494 lines
6.9 KiB
Plaintext
494 lines
6.9 KiB
Plaintext
#
|
|
# This file contains a listing of available modules.
|
|
# To prevent a module from being used in policy
|
|
# creation, set the module name to "off".
|
|
#
|
|
# For monolithic policies, modules set to "base" and "module"
|
|
# will be built into the policy.
|
|
#
|
|
# For modular policies, modules set to "base" will be
|
|
# included in the base module. "module" will be compiled
|
|
# as individual loadable modules.
|
|
#
|
|
|
|
# Layer: kernel
|
|
# Module: devices
|
|
# Required in base
|
|
#
|
|
# Device nodes and interfaces for many basic system devices.
|
|
#
|
|
devices = base
|
|
|
|
# Layer: kernel
|
|
# Module: filesystem
|
|
# Required in base
|
|
#
|
|
# Policy for filesystems.
|
|
#
|
|
filesystem = base
|
|
|
|
# Layer: kernel
|
|
# Module: selinux
|
|
# Required in base
|
|
#
|
|
# Policy for kernel security interface, in particular, selinuxfs.
|
|
#
|
|
selinux = base
|
|
|
|
# Layer: kernel
|
|
# Module: terminal
|
|
# Required in base
|
|
#
|
|
# Policy for terminals.
|
|
#
|
|
terminal = base
|
|
|
|
# Layer: kernel
|
|
# Module: kernel
|
|
# Required in base
|
|
#
|
|
# Policy for kernel threads, proc filesystem,and unlabeled processes and objects.
|
|
#
|
|
kernel = base
|
|
|
|
# Layer: kernel
|
|
# Module: corenetwork
|
|
# Required in base
|
|
#
|
|
# Policy controlling access to network objects
|
|
#
|
|
corenetwork = base
|
|
|
|
# Layer: system
|
|
# Module: files
|
|
# Required in base
|
|
#
|
|
# Basic filesystem types and interfaces.
|
|
#
|
|
files = base
|
|
|
|
# Layer: system
|
|
# Module: domain
|
|
# Required in base
|
|
#
|
|
# Core policy for domains.
|
|
#
|
|
domain = base
|
|
|
|
# Layer: admin
|
|
# Module: usermanage
|
|
#
|
|
# Policy for managing user accounts.
|
|
#
|
|
usermanage = module
|
|
|
|
# Layer: admin
|
|
# Module: rpm
|
|
#
|
|
# Policy for the RPM package manager.
|
|
#
|
|
rpm = off
|
|
|
|
# Layer: admin
|
|
# Module: dmesg
|
|
#
|
|
# Policy for dmesg.
|
|
#
|
|
dmesg = module
|
|
|
|
# Layer: admin
|
|
# Module: logrotate
|
|
#
|
|
# Rotate and archive system logs
|
|
#
|
|
logrotate = off
|
|
|
|
# Layer: admin
|
|
# Module: consoletype
|
|
#
|
|
# Determine of the console connected to the controlling terminal.
|
|
#
|
|
consoletype = module
|
|
|
|
# Layer: admin
|
|
# Module: netutils
|
|
#
|
|
# Network analysis utilities
|
|
#
|
|
netutils = module
|
|
|
|
# Layer: admin
|
|
# Module: acct
|
|
#
|
|
# Berkeley process accounting
|
|
#
|
|
acct = module
|
|
|
|
# Layer: admin
|
|
# Module: tmpreaper
|
|
#
|
|
# Manage temporary directory sizes and file ages
|
|
#
|
|
tmpreaper = module
|
|
|
|
# Layer: admin
|
|
# Module: updfstab
|
|
#
|
|
# Red Hat utility to change /etc/fstab.
|
|
#
|
|
updfstab = module
|
|
|
|
# Layer: admin
|
|
# Module: su
|
|
#
|
|
# Run shells with substitute user and group
|
|
#
|
|
su = off
|
|
|
|
# Layer: admin
|
|
# Module: sudo
|
|
#
|
|
# Execute a command with a substitute user
|
|
#
|
|
sudo = module
|
|
|
|
# Layer: admin
|
|
# Module: quota
|
|
#
|
|
# File system quota management
|
|
#
|
|
quota = module
|
|
|
|
# Layer: admin
|
|
# Module: firstboot
|
|
#
|
|
# Final system configuration run during the first boot
|
|
# after installation of Red Hat/Fedora systems.
|
|
#
|
|
firstboot = module
|
|
|
|
# Layer: apps
|
|
# Module: gpg
|
|
#
|
|
# Policy for GNU Privacy Guard and related programs.
|
|
#
|
|
gpg = off
|
|
|
|
# Layer: apps
|
|
# Module: loadkeys
|
|
#
|
|
# Load keyboard mappings.
|
|
#
|
|
loadkeys = module
|
|
|
|
# Layer: kernel
|
|
# Module: bootloader
|
|
#
|
|
# Policy for the kernel modules, kernel image, and bootloader.
|
|
#
|
|
bootloader = module
|
|
|
|
# Layer: kernel
|
|
# Module: storage
|
|
#
|
|
# Policy controlling access to storage devices
|
|
#
|
|
storage = module
|
|
|
|
# Layer: services
|
|
# Module: remotelogin
|
|
#
|
|
# Policy for rshd, rlogind, and telnetd.
|
|
#
|
|
remotelogin = module
|
|
|
|
# Layer: services
|
|
# Module: nscd
|
|
#
|
|
# Name service cache daemon
|
|
#
|
|
nscd = module
|
|
|
|
# Layer: services
|
|
# Module: nis
|
|
#
|
|
# Policy for NIS (YP) servers and clients
|
|
#
|
|
nis = module
|
|
|
|
# Layer: services
|
|
# Module: sendmail
|
|
#
|
|
# Policy for sendmail.
|
|
#
|
|
sendmail = off
|
|
|
|
# Layer: services
|
|
# Module: ssh
|
|
#
|
|
# Secure shell client and server policy.
|
|
#
|
|
ssh = off
|
|
|
|
# Layer: services
|
|
# Module: cron
|
|
#
|
|
# Periodic execution of scheduled commands.
|
|
#
|
|
cron = module
|
|
|
|
# Layer: services
|
|
# Module: inetd
|
|
#
|
|
# Internet services daemon.
|
|
#
|
|
inetd = module
|
|
|
|
# Layer: services
|
|
# Module: kerberos
|
|
#
|
|
# MIT Kerberos admin and KDC
|
|
#
|
|
kerberos = module
|
|
|
|
# Layer: services
|
|
# Module: mta
|
|
#
|
|
# Policy common to all email tranfer agents.
|
|
#
|
|
mta = module
|
|
|
|
# Layer: services
|
|
# Module: mysql
|
|
#
|
|
# Policy for MySQL
|
|
#
|
|
mysql = module
|
|
|
|
# Layer: services
|
|
# Module: tcpd
|
|
#
|
|
# Policy for TCP daemon.
|
|
#
|
|
tcpd = module
|
|
|
|
# Layer: services
|
|
# Module: rshd
|
|
#
|
|
# Remote shell service.
|
|
#
|
|
rshd = module
|
|
|
|
# Layer: services
|
|
# Module: ldap
|
|
#
|
|
# OpenLDAP directory server
|
|
#
|
|
ldap = module
|
|
|
|
# Layer: services
|
|
# Module: gpm
|
|
#
|
|
# General Purpose Mouse driver
|
|
#
|
|
gpm = module
|
|
|
|
# Layer: services
|
|
# Module: howl
|
|
#
|
|
# Port of Apple Rendezvous multicast DNS
|
|
#
|
|
howl = module
|
|
|
|
# Layer: services
|
|
# Module: rsync
|
|
#
|
|
# Fast incremental file transfer for synchronization
|
|
#
|
|
rsync = module
|
|
|
|
# Layer: services
|
|
# Module: privoxy
|
|
#
|
|
# Privacy enhancing web proxy.
|
|
#
|
|
privoxy = module
|
|
|
|
# Layer: services
|
|
# Module: bind
|
|
#
|
|
# Berkeley internet name domain DNS server.
|
|
#
|
|
bind = module
|
|
|
|
# Layer: system
|
|
# Module: unconfined
|
|
#
|
|
# The unconfined domain.
|
|
#
|
|
unconfined = module
|
|
|
|
# Layer: system
|
|
# Module: authlogin
|
|
#
|
|
# Common policy for authentication and user login.
|
|
#
|
|
authlogin = module
|
|
|
|
# Layer: system
|
|
# Module: selinuxutil
|
|
#
|
|
# Policy for SELinux policy and userland applications.
|
|
#
|
|
selinuxutil = module
|
|
|
|
# Layer: system
|
|
# Module: getty
|
|
#
|
|
# Policy for getty.
|
|
#
|
|
getty = module
|
|
|
|
# Layer: system
|
|
# Module: mount
|
|
#
|
|
# Policy for mount.
|
|
#
|
|
mount = module
|
|
|
|
# Layer: system
|
|
# Module: ipsec
|
|
#
|
|
# TCP/IP encryption
|
|
#
|
|
ipsec = module
|
|
|
|
# Layer: system
|
|
# Module: locallogin
|
|
#
|
|
# Policy for local logins.
|
|
#
|
|
locallogin = module
|
|
|
|
# Layer: system
|
|
# Module: logging
|
|
#
|
|
# Policy for the kernel message logger and system logging daemon.
|
|
#
|
|
logging = module
|
|
|
|
# Layer: system
|
|
# Module: sysnetwork
|
|
#
|
|
# Policy for network configuration: ifconfig and dhcp client.
|
|
#
|
|
sysnetwork = module
|
|
|
|
# Layer: system
|
|
# Module: fstools
|
|
#
|
|
# Tools for filesystem management, such as mkfs and fsck.
|
|
#
|
|
fstools = module
|
|
|
|
# Layer: system
|
|
# Module: pcmcia
|
|
#
|
|
# PCMCIA card management services
|
|
#
|
|
pcmcia = module
|
|
|
|
# Layer: system
|
|
# Module: iptables
|
|
#
|
|
# Policy for iptables.
|
|
#
|
|
iptables = module
|
|
|
|
# Layer: system
|
|
# Module: userdomain
|
|
#
|
|
# Policy for user domains
|
|
#
|
|
userdomain = module
|
|
|
|
# Layer: system
|
|
# Module: corecommands
|
|
#
|
|
# Core policy for shells, and generic programs
|
|
# in /bin, /sbin, /usr/bin, and /usr/sbin.
|
|
#
|
|
corecommands = base
|
|
|
|
# Layer: system
|
|
# Module: hotplug
|
|
#
|
|
# Policy for hotplug system, for supporting the
|
|
# connection and disconnection of devices at runtime.
|
|
#
|
|
hotplug = module
|
|
|
|
# Layer: system
|
|
# Module: clock
|
|
#
|
|
# Policy for reading and setting the hardware clock.
|
|
#
|
|
clock = module
|
|
|
|
# Layer: system
|
|
# Module: lvm
|
|
#
|
|
# Policy for logical volume management programs.
|
|
#
|
|
lvm = module
|
|
|
|
# Layer: system
|
|
# Module: modutils
|
|
#
|
|
# Policy for kernel module utilities
|
|
#
|
|
modutils = module
|
|
|
|
# Layer: system
|
|
# Module: init
|
|
#
|
|
# System initialization programs (init and init scripts).
|
|
#
|
|
init = module
|
|
|
|
# Layer: system
|
|
# Module: udev
|
|
#
|
|
# Policy for udev.
|
|
#
|
|
udev = module
|
|
|
|
# Layer: system
|
|
# Module: hostname
|
|
#
|
|
# Policy for changing the system host name.
|
|
#
|
|
hostname = module
|
|
|
|
# Layer: system
|
|
# Module: raid
|
|
#
|
|
# RAID array management tools
|
|
#
|
|
raid = module
|
|
|
|
# Layer: system
|
|
# Module: libraries
|
|
#
|
|
# Policy for system libraries.
|
|
#
|
|
libraries = module
|
|
|
|
# Layer: system
|
|
# Module: miscfiles
|
|
#
|
|
# Miscelaneous files.
|
|
#
|
|
miscfiles = module
|
|
|