Layer: admin

Policy modules for administrative functions, such as package management.


Module:Description:
acct

Berkeley process accounting

anaconda

Policy for the Anaconda installer.

consoletype

Determine of the console connected to the controlling terminal.

dmesg

Policy for dmesg.

dmidecode

Decode DMI data for x86/ia64 bioses.

firstboot

Final system configuration run during the first boot after installation of Red Hat/Fedora systems.

kudzu

Hardware detection and configuration tools

logrotate

Rotate and archive system logs

netutils

Network analysis utilities

quota

File system quota management

rpm

Policy for the RPM package manager.

su

Run shells with substitute user and group

sudo

Execute a command with a substitute user

tmpreaper

Manage temporary directory sizes and file ages

updfstab

Red Hat utility to change /etc/fstab.

usermanage

Policy for managing user accounts.

vpn

Virtual Private Networking client



Layer: kernel

Policy for kernel threads, proc filesystem,and unlabeled processes and objects.


Module:Description:
bootloader

Policy for the kernel modules, kernel image, and bootloader.

corenetwork

Policy controlling access to network objects

devices

Device nodes and interfaces for many basic system devices.

filesystem

Policy for filesystems.

kernel

Policy for kernel threads, proc filesystem,and unlabeled processes and objects.

mls

Multilevel security policy

selinux

Policy for kernel security interface, in particular, selinuxfs.

storage

Policy controlling access to storage devices

terminal

Policy for terminals.



Layer: apps

Policy modules for applications


Module:Description:
gpg

Policy for GNU Privacy Guard and related programs.

loadkeys

Load keyboard mappings.

webalizer

Web server log analysis



Layer: system

Policy modules for system functions from init to multi-user login.


Module:Description:
authlogin

Common policy for authentication and user login.

clock

Policy for reading and setting the hardware clock.

corecommands

Core policy for shells, and generic programs in /bin, /sbin, /usr/bin, and /usr/sbin.

domain

Core policy for domains.

files

Basic filesystem types and interfaces.

fstools

Tools for filesystem management, such as mkfs and fsck.

getty

Policy for getty.

hostname

Policy for changing the system host name.

hotplug

Policy for hotplug system, for supporting the connection and disconnection of devices at runtime.

init

System initialization programs (init and init scripts).

ipsec

TCP/IP encryption

iptables

Policy for iptables.

libraries

Policy for system libraries.

locallogin

Policy for local logins.

logging

Policy for the kernel message logger and system logging daemon.

lvm

Policy for logical volume management programs.

miscfiles

Miscelaneous files.

modutils

Policy for kernel module utilities

mount

Policy for mount.

pcmcia

PCMCIA card management services

raid

RAID array management tools

selinuxutil

Policy for SELinux policy and userland applications.

sysnetwork

Policy for network configuration: ifconfig and dhcp client.

udev

Policy for udev.

unconfined

The unconfined domain.

userdomain

Policy for user domains



Layer: services

Policy modules for system services, like cron, and network services, like sshd.


Module:Description:
apache

Apache web server

apm

Advanced power management daemon

arpwatch

Ethernet activity monitor.

bind

Berkeley internet name domain DNS server.

bluetooth

Bluetooth tools and system services.

comsat

Comsat, a biff server.

cpucontrol

Services for loading CPU microcode and CPU frequency scaling.

cron

Periodic execution of scheduled commands.

cvs

Concurrent versions system

dbus

Desktop messaging bus

dhcp

Dynamic host configuration protocol (DHCP) server

dictd

Dictionary daemon

finger

Finger user information service.

ftp

File transfer protocol service

gpm

General Purpose Mouse driver

hal

Hardware abstraction layer

howl

Port of Apple Rendezvous multicast DNS

inetd

Internet services daemon.

inn

Internet News NNTP server

kerberos

MIT Kerberos admin and KDC

ktalk

KDE Talk daemon

ldap

OpenLDAP directory server

mailman

Mailman is for managing electronic mail discussion and e-newsletter lists

mta

Policy common to all email tranfer agents.

mysql

Policy for MySQL

nis

Policy for NIS (YP) servers and clients

nscd

Name service cache daemon

ntp

Network time protocol daemon

portmap

RPC port mapping service.

postgresql

PostgreSQL relational database

ppp

Point to Point Protocol daemon creates links in ppp networks

privoxy

Privacy enhancing web proxy.

radvd

IPv6 router advertisement daemon

remotelogin

Policy for rshd, rlogind, and telnetd.

rlogin

Remote login daemon

rshd

Remote shell service.

rsync

Fast incremental file transfer for synchronization

samba

SMB and CIFS client/server programs for UNIX and name Service Switch daemon for resolving names from Windows NT servers.

sasl

SASL authentication server

sendmail

Policy for sendmail.

snmp

Simple network management protocol services

squid

Squid caching http proxy server

ssh

Secure shell client and server policy.

stunnel

SSL Tunneling Proxy

tcpd

Policy for TCP daemon.

telnet

Telnet daemon

tftp

Trivial file transfer protocol daemon

uucp

Unix to Unix Copy

zebra

Zebra border gateway protocol network routing service