80edc31
#
80edc31
# This file contains a listing of available modules.
80edc31
# To prevent a module from  being used in policy
80edc31
# creation, set the module name to "off".
80edc31
#
80edc31
# For monolithic policies, modules set to "base" and "module"
80edc31
# will be built into the policy.
80edc31
#
80edc31
# For modular policies, modules set to "base" will be
80edc31
# included in the base module.  "module" will be compiled
80edc31
# as individual loadable modules.
80edc31
#
80edc31
80edc31
# Layer: admin
80edc31
# Module: acct
80edc31
#
80edc31
# Berkeley process accounting
80edc31
# 
80edc31
acct = base
80edc31
80edc31
# Layer: admin
80edc31
# Module: alsa
80edc31
#
80edc31
# Ainit ALSA configuration tool
80edc31
# 
80edc31
alsa = base
80edc31
80edc31
# Layer: apps
80edc31
# Module: ada
80edc31
#
80edc31
# ada executable
80edc31
# 
80edc31
ada = module
80edc31
f49c57d
# Layer: apps
f49c57d
# Module: cpufreqselector 
f49c57d
#
f49c57d
# cpufreqselector executable
f49c57d
# 
f49c57d
cpufreqselector = module
f49c57d
80edc31
# Layer: modules
80edc31
# Module: awstats
80edc31
#
80edc31
# awstats executable
80edc31
# 
80edc31
awstats = module
80edc31
80edc31
# Layer: admin
80edc31
# Module: amanda
80edc31
#
80edc31
# Automated backup program.
80edc31
# 
80edc31
amanda = module
80edc31
80edc31
# Layer: services
dcd0c96
# Module: afs
dcd0c96
#
dcd0c96
# Andrew Filesystem server
dcd0c96
# 
dcd0c96
afs = module
dcd0c96
dcd0c96
# Layer: services
80edc31
# Module: amavis
80edc31
#
80edc31
# Anti-virus
80edc31
# 
80edc31
amavis = module
80edc31
80edc31
# Layer: admin
80edc31
# Module: anaconda
80edc31
#
80edc31
# Policy for the Anaconda installer.
80edc31
# 
80edc31
anaconda = base
80edc31
80edc31
# Layer: services
80edc31
# Module: apache
80edc31
#
80edc31
# Apache web server
80edc31
# 
80edc31
apache = module
80edc31
80edc31
# Layer: services
80edc31
# Module: apm
80edc31
#
80edc31
# Advanced power management daemon
80edc31
# 
80edc31
apm = base
80edc31
80edc31
# Layer: system
80edc31
# Module: application
80edc31
# Required in base
80edc31
#
80edc31
# Defines attributs and interfaces for all user applications
80edc31
# 
80edc31
application = base
80edc31
80edc31
# Layer: services
80edc31
# Module: arpwatch
80edc31
#
80edc31
# Ethernet activity monitor.
80edc31
# 
80edc31
arpwatch = module
80edc31
80edc31
# Layer: services
80edc31
# Module: audioentropy
80edc31
#
80edc31
# Generate entropy from audio input
80edc31
# 
80edc31
audioentropy = module
80edc31
80edc31
# Layer: system
80edc31
# Module: authlogin
80edc31
#
80edc31
# Common policy for authentication and user login.
80edc31
# 
80edc31
authlogin = base
80edc31
80edc31
# Layer: services
80edc31
# Module: automount
80edc31
#
80edc31
# Filesystem automounter service.
80edc31
# 
80edc31
automount = module
80edc31
80edc31
# Layer: services
80edc31
# Module: avahi
80edc31
#
80edc31
# mDNS/DNS-SD daemon implementing Apple ZeroConf architecture
80edc31
# 
80edc31
avahi = module
80edc31
80edc31
# Layer: services
80edc31
# Module: bind
80edc31
#
80edc31
# Berkeley internet name domain DNS server.
80edc31
# 
80edc31
bind = module
80edc31
80edc31
# Layer: services
80edc31
# Module: dnsmasq
80edc31
#
80edc31
# A lightweight DHCP and caching DNS server.
80edc31
# 
80edc31
dnsmasq = module
80edc31
80edc31
# Layer: services
80edc31
# Module: bluetooth
80edc31
#
80edc31
# Bluetooth tools and system services.
80edc31
# 
80edc31
bluetooth = module
80edc31
80edc31
# Layer: kernel
02d888c
# Module: ubac
02d888c
#
02d888c
# 
02d888c
# 
02d888c
ubac = base
02d888c
02d888c
#
02d888c
# Layer: kernel
80edc31
# Module: bootloader
80edc31
#
80edc31
# Policy for the kernel modules, kernel image, and bootloader.
80edc31
# 
80edc31
bootloader = base
80edc31
80edc31
80edc31
# Layer: services
80edc31
# Module: canna
80edc31
#
80edc31
# Canna - kana-kanji conversion server
80edc31
# 
80edc31
canna = module
80edc31
80edc31
# Layer: services
80edc31
# Module: ccs
80edc31
#
80edc31
# policy for ccs
80edc31
# 
80edc31
ccs = module
80edc31
80edc31
# Layer: apps
80edc31
# Module: calamaris
80edc31
#
80edc31
#
80edc31
# Squid log analysis
80edc31
# 
80edc31
calamaris = module
80edc31
80edc31
# Layer: apps
80edc31
# Module: cdrecord
80edc31
#
80edc31
# Policy for cdrecord
80edc31
# 
80edc31
cdrecord = module
80edc31
80edc31
# Layer: admin
80edc31
# Module: certwatch
80edc31
#
80edc31
# Digital Certificate Tracking
80edc31
# 
80edc31
certwatch = module
80edc31
333ebd6
# Layer: admin
333ebd6
# Module: certmaster
333ebd6
#
a023a0b
# Digital Certificate master
333ebd6
# 
a023a0b
certmaster = module
333ebd6
80edc31
# Layer: services
80edc31
# Module: cipe
80edc31
#
80edc31
# Encrypted tunnel daemon
80edc31
# 
80edc31
cipe = module
80edc31
80edc31
# Layer: services
80edc31
# Module: comsat
80edc31
#
80edc31
# Comsat, a biff server.
80edc31
# 
80edc31
comsat = module
80edc31
80edc31
# Layer: services
80edc31
# Module: clamav
80edc31
#
80edc31
# ClamAV Virus Scanner
80edc31
# 
80edc31
clamav = module
80edc31
80edc31
# Layer: system
80edc31
# Module: clock
80edc31
#
80edc31
# Policy for reading and setting the hardware clock.
80edc31
# 
80edc31
clock = base
80edc31
80edc31
# Layer: services
80edc31
# Module: consolekit
80edc31
#
80edc31
# ConsoleKit is a system daemon for tracking what users are logged
80edc31
# 
80edc31
consolekit = module
80edc31
80edc31
# Layer: admin
80edc31
# Module: consoletype
80edc31
#
80edc31
# Determine of the console connected to the controlling terminal.
80edc31
# 
80edc31
consoletype = base
80edc31
80edc31
# Layer: kernel
80edc31
# Module: corecommands
80edc31
# Required in base
80edc31
#
80edc31
# Core policy for shells, and generic programs
80edc31
# in /bin, /sbin, /usr/bin, and /usr/sbin.
80edc31
# 
80edc31
corecommands = base
80edc31
80edc31
# Layer: kernel
80edc31
# Module: corenetwork
80edc31
# Required in base
80edc31
#
80edc31
# Policy controlling access to network objects
80edc31
# 
80edc31
corenetwork = base
80edc31
80edc31
# Layer: services
80edc31
# Module: cpucontrol
80edc31
#
80edc31
# Services for loading CPU microcode and CPU frequency scaling.
80edc31
# 
80edc31
cpucontrol = base
80edc31
80edc31
# Layer: services
80edc31
# Module: cron
80edc31
#
80edc31
# Periodic execution of scheduled commands.
80edc31
# 
80edc31
cron = base
80edc31
80edc31
# Layer: services
80edc31
# Module: cups
80edc31
#
80edc31
# Common UNIX printing system
80edc31
# 
80edc31
cups = module
80edc31
80edc31
# Layer: services
80edc31
# Module: cvs
80edc31
#
80edc31
# Concurrent versions system
80edc31
# 
80edc31
cvs = module
80edc31
80edc31
# Layer: services
80edc31
# Module: cyphesis
80edc31
#
80edc31
# cyphesis game server
80edc31
# 
80edc31
cyphesis = module
80edc31
80edc31
# Layer: services
80edc31
# Module: cyrus
80edc31
#
80edc31
# Cyrus is an IMAP service intended to be run on sealed servers
80edc31
# 
80edc31
cyrus = module
80edc31
80edc31
# Layer: system
80edc31
# Module: daemontools
80edc31
#
80edc31
# Collection of tools for managing UNIX services
80edc31
# 
80edc31
daemontools = module
80edc31
80edc31
# Layer: services
80edc31
# Module: dbskk
80edc31
#
80edc31
# Dictionary server for the SKK Japanese input method system.
80edc31
# 
80edc31
dbskk = module
80edc31
80edc31
# Layer: services
80edc31
# Module: dbus
80edc31
#
80edc31
# Desktop messaging bus
80edc31
# 
80edc31
dbus = base
80edc31
80edc31
# Layer: services
80edc31
# Module: dcc
80edc31
#
80edc31
# A distributed, collaborative, spam detection and filtering network.
80edc31
# 
80edc31
dcc = module
80edc31
80edc31
# Layer: admin
80edc31
# Module: ddcprobe
80edc31
#
80edc31
# ddcprobe retrieves monitor and graphics card information
80edc31
# 
80edc31
ddcprobe = off
80edc31
acc1376
# Layer: services
acc1376
# Module: devicekit
acc1376
#
acc1376
# devicekit-daemon
acc1376
# 
acc1376
devicekit = module
acc1376
80edc31
# Layer: kernel
80edc31
# Module: devices
80edc31
# Required in base
80edc31
#
80edc31
# Device nodes and interfaces for many basic system devices.
80edc31
# 
80edc31
devices = base
80edc31
80edc31
# Layer: services
80edc31
# Module: dhcp
80edc31
#
80edc31
# Dynamic host configuration protocol (DHCP) server
80edc31
# 
80edc31
dhcp = module
80edc31
80edc31
# Layer: services
80edc31
# Module: dictd
80edc31
#
80edc31
# Dictionary daemon
80edc31
# 
80edc31
dictd = module
80edc31
80edc31
# Layer: services
80edc31
# Module: distcc
80edc31
#
80edc31
# Distributed compiler daemon
80edc31
# 
80edc31
distcc = off
80edc31
80edc31
# Layer: admin
80edc31
# Module: dmesg
80edc31
#
80edc31
# Policy for dmesg.
80edc31
# 
80edc31
dmesg = base
80edc31
80edc31
# Layer: admin
80edc31
# Module: dmidecode
80edc31
#
80edc31
# Decode DMI data for x86/ia64 bioses.
80edc31
# 
80edc31
dmidecode = base
80edc31
80edc31
# Layer: system
80edc31
# Module: domain
80edc31
# Required in base
80edc31
#
80edc31
# Core policy for domains.
80edc31
# 
80edc31
domain = base
80edc31
80edc31
# Layer: services
80edc31
# Module: dovecot
80edc31
#
80edc31
# Dovecot POP and IMAP mail server
80edc31
# 
80edc31
dovecot = module
80edc31
80edc31
# Layer: apps
ca18358
# Module: gitosis
ca18358
#
ca18358
# Policy for gitosis
ca18358
# 
ca18358
gitosis = module
ca18358
 
ca18358
# Layer: apps
80edc31
# Module: gpg
80edc31
#
80edc31
# Policy for GNU Privacy Guard and related programs.
80edc31
# 
1d1c058
gpg = module
1d1c058
4f5b223
# Layer: services
4f5b223
# Module: gpsd
4f5b223
#
4f5b223
# gpsd monitor daemon
4f5b223
#
4f5b223
# 
4f5b223
gpsd = module
4f5b223
25a4763
# Layer: services
1d1c058
# Module: git
1d1c058
#
1d1c058
# Policy for the stupid content tracker
1d1c058
# 
1d1c058
git = module
80edc31
80edc31
# Layer: services
80edc31
# Module: gpm
80edc31
#
80edc31
# General Purpose Mouse driver
80edc31
# 
80edc31
gpm = module
80edc31
80edc31
# Layer: apps
80edc31
# Module: ethereal
80edc31
#
80edc31
# Ethereal packet capture tool.
80edc31
# 
80edc31
ethereal = module
80edc31
80edc31
# Layer: services
80edc31
# Module: fail2ban
80edc31
#
80edc31
# daiemon that bans IP that makes too many password failures
80edc31
# 
80edc31
fail2ban = module
80edc31
80edc31
# Layer: services
80edc31
# Module: fetchmail
80edc31
#
80edc31
# Remote-mail retrieval and forwarding utility
80edc31
# 
80edc31
fetchmail = module
80edc31
80edc31
# Layer: kernel
80edc31
# Module: files
80edc31
# Required in base
80edc31
#
80edc31
# Basic filesystem types and interfaces.
80edc31
# 
80edc31
files = base
80edc31
80edc31
# Layer: kernel
80edc31
# Module: filesystem
80edc31
# Required in base
80edc31
#
80edc31
# Policy for filesystems.
80edc31
# 
80edc31
filesystem = base
80edc31
80edc31
# Layer: services
80edc31
# Module: finger
80edc31
#
80edc31
# Finger user information service.
80edc31
# 
80edc31
finger = module
80edc31
80edc31
# Layer: admin
80edc31
# Module: firstboot
80edc31
#
80edc31
# Final system configuration run during the first boot
80edc31
# after installation of Red Hat/Fedora systems.
80edc31
# 
80edc31
firstboot = base
80edc31
78c9236
# Layer: services
78c9236
# Module: fprintd
78c9236
#
78c9236
# finger print server
78c9236
# 
78c9236
fprintd = module
78c9236
80edc31
# Layer: system
80edc31
# Module: fstools
80edc31
#
80edc31
# Tools for filesystem management, such as mkfs and fsck.
80edc31
# 
80edc31
fstools = base
80edc31
80edc31
# Layer: services
80edc31
# Module: ftp
80edc31
#
80edc31
# File transfer protocol service
80edc31
# 
80edc31
ftp = module
80edc31
80edc31
# Layer: apps
80edc31
# Module: games
80edc31
#
80edc31
# The Open Group Pegasus CIM/WBEM Server.
80edc31
# 
80edc31
games = module
80edc31
80edc31
# Layer: system
80edc31
# Module: getty
80edc31
#
80edc31
# Policy for getty.
80edc31
# 
80edc31
getty = base
80edc31
80edc31
# Layer: apps
80edc31
# Module: gnome
80edc31
#
80edc31
# gnome session and gconf
80edc31
# 
80edc31
gnome = module
80edc31
80edc31
# Layer: services
80edc31
# Module: gnomeclock
80edc31
#
80edc31
# gnomeclock used by dbus/polkit to set time
80edc31
# 
80edc31
gnomeclock = module
80edc31
80edc31
# Layer: services
80edc31
# Module: hal
80edc31
#
80edc31
# Hardware abstraction layer
80edc31
# 
80edc31
hal = module
80edc31
80edc31
# Layer: services
ca18358
# Module: policykit
80edc31
#
80edc31
# Hardware abstraction layer
80edc31
# 
ca18358
policykit = module
80edc31
1b94a13
# Layer: services
1b94a13
# Module: psad
1b94a13
#
1b94a13
# Analyze iptables log for hostile traffic
1b94a13
# 
1b94a13
psad = module
1b94a13
80edc31
# Layer: system
80edc31
# Module: hostname
80edc31
#
80edc31
# Policy for changing the system host name.
80edc31
# 
80edc31
hostname = base
80edc31
80edc31
80edc31
# Layer: system
80edc31
# Module: hotplug
80edc31
#
80edc31
# Policy for hotplug system, for supporting the
80edc31
# connection and disconnection of devices at runtime.
80edc31
# 
80edc31
hotplug = base
80edc31
80edc31
# Layer: services
80edc31
# Module: howl
80edc31
#
80edc31
# Port of Apple Rendezvous multicast DNS
80edc31
# 
80edc31
howl = module
80edc31
80edc31
# Layer: services
80edc31
# Module: inetd
80edc31
#
80edc31
# Internet services daemon.
80edc31
# 
80edc31
inetd = base
80edc31
80edc31
# Layer: system
80edc31
# Module: init
80edc31
#
80edc31
# System initialization programs (init and init scripts).
80edc31
# 
80edc31
init = base
80edc31
80edc31
# Layer: services
80edc31
# Module: inn
80edc31
#
80edc31
# Internet News NNTP server
80edc31
# 
80edc31
inn = module
80edc31
80edc31
# Layer: system
80edc31
# Module: iptables
80edc31
#
80edc31
# Policy for iptables.
80edc31
# 
80edc31
iptables = base
80edc31
80edc31
# Layer: system
80edc31
# Module: ipsec
80edc31
#
80edc31
# TCP/IP encryption
80edc31
# 
80edc31
ipsec = module
80edc31
80edc31
# Layer: apps
80edc31
# Module: irc
80edc31
#
80edc31
# IRC client policy
80edc31
# 
80edc31
irc = module
80edc31
80edc31
# Layer: services
80edc31
# Module: irqbalance
80edc31
#
80edc31
# IRQ balancing daemon
80edc31
# 
80edc31
irqbalance = base
80edc31
80edc31
# Layer: system
80edc31
# Module: iscsi
80edc31
#
80edc31
# Open-iSCSI daemon
80edc31
# 
80edc31
iscsi = module
80edc31
80edc31
# Layer: services
80edc31
# Module: i18n_input
80edc31
#
80edc31
# IIIMF htt server
80edc31
# 
80edc31
i18n_input = off
80edc31
80edc31
87fb153
# Layer: services
87fb153
# Module: jabber
87fb153
#
87fb153
# Jabber instant messaging server
87fb153
# 
87fb153
jabber = module
87fb153
80edc31
# Layer: apps
80edc31
# Module: java
80edc31
#
80edc31
# java executable
80edc31
# 
80edc31
java = module
80edc31
80edc31
# Layer: services
80edc31
# Module: kerberos
80edc31
#
80edc31
# MIT Kerberos admin and KDC
80edc31
# 
80edc31
kerberos = module
80edc31
80edc31
# Layer: kernel
80edc31
# Module: kernel
80edc31
# Required in base
80edc31
#
80edc31
# Policy for kernel threads, proc filesystem,and unlabeled processes and objects.
80edc31
# 
80edc31
kernel = base
80edc31
80edc31
# Layer: services
80edc31
# Module: ktalk
80edc31
#
80edc31
# KDE Talk daemon
80edc31
# 
80edc31
ktalk = module
80edc31
80edc31
# Layer: admin
80edc31
# Module: kudzu
80edc31
#
80edc31
# Hardware detection and configuration tools
80edc31
# 
80edc31
kudzu = base
80edc31
80edc31
80edc31
# Layer: services
80edc31
# Module: ldap
80edc31
#
80edc31
# OpenLDAP directory server
80edc31
# 
80edc31
ldap = module
80edc31
80edc31
# Layer: system
80edc31
# Module: libraries
80edc31
#
80edc31
# Policy for system libraries.
80edc31
# 
80edc31
libraries = base
80edc31
80edc31
# Layer: apps
80edc31
# Module: loadkeys
80edc31
#
80edc31
# Load keyboard mappings.
80edc31
# 
80edc31
loadkeys = base
80edc31
80edc31
# Layer: system
80edc31
# Module: locallogin
80edc31
#
80edc31
# Policy for local logins.
80edc31
# 
80edc31
locallogin = base
80edc31
80edc31
# Layer: apps
80edc31
# Module: lockdev
80edc31
#
80edc31
# device locking policy for lockdev
80edc31
# 
80edc31
lockdev = module
80edc31
80edc31
# Layer: system
80edc31
# Module: logging
80edc31
#
80edc31
# Policy for the kernel message logger and system logging daemon.
80edc31
# 
80edc31
logging = base
80edc31
80edc31
# Layer: admin
80edc31
# Module: logrotate
80edc31
#
80edc31
# Rotate and archive system logs
80edc31
# 
80edc31
logrotate = base
80edc31
80edc31
# Layer: services
80edc31
# Module: logwatch
80edc31
#
80edc31
# logwatch executable
80edc31
# 
80edc31
logwatch = base
80edc31
80edc31
# Layer: services
80edc31
# Module: lpd
80edc31
#
80edc31
# Line printer daemon
80edc31
# 
80edc31
lpd = module
80edc31
5dce3c1
# Layer: services
5dce3c1
# Module: lircd
5dce3c1
#
5dce3c1
# LIRC daemon - decodes infrared signals and provides them on a Unix domain socket.  
5dce3c1
# 
5dce3c1
lircd = module
5dce3c1
80edc31
# Layer: system
80edc31
# Module: lvm
80edc31
#
80edc31
# Policy for logical volume management programs.
80edc31
# 
80edc31
lvm = base
80edc31
80edc31
# Layer: services
80edc31
# Module: mailman
80edc31
#
80edc31
# Mailman is for managing electronic mail discussion and e-newsletter lists
80edc31
# 
80edc31
mailman = module
80edc31
80edc31
# Layer: kernel
80edc31
# Module: mcs
80edc31
# Required in base
80edc31
#
80edc31
# MultiCategory security policy
80edc31
# 
80edc31
mcs = base
80edc31
80edc31
# Layer: system
80edc31
# Module: miscfiles
80edc31
#
80edc31
# Miscelaneous files.
80edc31
# 
80edc31
miscfiles = base
80edc31
80edc31
# Layer: kernel
80edc31
# Module: mls
80edc31
# Required in base
80edc31
#
80edc31
# Multilevel security policy
80edc31
# 
80edc31
mls = base
80edc31
80edc31
# Layer: system
80edc31
# Module: modutils
80edc31
#
80edc31
# Policy for kernel module utilities
80edc31
# 
80edc31
modutils = base
80edc31
80edc31
# Layer: apps
80edc31
# Module: mono
80edc31
#
80edc31
# mono executable
80edc31
# 
80edc31
mono = module
80edc31
80edc31
# Layer: system
80edc31
# Module: mount
80edc31
#
80edc31
# Policy for mount.
80edc31
# 
80edc31
mount = base
80edc31
80edc31
# Layer: apps
80edc31
# Module: mozilla
80edc31
#
80edc31
# Policy for Mozilla and related web browsers
80edc31
# 
80edc31
mozilla = module
80edc31
ca18358
# Layer: services
ca18358
# Module: nslcd
ca18358
#
ca18358
# Policy for nslcd
ca18358
# 
ca18358
nslcd = module
ca18358
80edc31
# Layer: apps
80edc31
# Module: nsplugin
80edc31
#
80edc31
# Policy for nspluginwrapper 
80edc31
# 
80edc31
nsplugin = module
80edc31
80edc31
# Layer: apps
80edc31
# Module: mplayer
80edc31
#
80edc31
# Policy for Mozilla and related web browsers
80edc31
# 
80edc31
mplayer = module
80edc31
80edc31
# Layer: apps
80edc31
# Module: gpg
80edc31
#
80edc31
# Policy for Mozilla and related web browsers
80edc31
# 
80edc31
gpg = module
80edc31
80edc31
# Layer: admin
80edc31
# Module: mrtg
80edc31
#
80edc31
# Network traffic graphing
80edc31
# 
80edc31
mrtg = module
80edc31
80edc31
# Layer: services
80edc31
# Module: mta
80edc31
#
80edc31
# Policy common to all email tranfer agents.
80edc31
# 
80edc31
mta = base
80edc31
80edc31
# Layer: services
80edc31
# Module: mysql
80edc31
#
80edc31
# Policy for MySQL
80edc31
# 
80edc31
mysql = module
80edc31
80edc31
# Layer: services
80edc31
# Module: nagios
80edc31
#
80edc31
# policy for nagios Host/service/network monitoring program
80edc31
# 
80edc31
nagios = module
80edc31
80edc31
# Layer: admin
80edc31
# Module: netutils
80edc31
#
80edc31
# Network analysis utilities
80edc31
# 
80edc31
netutils = base
80edc31
80edc31
# Layer: services
80edc31
# Module: networkmanager
80edc31
#
80edc31
# Manager for dynamically switching between networks.
80edc31
# 
80edc31
networkmanager = base
80edc31
80edc31
# Layer: services
80edc31
# Module: nis
80edc31
#
80edc31
# Policy for NIS (YP) servers and clients
80edc31
# 
80edc31
nis = module
80edc31
80edc31
80edc31
# Layer: services
80edc31
# Module: nscd
80edc31
#
80edc31
# Name service cache daemon
80edc31
# 
80edc31
nscd = base
80edc31
80edc31
80edc31
# Layer: services
80edc31
# Module: ntp
80edc31
#
80edc31
# Network time protocol daemon
80edc31
# 
80edc31
ntp = module
80edc31
80edc31
# Layer: services
80edc31
# Module: nx
80edc31
#
80edc31
# NX Remote Desktop
80edc31
# 
80edc31
nx = module
80edc31
80edc31
80edc31
# Layer: services
80edc31
# Module: oddjob
80edc31
#
80edc31
# policy for oddjob
80edc31
# 
80edc31
oddjob = module
80edc31
80edc31
# Layer: services
80edc31
# Module: openct
80edc31
#
80edc31
# Service for handling smart card readers.
80edc31
# 
80edc31
openct = off
80edc31
80edc31
# Layer: services
80edc31
# Module: openvpn
80edc31
#
80edc31
# Policy for OPENVPN full-featured SSL VPN solution
80edc31
# 
80edc31
openvpn = module
80edc31
80edc31
80edc31
# Layer: service
80edc31
# Module: pcscd
80edc31
#
80edc31
# PC/SC Smart Card Daemon
80edc31
#
80edc31
pcscd = module
80edc31
80edc31
# Layer: service
80edc31
# Module: openct
80edc31
# 
80edc31
# Middleware framework for smart card terminals
80edc31
#
80edc31
openct = module
80edc31
80edc31
# Layer: system
80edc31
# Module: pcmcia
80edc31
#
80edc31
# PCMCIA card management services
80edc31
# 
80edc31
pcmcia = base
80edc31
80edc31
# Layer: services
80edc31
# Module: pegasus
80edc31
#
80edc31
# The Open Group Pegasus CIM/WBEM Server.
80edc31
# 
80edc31
pegasus = module
80edc31
80edc31
# Layer: services
80edc31
# Module: postgresql
80edc31
#
80edc31
# PostgreSQL relational database
80edc31
# 
80edc31
postgresql = module
80edc31
80edc31
# Layer: services
80edc31
# Module: portmap
80edc31
#
80edc31
# RPC port mapping service.
80edc31
# 
80edc31
portmap = module
80edc31
80edc31
# Layer: services
80edc31
# Module: postfix
80edc31
#
80edc31
# Postfix email server
80edc31
# 
80edc31
postfix = module
80edc31
78c9236
# Layer: services
80edc31
# Module: postgrey
80edc31
#
80edc31
# email scanner
80edc31
# 
80edc31
postgrey = module
80edc31
80edc31
# Layer: services
80edc31
# Module: ppp
80edc31
#
80edc31
# Point to Point Protocol daemon creates links in ppp networks
80edc31
# 
80edc31
ppp = module
80edc31
80edc31
# Layer: admin
80edc31
# Module: prelink
80edc31
#
80edc31
# Manage temporary directory sizes and file ages
80edc31
# 
80edc31
prelink = base
80edc31
80edc31
# Layer: services
80edc31
# Module: procmail
80edc31
#
80edc31
# Procmail mail delivery agent
80edc31
# 
80edc31
procmail = module
80edc31
80edc31
# Layer: services
80edc31
# Module: privoxy
80edc31
#
80edc31
# Privacy enhancing web proxy.
80edc31
# 
80edc31
privoxy = module
80edc31
80edc31
# Layer: services
80edc31
# Module: publicfile
80edc31
#
80edc31
# publicfile supplies files to the public through HTTP and FTP
80edc31
# 
80edc31
publicfile = module
80edc31
0c34c69
# Layer: apps
0c34c69
# Module: pulseaudio
0c34c69
#
0c34c69
# The PulseAudio Sound System
0c34c69
# 
0c34c69
pulseaudio = module
0c34c69
80edc31
# Layer: services
80edc31
# Module: pyzor
80edc31
#
80edc31
# Spam Blocker
80edc31
# 
80edc31
pyzor = module
80edc31
80edc31
80edc31
# Layer: services
80edc31
# Module: qmail
80edc31
#
80edc31
# Policy for qmail
80edc31
# 
80edc31
qmail = module
80edc31
80edc31
# Layer: admin
80edc31
# Module: quota
80edc31
#
80edc31
# File system quota management
80edc31
# 
80edc31
quota = base
80edc31
80edc31
# Layer: system
80edc31
# Module: raid
80edc31
#
80edc31
# RAID array management tools
80edc31
# 
80edc31
raid = base
80edc31
80edc31
# Layer: services
80edc31
# Module: radius
80edc31
#
80edc31
# RADIUS authentication and accounting server.
80edc31
# 
80edc31
radius = module
80edc31
80edc31
# Layer: services
80edc31
# Module: radvd
80edc31
#
80edc31
# IPv6 router advertisement daemon
80edc31
# 
80edc31
radvd = module
80edc31
80edc31
# Layer: services
80edc31
# Module: razor
80edc31
#
80edc31
# A distributed, collaborative, spam detection and filtering network.
80edc31
# 
80edc31
razor = module
80edc31
80edc31
# Layer: admin
80edc31
# Module: readahead
80edc31
#
80edc31
# Readahead, read files into page cache for improved performance
80edc31
# 
80edc31
readahead = base
80edc31
80edc31
# Layer: services
80edc31
# Module: rhgb
80edc31
#
80edc31
# X windows login display manager
80edc31
# 
80edc31
rhgb = module
80edc31
80edc31
# Layer: services
80edc31
# Module: rdisc
80edc31
#
80edc31
# Network router discovery daemon
80edc31
# 
80edc31
rdisc = module
80edc31
80edc31
# Layer: services
80edc31
# Module: remotelogin
80edc31
#
80edc31
# Policy for rshd, rlogind, and telnetd.
80edc31
# 
80edc31
remotelogin = module
80edc31
80edc31
# Layer: services
80edc31
# Module: ricci
80edc31
#
80edc31
# policy for ricci
80edc31
# 
80edc31
ricci = module
80edc31
80edc31
# Layer: services
80edc31
# Module: rlogin
80edc31
#
80edc31
# Remote login daemon
80edc31
# 
80edc31
rlogin = module
80edc31
80edc31
# Layer: services
80edc31
# Module: roundup
80edc31
#
80edc31
# Roundup Issue Tracking System policy
80edc31
# 
80edc31
roundup = module
80edc31
80edc31
# Layer: services
80edc31
# Module: rpc
80edc31
#
80edc31
# Remote Procedure Call Daemon for managment of network based process communication
80edc31
# 
80edc31
rpc = base
80edc31
80edc31
# Layer: admin
80edc31
# Module: rpm
80edc31
#
80edc31
# Policy for the RPM package manager.
80edc31
# 
80edc31
rpm = base
80edc31
80edc31
80edc31
# Layer: services
80edc31
# Module: rshd
80edc31
#
80edc31
# Remote shell service.
80edc31
# 
80edc31
rshd = module
80edc31
80edc31
# Layer: services
80edc31
# Module: rsync
80edc31
#
80edc31
# Fast incremental file transfer for synchronization
80edc31
# 
80edc31
rsync = module
80edc31
80edc31
# Layer: services
ca18358
# Module: rtkit_daemon
ca18358
#
ca18358
# Real Time Kit Daemon
ca18358
# 
ca18358
rtkit_daemon = module
ca18358
ca18358
# Layer: services
80edc31
# Module: rwho
80edc31
#
80edc31
# who is logged in on local machines
80edc31
# 
80edc31
rwho = module
80edc31
80edc31
# Layer: services
80edc31
# Module: samba
80edc31
#
80edc31
# SMB and CIFS client/server programs for UNIX and
80edc31
# name  Service  Switch  daemon for resolving names
80edc31
# from Windows NT servers.
80edc31
# 
80edc31
samba = module
80edc31
80edc31
# Layer: apps
ca18358
# Module: sandbox
ca18358
#
ca18358
# Experimental policy for running apps within a sandbox
ca18358
# 
ca18358
sandbox = module
ca18358
ca18358
# Layer: apps
411a424
# Module: sambagui
411a424
#
411a424
# policy for system-config-samba
411a424
# 
411a424
sambagui = module
411a424
78c9236
# Layer: services
78c9236
# Module: sasl
78c9236
#
78c9236
# SASL authentication server
78c9236
# 
78c9236
sasl = module
78c9236
411a424
# Layer: apps
80edc31
# Module: screen
80edc31
#
80edc31
# GNU terminal multiplexer
80edc31
# 
80edc31
screen = module
80edc31
80edc31
# Layer: kernel
80edc31
# Module: selinux
80edc31
# Required in base
80edc31
#
80edc31
# Policy for kernel security interface, in particular, selinuxfs.
80edc31
# 
80edc31
selinux = base
80edc31
80edc31
# Layer: system
80edc31
# Module: selinuxutil
80edc31
#
80edc31
# Policy for SELinux policy and userland applications.
80edc31
# 
80edc31
selinuxutil = base
80edc31
78c9236
# Layer: services
78c9236
# Module: sendmail
78c9236
#
78c9236
# Policy for sendmail.
78c9236
# 
78c9236
sendmail = base
78c9236
78c9236
# Layer: services
78c9236
# Module: shorewall
78c9236
#
78c9236
# Policy for shorewall
78c9236
# 
78c9236
shorewall = base
78c9236
80edc31
# Layer: system
80edc31
# Module: setrans
80edc31
# Required in base
80edc31
#
80edc31
# Policy for setrans
80edc31
# 
80edc31
setrans = base
80edc31
80edc31
# Layer: services
80edc31
# Module: setroubleshoot
80edc31
#
80edc31
# Policy for the SELinux troubleshooting utility
80edc31
# 
80edc31
setroubleshoot = base
80edc31
80edc31
# Layer: services
80edc31
# Module: slrnpull
80edc31
#
80edc31
# Service for downloading news feeds the slrn newsreader.
80edc31
# 
80edc31
slrnpull = off
80edc31
80edc31
# Layer: apps
80edc31
# Module: slocate
80edc31
#
80edc31
# Update database for mlocate
80edc31
# 
80edc31
slocate = module
80edc31
80edc31
# Layer: services
80edc31
# Module: smartmon
80edc31
#
80edc31
# Smart disk monitoring daemon policy
80edc31
# 
80edc31
smartmon = module
80edc31
80edc31
# Layer: services
80edc31
# Module: snmp
80edc31
#
80edc31
# Simple network management protocol services
80edc31
# 
80edc31
snmp = module
80edc31
80edc31
# Layer: services
80edc31
# Module: spamassassin
80edc31
#
80edc31
# Filter used for removing unsolicited email.
80edc31
# 
80edc31
spamassassin = module
80edc31
80edc31
# Layer: services
80edc31
# Module: squid
80edc31
#
80edc31
# Squid caching http proxy server
80edc31
# 
80edc31
squid = module
80edc31
80edc31
# Layer: services
80edc31
# Module: ssh
80edc31
#
80edc31
# Secure shell client and server policy.
80edc31
# 
80edc31
ssh = base
80edc31
46b5649
# Layer: services
46b5649
# Module: sssd
46b5649
#
46b5649
# System Security Services Daemon
46b5649
# 
46b5649
sssd = module
46b5649
80edc31
# Layer: kernel
80edc31
# Module: storage
80edc31
#
80edc31
# Policy controlling access to storage devices
80edc31
# 
80edc31
storage = base
80edc31
80edc31
# Layer: services
80edc31
# Module: stunnel
80edc31
#
80edc31
# SSL Tunneling Proxy
80edc31
# 
80edc31
stunnel = module
80edc31
80edc31
# Layer: admin
80edc31
# Module: su
80edc31
#
80edc31
# Run shells with substitute user and group
80edc31
# 
80edc31
su = base
80edc31
80edc31
# Layer: admin
80edc31
# Module: sudo
80edc31
#
80edc31
# Execute a command with a substitute user
80edc31
# 
80edc31
sudo = base
80edc31
80edc31
# Layer: system
80edc31
# Module: sysnetwork
80edc31
#
80edc31
# Policy for network configuration: ifconfig and dhcp client.
80edc31
# 
80edc31
sysnetwork = base
80edc31
80edc31
80edc31
# Layer: services
80edc31
# Module: sysstat
80edc31
#
80edc31
# Policy for sysstat. Reports on various system states
80edc31
# 
80edc31
sysstat = module
80edc31
80edc31
# Layer: services
80edc31
# Module: tcpd
80edc31
#
80edc31
# Policy for TCP daemon.
80edc31
# 
80edc31
tcpd = module
80edc31
80edc31
# Layer: system
80edc31
# Module: udev
80edc31
#
80edc31
# Policy for udev.
80edc31
# 
80edc31
udev = base
80edc31
80edc31
# Layer: system
80edc31
# Module: userdomain
80edc31
#
80edc31
# Policy for user domains
80edc31
# 
80edc31
userdomain = base
80edc31
80edc31
# Layer: system
80edc31
# Module: unconfined
80edc31
#
80edc31
# The unconfined domain.
80edc31
# 
80edc31
unconfined = module
80edc31
6a09cfb
# Layer: services
6a09cfb
# Module: ulogd
6a09cfb
#
6a09cfb
# 
6a09cfb
# 
6a09cfb
ulogd = module
6a09cfb
80edc31
# Layer: apps
80edc31
# Module: wine
80edc31
#
80edc31
# wine executable
80edc31
# 
80edc31
wine = module
80edc31
80edc31
# Layer: admin
80edc31
# Module: tzdata
80edc31
#
80edc31
# Policy for tzdata-update
80edc31
# 
80edc31
tzdata = base
80edc31
80edc31
# Layer: apps
80edc31
# Module: userhelper
80edc31
#
80edc31
# A helper interface to pam.
80edc31
# 
80edc31
userhelper = module
80edc31
80edc31
# Layer: services
80edc31
# Module: tor
80edc31
#
80edc31
# TOR, the onion router
80edc31
# 
80edc31
tor = module
80edc31
80edc31
# Layer: apps
80edc31
# Module: tvtime
80edc31
#
80edc31
# tvtime - a high quality television application
80edc31
# 
80edc31
tvtime = module
80edc31
80edc31
# Layer: apps
80edc31
# Module: uml
80edc31
#
80edc31
# Policy for UML
80edc31
# 
80edc31
uml = module
80edc31
80edc31
# Layer: admin
80edc31
# Module: usbmodules
80edc31
#
80edc31
# List kernel modules of USB devices
80edc31
# 
80edc31
usbmodules = module
80edc31
80edc31
# Layer: apps
80edc31
# Module: usernetctl
80edc31
#
80edc31
# User network interface configuration helper
80edc31
# 
80edc31
usernetctl = module
80edc31
80edc31
# Layer: system
80edc31
# Module: xen
80edc31
#
80edc31
# virtualization software
80edc31
# 
80edc31
xen = module
80edc31
80edc31
# Layer: services
ca18358
# Module: varnishd
ca18358
#
ca18358
# Varnishd http accelerator daemon
ca18358
# 
ca18358
varnishd = module
ca18358
ca18358
# Layer: services
80edc31
# Module: virt
80edc31
#
80edc31
# Virtualization libraries
80edc31
# 
80edc31
virt = module
80edc31
4967525
# Layer: system
4967525
# Module: virtual
4967525
#
4967525
# Virtualization libraries
4967525
# 
4967525
virtual = base
4967525
80edc31
# Layer: apps
80edc31
# Module: qemu
80edc31
#
80edc31
# Virtualization emulator 
80edc31
# 
80edc31
qemu = module
80edc31
80edc31
# Layer: system
80edc31
# Module: brctl
80edc31
#
80edc31
# Utilities for configuring the linux ethernet bridge
80edc31
# 
80edc31
brctl = base
80edc31
80edc31
# Layer: services
80edc31
# Module: telnet
80edc31
#
80edc31
# Telnet daemon
80edc31
# 
80edc31
telnet = module
80edc31
80edc31
# Layer: services
80edc31
# Module: timidity
80edc31
#
80edc31
# MIDI to WAV converter and player configured as a service
80edc31
# 
80edc31
timidity = off
80edc31
80edc31
# Layer: services
80edc31
# Module: tftp
80edc31
#
80edc31
# Trivial file transfer protocol daemon
80edc31
# 
80edc31
tftp = module
80edc31
80edc31
# Layer: services
80edc31
# Module: uucp
80edc31
#
80edc31
# Unix to Unix Copy
80edc31
# 
80edc31
uucp = module
80edc31
80edc31
# Layer: services
80edc31
# Module: vbetool 
80edc31
#
80edc31
# run real-mode video BIOS code to alter hardware state
80edc31
# 
80edc31
vbetool = base
80edc31
80edc31
# Layer: apps
80edc31
# Module: webalizer
80edc31
#
80edc31
# Web server log analysis
80edc31
# 
80edc31
webalizer = module
80edc31
80edc31
# Layer: services
80edc31
# Module: xfs
80edc31
#
80edc31
# X Windows Font Server
80edc31
# 
80edc31
xfs = module
80edc31
80edc31
# Layer: services
80edc31
# Module: xserver
80edc31
#
80edc31
# X windows login display manager
80edc31
# 
80edc31
xserver = base
80edc31
80edc31
# Layer: services
80edc31
# Module: zebra
80edc31
#
80edc31
# Zebra border gateway protocol network routing service
80edc31
# 
80edc31
zebra = module
80edc31
80edc31
# Layer: admin
80edc31
# Module: usermanage
80edc31
#
80edc31
# Policy for managing user accounts.
80edc31
# 
80edc31
usermanage = base
80edc31
80edc31
# Layer: admin
80edc31
# Module: updfstab
80edc31
#
80edc31
# Red Hat utility to change /etc/fstab.
80edc31
# 
80edc31
updfstab = base
80edc31
80edc31
# Layer: admin
80edc31
# Module: vpn
80edc31
#
80edc31
# Virtual Private Networking client
80edc31
# 
80edc31
vpn = module
80edc31
80edc31
# Layer: admin
80edc31
# Module: vbetool
80edc31
#
80edc31
# run real-mode video BIOS code to alter hardware state
80edc31
# 
80edc31
vbetool = base
80edc31
80edc31
# Layer: kernel
80edc31
# Module: terminal
80edc31
# Required in base
80edc31
#
80edc31
# Policy for terminals.
80edc31
# 
80edc31
terminal = base
80edc31
80edc31
# Layer: admin
80edc31
# Module: tmpreaper
80edc31
#
80edc31
# Manage temporary directory sizes and file ages
80edc31
# 
80edc31
tmpreaper = module
80edc31
80edc31
# Layer: admin
80edc31
# Module: amtu
80edc31
#
80edc31
# Abstract Machine Test Utility (AMTU)
80edc31
# 
80edc31
amtu = module
80edc31
80edc31
# Layer: services
80edc31
# Module: zabbix
80edc31
#
80edc31
# Open-source monitoring solution for your IT infrastructure
80edc31
#
80edc31
zabbix = module
80edc31
80edc31
# Layer: services
80edc31
# Module: apcupsd
80edc31
#
80edc31
# daemon for most APC’s UPS for Linux
80edc31
#
80edc31
apcupsd = module
80edc31
80edc31
# Layer: services
80edc31
# Module: aide
80edc31
#
80edc31
# Policy for aide
80edc31
# 
80edc31
aide = module
80edc31
80edc31
# Layer: services
80edc31
# Module: w3c
80edc31
#
80edc31
# w3c
80edc31
# 
80edc31
w3c = module
80edc31
80edc31
# Layer: services
4125702
# Module: portreserve
4125702
#
4125702
#  reserve ports to prevent portmap mapping them
4125702
# 
4125702
portreserve = module
4125702
4125702
# Layer: services
80edc31
# Module: rpcbind
80edc31
#
80edc31
#  universal addresses to RPC program number mapper
80edc31
# 
80edc31
rpcbind = module
80edc31
80edc31
# Layer: apps
ca18358
# Module: rssh
ca18358
#
ca18358
#  Restricted (scp/sftp) only shell
ca18358
# 
ca18358
rssh = module
ca18358
ca18358
# Layer: apps
80edc31
# Module: vmware
80edc31
#
80edc31
# VMWare Workstation virtual machines
80edc31
# 
80edc31
vmware = module
80edc31
80edc31
# Layer: role
80edc31
# Module: logadm
80edc31
#
80edc31
# Minimally prived root role for managing logging system
80edc31
# 
80edc31
logadm = module
80edc31
80edc31
# Layer: role
80edc31
# Module: webadm
80edc31
#
80edc31
# Minimally prived root role for managing apache
80edc31
# 
80edc31
webadm = module
80edc31
80edc31
#
80edc31
# Layer: services
80edc31
# Module: exim
80edc31
#
80edc31
# exim mail server 
80edc31
# 
80edc31
exim = module
80edc31
80edc31
80edc31
# Layer: services
80edc31
# Module: kismet
80edc31
#
80edc31
# Wireless sniffing and monitoring
80edc31
# 
80edc31
kismet = module
80edc31
80edc31
# Layer: services
80edc31
# Module: munin
80edc31
#
80edc31
# Munin
80edc31
# 
80edc31
munin = module
80edc31
80edc31
# Layer: services
80edc31
# Module: bitlbee
80edc31
#
80edc31
# An IRC to other chat networks  gateway
80edc31
# 
80edc31
bitlbee = module
80edc31
80edc31
# Layer: services
80edc31
# Module: soundserver
80edc31
#
80edc31
# sound server for network audio server programs, nasd, yiff, etc</summary>
80edc31
# 
80edc31
soundserver = module
80edc31
d4af172
# Layer: role
d4af172
# Module: unconfineduser
d4af172
#
d4af172
# The unconfined user domain.
d4af172
# 
d4af172
unconfineduser = module
d4af172
80edc31
# Layer:role
80edc31
# Module: staff
80edc31
#
80edc31
# admin account 
80edc31
# 
80edc31
staff = module
80edc31
80edc31
# Layer:role
80edc31
# Module: sysadm
80edc31
#
80edc31
# System Administrator
80edc31
# 
80edc31
sysadm = base
80edc31
80edc31
# Layer: role
80edc31
# Module: unprivuser
80edc31
#
80edc31
# Minimally privs guest account on tty logins
80edc31
# 
80edc31
unprivuser = module
80edc31
80edc31
# Layer: services
80edc31
# Module: prelude
80edc31
#
80edc31
prelude = module
80edc31
80edc31
# Layer: services
80edc31
# Module: pads
80edc31
#
80edc31
pads = module
80edc31
80edc31
# Layer: services
80edc31
# Module: kerneloops
80edc31
#
80edc31
# program  to  collect  and  submit  kernel oopses to kerneloops.org
80edc31
# 
80edc31
kerneloops = module
80edc31
80edc31
# Layer: apps
80edc31
# Module: openoffice
80edc31
#
80edc31
# openoffice executable
80edc31
# 
80edc31
openoffice = module
80edc31
80edc31
# Layer: apps
80edc31
# Module: podsleuth
80edc31
#
80edc31
# Podsleuth probes, identifies, and exposes properties and metadata bound to iPods.
80edc31
# 
80edc31
podsleuth = module
80edc31
80edc31
# Layer: role
80edc31
# Module: guest
80edc31
#
80edc31
# Minimally privs guest account on tty logins
80edc31
# 
80edc31
guest = module
80edc31
80edc31
# Layer: role
80edc31
# Module: xguest
80edc31
#
80edc31
# Minimally privs guest account on X Windows logins
80edc31
# 
80edc31
xguest = module
80edc31
80edc31
# Layer: services
80edc31
# Module: courier
80edc31
#
80edc31
# IMAP and POP3 email servers
80edc31
# 
80edc31
courier = module
80edc31
80edc31
# Layer: apps
80edc31
# Module: livecd
80edc31
#
80edc31
# livecd creator
80edc31
# 
80edc31
livecd = module
80edc31
80edc31
# Layer: services
80edc31
# Module: snort
80edc31
#
80edc31
# Snort network intrusion detection system
80edc31
# 
80edc31
snort = module
80edc31
80edc31
# Layer: services
80edc31
# Module: memcached
80edc31
#
80edc31
#  high-performance memory object caching system
80edc31
# 
80edc31
memcached = module
80edc31
80edc31
# Layer: system
80edc31
# Module: netlabel
80edc31
#
80edc31
# Basic netlabel types and interfaces.
80edc31
# 
80edc31
netlabel = module
80edc31
80edc31
# Layer: services
80edc31
# Module: zosremote
80edc31
#
80edc31
# policy for z/OS Remote-services Audit dispatcher plugin</summary>
80edc31
# 
80edc31
zosremote = module
80edc31
02d888c
# Layer: services
02d888c
# Module: pingd
02d888c
#
02d888c
# 
02d888c
pingd = module
02d888c
02d888c
# Layer: services
02d888c
# Module: milter
02d888c
#
02d888c
# 
02d888c
# 
02d888c
milter = module