- -
Description
+
Summary

Permits caller to use kernel file descriptors.

+
Parameters
@@ -2232,6 +2792,49 @@ No + +
+ + +
+ +kernel_use_unlabeled_blk_dev( + + + + + domain + + + )
+
+
+ +
Summary
+

+Read and write unlabeled block device nodes. +

+ + +
Parameters
+
Parameter:Description:Optional:
+ + + + +
Parameter:Description:Optional:
+domain + + +Domain allowed access. + + +No +
+
+ + +
@@ -2257,13 +2860,13 @@ No
- -
Description
+
Summary

Allows to start userland processes by transitioning to the specified domain.

+
Parameters
diff --git a/www/api-docs/kernel_selinux.html b/www/api-docs/kernel_selinux.html index b6914417..be0e5102 100644 --- a/www/api-docs/kernel_selinux.html +++ b/www/api-docs/kernel_selinux.html @@ -64,9 +64,15 @@

- * Interface Index + * Global Booleans 

- * Template Index + * Global Tunables  +


+ * Layer Index +

+ * Interface Index +

+ * Template Index

@@ -74,8 +80,6 @@

Layer: kernel

Module: selinux

- -

Description:

@@ -89,6 +93,7 @@ Policy for kernel security interface, in particular, selinuxfs.

Interfaces:

+
@@ -106,12 +111,12 @@ Policy for kernel security interface, in particular, selinuxfs.
- -
Description
+
Summary

Allows caller to compute an access vector.

+
Parameters
Parameter:Description:Optional:
@@ -130,6 +135,7 @@ No +
@@ -147,12 +153,12 @@ No
- -
Description
+
Summary

+
Parameters
Parameter:Description:Optional:
@@ -171,6 +177,7 @@ No +
@@ -188,12 +195,12 @@ No
- -
Description
+
Summary

+
Parameters
Parameter:Description:Optional:
@@ -212,6 +219,7 @@ No +
@@ -229,12 +237,12 @@ No
- -
Description
+
Summary

Allows caller to compute possible contexts for a user.

+
Parameters
Parameter:Description:Optional:
@@ -253,6 +261,49 @@ No + +
+ + +
+ +selinux_dontaudit_search_fs( + + + + + domain + + + )
+
+
+ +
Summary
+

+Do not audit attempts to search selinuxfs. +

+ + +
Parameters
+
Parameter:Description:Optional:
+ + + + +
Parameter:Description:Optional:
+domain + + +Domain to not audit. + + +No +
+
+ + +
@@ -270,13 +321,13 @@ No
- -
Description
+
Summary

Allows the caller to get the mode of policy enforcement (enforcing or permissive mode).

+
Parameters
@@ -295,6 +346,7 @@ No +
@@ -312,12 +364,12 @@ No
- -
Description
+
Summary

Gets the caller the mountpoint of the selinuxfs filesystem.

+
Parameters
Parameter:Description:Optional:
@@ -336,6 +388,7 @@ No +
@@ -353,12 +406,12 @@ No
- -
Description
+
Summary

Allow caller to load the policy into the kernel.

+
Parameters
Parameter:Description:Optional:
@@ -377,6 +430,7 @@ No +
@@ -406,13 +460,13 @@ No
- -
Description
+
Summary

Allow caller to set the state of Booleans to enable or disable conditional portions of the policy.

+
Parameters
Parameter:Description:Optional:
@@ -441,6 +495,7 @@ yes +
@@ -458,13 +513,13 @@ yes
- -
Description
+
Summary

Allow caller to set the mode of policy enforcement (enforcing or permissive mode).

+
Parameters
Parameter:Description:Optional:
@@ -483,6 +538,7 @@ No +
@@ -500,12 +556,12 @@ No
- -
Description
+
Summary

Allow caller to set selinux security parameters.

+
Parameters
Parameter:Description:Optional:
@@ -524,6 +580,7 @@ No +
@@ -541,12 +598,12 @@ No
- -
Description
+
Summary

Unconfined access to the SELinux security server.

+
Parameters
Parameter:Description:Optional:
@@ -565,6 +622,7 @@ No +
@@ -582,12 +640,12 @@ No
- -
Description
+
Summary

Allows caller to validate security contexts.

+
Parameters
Parameter:Description:Optional:
diff --git a/www/api-docs/kernel_storage.html b/www/api-docs/kernel_storage.html index 61332b5d..a7ac52f2 100644 --- a/www/api-docs/kernel_storage.html +++ b/www/api-docs/kernel_storage.html @@ -64,9 +64,15 @@

- * Interface Index + * Global Booleans 

- * Template Index + * Global Tunables  +


+ * Layer Index +

+ * Interface Index +

+ * Template Index

@@ -74,8 +80,6 @@

Layer: kernel

Module: storage

- -

Description:

Policy controlling access to storage devices

@@ -85,6 +89,7 @@

Interfaces:

+
@@ -126,6 +131,49 @@ No
+ +
+ + +
+ +storage_create_fixed_disk_tmpfs( + + + + + domain + + + )
+
+
+ +
Summary
+

+Create fixed disk device nodes on a tmpfs filesystem. +

+ + +
Parameters
+
Parameter:Description:Optional:
+ + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+ + +
@@ -168,6 +216,7 @@ No
+
@@ -210,6 +259,7 @@ No
+
@@ -252,6 +302,7 @@ No
+
@@ -294,6 +345,7 @@ No
+
@@ -336,6 +388,7 @@ No
+
@@ -378,6 +431,7 @@ No
+
@@ -420,6 +474,7 @@ No
+
@@ -462,6 +517,7 @@ No
+
@@ -504,6 +560,7 @@ No
+
@@ -545,6 +602,7 @@ No
+
@@ -589,6 +647,7 @@ No
+
@@ -633,6 +692,7 @@ No
+
@@ -678,6 +738,7 @@ No
+
@@ -722,6 +783,7 @@ No
+
@@ -766,6 +828,7 @@ No
+
@@ -811,6 +874,7 @@ No
+
@@ -856,6 +920,7 @@ No
+
@@ -898,6 +963,7 @@ No
+
@@ -939,6 +1005,7 @@ No
+
@@ -981,6 +1048,7 @@ No
+
@@ -1023,6 +1091,7 @@ No
+
@@ -1065,6 +1134,7 @@ No
+
@@ -1107,6 +1177,7 @@ No
+
@@ -1149,6 +1220,7 @@ No
+
@@ -1190,6 +1262,7 @@ No
+
@@ -1231,6 +1304,7 @@ No
+
@@ -1276,6 +1350,7 @@ No
+
diff --git a/www/api-docs/kernel_terminal.html b/www/api-docs/kernel_terminal.html index 86b74855..1d7ed1cd 100644 --- a/www/api-docs/kernel_terminal.html +++ b/www/api-docs/kernel_terminal.html @@ -64,9 +64,15 @@

- * Interface Index + * Global Booleans 

- * Template Index + * Global Tunables  +


+ * Layer Index +

+ * Interface Index +

+ * Template Index

@@ -74,8 +80,6 @@

Layer: kernel

Module: terminal

- -

Description:

Policy for terminals.

@@ -85,6 +89,7 @@

Interfaces:

+
@@ -144,6 +149,51 @@ No
+ +
+ + +
+ +term_dontaudit_getattr_all_user_ptys( + + + + + domain + + + )
+
+
+ + +
Description
+

+Do not audit attempts to get the +attributes of any user pty +device nodes. +

+ +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ +
@@ -187,6 +237,50 @@ No
+ +
+ + +
+ +term_dontaudit_getattr_unallocated_ttys( + + + + + domain + + + )
+
+
+ + +
Description
+

+Do not audit attempts to get the attributes +of all unallocated tty device nodes. +

+ +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ +
@@ -229,6 +323,7 @@ No
+
@@ -271,6 +366,7 @@ No
+
@@ -313,6 +409,7 @@ No
+
@@ -355,6 +452,7 @@ No
+
@@ -398,6 +496,7 @@ No
+
@@ -440,6 +539,7 @@ No
+
@@ -482,6 +582,7 @@ No
+
@@ -524,6 +625,7 @@ No
+
@@ -566,6 +668,7 @@ No
+
@@ -608,6 +711,7 @@ No
+
@@ -650,6 +754,7 @@ No
+
@@ -692,6 +797,7 @@ No
+
@@ -733,6 +839,7 @@ No
+
@@ -775,6 +882,7 @@ No
+
@@ -817,6 +925,7 @@ No
+
@@ -859,6 +968,49 @@ No
+ +
+ + +
+ +term_relabelto_all_user_ptys( + + + + + domain + + + )
+
+
+ +
Summary
+

+Relabel to all user ptys. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ +
@@ -901,6 +1053,50 @@ No
+ +
+ + +
+ +term_setattr_all_user_ptys( + + + + + domain + + + )
+
+
+ +
Summary
+

+Set the attributes of all user +pty device nodes. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ +
@@ -943,6 +1139,7 @@ No
+
@@ -985,6 +1182,7 @@ No
+
@@ -1027,6 +1225,7 @@ No
+
@@ -1068,6 +1267,7 @@ No
+
@@ -1110,6 +1310,7 @@ No
+
@@ -1151,6 +1352,7 @@ No
+
@@ -1192,6 +1394,7 @@ No
+
@@ -1233,6 +1436,7 @@ No
+
@@ -1275,6 +1479,7 @@ No
+
@@ -1318,6 +1523,7 @@ No
+
@@ -1359,6 +1565,7 @@ No
+
@@ -1421,6 +1628,7 @@ No
+
@@ -1462,6 +1670,7 @@ No
+
@@ -1503,6 +1712,7 @@ No
+
diff --git a/www/api-docs/services.html b/www/api-docs/services.html index 72329aac..cdb02aaf 100644 --- a/www/api-docs/services.html +++ b/www/api-docs/services.html @@ -46,6 +46,9 @@    -  nis
+    -  + nscd
+    -  remotelogin
@@ -64,15 +67,27 @@

- * Interface Index + * Global Booleans 

- * Template Index + * Global Tunables  +


+ * Layer Index +

+ * Interface Index +

+ * Template Index

Layer: services

+

+ Policy modules for system services, like cron, and network services, + like sshd. +


+ + @@ -111,6 +126,11 @@ nis + + + diff --git a/www/api-docs/services_cron.html b/www/api-docs/services_cron.html index 7b6981bb..10056272 100644 --- a/www/api-docs/services_cron.html +++ b/www/api-docs/services_cron.html @@ -46,6 +46,9 @@    -  nis
+    -  + nscd
+    -  remotelogin
@@ -64,9 +67,15 @@

- * Interface Index + * Global Booleans 

- * Template Index + * Global Tunables  +


+ * Layer Index +

+ * Interface Index +

+ * Template Index

@@ -74,11 +83,9 @@

Layer: services

Module: cron

- Interfaces Templates -

Description:

Periodic execution of scheduled commands.

@@ -88,6 +95,7 @@

Interfaces:

+
@@ -129,6 +137,7 @@ No
+
@@ -170,6 +179,7 @@ No
+
@@ -211,6 +221,7 @@ No
+
@@ -278,6 +289,7 @@ No

Templates:

+
@@ -328,6 +340,7 @@ No
+
diff --git a/www/api-docs/services_inetd.html b/www/api-docs/services_inetd.html index 1e0009c5..4fe1bca3 100644 --- a/www/api-docs/services_inetd.html +++ b/www/api-docs/services_inetd.html @@ -46,6 +46,9 @@    -  nis
+    -  + nscd
+    -  remotelogin
@@ -64,9 +67,15 @@

- * Interface Index + * Global Booleans 

- * Template Index + * Global Tunables  +


+ * Layer Index +

+ * Interface Index +

+ * Template Index

@@ -74,8 +83,6 @@

Layer: services

Module: inetd

- -

Description:

Internet services daemon.

@@ -85,6 +92,7 @@

Interfaces:

+
@@ -153,6 +161,7 @@ No
+
@@ -212,6 +221,49 @@ No
+ +
+ + +
+ +inetd_tcp_connectto( + + + + + domain + + + )
+
+
+ +
Summary
+

+Connect to the inetd service using a TCP connection. +

+ + +
Parameters
+
Module:Description:

Policy for NIS (YP) servers and clients

+ + nscd

Name service cache daemon

remotelogin
+ + + + +
Parameter:Description:Optional:
+domain + + +Domain allowed access. + + +No +
+
+ + +
@@ -271,6 +323,7 @@ No
+
diff --git a/www/api-docs/services_kerberos.html b/www/api-docs/services_kerberos.html index f6f57249..feee7041 100644 --- a/www/api-docs/services_kerberos.html +++ b/www/api-docs/services_kerberos.html @@ -46,6 +46,9 @@    -  nis
+    -  + nscd
+    -  remotelogin
@@ -64,9 +67,15 @@

- * Interface Index + * Global Booleans 

- * Template Index + * Global Tunables  +


+ * Layer Index +

+ * Interface Index +

+ * Template Index

@@ -74,8 +83,6 @@

Layer: services

Module: kerberos

- -

Description:

@@ -84,10 +91,20 @@ This policy supports:

Servers: -

+

+

Clients: -

+

+

@@ -95,6 +112,7 @@ Clients:

Interfaces:

+
@@ -136,6 +154,7 @@ No
+
diff --git a/www/api-docs/services_mta.html b/www/api-docs/services_mta.html index 036a1fcc..4da53acd 100644 --- a/www/api-docs/services_mta.html +++ b/www/api-docs/services_mta.html @@ -46,6 +46,9 @@    -  nis
+    -  + nscd
+    -  remotelogin
@@ -64,9 +67,15 @@

- * Interface Index + * Global Booleans 

- * Template Index + * Global Tunables  +


+ * Layer Index +

+ * Interface Index +

+ * Template Index

@@ -74,11 +83,9 @@

Layer: services

Module: mta

- Interfaces Templates -

Description:

Policy common to all email tranfer agents.

@@ -88,6 +95,50 @@

Interfaces:

+ +
+ + +
+ +mta_dontaudit_read_spool_symlink( + + + + + domain + + + )
+
+
+ +
Summary
+

+Do not audit attempts to read a symlink +in the mail spool. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +Domain allowed access. + + +No +
+
+
+ +
@@ -129,6 +180,7 @@ No
+
@@ -170,6 +222,7 @@ No
+
@@ -211,6 +264,7 @@ No
+
@@ -252,6 +306,7 @@ No
+
@@ -293,6 +348,7 @@ No
+
@@ -334,6 +390,7 @@ No
+
@@ -375,6 +432,7 @@ No
+
@@ -416,6 +474,7 @@ No
+
@@ -457,6 +516,7 @@ No
+
@@ -540,6 +600,7 @@ No

Templates:

+
diff --git a/www/api-docs/services_nis.html b/www/api-docs/services_nis.html index 9670fc74..b58cbca3 100644 --- a/www/api-docs/services_nis.html +++ b/www/api-docs/services_nis.html @@ -46,6 +46,9 @@    -  nis
+    -  + nscd
+    -  remotelogin
@@ -64,9 +67,15 @@

- * Interface Index + * Global Booleans 

- * Template Index + * Global Tunables  +


+ * Layer Index +

+ * Interface Index +

+ * Template Index

@@ -74,8 +83,6 @@

Layer: services

Module: nis

- -

Description:

Policy for NIS (YP) servers and clients

@@ -85,6 +92,7 @@

Interfaces:

+
@@ -126,6 +134,7 @@ No
+
@@ -167,6 +176,7 @@ No
+
diff --git a/www/api-docs/services_nscd.html b/www/api-docs/services_nscd.html new file mode 100644 index 00000000..6a24dba9 --- /dev/null +++ b/www/api-docs/services_nscd.html @@ -0,0 +1,314 @@ + + + + Security Enhanced Linux Reference Policy + + + + + + + +
+ +

Layer: services

+

Module: nscd

+ +

Description:

+ +

Name service cache daemon

+ + + + +

Interfaces:

+ + +
+ + +
+ +nscd_domtrans( + + + + + domain + + + )
+
+
+ +
Summary
+

+Execute NSCD in the nscd domain. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +nscd_read_pid( + + + + + domain + + + )
+
+
+ +
Summary
+

+Read NSCD pid file. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +Domain allowed access. + + +No +
+
+
+ + +
+ + +
+ +nscd_unconfined( + + + + + domain + + + )
+
+
+ +
Summary
+

+Unconfined access to NSCD services. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +Domain allowed access. + + +No +
+
+
+ + +
+ + +
+ +nscd_use_shared_mem( + + + + + domain + + + )
+
+
+ +
Summary
+

+Use NSCD services by mapping the database from +an inherited NSCD file descriptor. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +Domain allowed access. + + +No +
+
+
+ + +
+ + +
+ +nscd_use_socket( + + + + + domain + + + )
+
+
+ +
Summary
+

+Use NSCD services by connecting using +a unix stream socket. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +Domain allowed access. + + +No +
+
+
+ + +Return + + + +
+ + diff --git a/www/api-docs/services_remotelogin.html b/www/api-docs/services_remotelogin.html index 70a0b7bd..794830ec 100644 --- a/www/api-docs/services_remotelogin.html +++ b/www/api-docs/services_remotelogin.html @@ -46,6 +46,9 @@    -  nis
+    -  + nscd
+    -  remotelogin
@@ -64,9 +67,15 @@

- * Interface Index + * Global Booleans 

- * Template Index + * Global Tunables  +


+ * Layer Index +

+ * Interface Index +

+ * Template Index

@@ -74,8 +83,6 @@

Layer: services

Module: remotelogin

- -

Description:

Policy for rshd, rlogind, and telnetd.

@@ -85,6 +92,7 @@

Interfaces:

+
diff --git a/www/api-docs/services_sendmail.html b/www/api-docs/services_sendmail.html index 1dd53f4a..9612b2f0 100644 --- a/www/api-docs/services_sendmail.html +++ b/www/api-docs/services_sendmail.html @@ -46,6 +46,9 @@    -  nis
+    -  + nscd
+    -  remotelogin
@@ -64,9 +67,15 @@

- * Interface Index + * Global Booleans 

- * Template Index + * Global Tunables  +


+ * Layer Index +

+ * Interface Index +

+ * Template Index

@@ -74,8 +83,6 @@

Layer: services

Module: sendmail

- -

Description:

Policy for sendmail.

@@ -85,6 +92,7 @@

Interfaces:

+
diff --git a/www/api-docs/services_ssh.html b/www/api-docs/services_ssh.html index 46a0a118..40648364 100644 --- a/www/api-docs/services_ssh.html +++ b/www/api-docs/services_ssh.html @@ -46,6 +46,9 @@    -  nis
+    -  + nscd
+    -  remotelogin
@@ -64,9 +67,15 @@

- * Interface Index + * Global Booleans 

- * Template Index + * Global Tunables  +


+ * Layer Index +

+ * Interface Index +

+ * Template Index

@@ -74,11 +83,9 @@

Layer: services

Module: ssh

- Interfaces Templates -

Description:

Secure shell client and server policy.

@@ -88,6 +95,7 @@

Interfaces:

+
@@ -134,6 +142,7 @@ No

Templates:

+
@@ -190,6 +199,7 @@ No
+
diff --git a/www/api-docs/system.html b/www/api-docs/system.html index 267d3773..7ba1ca23 100644 --- a/www/api-docs/system.html +++ b/www/api-docs/system.html @@ -67,6 +67,9 @@    -  init
+    -  + ipsec
+    -  iptables
@@ -91,6 +94,12 @@    -  mount
+    -  + pcmcia
+ +    -  + raid
+    -  selinuxutil
@@ -109,15 +118,26 @@

- * Interface Index + * Global Booleans 

- * Template Index + * Global Tunables  +


+ * Layer Index +

+ * Interface Index +

+ * Template Index

Layer: system

+

+ Policy modules for system functions from init to multi-user login. +


+ + @@ -192,6 +212,11 @@ connection and disconnection of devices at runtime. init + + + @@ -232,6 +257,16 @@ connection and disconnection of devices at runtime. mount + + + + + + diff --git a/www/api-docs/system_authlogin.html b/www/api-docs/system_authlogin.html index 89a2f0c9..f0d265dd 100644 --- a/www/api-docs/system_authlogin.html +++ b/www/api-docs/system_authlogin.html @@ -67,6 +67,9 @@    -  init
+    -  + ipsec
+    -  iptables
@@ -91,6 +94,12 @@    -  mount
+    -  + pcmcia
+ +    -  + raid
+    -  selinuxutil
@@ -109,9 +118,15 @@

- * Interface Index + * Global Booleans 

- * Template Index + * Global Tunables  +


+ * Layer Index +

+ * Interface Index +

+ * Template Index

@@ -119,11 +134,9 @@

Layer: system

Module: authlogin

- Interfaces Templates -

Description:

Common policy for authentication and user login.

@@ -133,6 +146,7 @@

Interfaces:

+
@@ -174,6 +188,7 @@ No
+
@@ -215,6 +230,7 @@ No
+
@@ -274,6 +290,7 @@ No
+
@@ -315,6 +332,7 @@ No
+
@@ -356,6 +374,7 @@ No
+
@@ -397,6 +416,7 @@ No
+
@@ -414,12 +434,13 @@ No
- -
Description
+
Summary

- +Do not audit attempts to get the attributes +of the shadow passwords file.

+
Parameters
Module:Description:

System initialization programs (init and init scripts).

+ + ipsec

TCP/IP encryption

iptables

Policy for mount.

+ + pcmcia

PCMCIA card management services

+ + raid

RAID array management tools

selinuxutil
@@ -428,7 +449,7 @@ No domain
Parameter:Description:Optional:
-The type of the process performing this action. +Domain to not audit. No @@ -438,6 +459,7 @@ No +
@@ -480,6 +502,7 @@ No
+
@@ -521,6 +544,7 @@ No
+
@@ -562,6 +586,49 @@ No
+ +
+ + +
+ +auth_getattr_shadow( + + + + + domain + + + )
+
+
+ +
Summary
+

+Get the attributes of the shadow passwords file. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ +
@@ -603,6 +670,7 @@ No
+
@@ -644,6 +712,7 @@ No
+
@@ -709,6 +778,7 @@ yes
+
@@ -750,6 +820,7 @@ No
+
@@ -791,6 +862,7 @@ No
+
@@ -832,6 +904,7 @@ No
+
@@ -873,6 +946,7 @@ No
+
@@ -914,6 +988,7 @@ No
+
@@ -955,6 +1030,7 @@ No
+
@@ -996,6 +1072,7 @@ No
+
@@ -1061,6 +1138,7 @@ yes
+
@@ -1102,6 +1180,7 @@ No
+
@@ -1179,6 +1258,7 @@ No
+
@@ -1256,6 +1336,7 @@ No
+
@@ -1297,6 +1378,7 @@ No
+
@@ -1338,6 +1420,7 @@ No
+
@@ -1379,6 +1462,7 @@ No
+
@@ -1420,6 +1504,60 @@ No
+ +
+ + +
+ +auth_unconfined( + + + + + domain + + + )
+
+
+ +
Summary
+

+Unconfined access to the authlogin module. +

+ + +
Description
+

+

+Unconfined access to the authlogin module. +

+

+Currently, this only allows assertions for +the shadow passwords file (/etc/shadow) to +be passed. No access is granted yet. +

+

+ +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +Domain allowed access. + + +No +
+
+
+ Return @@ -1427,6 +1565,7 @@ No

Templates:

+
diff --git a/www/api-docs/system_clock.html b/www/api-docs/system_clock.html index fba0684a..a58833e5 100644 --- a/www/api-docs/system_clock.html +++ b/www/api-docs/system_clock.html @@ -67,6 +67,9 @@    -  init
+    -  + ipsec
+    -  iptables
@@ -91,6 +94,12 @@    -  mount
+    -  + pcmcia
+ +    -  + raid
+    -  selinuxutil
@@ -109,9 +118,15 @@

- * Interface Index + * Global Booleans 

- * Template Index + * Global Tunables  +


+ * Layer Index +

+ * Interface Index +

+ * Template Index

@@ -119,8 +134,6 @@

Layer: system

Module: clock

- -

Description:

Policy for reading and setting the hardware clock.

@@ -130,6 +143,7 @@

Interfaces:

+
@@ -171,6 +185,7 @@ No
+
@@ -212,6 +227,7 @@ No
+
@@ -290,6 +306,7 @@ No
+
diff --git a/www/api-docs/system_corecommands.html b/www/api-docs/system_corecommands.html index cb66c7f7..9a61b14d 100644 --- a/www/api-docs/system_corecommands.html +++ b/www/api-docs/system_corecommands.html @@ -67,6 +67,9 @@    -  init
+    -  + ipsec
+    -  iptables
@@ -91,6 +94,12 @@    -  mount
+    -  + pcmcia
+ +    -  + raid
+    -  selinuxutil
@@ -109,9 +118,15 @@

- * Interface Index + * Global Booleans 

- * Template Index + * Global Tunables  +


+ * Layer Index +

+ * Interface Index +

+ * Template Index

@@ -119,8 +134,6 @@

Layer: system

Module: corecommands

- -

Description:

@@ -133,53 +146,13 @@ in /bin, /sbin, /usr/bin, and /usr/sbin.

Interfaces:

+
-corecmd_chroot_exec_chroot( - - - - - ? - - - )
-
-
- -
Summary
-

-Summary is missing! -

- - -
Parameters
- - - - - -
Parameter:Description:Optional:
-? - - -Parameter descriptions are missing! - - -No -
-
-
- -
- - -
- -corecmd_domtrans_shell( +corecmd_bin_domtrans( @@ -199,10 +172,31 @@ No
+
Summary
+

+Execute a file in a bin directory +in the specified domain. +

+
Description

-Execute a shell in the target domain. +

+Execute a file in a bin directory +in the specified domain. This allows +the specified domain to execute any file +on these filesystems in the specified +domain. This is not suggested. +

+

+No interprocess communication (signals, pipes, +etc.) is provided by this interface since +the domains are not owned by this module. +

+

+This interface was added to handle +the ssh-agent policy. +

Parameters
@@ -223,7 +217,7 @@ No target_domain
-The type of the shell process. +The type of the new process. No @@ -233,6 +227,7 @@ No +
@@ -274,6 +269,7 @@ No
+
@@ -315,6 +311,49 @@ No
+ +
+ + +
+ +corecmd_exec_chroot( + + + + + ? + + + )
+
+
+ +
Summary
+

+Summary is missing! +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+? + + +Parameter descriptions are missing! + + +No +
+
+
+ +
@@ -356,6 +395,7 @@ No
+
@@ -397,6 +437,7 @@ No
+
@@ -438,6 +479,7 @@ No
+
@@ -479,6 +521,7 @@ No
+
@@ -520,6 +563,7 @@ No
+
@@ -561,6 +605,7 @@ No
+
@@ -602,6 +647,133 @@ No
+ +
+ + +
+ +corecmd_read_bin_file( + + + + + domain + + + )
+
+
+ +
Summary
+

+Read files in bin directories. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corecmd_read_bin_pipe( + + + + + domain + + + )
+
+
+ +
Summary
+

+Read pipes in bin directories. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corecmd_read_bin_socket( + + + + + domain + + + )
+
+
+ +
Summary
+

+Read named sockets in bin directories. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ +
@@ -643,6 +815,133 @@ No
+ +
+ + +
+ +corecmd_read_sbin_file( + + + + + domain + + + )
+
+
+ +
Summary
+

+Read files in sbin directories. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corecmd_read_sbin_pipe( + + + + + domain + + + )
+
+
+ +
Summary
+

+Read named pipes in sbin directories. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +corecmd_read_sbin_socket( + + + + + domain + + + )
+
+
+ +
Summary
+

+Read named sockets in sbin directories. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ +
@@ -684,6 +983,7 @@ No
+
@@ -725,6 +1025,7 @@ No
+
@@ -766,6 +1067,79 @@ No
+ +
+ + +
+ +corecmd_shell_domtrans( + + + + + domain + + + + , + + + + target_domain + + + )
+
+
+ +
Summary
+

+Execute a shell in the specified domain. +

+ + +
Description
+

+

+Execute a shell in the specified domain. +

+

+No interprocess communication (signals, pipes, +etc.) is provided by this interface since +the domains are not owned by this module. +

+

+ +
Parameters
+ + + + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+target_domain + + +The type of the shell process. + + +No +
+
+
+ +
@@ -807,6 +1181,7 @@ No
+
@@ -835,9 +1210,16 @@ No
Description

+

Execute a shell in the target domain. This is an explicit transition, requiring the caller to use setexeccon(). +

+

+No interprocess communication (signals, pipes, +etc.) is provided by this interface since +the domains are not owned by this module. +

Parameters
diff --git a/www/api-docs/system_domain.html b/www/api-docs/system_domain.html index 7ab85320..18e7ff26 100644 --- a/www/api-docs/system_domain.html +++ b/www/api-docs/system_domain.html @@ -67,6 +67,9 @@    -  init
+    -  + ipsec
+    -  iptables
@@ -91,6 +94,12 @@    -  mount
+    -  + pcmcia
+ +    -  + raid
+    -  selinuxutil
@@ -109,9 +118,15 @@

- * Interface Index + * Global Booleans 

- * Template Index + * Global Tunables  +


+ * Layer Index +

+ * Interface Index +

+ * Template Index

@@ -119,11 +134,9 @@

Layer: system

Module: domain

- Interfaces Templates -

Description:

Core policy for domains.

@@ -135,6 +148,7 @@

Interfaces:

+
@@ -176,6 +190,62 @@ No
+ +
+ + +
+ +domain_dontaudit_getattr_all_sockets( + + + + + domain + + + )
+
+
+ +
Summary
+

+Do not audit attempts to get the attributes +of all domains sockets, for all socket types. +

+ + +
Description
+

+

+Do not audit attempts to get the attributes +of all domains sockets, for all socket types. +

+

+This interface was added for PCMCIA cardmgr +and is probably excessive. +

+

+ +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +Domain to not audit. + + +No +
+
+
+ +
@@ -193,13 +263,13 @@ No
- -
Description
+
Summary

Do not audit attempts to get the attributes of all domains TCP sockets.

+
Parameters
@@ -218,6 +288,7 @@ No +
@@ -235,13 +306,13 @@ No
- -
Description
+
Summary

Do not audit attempts to get the attributes of all domains UDP sockets.

+
Parameters
Parameter:Description:Optional:
@@ -260,6 +331,7 @@ No +
@@ -302,6 +374,7 @@ No
+
@@ -344,6 +417,50 @@ No
+ +
+ + +
+ +domain_dontaudit_getsession_all_domains( + + + + + domain + + + )
+
+
+ +
Summary
+

+Do not audit attempts to get the +session ID of all domains. +

+ + +
Parameters
+
Parameter:Description:Optional:
+ + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+ + +
@@ -386,6 +503,136 @@ No
+ +
+ + +
+ +domain_dontaudit_read_all_domains_state( + + + + + domain + + + )
+
+
+ +
Summary
+

+Do not audit attempts to read the process +state (/proc/pid) of all domains. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +domain_dontaudit_rw_all_key_sockets( + + + + + domain + + + )
+
+
+ +
Summary
+

+Do not audit attempts to read or write +all domains key sockets. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ + +
+ + +
+ +domain_dontaudit_rw_all_udp_sockets( + + + + + domain + + + )
+
+
+ +
Summary
+

+Do not audit attempts to read or write +all domains UDP sockets. +

+ + +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +The type of the process performing this action. + + +No +
+
+
+ +
@@ -427,6 +674,7 @@ No
+
@@ -468,6 +716,7 @@ No
+
@@ -509,6 +758,7 @@ No
+
@@ -550,6 +800,62 @@ No
+ +
+ + +
+ +domain_getattr_all_sockets( + + + + + domain + + + )
+
+
+ +
Summary
+

+Get the attributes of all domains +sockets, for all socket types. +

+ + +
Description
+

+

+Get the attributes of all domains +sockets, for all socket types. +

+

+This is commonly used for domains +that can use lsof on all domains. +

+

+ +
Parameters
+ + + + + +
Parameter:Description:Optional:
+domain + + +Domain allowed access. + + +No +
+
+
+ +
@@ -567,12 +873,12 @@ No
- -
Description
+
Summary

Get the session ID of all domains.

+
Parameters
@@ -591,6 +897,7 @@ No +
@@ -632,6 +939,7 @@ No
+
@@ -674,6 +982,7 @@ No
+
@@ -691,12 +1000,12 @@ No
- -
Description
+
Summary

Read the process state (/proc/pid) of all domains.

+
Parameters
Parameter:Description:Optional:
@@ -715,6 +1024,7 @@ No +
@@ -756,6 +1066,7 @@ No
+
@@ -798,6 +1109,7 @@ No
+
@@ -839,6 +1151,7 @@ No
+
@@ -880,6 +1193,7 @@ No
+
@@ -922,6 +1236,7 @@ No
+
@@ -963,6 +1278,7 @@ No
+
@@ -1004,6 +1320,7 @@ No
+
@@ -1045,6 +1362,7 @@ No
+
@@ -1087,6 +1405,7 @@ No
+
@@ -1128,6 +1447,7 @@ No
+
@@ -1169,6 +1489,7 @@ No
+
@@ -1210,6 +1531,7 @@ No
+
@@ -1258,6 +1580,7 @@ No

Templates:

+
@@ -1299,6 +1622,7 @@ No
+
diff --git a/www/api-docs/system_files.html b/www/api-docs/system_files.html index b2b23a6a..b54badf1 100644 --- a/www/api-docs/system_files.html +++ b/www/api-docs/system_files.html @@ -67,6 +67,9 @@    -  init
+    -  + ipsec
+    -  iptables
@@ -91,6 +94,12 @@    -  mount
+    -  + pcmcia
+ +    -  + raid
+    -  selinuxutil
@@ -109,9 +118,15 @@

- * Interface Index + * Global Booleans 

- * Template Index + * Global Tunables  +


+ * Layer Index +

+ * Interface Index +

+ * Template Index

@@ -119,17 +134,20 @@

Layer: system

Module: files

- -

Description:

This module contains basic filesystem types and interfaces. This includes: -

  • The concept of different file types including basic -files, mount points, tmp files, etc.
  • Access to groups of files and all files.
  • Types and interfaces for the basic filesystem layout -(/, /etc, /tmp, /usr, etc.).

+

    +

  • The concept of different file types including basic +files, mount points, tmp files, etc.

  • +

  • Access to groups of files and all files.

  • +

  • Types and interfaces for the basic filesystem layout +(/, /etc, /tmp, /usr, etc.).

  • +

+

@@ -139,6 +157,7 @@ files, mount points, tmp files, etc.
  • Access to groups of files and all f

    Interfaces:

    +
    @@ -180,6 +199,7 @@ No
  • +
    @@ -221,6 +241,7 @@ No
    +
    @@ -280,6 +301,7 @@ No
    +
    @@ -321,6 +343,7 @@ No
    +
    @@ -362,6 +385,7 @@ No
    +
    @@ -403,14 +427,14 @@ No
    - -
    Description
    +
    Summary

    Create an object in the root directory, with a private type. If no object class is specified, the default is file.

    +
    Parameters
    Parameter:Description:Optional:
    @@ -452,6 +476,7 @@ yes +
    @@ -493,6 +518,89 @@ No
    + +
    + + +
    + +files_create_var_lib( + + + + + domain + + + + , + + + + file_type + + + + , + + + + [ + + object_class + + ] + + + )
    +
    +
    + +
    Summary
    +

    +Create objects in the /var/lib directory +

    + + +
    Parameters
    +
    Parameter:Description:Optional:
    + + + + + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain allowed access. + + +No +
    +file_type + + +The type of the object to be created + + +No +
    +object_class + + +The object class. If not specified, file is used. + + +yes +
    +
    + + +
    @@ -534,6 +642,7 @@ No
    +
    @@ -575,6 +684,7 @@ No
    +
    @@ -616,6 +726,7 @@ No
    +
    @@ -633,12 +744,12 @@ No
    - -
    Description
    +
    Summary

    Delete system configuration files in /etc.

    +
    Parameters
    @@ -657,6 +768,7 @@ No +
    @@ -698,6 +810,351 @@ No
    + +
    + + +
    + +files_dontaudit_getattr_all_dirs( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Do not audit attempts to get the attributes +of all directories. +

    + + +
    Parameters
    +
    Parameter:Description:Optional:
    + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain to not audit. + + +No +
    +
    + + + +
    + + +
    + +files_dontaudit_getattr_all_files( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Do not audit attempts to get the attributes +of all files. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain to not audit. + + +No +
    +
    +
    + + +
    + + +
    + +files_dontaudit_getattr_all_pipes( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Do not audit attempts to get the attributes +of all named pipes. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain to not audit. + + +No +
    +
    +
    + + +
    + + +
    + +files_dontaudit_getattr_all_sockets( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Do not audit attempts to get the attributes +of all named sockets. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain to not audit. + + +No +
    +
    +
    + + +
    + + +
    + +files_dontaudit_getattr_all_symlinks( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Do not audit attempts to get the attributes +of all symbolic links. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain to not audit. + + +No +
    +
    +
    + + +
    + + +
    + +files_dontaudit_getattr_default_dir( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Do not audit attempts to get the attributes of +directories with the default file type. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain to not audit. + + +No +
    +
    +
    + + +
    + + +
    + +files_dontaudit_getattr_default_files( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Do not audit attempts to get the attributes of +files with the default file type. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain to not audit. + + +No +
    +
    +
    + + +
    + + +
    + +files_dontaudit_getattr_pid_dir( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Do not audit attempts to get the attributes +of the /var/run directory. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain to not audit. + + +No +
    +
    +
    + +
    @@ -715,12 +1172,12 @@ No
    - -
    Description
    +
    Summary

    Do not audit attempts to ioctl daemon runtime data files.

    +
    Parameters
    @@ -739,6 +1196,7 @@ No +
    @@ -780,6 +1238,7 @@ No
    +
    @@ -821,6 +1280,7 @@ No
    +
    @@ -862,6 +1322,7 @@ No
    +
    @@ -903,6 +1364,7 @@ No
    +
    @@ -945,6 +1407,50 @@ No
    + +
    + + +
    + +files_dontaudit_search_locks( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Do not audit attempts to search the +locks directory (/var/lock). +

    + + +
    Parameters
    +
    Parameter:Description:Optional:
    + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain to not audit. + + +No +
    +
    + + +
    @@ -986,6 +1492,7 @@ No
    +
    @@ -1027,6 +1534,7 @@ No
    +
    @@ -1044,12 +1552,12 @@ No
    - -
    Description
    +
    Summary

    Do not audit attempts to write to daemon runtime data files.

    +
    Parameters
    @@ -1068,6 +1576,7 @@ No +
    @@ -1109,6 +1618,7 @@ No
    +
    @@ -1126,12 +1636,12 @@ No
    - -
    Description
    +
    Summary

    Execute programs in /usr/src in the caller domain.

    +
    Parameters
    Parameter:Description:Optional:
    @@ -1150,6 +1660,49 @@ No + +
    + + +
    + +files_getattr_all_dirs( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Get the attributes of all directories. +

    + + +
    Parameters
    +
    Parameter:Description:Optional:
    + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain allowed access. + + +No +
    +
    + + +
    @@ -1191,6 +1744,133 @@ No
    + +
    + + +
    + +files_getattr_all_pipes( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Get the attributes of all named pipes. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain allowed access. + + +No +
    +
    +
    + + +
    + + +
    + +files_getattr_all_sockets( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Get the attributes of all named sockets. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain allowed access. + + +No +
    +
    +
    + + +
    + + +
    + +files_getattr_all_symlinks( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Get the attributes of all symbolic links. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain allowed access. + + +No +
    +
    +
    + +
    @@ -1232,6 +1912,49 @@ No
    + +
    + + +
    + +files_getattr_var_lib_dir( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Get the attributes of the /var/lib directory. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +The type of the process performing this action. + + +No +
    +
    +
    + +
    @@ -1273,6 +1996,49 @@ No
    + +
    + + +
    + +files_list_default( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +List contents of directories with the default file type. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain allowed access. + + +No +
    +
    +
    + +
    @@ -1314,6 +2080,7 @@ No
    +
    @@ -1355,6 +2122,50 @@ No
    + +
    + + +
    + +files_list_isid_type_dir( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +List the contents of directories on new filesystems +that have not yet been labeled. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +The type of the process performing this action. + + +No +
    +
    +
    + +
    @@ -1396,6 +2207,7 @@ No
    +
    @@ -1437,6 +2249,7 @@ No
    +
    @@ -1478,6 +2291,7 @@ No
    +
    @@ -1519,6 +2333,49 @@ No
    + +
    + + +
    + +files_list_world_readable( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +List world-readable directories. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain allowed access. + + +No +
    +
    +
    + +
    @@ -1560,6 +2417,7 @@ No
    +
    @@ -1589,13 +2447,13 @@ No
    - -
    Description
    +
    Summary

    Manage all files on the filesystem, except the listed exceptions.

    +
    Parameters
    @@ -1625,6 +2483,7 @@ yes +
    @@ -1666,6 +2525,7 @@ No
    +
    @@ -1707,6 +2567,7 @@ No
    +
    @@ -1748,6 +2609,7 @@ No
    +
    @@ -1789,6 +2651,7 @@ No
    +
    @@ -1830,6 +2693,7 @@ No
    +
    @@ -1872,6 +2736,7 @@ No
    +
    @@ -1914,6 +2779,7 @@ No
    +
    @@ -1956,6 +2822,7 @@ No
    +
    @@ -1998,6 +2865,7 @@ No
    +
    @@ -2040,6 +2908,7 @@ No
    +
    @@ -2082,6 +2951,49 @@ No
    + +
    + + +
    + +files_manage_mnt_dirs( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Create, read, write, and delete directories in /mnt. +

    + + +
    Parameters
    +
    Parameter:Description:Optional:
    + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain allowed access. + + +No +
    +
    + + +
    @@ -2123,6 +3035,7 @@ No
    +
    @@ -2164,6 +3077,7 @@ No
    +
    @@ -2205,6 +3119,92 @@ No
    + +
    + + +
    + +files_mounton_default( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Mount a filesystem on a directory with the default file type. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain allowed access. + + +No +
    +
    +
    + + +
    + + +
    + +files_mounton_isid_type_dir( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Mount a filesystem on a directory on new filesystems +that has not yet been labeled. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +The type of the process performing this action. + + +No +
    +
    +
    + +
    @@ -2246,6 +3246,7 @@ No
    +
    @@ -2287,6 +3288,7 @@ No
    +
    @@ -2328,6 +3330,175 @@ No
    + +
    + + +
    + +files_read_default_files( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Read files with the default file type. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain allowed access. + + +No +
    +
    +
    + + +
    + + +
    + +files_read_default_pipes( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Read named pipes with the default file type. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain allowed access. + + +No +
    +
    +
    + + +
    + + +
    + +files_read_default_sockets( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Read sockets with the default file type. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain allowed access. + + +No +
    +
    +
    + + +
    + + +
    + +files_read_default_symlinks( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Read symbolic links with the default file type. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain allowed access. + + +No +
    +
    +
    + +
    @@ -2369,6 +3540,7 @@ No
    +
    @@ -2410,6 +3582,7 @@ No
    +
    @@ -2451,6 +3624,50 @@ No
    + +
    + + +
    + +files_read_isid_type_file( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Read files on new filesystems +that have not yet been labeled. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +The type of the process performing this action. + + +No +
    +
    +
    + +
    @@ -2492,6 +3709,7 @@ No
    +
    @@ -2533,6 +3751,7 @@ No
    +
    @@ -2574,6 +3793,259 @@ No
    + +
    + + +
    + +files_read_var_lib_files( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Read generic files in /var/lib +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain allowed access. + + +No +
    +
    +
    + + +
    + + +
    + +files_read_var_symlink( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Read symbolic links in the /var directory. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain allowed access. + + +No +
    +
    +
    + + +
    + + +
    + +files_read_world_readable_files( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Read world-readable files. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain allowed access. + + +No +
    +
    +
    + + +
    + + +
    + +files_read_world_readable_pipes( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Read world-readable named pipes. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain allowed access. + + +No +
    +
    +
    + + +
    + + +
    + +files_read_world_readable_sockets( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Read world-readable sockets. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain allowed access. + + +No +
    +
    +
    + + +
    + + +
    + +files_read_world_readable_symlinks( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Read world-readable symbolic links. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain allowed access. + + +No +
    +
    +
    + +
    @@ -2603,13 +4075,13 @@ No
    - -
    Description
    +
    Summary

    Relabel all files on the filesystem, except the listed exceptions.

    +
    Parameters
    @@ -2639,6 +4111,7 @@ yes +
    @@ -2680,6 +4153,7 @@ No
    +
    @@ -2721,6 +4195,7 @@ No
    +
    @@ -2762,6 +4237,7 @@ No
    +
    @@ -2804,6 +4280,7 @@ No
    +
    @@ -2846,6 +4323,7 @@ No
    +
    @@ -2887,6 +4365,7 @@ No
    +
    @@ -2928,47 +4407,7 @@ No
    -
    - - -
    - -files_search_generic_locks( - - - - - ? - - - )
    -
    -
    - -
    Summary
    -

    -Summary is missing! -

    - - -
    Parameters
    -
    Parameter:Description:Optional:
    - - - - -
    Parameter:Description:Optional:
    -? - - -Parameter descriptions are missing! - - -No -
    -
    - - +
    @@ -3010,6 +4449,49 @@ No
    + +
    + + +
    + +files_search_locks( + + + + + ? + + + )
    +
    +
    + +
    Summary
    +

    +Summary is missing! +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +? + + +Parameter descriptions are missing! + + +No +
    +
    +
    + +
    @@ -3051,6 +4533,7 @@ No
    +
    @@ -3092,6 +4575,7 @@ No
    +
    @@ -3133,6 +4617,7 @@ No
    +
    @@ -3174,6 +4659,7 @@ No
    +
    @@ -3215,6 +4701,7 @@ No
    +
    @@ -3256,6 +4743,7 @@ No
    +
    @@ -3273,12 +4761,12 @@ No
    - -
    Description
    +
    Summary

    Search the /var/lib directory.

    +
    Parameters
    @@ -3297,6 +4785,49 @@ No + +
    + + +
    + +files_setattr_etc_dir( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Set the attributes of the /etc directories. +

    + + +
    Parameters
    +
    Parameter:Description:Optional:
    + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain allowed access. + + +No +
    +
    + + +
    @@ -3338,6 +4869,7 @@ No
    +
    @@ -3355,13 +4887,13 @@ No
    - -
    Description
    +
    Summary

    Transform the type into a file, for use on a virtual memory filesystem (tmpfs).

    +
    Parameters
    @@ -3380,6 +4912,7 @@ No +
    @@ -3421,6 +4954,7 @@ No
    +
    @@ -3462,6 +4996,7 @@ No
    +
    @@ -3503,6 +5038,7 @@ No
    +
    diff --git a/www/api-docs/system_fstools.html b/www/api-docs/system_fstools.html index bf68ba94..4e577888 100644 --- a/www/api-docs/system_fstools.html +++ b/www/api-docs/system_fstools.html @@ -67,6 +67,9 @@    -  init
    +    -  + ipsec
    +    -  iptables
    @@ -91,6 +94,12 @@    -  mount
    +    -  + pcmcia
    + +    -  + raid
    +    -  selinuxutil
    @@ -109,9 +118,15 @@

    - * Interface Index + * Global Booleans 

    - * Template Index + * Global Tunables  +


    + * Layer Index +

    + * Interface Index +

    + * Template Index

    @@ -119,8 +134,6 @@

    Layer: system

    Module: fstools

    - -

    Description:

    Tools for filesystem management, such as mkfs and fsck.

    @@ -130,6 +143,7 @@

    Interfaces:

    +
    @@ -171,6 +185,7 @@ No
    +
    @@ -212,6 +227,7 @@ No
    +
    diff --git a/www/api-docs/system_getty.html b/www/api-docs/system_getty.html index 810af4de..a26aa51d 100644 --- a/www/api-docs/system_getty.html +++ b/www/api-docs/system_getty.html @@ -67,6 +67,9 @@    -  init
    +    -  + ipsec
    +    -  iptables
    @@ -91,6 +94,12 @@    -  mount
    +    -  + pcmcia
    + +    -  + raid
    +    -  selinuxutil
    @@ -109,9 +118,15 @@

    - * Interface Index + * Global Booleans 

    - * Template Index + * Global Tunables  +


    + * Layer Index +

    + * Interface Index +

    + * Template Index

    @@ -119,8 +134,6 @@

    Layer: system

    Module: getty

    - -

    Description:

    Policy for getty.

    @@ -130,6 +143,7 @@

    Interfaces:

    +
    @@ -171,6 +185,7 @@ No
    +
    @@ -212,6 +227,7 @@ No
    +
    @@ -253,6 +269,7 @@ No
    +
    diff --git a/www/api-docs/system_hostname.html b/www/api-docs/system_hostname.html index 93e46aab..c0d4a1f3 100644 --- a/www/api-docs/system_hostname.html +++ b/www/api-docs/system_hostname.html @@ -67,6 +67,9 @@    -  init
    +    -  + ipsec
    +    -  iptables
    @@ -91,6 +94,12 @@    -  mount
    +    -  + pcmcia
    + +    -  + raid
    +    -  selinuxutil
    @@ -109,9 +118,15 @@

    - * Interface Index + * Global Booleans 

    - * Template Index + * Global Tunables  +


    + * Layer Index +

    + * Interface Index +

    + * Template Index

    @@ -119,8 +134,6 @@

    Layer: system

    Module: hostname

    - -

    Description:

    Policy for changing the system host name.

    @@ -130,6 +143,7 @@

    Interfaces:

    +
    @@ -147,12 +161,12 @@
    - -
    Description
    +
    Summary

    Execute hostname in the hostname domain.

    +
    Parameters
    Parameter:Description:Optional:
    @@ -162,7 +176,6 @@ domain
    Parameter:Description:Optional:
    The type of the process performing this action. -Has a sigchld signal backchannel. No @@ -172,6 +185,7 @@ No +
    @@ -189,13 +203,12 @@ No
    - -
    Description
    +
    Summary

    - Execute hostname in the hostname domain, and - Has a sigchld signal backchannel. + Execute hostname in the caller domain.

    +
    Parameters
    @@ -214,6 +227,7 @@ No +
    @@ -247,14 +261,13 @@ No
    - -
    Description
    +
    Summary

    Execute hostname in the hostname domain, and allow the specified role the hostname domain. -Has a sigchld signal backchannel.

    +
    Parameters
    Parameter:Description:Optional:
    diff --git a/www/api-docs/system_hotplug.html b/www/api-docs/system_hotplug.html index 519b4a96..edc33480 100644 --- a/www/api-docs/system_hotplug.html +++ b/www/api-docs/system_hotplug.html @@ -67,6 +67,9 @@    -  init
    +    -  + ipsec
    +    -  iptables
    @@ -91,6 +94,12 @@    -  mount
    +    -  + pcmcia
    + +    -  + raid
    +    -  selinuxutil
    @@ -109,9 +118,15 @@

    - * Interface Index + * Global Booleans 

    - * Template Index + * Global Tunables  +


    + * Layer Index +

    + * Interface Index +

    + * Template Index

    @@ -119,8 +134,6 @@

    Layer: system

    Module: hotplug

    - -

    Description:

    @@ -133,6 +146,7 @@ connection and disconnection of devices at runtime.

    Interfaces:

    +
    @@ -174,6 +188,7 @@ No
    +
    @@ -215,6 +230,7 @@ No
    +
    @@ -256,6 +272,7 @@ No
    +
    @@ -297,6 +314,49 @@ No
    + +
    + + +
    + +hotplug_getattr_config_dir( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Get the attributes of the hotplug configuration directory. +

    + + +
    Parameters
    +
    Parameter:Description:Optional:
    + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain allowed access. + + +No +
    +
    + + +
    @@ -314,12 +374,12 @@ No
    - -
    Description
    +
    Summary

    Read the configuration files for hotplug.

    +
    Parameters
    @@ -338,6 +398,49 @@ No + +
    + + +
    + +hotplug_search_config( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Search the hotplug configuration directory. +

    + + +
    Parameters
    +
    Parameter:Description:Optional:
    + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain allowed access. + + +No +
    +
    + + +
    diff --git a/www/api-docs/system_init.html b/www/api-docs/system_init.html index 265a9597..943e4df5 100644 --- a/www/api-docs/system_init.html +++ b/www/api-docs/system_init.html @@ -67,6 +67,9 @@    -  init
    +    -  + ipsec
    +    -  iptables
    @@ -91,6 +94,12 @@    -  mount
    +    -  + pcmcia
    + +    -  + raid
    +    -  selinuxutil
    @@ -109,9 +118,15 @@

    - * Interface Index + * Global Booleans 

    - * Template Index + * Global Tunables  +


    + * Layer Index +

    + * Interface Index +

    + * Template Index

    @@ -119,8 +134,6 @@

    Layer: system

    Module: init

    - -

    Description:

    System initialization programs (init and init scripts).

    @@ -130,6 +143,7 @@

    Interfaces:

    +
    @@ -190,6 +204,7 @@ No
    +
    @@ -249,6 +264,7 @@ No
    +
    @@ -290,6 +306,7 @@ No
    +
    @@ -331,6 +348,7 @@ No
    +
    @@ -372,6 +390,7 @@ No
    +
    @@ -413,6 +432,7 @@ No
    +
    @@ -454,6 +474,7 @@ No
    +
    @@ -495,6 +516,7 @@ No
    +
    @@ -536,6 +558,7 @@ No
    +
    @@ -577,6 +600,7 @@ No
    +
    @@ -618,6 +642,7 @@ No
    +
    @@ -659,6 +684,7 @@ No
    +
    @@ -700,6 +726,7 @@ No
    +
    @@ -741,6 +768,7 @@ No
    +
    @@ -782,6 +810,7 @@ No
    +
    @@ -823,6 +852,7 @@ No
    +
    @@ -864,6 +894,7 @@ No
    +
    @@ -941,6 +972,7 @@ No
    +
    @@ -982,6 +1014,7 @@ No
    +
    @@ -1023,6 +1056,7 @@ No
    +
    @@ -1064,6 +1098,7 @@ No
    +
    @@ -1105,6 +1140,7 @@ No
    +
    @@ -1165,6 +1201,7 @@ No
    +
    @@ -1206,6 +1243,7 @@ No
    +
    @@ -1247,6 +1285,7 @@ No
    +
    @@ -1288,6 +1327,7 @@ No
    +
    @@ -1329,6 +1369,7 @@ No
    +
    @@ -1370,6 +1411,7 @@ No
    +
    diff --git a/www/api-docs/system_ipsec.html b/www/api-docs/system_ipsec.html new file mode 100644 index 00000000..141bb749 --- /dev/null +++ b/www/api-docs/system_ipsec.html @@ -0,0 +1,405 @@ + + + + Security Enhanced Linux Reference Policy + + + + + + + +
    + +

    Layer: system

    +

    Module: ipsec

    + +

    Description:

    + +

    TCP/IP encryption

    + + + + +

    Interfaces:

    + + +
    + + +
    + +ipsec_connectto_unix_stream_socket( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Connect to an IPSEC unix domain stream socket. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +The type of the process performing this action. + + +No +
    +
    +
    + + +
    + + +
    + +ipsec_domtrans( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Execute ipsec in the ipsec domain. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +The type of the process performing this action. + + +No +
    +
    +
    + + +
    + + +
    + +ipsec_exec_mgmt( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Execute the IPSEC management program in the caller domain. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +The type of the process performing this action. + + +No +
    +
    +
    + + +
    + + +
    + +ipsec_getattr_key_socket( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Get the attributes of an IPSEC key socket. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +The type of the process performing this action. + + +No +
    +
    +
    + + +
    + + +
    + +ipsec_manage_pid( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Create, read, write, and delete the IPSEC pid files. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +The type of the process performing this action. + + +No +
    +
    +
    + + +
    + + +
    + +ipsec_read_config( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Read the IPSEC configuration +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +The type of the process performing this action. + + +No +
    +
    +
    + + +Return + + + +
    + + diff --git a/www/api-docs/system_iptables.html b/www/api-docs/system_iptables.html index c57dd88e..64e13a75 100644 --- a/www/api-docs/system_iptables.html +++ b/www/api-docs/system_iptables.html @@ -67,6 +67,9 @@    -  init
    +    -  + ipsec
    +    -  iptables
    @@ -91,6 +94,12 @@    -  mount
    +    -  + pcmcia
    + +    -  + raid
    +    -  selinuxutil
    @@ -109,9 +118,15 @@

    - * Interface Index + * Global Booleans 

    - * Template Index + * Global Tunables  +


    + * Layer Index +

    + * Interface Index +

    + * Template Index

    @@ -119,8 +134,6 @@

    Layer: system

    Module: iptables

    - -

    Description:

    Policy for iptables.

    @@ -130,6 +143,7 @@

    Interfaces:

    +
    @@ -171,6 +185,7 @@ No
    +
    @@ -212,6 +227,7 @@ No
    +
    diff --git a/www/api-docs/system_libraries.html b/www/api-docs/system_libraries.html index ff2c5b32..b584b79f 100644 --- a/www/api-docs/system_libraries.html +++ b/www/api-docs/system_libraries.html @@ -67,6 +67,9 @@    -  init
    +    -  + ipsec
    +    -  iptables
    @@ -91,6 +94,12 @@    -  mount
    +    -  + pcmcia
    + +    -  + raid
    +    -  selinuxutil
    @@ -109,9 +118,15 @@

    - * Interface Index + * Global Booleans 

    - * Template Index + * Global Tunables  +


    + * Layer Index +

    + * Interface Index +

    + * Template Index

    @@ -119,8 +134,6 @@

    Layer: system

    Module: libraries

    - -

    Description:

    Policy for system libraries.

    @@ -130,6 +143,7 @@

    Interfaces:

    +
    @@ -171,6 +185,7 @@ No
    +
    @@ -212,6 +227,7 @@ No
    +
    @@ -253,6 +269,7 @@ No
    +
    @@ -295,6 +312,7 @@ No
    +
    @@ -337,6 +355,7 @@ No
    +
    @@ -379,6 +398,7 @@ No
    +
    @@ -456,6 +476,7 @@ No
    +
    @@ -498,6 +519,7 @@ No
    +
    @@ -539,6 +561,7 @@ No
    +
    @@ -581,6 +604,7 @@ No
    +
    diff --git a/www/api-docs/system_locallogin.html b/www/api-docs/system_locallogin.html index 34495f7f..97b095ad 100644 --- a/www/api-docs/system_locallogin.html +++ b/www/api-docs/system_locallogin.html @@ -67,6 +67,9 @@    -  init
    +    -  + ipsec
    +    -  iptables
    @@ -91,6 +94,12 @@    -  mount
    +    -  + pcmcia
    + +    -  + raid
    +    -  selinuxutil
    @@ -109,9 +118,15 @@

    - * Interface Index + * Global Booleans 

    - * Template Index + * Global Tunables  +


    + * Layer Index +

    + * Interface Index +

    + * Template Index

    @@ -119,8 +134,6 @@

    Layer: system

    Module: locallogin

    - -

    Description:

    Policy for local logins.

    @@ -130,6 +143,7 @@

    Interfaces:

    +
    @@ -171,6 +185,7 @@ No
    +
    @@ -212,6 +227,7 @@ No
    +
    diff --git a/www/api-docs/system_logging.html b/www/api-docs/system_logging.html index bc1079ef..041aa38f 100644 --- a/www/api-docs/system_logging.html +++ b/www/api-docs/system_logging.html @@ -67,6 +67,9 @@    -  init
    +    -  + ipsec
    +    -  iptables
    @@ -91,6 +94,12 @@    -  mount
    +    -  + pcmcia
    + +    -  + raid
    +    -  selinuxutil
    @@ -109,9 +118,15 @@

    - * Interface Index + * Global Booleans 

    - * Template Index + * Global Tunables  +


    + * Layer Index +

    + * Interface Index +

    + * Template Index

    @@ -119,8 +134,6 @@

    Layer: system

    Module: logging

    - -

    Description:

    Policy for the kernel message logger and system logging daemon.

    @@ -130,6 +143,7 @@

    Interfaces:

    +
    @@ -171,6 +185,7 @@ No
    +
    @@ -212,6 +227,49 @@ No
    + +
    + + +
    + +logging_domtrans_syslog( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Execute syslogd in the syslog domain. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +The type of the process performing this action. + + +No +
    +
    +
    + +
    @@ -253,6 +311,7 @@ No
    +
    @@ -294,6 +353,7 @@ No
    +
    @@ -335,6 +395,7 @@ No
    +
    @@ -376,6 +437,7 @@ No
    +
    @@ -417,6 +479,7 @@ No
    +
    @@ -458,6 +521,7 @@ No
    +
    @@ -499,6 +563,7 @@ No
    +
    @@ -540,6 +605,7 @@ No
    +
    @@ -583,6 +649,7 @@ No
    +
    @@ -624,6 +691,7 @@ No
    +
    diff --git a/www/api-docs/system_lvm.html b/www/api-docs/system_lvm.html index ce57f083..6adcd812 100644 --- a/www/api-docs/system_lvm.html +++ b/www/api-docs/system_lvm.html @@ -67,6 +67,9 @@    -  init
    +    -  + ipsec
    +    -  iptables
    @@ -91,6 +94,12 @@    -  mount
    +    -  + pcmcia
    + +    -  + raid
    +    -  selinuxutil
    @@ -109,9 +118,15 @@

    - * Interface Index + * Global Booleans 

    - * Template Index + * Global Tunables  +


    + * Layer Index +

    + * Interface Index +

    + * Template Index

    @@ -119,8 +134,6 @@

    Layer: system

    Module: lvm

    - -

    Description:

    Policy for logical volume management programs.

    @@ -130,6 +143,7 @@

    Interfaces:

    +
    @@ -171,6 +185,7 @@ No
    +
    @@ -212,6 +227,7 @@ No
    +
    diff --git a/www/api-docs/system_miscfiles.html b/www/api-docs/system_miscfiles.html index 1bf647ef..a671d492 100644 --- a/www/api-docs/system_miscfiles.html +++ b/www/api-docs/system_miscfiles.html @@ -67,6 +67,9 @@    -  init
    +    -  + ipsec
    +    -  iptables
    @@ -91,6 +94,12 @@    -  mount
    +    -  + pcmcia
    + +    -  + raid
    +    -  selinuxutil
    @@ -109,9 +118,15 @@

    - * Interface Index + * Global Booleans 

    - * Template Index + * Global Tunables  +


    + * Layer Index +

    + * Interface Index +

    + * Template Index

    @@ -119,8 +134,6 @@

    Layer: system

    Module: miscfiles

    - -

    Description:

    Miscelaneous files.

    @@ -130,6 +143,49 @@

    Interfaces:

    + +
    + + +
    + +miscfiles_exec_tetex_data( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Execute TeX data programs in the caller domain. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +Type type of the process performing this action. + + +No +
    +
    +
    + +
    @@ -147,11 +203,11 @@
    - -
    Description
    +
    Summary

    - Allow process to read legacy time localization info -

    +Allow process to read legacy time localization info +

    +
    Parameters
    @@ -161,8 +217,8 @@ domain @@ -171,6 +227,7 @@ No +
    @@ -188,11 +245,11 @@ No
    - -
    Description
    +
    Summary

    - Allow process to read fonts files -

    +Read fonts +

    +
    Parameters
    - Type type of the process performing this action. - +Type type of the process performing this action. + No
    @@ -202,8 +259,8 @@ No domain @@ -212,6 +269,7 @@ No +
    @@ -229,11 +287,11 @@ No
    - -
    Description
    +
    Summary

    - Allow process to read localization info -

    +Allow process to read localization info +

    +
    Parameters
    - Type type of the process performing this action. - +Type type of the process performing this action. + No
    @@ -243,8 +301,8 @@ No domain @@ -253,6 +311,7 @@ No +
    @@ -270,11 +329,11 @@ No
    - -
    Description
    +
    Summary

    - Allow process to read manpages -

    +Allow process to read man pages +

    +
    Parameters
    - Type type of the process performing this action. - +Type type of the process performing this action. + No
    @@ -284,8 +343,8 @@ No domain @@ -294,6 +353,49 @@ No + +
    + + +
    + +miscfiles_read_tetex_data( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Read TeX data +

    + + +
    Parameters
    +
    - Type type of the process performing this action. - +Type type of the process performing this action. + No
    + + + + +
    Parameter:Description:Optional:
    +domain + + +Type type of the process performing this action. + + +No +
    +
    +
    + +
    @@ -311,12 +413,12 @@ No
    - -
    Description
    +
    Summary

    - Allow process to create files and dirs in /var/cache/man - and /var/catman/ -

    +Allow process to create files and dirs in /var/cache/man +and /var/catman/ +

    +
    Parameters
    @@ -326,8 +428,8 @@ No domain diff --git a/www/api-docs/system_modutils.html b/www/api-docs/system_modutils.html index fdbb731c..4fc68495 100644 --- a/www/api-docs/system_modutils.html +++ b/www/api-docs/system_modutils.html @@ -67,6 +67,9 @@    -  init
    +    -  + ipsec
    +    -  iptables
    @@ -91,6 +94,12 @@    -  mount
    +    -  + pcmcia
    + +    -  + raid
    +    -  selinuxutil
    @@ -109,9 +118,15 @@

    - * Interface Index + * Global Booleans 

    - * Template Index + * Global Tunables  +


    + * Layer Index +

    + * Interface Index +

    + * Template Index

    @@ -119,8 +134,6 @@

    Layer: system

    Module: modutils

    - -

    Description:

    Policy for kernel module utilities

    @@ -130,6 +143,7 @@

    Interfaces:

    +
    @@ -171,6 +185,7 @@ No
    +
    @@ -212,6 +227,7 @@ No
    +
    @@ -253,6 +269,7 @@ No
    +
    @@ -294,6 +311,7 @@ No
    +
    @@ -335,6 +353,7 @@ No
    +
    @@ -376,6 +395,7 @@ No
    +
    @@ -417,6 +437,7 @@ No
    +
    @@ -459,6 +480,7 @@ No
    +
    @@ -536,6 +558,7 @@ No
    +
    @@ -616,6 +639,7 @@ No
    +
    diff --git a/www/api-docs/system_mount.html b/www/api-docs/system_mount.html index 48b61643..9f371622 100644 --- a/www/api-docs/system_mount.html +++ b/www/api-docs/system_mount.html @@ -67,6 +67,9 @@    -  init
    +    -  + ipsec
    +    -  iptables
    @@ -91,6 +94,12 @@    -  mount
    +    -  + pcmcia
    + +    -  + raid
    +    -  selinuxutil
    @@ -109,9 +118,15 @@

    - * Interface Index + * Global Booleans 

    - * Template Index + * Global Tunables  +


    + * Layer Index +

    + * Interface Index +

    + * Template Index

    @@ -119,8 +134,6 @@

    Layer: system

    Module: mount

    - -

    Description:

    Policy for mount.

    @@ -130,6 +143,7 @@

    Interfaces:

    +
    @@ -171,6 +185,7 @@ No
    +
    @@ -250,6 +265,7 @@ No
    +
    @@ -292,6 +308,7 @@ No
    +
    diff --git a/www/api-docs/system_pcmcia.html b/www/api-docs/system_pcmcia.html new file mode 100644 index 00000000..1634927a --- /dev/null +++ b/www/api-docs/system_pcmcia.html @@ -0,0 +1,444 @@ + + + + Security Enhanced Linux Reference Policy + + + + + + + +
    + +

    Layer: system

    +

    Module: pcmcia

    + +

    Description:

    + +

    PCMCIA card management services

    + + + + +

    Interfaces:

    + + +
    + + +
    + +pcmcia_domtrans_cardctl( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Execute cardctl in the cardmgr domain. +

    + + +
    Parameters
    +
    - Type type of the process performing this action. - +Type type of the process performing this action. + No
    + + + + +
    Parameter:Description:Optional:
    +domain + + +The type of the process performing this action. + + +No +
    +
    + + + +
    + + +
    + +pcmcia_domtrans_cardmgr( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Execute cardmgr in the cardmgr domain. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +The type of the process performing this action. + + +No +
    +
    +
    + + +
    + + +
    + +pcmcia_manage_pid( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Create, read, write, and delete +cardmgr pid files. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain allowed access. + + +No +
    +
    +
    + + +
    + + +
    + +pcmcia_manage_runtime_chr( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Create, read, write, and delete +cardmgr runtime character nodes. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain allowed access. + + +No +
    +
    +
    + + +
    + + +
    + +pcmcia_read_pid( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Read cardmgr pid files. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain allowed access. + + +No +
    +
    +
    + + +
    + + +
    + +pcmcia_run_cardctl( + + + + + domain + + + + , + + + + role + + + + , + + + + terminal + + + )
    +
    +
    + +
    Summary
    +

    +Execute cardmgr in the cardctl domain, and +allow the specified role the cardmgr domain. +

    + + +
    Parameters
    + + + + + + + + + +
    Parameter:Description:Optional:
    +domain + + +The type of the process performing this action. + + +No +
    +role + + +The role to be allowed the cardmgr domain. + + +No +
    +terminal + + +The type of the terminal allow the cardmgr domain to use. + + +No +
    +
    +
    + + +Return + + + + + + diff --git a/www/api-docs/system_raid.html b/www/api-docs/system_raid.html new file mode 100644 index 00000000..6da77a00 --- /dev/null +++ b/www/api-docs/system_raid.html @@ -0,0 +1,247 @@ + + + + Security Enhanced Linux Reference Policy + + + + + + + +
    + +

    Layer: system

    +

    Module: raid

    + +

    Description:

    + +

    RAID array management tools

    + + + + +

    Interfaces:

    + + +
    + + +
    + +raid_domtrans_mdadm( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Execute software raid tools in the mdadm domain. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +The type of the process performing this action. + + +No +
    +
    +
    + + +
    + + +
    + +raid_manage_mdadm_pid( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Create, read, write, and delete the mdadm pid files. +

    + + +
    Description
    +

    +

    +Create, read, write, and delete the mdadm pid files. +

    +

    +Added for use in the init module. +

    +

    + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +The type of the process performing this action. + + +No +
    +
    +
    + + +Return + + + +
    + + diff --git a/www/api-docs/system_selinuxutil.html b/www/api-docs/system_selinuxutil.html index 6ed72879..96f9534f 100644 --- a/www/api-docs/system_selinuxutil.html +++ b/www/api-docs/system_selinuxutil.html @@ -67,6 +67,9 @@    -  init
    +    -  + ipsec
    +    -  iptables
    @@ -91,6 +94,12 @@    -  mount
    +    -  + pcmcia
    + +    -  + raid
    +    -  selinuxutil
    @@ -109,9 +118,15 @@

    - * Interface Index + * Global Booleans 

    - * Template Index + * Global Tunables  +


    + * Layer Index +

    + * Interface Index +

    + * Template Index

    @@ -119,8 +134,6 @@

    Layer: system

    Module: selinuxutil

    - -

    Description:

    Policy for SELinux policy and userland applications.

    @@ -130,6 +143,7 @@

    Interfaces:

    +
    @@ -171,6 +185,7 @@ No
    +
    @@ -212,6 +227,7 @@ No
    +
    @@ -253,6 +269,7 @@ No
    +
    @@ -294,6 +311,7 @@ No
    +
    @@ -335,6 +353,7 @@ No
    +
    @@ -376,6 +395,7 @@ No
    +
    @@ -417,6 +437,50 @@ No
    + +
    + + +
    + +seutil_dontaudit_search_config( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Do not audit attempts to search the SELinux +configuration directory (/etc/selinux). +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain to not audit. + + +No +
    +
    +
    + +
    @@ -459,6 +523,7 @@ No
    +
    @@ -500,6 +565,7 @@ No
    +
    @@ -541,6 +607,7 @@ No
    +
    @@ -582,6 +649,7 @@ No
    +
    @@ -623,6 +691,7 @@ No
    +
    @@ -664,6 +733,7 @@ No
    +
    @@ -705,6 +775,7 @@ No
    +
    @@ -746,6 +817,7 @@ No
    +
    @@ -787,6 +859,7 @@ No
    +
    @@ -828,6 +901,7 @@ No
    +
    @@ -869,6 +943,7 @@ No
    +
    @@ -910,6 +985,7 @@ No
    +
    @@ -951,6 +1027,7 @@ No
    +
    @@ -992,6 +1069,7 @@ No
    +
    @@ -1033,6 +1111,7 @@ No
    +
    @@ -1113,6 +1192,7 @@ No
    +
    @@ -1193,6 +1273,7 @@ No
    +
    @@ -1272,6 +1353,7 @@ No
    +
    @@ -1351,6 +1433,7 @@ No
    +
    @@ -1430,6 +1513,7 @@ No
    +
    @@ -1509,6 +1593,7 @@ No
    +
    @@ -1550,6 +1635,7 @@ No
    +
    @@ -1591,6 +1677,7 @@ No
    +
    @@ -1632,6 +1719,7 @@ No
    +
    diff --git a/www/api-docs/system_sysnetwork.html b/www/api-docs/system_sysnetwork.html index 3dca320d..d2522d7b 100644 --- a/www/api-docs/system_sysnetwork.html +++ b/www/api-docs/system_sysnetwork.html @@ -67,6 +67,9 @@    -  init
    +    -  + ipsec
    +    -  iptables
    @@ -91,6 +94,12 @@    -  mount
    +    -  + pcmcia
    + +    -  + raid
    +    -  selinuxutil
    @@ -109,9 +118,15 @@

    - * Interface Index + * Global Booleans 

    - * Template Index + * Global Tunables  +


    + * Layer Index +

    + * Interface Index +

    + * Template Index

    @@ -119,8 +134,6 @@

    Layer: system

    Module: sysnetwork

    - -

    Description:

    Policy for network configuration: ifconfig and dhcp client.

    @@ -130,6 +143,7 @@

    Interfaces:

    +
    @@ -171,6 +185,7 @@ No
    +
    @@ -212,6 +227,7 @@ No
    +
    @@ -253,6 +269,49 @@ No
    + +
    + + +
    + +sysnet_manage_config( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Create, read, write, and delete network config files. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +The type of the process performing this action. + + +No +
    +
    +
    + +
    @@ -294,6 +353,7 @@ No
    +
    @@ -335,6 +395,7 @@ No
    +
    @@ -376,6 +437,7 @@ No
    +
    @@ -455,6 +517,7 @@ No
    +
    @@ -496,6 +559,7 @@ No
    +
    @@ -537,6 +601,7 @@ No
    +
    @@ -578,6 +643,7 @@ No
    +
    @@ -619,6 +685,7 @@ No
    +
    diff --git a/www/api-docs/system_udev.html b/www/api-docs/system_udev.html index d6d9caa4..51ca4edd 100644 --- a/www/api-docs/system_udev.html +++ b/www/api-docs/system_udev.html @@ -67,6 +67,9 @@    -  init
    +    -  + ipsec
    +    -  iptables
    @@ -91,6 +94,12 @@    -  mount
    +    -  + pcmcia
    + +    -  + raid
    +    -  selinuxutil
    @@ -109,9 +118,15 @@

    - * Interface Index + * Global Booleans 

    - * Template Index + * Global Tunables  +


    + * Layer Index +

    + * Interface Index +

    + * Template Index

    @@ -119,8 +134,6 @@

    Layer: system

    Module: udev

    - -

    Description:

    Policy for udev.

    @@ -130,6 +143,7 @@

    Interfaces:

    +
    @@ -147,11 +161,11 @@
    - -
    Description
    +
    Summary

    - Execute udev in the udev domain. -

    +Execute udev in the udev domain. +

    +
    Parameters
    @@ -161,8 +175,8 @@ domain @@ -171,6 +185,50 @@ No + +
    + + +
    + +udev_donaudit_rw_unix_dgram_socket( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Do not audit attempts to read or write +to a udev unix datagram socket. +

    + + +
    Parameters
    +
    - The type of the process performing this action. - +The type of the process performing this action. + No
    + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain to not audit. + + +No +
    +
    +
    + +
    @@ -188,11 +246,11 @@ No
    - -
    Description
    +
    Summary

    - Allow process to read list of devices. -

    +Allow process to read list of devices. +

    +
    Parameters
    @@ -202,8 +260,8 @@ No domain @@ -212,6 +270,7 @@ No +
    @@ -229,11 +288,11 @@ No
    - -
    Description
    +
    Summary

    - Allow process to modify list of devices. -

    +Allow process to modify list of devices. +

    +
    Parameters
    - The type of the process performing this action. - +The type of the process performing this action. + No
    @@ -243,8 +302,8 @@ No domain diff --git a/www/api-docs/system_unconfined.html b/www/api-docs/system_unconfined.html index a57bce1c..78263a35 100644 --- a/www/api-docs/system_unconfined.html +++ b/www/api-docs/system_unconfined.html @@ -67,6 +67,9 @@    -  init
    +    -  + ipsec
    +    -  iptables
    @@ -91,6 +94,12 @@    -  mount
    +    -  + pcmcia
    + +    -  + raid
    +    -  selinuxutil
    @@ -109,9 +118,15 @@

    - * Interface Index + * Global Booleans 

    - * Template Index + * Global Tunables  +


    + * Layer Index +

    + * Interface Index +

    + * Template Index

    @@ -119,11 +134,9 @@

    Layer: system

    Module: unconfined

    - Interfaces Templates -

    Description:

    The unconfined domain.

    @@ -133,12 +146,13 @@

    Interfaces:

    +
    -unconfined_domtrans_shell( +unconfined_domtrans( @@ -152,7 +166,7 @@
    Summary

    -Transition to the unconfined domain by executing a shell. +Transition to the unconfined domain.

    @@ -174,6 +188,62 @@ No
    + +
    + + +
    + +unconfined_dontaudit_rw_tcp_socket( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Do not audit attempts to read or write +unconfined domain tcp sockets. +

    + + +
    Description
    +

    +

    +Do not audit attempts to read or write +unconfined domain tcp sockets. +

    +

    +This interface was added due to a broken +symptom in ldconfig. +

    +

    + +
    Parameters
    +
    - The type of the process performing this action. - +The type of the process performing this action. + No
    + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain to not audit. + + +No +
    +
    + + +
    @@ -215,6 +285,85 @@ No
    + +
    + + +
    + +unconfined_run( + + + + + domain + + + + , + + + + role + + + + , + + + + terminal + + + )
    +
    +
    + + +
    Description
    +

    +Execute specified programs in the unconfined domain. +

    + +
    Parameters
    + + + + + + + + + +
    Parameter:Description:Optional:
    +domain + + +The type of the process performing this action. + + +No +
    +role + + +The role to allow the unconfined domain. + + +No +
    +terminal + + +The type of the terminal allow the unconfined domain to use. + + +No +
    +
    +
    + +
    @@ -256,6 +405,49 @@ No
    + +
    + + +
    + +unconfined_shell_domtrans( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Transition to the unconfined domain by executing a shell. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain allowed access. + + +No +
    +
    +
    + +
    @@ -297,6 +489,7 @@ No
    +
    @@ -345,6 +538,7 @@ No

    Templates:

    +
    diff --git a/www/api-docs/system_userdomain.html b/www/api-docs/system_userdomain.html index 0d4c3b99..8644d403 100644 --- a/www/api-docs/system_userdomain.html +++ b/www/api-docs/system_userdomain.html @@ -67,6 +67,9 @@    -  init
    +    -  + ipsec
    +    -  iptables
    @@ -91,6 +94,12 @@    -  mount
    +    -  + pcmcia
    + +    -  + raid
    +    -  selinuxutil
    @@ -109,9 +118,15 @@

    - * Interface Index + * Global Booleans 

    - * Template Index + * Global Tunables  +


    + * Layer Index +

    + * Interface Index +

    + * Template Index

    @@ -119,11 +134,9 @@

    Layer: system

    Module: userdomain

    - Interfaces Templates -

    Description:

    Policy for user domains

    @@ -133,6 +146,135 @@

    Interfaces:

    + +
    + + +
    + +userdom_dontaudit_search_all_users_home( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Do not audit attempts to search all users home directories. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain to not audit. + + +No +
    +
    +
    + + +
    + + +
    + +userdom_dontaudit_search_staff_home_dir( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Do not audit attempts to search the staff +users home directory. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain to not audit. + + +No +
    +
    +
    + + +
    + + +
    + +userdom_dontaudit_search_sysadm_home_dir( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Do not audit attempts to search the sysadm +users home directory. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain to not audit. + + +No +
    +
    +
    + +
    @@ -152,7 +294,7 @@
    Summary

    -Do not audit attempts to use admin ttys and ptys. +Do not audit attempts to use sysadm ttys and ptys.

    @@ -164,7 +306,7 @@ Do not audit attempts to use admin ttys and ptys. domain
    -The type of the process performing this action. +Domain to not audit. No @@ -174,6 +316,49 @@ No + +
    + + +
    + +userdom_dontaudit_use_sysadm_tty( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Do not audit attempts to use sysadm ttys. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain to not audit. + + +No +
    +
    +
    + +
    @@ -216,6 +401,7 @@ No
    +
    @@ -258,6 +444,7 @@ No
    +
    @@ -299,6 +486,7 @@ No
    +
    @@ -340,6 +528,7 @@ No
    +
    @@ -381,6 +570,7 @@ No
    +
    @@ -422,6 +612,7 @@ No
    +
    @@ -463,6 +654,91 @@ No
    + +
    + + +
    + +userdom_search_staff_home_dir( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Search the staff users home directory. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain to not audit. + + +No +
    +
    +
    + + +
    + + +
    + +userdom_search_sysadm_home_dir( + + + + + domain + + + )
    +
    +
    + +
    Summary
    +

    +Search the sysadm users home directory. +

    + + +
    Parameters
    + + + + + +
    Parameter:Description:Optional:
    +domain + + +Domain to not audit. + + +No +
    +
    +
    + +
    @@ -504,6 +780,7 @@ No
    +
    @@ -545,6 +822,7 @@ No
    +
    @@ -586,6 +864,7 @@ No
    +
    @@ -629,6 +908,7 @@ No
    +
    @@ -672,6 +952,7 @@ No
    +
    @@ -713,6 +994,7 @@ No
    +
    @@ -754,6 +1036,7 @@ No
    +
    @@ -795,6 +1078,7 @@ No
    +
    @@ -836,6 +1120,7 @@ No
    +
    @@ -877,6 +1162,7 @@ No
    +
    @@ -918,6 +1204,7 @@ No
    +
    @@ -959,6 +1246,7 @@ No
    +
    @@ -1007,6 +1295,7 @@ No

    Templates:

    +
    @@ -1037,6 +1326,20 @@ This template creates a user domain, types, and rules for the user's tty, pty, home directories, tmp, and tmpfs files.

    +

    +The privileges given to administrative users are: +

      +

    • Raw disk access

    • +

    • Set all sysctls

    • +

    • All kernel ring buffer controls

    • +

    • Set SELinux enforcement mode (enforcing/permissive)

    • +

    • Set SELinux booleans

    • +

    • Relabel all files but shadow

    • +

    • Create, read, write, and delete all files but shadow

    • +

    • Manage source and binary format SELinux policy

    • +

    • Run insmod

    • +

    +

    Parameters
    @@ -1058,6 +1361,7 @@ No
    +
    @@ -1115,6 +1419,7 @@ No
    +
    diff --git a/www/api-docs/templates.html b/www/api-docs/templates.html index 258b89cc..8188d2a4 100644 --- a/www/api-docs/templates.html +++ b/www/api-docs/templates.html @@ -91,6 +91,9 @@    -  nis
    +    -  + nscd
    +    -  remotelogin
    @@ -136,6 +139,9 @@    -  init
    +    -  + ipsec
    +    -  iptables
    @@ -160,6 +166,12 @@    -  mount
    +    -  + pcmcia
    + +    -  + raid
    +    -  selinuxutil
    @@ -178,9 +190,15 @@

    - * Interface Index + * Global Booleans 

    - * Template Index + * Global Tunables  +


    + * Layer Index +

    + * Interface Index +

    + * Template Index

    @@ -188,7 +206,7 @@
    -Module: +Module: userdomain

    Layer: system

    @@ -214,7 +232,7 @@ The template for creating an administrative user.

    -Module: +Module: authlogin

    Layer: system

    @@ -240,7 +258,7 @@ The per user domain template for the authlogin module.

    -Module: +Module: userdomain

    Layer: system

    @@ -267,7 +285,7 @@ users and administrative users.

    -Module: +Module: cron

    Layer: services

    @@ -293,7 +311,7 @@ The administrative functions template for the cron module.

    -Module: +Module: cron

    Layer: services

    @@ -319,7 +337,7 @@ The per user domain template for the cron module.

    -Module: +Module: domain

    Layer: system

    @@ -345,7 +363,7 @@ Summary is missing!

    -Module: +Module: domain

    Layer: system

    @@ -371,7 +389,7 @@ Summary is missing!

    -Module: +Module: gpg

    Layer: apps

    @@ -397,7 +415,7 @@ The per user domain template for the gpg module.

    -Module: +Module: mta

    Layer: services

    @@ -423,7 +441,7 @@ Summary is missing!

    -Module: +Module: ssh

    Layer: services

    @@ -449,7 +467,7 @@ The per user domain template for the ssh module.

    -Module: +Module: ssh

    Layer: services

    @@ -475,7 +493,7 @@ The template to define a ssh server.

    -Module: +Module: unconfined

    Layer: system

    @@ -501,7 +519,7 @@ A template to make the specified domain unconfined.