e568731
#
e568731
# This file contains a listing of available modules.
e568731
# To prevent a module from  being used in policy
e568731
# creation, set the module name to "off".
e568731
#
e568731
# For monolithic policies, modules set to "base" and "module"
e568731
# will be built into the policy.
e568731
#
e568731
# For modular policies, modules set to "base" will be
e568731
# included in the base module.  "module" will be compiled
e568731
# as individual loadable modules.
e568731
#
e568731
e568731
# Layer: kernel
e568731
# Module: terminal
e568731
# Required in base
e568731
#
e568731
# Policy for terminals.
e568731
# 
e568731
terminal = base
e568731
e568731
# Layer: kernel
e568731
# Module: kernel
e568731
# Required in base
e568731
#
e568731
# Policy for kernel threads, proc filesystem,and unlabeled processes and objects.
e568731
# 
e568731
kernel = base
e568731
e568731
# Layer: kernel
e568731
# Module: filesystem
e568731
# Required in base
e568731
#
e568731
# Policy for filesystems.
e568731
# 
e568731
filesystem = base
e568731
e568731
# Layer: kernel
e568731
# Module: devices
e568731
# Required in base
e568731
#
e568731
# Device nodes and interfaces for many basic system devices.
e568731
# 
e568731
devices = base
e568731
e568731
# Layer: kernel
e568731
# Module: corenetwork
e568731
# Required in base
e568731
#
e568731
# Policy controlling access to network objects
e568731
# 
e568731
corenetwork = base
e568731
e568731
# Layer: kernel
e568731
# Module: mls
e568731
# Required in base
e568731
#
e568731
# Multilevel security policy
e568731
# 
e568731
mls = base
e568731
e568731
# Layer: kernel
e568731
# Module: selinux
e568731
# Required in base
e568731
#
e568731
# Policy for kernel security interface, in particular, selinuxfs.
e568731
# 
e568731
selinux = base
e568731
e568731
# Layer: system
e568731
# Module: files
e568731
# Required in base
e568731
#
e568731
# Basic filesystem types and interfaces.
e568731
# 
e568731
files = base
e568731
e568731
# Layer: system
e568731
# Module: domain
e568731
# Required in base
e568731
#
e568731
# Core policy for domains.
e568731
# 
e568731
domain = base
e568731
e568731
# Layer: system
e568731
# Module: corecommands
e568731
# Required in base
e568731
#
e568731
# Core policy for shells, and generic programs
e568731
# in /bin, /sbin, /usr/bin, and /usr/sbin.
e568731
# 
e568731
corecommands = base
e568731
e568731
# Layer: admin
e568731
# Module: acct
e568731
#
e568731
# Berkeley process accounting
e568731
# 
e568731
acct = base
e568731
e568731
# Layer: admin
e568731
# Module: usermanage
e568731
#
e568731
# Policy for managing user accounts.
e568731
# 
e568731
usermanage = base
e568731
e568731
# Layer: admin
e568731
# Module: rpm
e568731
#
e568731
# Policy for the RPM package manager.
e568731
# 
e568731
rpm = base
e568731
e568731
# Layer: admin
6401280
# Module: readahead
6401280
#
6401280
# Readahead, read files into page cache for improved performance
6401280
# 
6401280
readahead = base
6401280
6401280
# Layer: apps
6401280
# Module: alsa
6401280
#
6401280
# alsa - Configure sound
6401280
# 
6401280
alsa = base
6401280
6401280
# Layer: admin
e568731
# Module: kudzu
e568731
#
e568731
# Hardware detection and configuration tools
e568731
# 
e568731
kudzu = base
e568731
e568731
# Layer: admin
e568731
# Module: updfstab
e568731
#
e568731
# Red Hat utility to change /etc/fstab.
e568731
# 
e568731
updfstab = base
e568731
e568731
# Layer: admin
e568731
# Module: netutils
e568731
#
e568731
# Network analysis utilities
e568731
# 
e568731
netutils = base
e568731
e568731
# Layer: admin
e568731
# Module: vpn
e568731
#
e568731
# Virtual Private Networking client
e568731
# 
d77f56b
vpn = base
e568731
e568731
# Layer: admin
e568731
# Module: su
e568731
#
e568731
# Run shells with substitute user and group
e568731
# 
e568731
su = base
e568731
e568731
# Layer: admin
e568731
# Module: dmesg
e568731
#
e568731
# Policy for dmesg.
e568731
# 
e568731
dmesg = base
e568731
e568731
# Layer: admin
e568731
# Module: anaconda
e568731
#
e568731
# Policy for the Anaconda installer.
e568731
# 
e568731
anaconda = base
e568731
e568731
# Layer: admin
e568731
# Module: amanda
e568731
#
e568731
# Automated backup program.
e568731
# 
e568731
amanda = base
e568731
e568731
# Layer: admin
e568731
# Module: logrotate
e568731
#
e568731
# Rotate and archive system logs
e568731
# 
d77f56b
logrotate = base
e568731
e568731
# Layer: admin
e568731
# Module: quota
e568731
#
e568731
# File system quota management
e568731
# 
d77f56b
quota = base
e568731
e568731
# Layer: admin
e568731
# Module: consoletype
e568731
#
e568731
# Determine of the console connected to the controlling terminal.
e568731
# 
e568731
consoletype = base
e568731
e568731
# Layer: admin
e568731
# Module: sudo
e568731
#
e568731
# Execute a command with a substitute user
e568731
# 
d77f56b
sudo = base
e568731
e568731
# Layer: admin
e568731
# Module: firstboot
e568731
#
e568731
# Final system configuration run during the first boot
e568731
# after installation of Red Hat/Fedora systems.
e568731
# 
d77f56b
firstboot = base
e568731
e568731
# Layer: admin
a3b5c30
# Module: certwatch
a3b5c30
#
a3b5c30
# Digital Certificate Tracking
a3b5c30
# 
a3b5c30
certwatch = base
a3b5c30
a3b5c30
# Layer: admin
e568731
# Module: tmpreaper
e568731
#
e568731
# Manage temporary directory sizes and file ages
e568731
# 
d77f56b
tmpreaper = base
e568731
e568731
# Layer: admin
e568731
# Module: dmidecode
e568731
#
e568731
# Decode DMI data for x86/ia64 bioses.
e568731
# 
e568731
dmidecode = base
e568731
e568731
# Layer: apps
e568731
# Module: gpg
e568731
#
e568731
# Policy for GNU Privacy Guard and related programs.
e568731
# 
d77f56b
gpg = base
e568731
e568731
# Layer: apps
e568731
# Module: loadkeys
e568731
#
e568731
# Load keyboard mappings.
e568731
# 
e568731
loadkeys = base
e568731
e568731
# Layer: apps
e568731
# Module: webalizer
e568731
#
e568731
# Web server log analysis
e568731
# 
e568731
webalizer = base
e568731
e568731
# Layer: kernel
e568731
# Module: bootloader
e568731
#
e568731
# Policy for the kernel modules, kernel image, and bootloader.
e568731
# 
e568731
bootloader = base
e568731
e568731
# Layer: kernel
e568731
# Module: storage
e568731
#
e568731
# Policy controlling access to storage devices
e568731
# 
e568731
storage = base
e568731
e568731
# Layer: services
e568731
# Module: nis
e568731
#
e568731
# Policy for NIS (YP) servers and clients
e568731
# 
e568731
nis = base
e568731
e568731
# Layer: services
e568731
# Module: distcc
e568731
#
e568731
# Distributed compiler daemon
e568731
# 
e568731
distcc = off
e568731
e568731
# Layer: services
e568731
# Module: rshd
e568731
#
e568731
# Remote shell service.
e568731
# 
e568731
rshd = base
e568731
e568731
# Layer: services
e568731
# Module: cpucontrol
e568731
#
e568731
# Services for loading CPU microcode and CPU frequency scaling.
e568731
# 
e568731
cpucontrol = base
e568731
e568731
# Layer: services
9ce97af
# Module: vbetool 
9ce97af
#
9ce97af
# run real-mode video BIOS code to alter hardware state
9ce97af
# 
9ce97af
vbetool = base
9ce97af
9ce97af
# Layer: services
e568731
# Module: bind
e568731
#
e568731
# Berkeley internet name domain DNS server.
e568731
# 
e568731
bind = base
e568731
e568731
# Layer: services
e568731
# Module: canna
e568731
#
e568731
# Canna - kana-kanji conversion server
e568731
# 
e568731
canna = base
e568731
e568731
# Layer: services
e568731
# Module: uucp
e568731
#
e568731
# Unix to Unix Copy
e568731
# 
e568731
uucp = base
e568731
e568731
# Layer: services
e568731
# Module: sasl
e568731
#
e568731
# SASL authentication server
e568731
# 
e568731
sasl = base
e568731
e568731
# Layer: services
e568731
# Module: pegasus
e568731
#
e568731
# The Open Group Pegasus CIM/WBEM Server.
e568731
# 
e568731
pegasus = base
e568731
e568731
# Layer: services
e568731
# Module: cron
e568731
#
e568731
# Periodic execution of scheduled commands.
e568731
# 
e568731
cron = base
e568731
e568731
# Layer: services
e568731
# Module: sendmail
e568731
#
e568731
# Policy for sendmail.
e568731
# 
e568731
sendmail = base
e568731
e568731
# Layer: services
e568731
# Module: samba
e568731
#
e568731
# SMB and CIFS client/server programs for UNIX and
e568731
# name  Service  Switch  daemon for resolving names
e568731
# from Windows NT servers.
e568731
# 
e568731
samba = base
e568731
e568731
# Layer: services
e568731
# Module: dbus
e568731
#
e568731
# Desktop messaging bus
e568731
# 
e568731
dbus = base
e568731
e568731
# Layer: services
e568731
# Module: howl
e568731
#
e568731
# Port of Apple Rendezvous multicast DNS
e568731
# 
e568731
howl = base
e568731
e568731
# Layer: services
e568731
# Module: postgresql
e568731
#
e568731
# PostgreSQL relational database
e568731
# 
e568731
postgresql = base
e568731
e568731
# Layer: services
e568731
# Module: snmp
e568731
#
e568731
# Simple network management protocol services
e568731
# 
e568731
snmp = base
e568731
e568731
# Layer: services
e568731
# Module: remotelogin
e568731
#
e568731
# Policy for rshd, rlogind, and telnetd.
e568731
# 
e568731
remotelogin = base
e568731
e568731
# Layer: services
e568731
# Module: telnet
e568731
#
e568731
# Telnet daemon
e568731
# 
e568731
telnet = base
e568731
e568731
# Layer: services
9ce97af
# Module: irqbalance
9ce97af
#
9ce97af
# IRQ balancing daemon
9ce97af
# 
9ce97af
irqbalance = base
9ce97af
9ce97af
# Layer: services
e568731
# Module: mailman
e568731
#
e568731
# Mailman is for managing electronic mail discussion and e-newsletter lists
e568731
# 
e568731
mailman = base
e568731
e568731
# Layer: services
e568731
# Module: dbskk
e568731
#
e568731
# Dictionary server for the SKK Japanese input method system.
e568731
# 
e568731
dbskk = base
e568731
e568731
# Layer: services
e568731
# Module: ldap
e568731
#
e568731
# OpenLDAP directory server
e568731
# 
e568731
ldap = base
e568731
e568731
# Layer: services
e568731
# Module: tftp
e568731
#
e568731
# Trivial file transfer protocol daemon
e568731
# 
e568731
tftp = base
e568731
e568731
# Layer: services
e568731
# Module: portmap
e568731
#
e568731
# RPC port mapping service.
e568731
# 
e568731
portmap = base
e568731
e568731
# Layer: services
e568731
# Module: arpwatch
e568731
#
e568731
# Ethernet activity monitor.
e568731
# 
e568731
arpwatch = base
e568731
e568731
# Layer: services
e568731
# Module: dovecot
e568731
#
e568731
# Dovecot POP and IMAP mail server
e568731
# 
e568731
dovecot = base
e568731
e568731
# Layer: services
e568731
# Module: cups
e568731
#
e568731
# Common UNIX printing system
e568731
# 
e568731
cups = base
e568731
e568731
# Layer: services
e568731
# Module: networkmanager
e568731
#
e568731
# Manager for dynamically switching between networks.
e568731
# 
e568731
networkmanager = base
e568731
e568731
# Layer: services
e568731
# Module: inn
e568731
#
e568731
# Internet News NNTP server
e568731
# 
e568731
inn = base
e568731
e568731
# Layer: services
9ce97af
# Module: sysstat
9ce97af
#
9ce97af
# Policy for sysstat. Reports on various system states
9ce97af
# 
9ce97af
sysstat = base
9ce97af
9ce97af
# Layer: services
e568731
# Module: comsat
e568731
#
e568731
# Comsat, a biff server.
e568731
# 
e568731
comsat = base
e568731
e568731
# Layer: services
e568731
# Module: squid
e568731
#
e568731
# Squid caching http proxy server
e568731
# 
e568731
squid = base
e568731
e568731
# Layer: services
e568731
# Module: zebra
e568731
#
e568731
# Zebra border gateway protocol network routing service
e568731
# 
e568731
zebra = base
e568731
e568731
# Layer: services
9ce97af
# Module: xfs
9ce97af
#
9ce97af
# X Windows Font Server
9ce97af
# 
9ce97af
xfs = off
9ce97af
9ce97af
# Layer: services
e568731
# Module: ktalk
e568731
#
e568731
# KDE Talk daemon
e568731
# 
e568731
ktalk = base
e568731
e568731
# Layer: services
e568731
# Module: procmail
e568731
#
e568731
# Procmail mail delivery agent
e568731
# 
e568731
procmail = base
e568731
e568731
# Layer: services
e568731
# Module: lpd
e568731
#
e568731
# Line printer daemon
e568731
# 
e568731
lpd = base
e568731
e568731
# Layer: services
e568731
# Module: cyrus
e568731
#
e568731
# Cyrus is an IMAP service intended to be run on sealed servers
e568731
# 
e568731
cyrus = base
e568731
e568731
# Layer: services
9ce97af
# Module: rdisc
9ce97af
#
9ce97af
# Network router discovery daemon
9ce97af
# 
9ce97af
rdisc = base
9ce97af
9ce97af
# Layer: services
e568731
# Module: xdm
e568731
#
e568731
# X windows login display manager
e568731
# 
e568731
xdm = off
e568731
e568731
# Layer: services
e568731
# Module: nscd
e568731
#
e568731
# Name service cache daemon
e568731
# 
e568731
nscd = base
e568731
e568731
# Layer: services
e568731
# Module: ppp
e568731
#
e568731
# Point to Point Protocol daemon creates links in ppp networks
e568731
# 
e568731
ppp = base
e568731
e568731
# Layer: services
e568731
# Module: ftp
e568731
#
e568731
# File transfer protocol service
e568731
# 
e568731
ftp = base
e568731
e568731
# Layer: services
e568731
# Module: gpm
e568731
#
e568731
# General Purpose Mouse driver
e568731
# 
d77f56b
gpm = base
e568731
e568731
# Layer: services
e568731
# Module: mta
e568731
#
e568731
# Policy common to all email tranfer agents.
e568731
# 
e568731
mta = base
e568731
e568731
# Layer: services
e568731
# Module: postfix
e568731
#
e568731
# Postfix email server
e568731
# 
e568731
postfix = base
e568731
e568731
# Layer: services
9ce97af
# Module: fetchmail
9ce97af
#
9ce97af
# Remote-mail retrieval and forwarding utility
9ce97af
# 
9ce97af
fetchmail = base
9ce97af
9ce97af
# Layer: services
e568731
# Module: ntp
e568731
#
e568731
# Network time protocol daemon
e568731
# 
e568731
ntp = base
e568731
e568731
# Layer: services
e568731
# Module: bluetooth
e568731
#
e568731
# Bluetooth tools and system services.
e568731
# 
d77f56b
bluetooth = base
e568731
e568731
# Layer: services
e568731
# Module: hal
e568731
#
e568731
# Hardware abstraction layer
e568731
# 
e568731
hal = base
e568731
e568731
# Layer: services
e568731
# Module: avahi
e568731
#
e568731
# mDNS/DNS-SD daemon implementing Apple ZeroConf architecture
e568731
# 
e568731
avahi = base
e568731
e568731
# Layer: services
e568731
# Module: rpc
e568731
#
e568731
# Remote Procedure Call Daemon for managment of network based process communication
e568731
# 
e568731
rpc = base
e568731
e568731
# Layer: services
e568731
# Module: apache
e568731
#
e568731
# Apache web server
e568731
# 
e568731
apache = base
e568731
e568731
# Layer: services
e568731
# Module: rsync
e568731
#
e568731
# Fast incremental file transfer for synchronization
e568731
# 
e568731
rsync = base
e568731
e568731
# Layer: services
9ce97af
# Module: automount
9ce97af
#
9ce97af
# Filesystem automounter service.
9ce97af
# 
9ce97af
automount = base
9ce97af
9ce97af
# Layer: services
e568731
# Module: kerberos
e568731
#
e568731
# MIT Kerberos admin and KDC
e568731
# 
e568731
kerberos = base
e568731
e568731
# Layer: services
e568731
# Module: dhcp
e568731
#
e568731
# Dynamic host configuration protocol (DHCP) server
e568731
# 
e568731
dhcp = base
e568731
e568731
# Layer: services
e568731
# Module: ssh
e568731
#
e568731
# Secure shell client and server policy.
e568731
# 
e568731
ssh = base
e568731
e568731
# Layer: services
e568731
# Module: inetd
e568731
#
e568731
# Internet services daemon.
e568731
# 
e568731
inetd = base
e568731
e568731
# Layer: services
e568731
# Module: mysql
e568731
#
e568731
# Policy for MySQL
e568731
# 
e568731
mysql = base
e568731
e568731
# Layer: services
e568731
# Module: dictd
e568731
#
e568731
# Dictionary daemon
e568731
# 
e568731
dictd = base
e568731
e568731
# Layer: services
e568731
# Module: finger
e568731
#
e568731
# Finger user information service.
e568731
# 
e568731
finger = base
e568731
e568731
# Layer: services
e568731
# Module: radius
e568731
#
e568731
# RADIUS authentication and accounting server.
e568731
# 
e568731
radius = base
e568731
e568731
# Layer: services
e568731
# Module: spamassassin
e568731
#
e568731
# Filter used for removing unsolicited email.
e568731
# 
e568731
spamassassin = base
e568731
e568731
# Layer: services
e568731
# Module: radvd
e568731
#
e568731
# IPv6 router advertisement daemon
e568731
# 
e568731
radvd = base
e568731
e568731
# Layer: services
e568731
# Module: apm
e568731
#
e568731
# Advanced power management daemon
e568731
# 
e568731
apm = base
e568731
e568731
# Layer: services
e568731
# Module: tcpd
e568731
#
e568731
# Policy for TCP daemon.
e568731
# 
d77f56b
tcpd = base
e568731
e568731
# Layer: services
e568731
# Module: stunnel
e568731
#
e568731
# SSL Tunneling Proxy
e568731
# 
e568731
stunnel = base
e568731
e568731
# Layer: services
e568731
# Module: privoxy
e568731
#
e568731
# Privacy enhancing web proxy.
e568731
# 
e568731
privoxy = base
e568731
e568731
# Layer: services
e568731
# Module: cvs
e568731
#
e568731
# Concurrent versions system
e568731
# 
e568731
cvs = base
e568731
e568731
# Layer: services
e568731
# Module: rlogin
e568731
#
e568731
# Remote login daemon
e568731
# 
e568731
rlogin = base
e568731
e568731
# Layer: system
e568731
# Module: fstools
e568731
#
e568731
# Tools for filesystem management, such as mkfs and fsck.
e568731
# 
e568731
fstools = base
e568731
e568731
# Layer: system
e568731
# Module: logging
e568731
#
e568731
# Policy for the kernel message logger and system logging daemon.
e568731
# 
e568731
logging = base
e568731
e568731
# Layer: system
e568731
# Module: hostname
e568731
#
e568731
# Policy for changing the system host name.
e568731
# 
71ee99d
hostname = base
e568731
e568731
# Layer: system
e568731
# Module: getty
e568731
#
e568731
# Policy for getty.
e568731
# 
e568731
getty = base
e568731
e568731
# Layer: system
e568731
# Module: lvm
e568731
#
e568731
# Policy for logical volume management programs.
e568731
# 
d77f56b
lvm = base
e568731
e568731
# Layer: system
e568731
# Module: sysnetwork
e568731
#
e568731
# Policy for network configuration: ifconfig and dhcp client.
e568731
# 
e568731
sysnetwork = base
e568731
e568731
# Layer: system
e568731
# Module: init
e568731
#
e568731
# System initialization programs (init and init scripts).
e568731
# 
e568731
init = base
e568731
e568731
# Layer: system
e568731
# Module: selinuxutil
e568731
#
e568731
# Policy for SELinux policy and userland applications.
e568731
# 
e568731
selinuxutil = base
e568731
e568731
# Layer: system
e568731
# Module: udev
e568731
#
e568731
# Policy for udev.
e568731
# 
e568731
udev = base
e568731
e568731
# Layer: system
e568731
# Module: pcmcia
e568731
#
e568731
# PCMCIA card management services
e568731
# 
e568731
pcmcia = base
e568731
e568731
# Layer: system
e568731
# Module: authlogin
e568731
#
e568731
# Common policy for authentication and user login.
e568731
# 
e568731
authlogin = base
e568731
e568731
# Layer: system
e568731
# Module: libraries
e568731
#
e568731
# Policy for system libraries.
e568731
# 
e568731
libraries = base
e568731
e568731
# Layer: system
e568731
# Module: raid
e568731
#
e568731
# RAID array management tools
e568731
# 
d77f56b
raid = base
e568731
e568731
# Layer: system
e568731
# Module: userdomain
e568731
#
e568731
# Policy for user domains
e568731
# 
e568731
userdomain = base
e568731
e568731
# Layer: system
e568731
# Module: modutils
e568731
#
e568731
# Policy for kernel module utilities
e568731
# 
e568731
modutils = base
e568731
e568731
# Layer: system
e568731
# Module: hotplug
e568731
#
e568731
# Policy for hotplug system, for supporting the
e568731
# connection and disconnection of devices at runtime.
e568731
# 
e568731
hotplug = base
e568731
e568731
# Layer: system
e568731
# Module: clock
e568731
#
e568731
# Policy for reading and setting the hardware clock.
e568731
# 
e568731
clock = base
e568731
e568731
# Layer: system
e568731
# Module: locallogin
e568731
#
e568731
# Policy for local logins.
e568731
# 
e568731
locallogin = base
e568731
e568731
# Layer: system
e568731
# Module: iptables
e568731
#
e568731
# Policy for iptables.
e568731
# 
d77f56b
iptables = base
e568731
e568731
# Layer: system
e568731
# Module: mount
e568731
#
e568731
# Policy for mount.
e568731
# 
e568731
mount = base
e568731
e568731
# Layer: system
e568731
# Module: unconfined
e568731
#
e568731
# The unconfined domain.
e568731
# 
e568731
unconfined = base
e568731
e568731
# Layer: system
e568731
# Module: miscfiles
e568731
#
e568731
# Miscelaneous files.
e568731
# 
e568731
miscfiles = base
e568731
e568731
# Layer: system
e568731
# Module: ipsec
e568731
#
e568731
# TCP/IP encryption
e568731
# 
d77f56b
ipsec = base
e568731
9ce97af
# Layer: apps
9ce97af
# Module: java
9ce97af
#
9ce97af
# java executable
9ce97af
# 
9ce97af
java = off
5a47e64
5a47e64
# Layer: services
5a47e64
# Module: prelink
5a47e64
#
5a47e64
# prelink executable
5a47e64
# 
5a47e64
prelink = base
5a47e64
cdab5cb
# Layer: apps
cdab5cb
# Module: slocate
5a47e64
#
5a47e64
# locate executable
5a47e64
# 
cdab5cb
slocate = base
a08ba87
a08ba87
# Layer: services
a08ba87
# Module: logwatch
a08ba87
#
a08ba87
# logwatch executable
a08ba87
# 
a08ba87
logwatch = base