e568731
#
e568731
# This file contains a listing of available modules.
e568731
# To prevent a module from  being used in policy
e568731
# creation, set the module name to "off".
e568731
#
e568731
# For monolithic policies, modules set to "base" and "module"
e568731
# will be built into the policy.
e568731
#
e568731
# For modular policies, modules set to "base" will be
e568731
# included in the base module.  "module" will be compiled
e568731
# as individual loadable modules.
e568731
#
e568731
2a9b648
# Layer: admin
2a9b648
# Module: acct
e568731
#
2a9b648
# Berkeley process accounting
e568731
# 
2a9b648
acct = base
e568731
2a9b648
# Layer: admin
2a9b648
# Module: alsa
e568731
#
2a9b648
# Ainit ALSA configuration tool
e568731
# 
4661767
alsa = base
e568731
2a9b648
# Layer: apps
2a9b648
# Module: ada
e568731
#
2a9b648
# ada executable
e568731
# 
8a482d6
ada = module
e568731
3640444
# Layer: modules
3640444
# Module: awstats
3640444
#
3640444
# awstats executable
3640444
# 
3640444
awstats = module
3640444
2a9b648
# Layer: admin
2a9b648
# Module: amanda
e568731
#
2a9b648
# Automated backup program.
e568731
# 
8a482d6
amanda = module
e568731
2a9b648
# Layer: services
dcd0c96
# Module: afs
dcd0c96
#
dcd0c96
# Andrew Filesystem server
dcd0c96
# 
dcd0c96
afs = module
dcd0c96
dcd0c96
# Layer: services
2a9b648
# Module: amavis
e568731
#
2a9b648
# Anti-virus
e568731
# 
2a9b648
amavis = module
e568731
2a9b648
# Layer: admin
2a9b648
# Module: anaconda
e568731
#
2a9b648
# Policy for the Anaconda installer.
e568731
# 
2a9b648
anaconda = base
e568731
2a9b648
# Layer: services
2a9b648
# Module: apache
2a9b648
#
2a9b648
# Apache web server
2a9b648
# 
8a482d6
apache = module
2a9b648
2a9b648
# Layer: services
2a9b648
# Module: apm
2a9b648
#
2a9b648
# Advanced power management daemon
2a9b648
# 
2a9b648
apm = base
2a9b648
2a9b648
# Layer: system
2a9b648
# Module: application
6e9bcb4
# Required in base
6e9bcb4
#
2a9b648
# Defines attributs and interfaces for all user applications
6e9bcb4
# 
2a9b648
application = base
2a9b648
2a9b648
# Layer: services
2a9b648
# Module: arpwatch
2a9b648
#
2a9b648
# Ethernet activity monitor.
2a9b648
# 
8a482d6
arpwatch = module
2a9b648
2a9b648
# Layer: services
2a9b648
# Module: audioentropy
2a9b648
#
2a9b648
# Generate entropy from audio input
2a9b648
# 
2a9b648
audioentropy = module
2a9b648
2a9b648
# Layer: system
2a9b648
# Module: authlogin
2a9b648
#
2a9b648
# Common policy for authentication and user login.
2a9b648
# 
2a9b648
authlogin = base
2a9b648
2a9b648
# Layer: services
2a9b648
# Module: automount
2a9b648
#
2a9b648
# Filesystem automounter service.
2a9b648
# 
8d197dd
automount = module
2a9b648
2a9b648
# Layer: services
2a9b648
# Module: avahi
2a9b648
#
2a9b648
# mDNS/DNS-SD daemon implementing Apple ZeroConf architecture
2a9b648
# 
8a482d6
avahi = module
2a9b648
2a9b648
# Layer: services
2a9b648
# Module: bind
2a9b648
#
2a9b648
# Berkeley internet name domain DNS server.
2a9b648
# 
8a482d6
bind = module
2a9b648
2a9b648
# Layer: services
95bbe5c
# Module: dnsmasq
95bbe5c
#
95bbe5c
# A lightweight DHCP and caching DNS server.
95bbe5c
# 
8a482d6
dnsmasq = module
95bbe5c
95bbe5c
# Layer: services
2a9b648
# Module: bluetooth
2a9b648
#
2a9b648
# Bluetooth tools and system services.
2a9b648
# 
8a482d6
bluetooth = module
6e9bcb4
6e9bcb4
# Layer: kernel
02d888c
# Module: ubac
02d888c
#
02d888c
# 
02d888c
# 
02d888c
ubac = base
02d888c
02d888c
#
02d888c
# Layer: kernel
2a9b648
# Module: bootloader
e568731
#
2a9b648
# Policy for the kernel modules, kernel image, and bootloader.
e568731
# 
2a9b648
bootloader = base
2a9b648
2a9b648
2a9b648
# Layer: services
2a9b648
# Module: canna
2a9b648
#
2a9b648
# Canna - kana-kanji conversion server
2a9b648
# 
8a482d6
canna = module
2a9b648
2a9b648
# Layer: services
2a9b648
# Module: ccs
2a9b648
#
2a9b648
# policy for ccs
2a9b648
# 
2a9b648
ccs = module
2a9b648
2a9b648
# Layer: apps
2a9b648
# Module: calamaris
2a9b648
#
2a9b648
#
2a9b648
# Squid log analysis
2a9b648
# 
2a9b648
calamaris = module
2a9b648
2a9b648
# Layer: apps
2a9b648
# Module: cdrecord
2a9b648
#
2a9b648
# Policy for cdrecord
2a9b648
# 
2a9b648
cdrecord = module
e568731
c53f3b8
# Layer: admin
2a9b648
# Module: certwatch
c53f3b8
#
2a9b648
# Digital Certificate Tracking
c53f3b8
# 
2a9b648
certwatch = module
c53f3b8
333ebd6
# Layer: admin
333ebd6
# Module: certmaster
333ebd6
#
a023a0b
# Digital Certificate master
333ebd6
# 
a023a0b
certmaster = module
333ebd6
2a9b648
# Layer: services
2a9b648
# Module: cipe
e568731
#
2a9b648
# Encrypted tunnel daemon
e568731
# 
2a9b648
cipe = module
2a9b648
2a9b648
# Layer: services
2a9b648
# Module: comsat
2a9b648
#
2a9b648
# Comsat, a biff server.
2a9b648
# 
8a482d6
comsat = module
2a9b648
2a9b648
# Layer: services
2a9b648
# Module: clamav
2a9b648
#
2a9b648
# ClamAV Virus Scanner
2a9b648
# 
2a9b648
clamav = module
e568731
e568731
# Layer: system
2a9b648
# Module: clock
e568731
#
2a9b648
# Policy for reading and setting the hardware clock.
e568731
# 
2a9b648
clock = base
2a9b648
2a9b648
# Layer: services
2a9b648
# Module: consolekit
2a9b648
#
2a9b648
# ConsoleKit is a system daemon for tracking what users are logged
2a9b648
# 
2a9b648
consolekit = module
2a9b648
2a9b648
# Layer: admin
2a9b648
# Module: consoletype
2a9b648
#
2a9b648
# Determine of the console connected to the controlling terminal.
2a9b648
# 
2a9b648
consoletype = base
e568731
5ad70cf
# Layer: kernel
e568731
# Module: corecommands
e568731
# Required in base
e568731
#
e568731
# Core policy for shells, and generic programs
e568731
# in /bin, /sbin, /usr/bin, and /usr/sbin.
e568731
# 
e568731
corecommands = base
e568731
2a9b648
# Layer: kernel
2a9b648
# Module: corenetwork
2a9b648
# Required in base
e568731
#
2a9b648
# Policy controlling access to network objects
e568731
# 
2a9b648
corenetwork = base
e568731
2a9b648
# Layer: services
2a9b648
# Module: cpucontrol
e568731
#
2a9b648
# Services for loading CPU microcode and CPU frequency scaling.
e568731
# 
2a9b648
cpucontrol = base
e568731
2a9b648
# Layer: services
2a9b648
# Module: cron
e568731
#
2a9b648
# Periodic execution of scheduled commands.
e568731
# 
b844bb2
cron = base
e568731
2a9b648
# Layer: services
2a9b648
# Module: cups
451d9b4
#
2a9b648
# Common UNIX printing system
451d9b4
# 
8a482d6
cups = module
2a9b648
2a9b648
# Layer: services
2a9b648
# Module: cvs
2a9b648
#
2a9b648
# Concurrent versions system
2a9b648
# 
8a482d6
cvs = module
2a9b648
2a9b648
# Layer: services
c092cc1
# Module: cyphesis
c092cc1
#
c092cc1
# cyphesis game server
c092cc1
# 
1bf67d5
cyphesis = module
1bf67d5
1bf67d5
# Layer: services
2a9b648
# Module: cyrus
2a9b648
#
2a9b648
# Cyrus is an IMAP service intended to be run on sealed servers
2a9b648
# 
8a482d6
cyrus = module
2a9b648
2a9b648
# Layer: system
2a9b648
# Module: daemontools
2a9b648
#
2a9b648
# Collection of tools for managing UNIX services
2a9b648
# 
2a9b648
daemontools = module
2a9b648
2a9b648
# Layer: services
2a9b648
# Module: dbskk
2a9b648
#
2a9b648
# Dictionary server for the SKK Japanese input method system.
2a9b648
# 
8a482d6
dbskk = module
2a9b648
2a9b648
# Layer: services
2a9b648
# Module: dbus
2a9b648
#
2a9b648
# Desktop messaging bus
2a9b648
# 
2a9b648
dbus = base
2a9b648
2a9b648
# Layer: services
2a9b648
# Module: dcc
2a9b648
#
2a9b648
# A distributed, collaborative, spam detection and filtering network.
2a9b648
# 
2a9b648
dcc = module
451d9b4
451d9b4
# Layer: admin
2a9b648
# Module: ddcprobe
e568731
#
2a9b648
# ddcprobe retrieves monitor and graphics card information
e568731
# 
2a9b648
ddcprobe = off
e568731
acc1376
# Layer: services
acc1376
# Module: devicekit
acc1376
#
acc1376
# devicekit-daemon
acc1376
# 
acc1376
devicekit = module
acc1376
c53f3b8
# Layer: kernel
2a9b648
# Module: devices
2a9b648
# Required in base
c53f3b8
#
2a9b648
# Device nodes and interfaces for many basic system devices.
c53f3b8
# 
2a9b648
devices = base
c53f3b8
2a9b648
# Layer: services
2a9b648
# Module: dhcp
e568731
#
2a9b648
# Dynamic host configuration protocol (DHCP) server
e568731
# 
8d197dd
dhcp = module
e568731
2a9b648
# Layer: services
2a9b648
# Module: dictd
e568731
#
2a9b648
# Dictionary daemon
e568731
# 
8a482d6
dictd = module
2a9b648
2a9b648
# Layer: services
2a9b648
# Module: distcc
2a9b648
#
2a9b648
# Distributed compiler daemon
2a9b648
# 
2a9b648
distcc = off
e568731
e568731
# Layer: admin
2a9b648
# Module: dmesg
c53f3b8
#
2a9b648
# Policy for dmesg.
c53f3b8
# 
2a9b648
dmesg = base
c53f3b8
c53f3b8
# Layer: admin
2a9b648
# Module: dmidecode
2a9b648
#
2a9b648
# Decode DMI data for x86/ia64 bioses.
2a9b648
# 
2a9b648
dmidecode = base
2a9b648
2a9b648
# Layer: system
2a9b648
# Module: domain
2a9b648
# Required in base
e568731
#
2a9b648
# Core policy for domains.
e568731
# 
2a9b648
domain = base
e568731
2a9b648
# Layer: services
2a9b648
# Module: dovecot
e568731
#
2a9b648
# Dovecot POP and IMAP mail server
e568731
# 
8d197dd
dovecot = module
e568731
2a9b648
# Layer: apps
2a9b648
# Module: gpg
e568731
#
2a9b648
# Policy for GNU Privacy Guard and related programs.
e568731
# 
1d1c058
gpg = module
1d1c058
4f5b223
# Layer: services
4f5b223
# Module: gpsd
4f5b223
#
4f5b223
# gpsd monitor daemon
4f5b223
#
4f5b223
# 
4f5b223
gpsd = module
4f5b223
1d1c058
# Layer: apps
1d1c058
# Module: git
1d1c058
#
1d1c058
# Policy for the stupid content tracker
1d1c058
# 
1d1c058
git = module
e568731
2a9b648
# Layer: services
2a9b648
# Module: gpm
e568731
#
2a9b648
# General Purpose Mouse driver
e568731
# 
8a482d6
gpm = module
e568731
2a9b648
# Layer: apps
2a9b648
# Module: ethereal
e568731
#
2a9b648
# Ethereal packet capture tool.
e568731
# 
2a9b648
ethereal = module
e568731
2a9b648
# Layer: services
2a9b648
# Module: fail2ban
451d9b4
#
2a9b648
# daiemon that bans IP that makes too many password failures
451d9b4
# 
2a9b648
fail2ban = module
e568731
2a9b648
# Layer: services
2a9b648
# Module: fetchmail
e568731
#
2a9b648
# Remote-mail retrieval and forwarding utility
e568731
# 
8a482d6
fetchmail = module
e568731
2a9b648
# Layer: kernel
2a9b648
# Module: files
2a9b648
# Required in base
e568731
#
2a9b648
# Basic filesystem types and interfaces.
e568731
# 
2a9b648
files = base
e568731
2a9b648
# Layer: kernel
2a9b648
# Module: filesystem
2a9b648
# Required in base
e568731
#
2a9b648
# Policy for filesystems.
e568731
# 
2a9b648
filesystem = base
e568731
2a9b648
# Layer: services
2a9b648
# Module: finger
451d9b4
#
2a9b648
# Finger user information service.
451d9b4
# 
8a482d6
finger = module
451d9b4
451d9b4
# Layer: admin
e568731
# Module: firstboot
e568731
#
e568731
# Final system configuration run during the first boot
e568731
# after installation of Red Hat/Fedora systems.
e568731
# 
e568731
firstboot = base
e568731
2a9b648
# Layer: system
2a9b648
# Module: fstools
e568731
#
2a9b648
# Tools for filesystem management, such as mkfs and fsck.
e568731
# 
2a9b648
fstools = base
e568731
2a9b648
# Layer: services
2a9b648
# Module: ftp
e568731
#
2a9b648
# File transfer protocol service
e568731
# 
8a482d6
ftp = module
e568731
e568731
# Layer: apps
2a9b648
# Module: games
e568731
#
2a9b648
# The Open Group Pegasus CIM/WBEM Server.
e568731
# 
2a9b648
games = module
e568731
2a9b648
# Layer: system
2a9b648
# Module: getty
e568731
#
2a9b648
# Policy for getty.
e568731
# 
2a9b648
getty = base
e568731
e568731
# Layer: apps
2a9b648
# Module: gnome
e568731
#
2a9b648
# gnome session and gconf
e568731
# 
2a9b648
gnome = module
e568731
2a9b648
# Layer: services
b53db53
# Module: gnomeclock
b53db53
#
b53db53
# gnomeclock used by dbus/polkit to set time
b53db53
# 
b53db53
gnomeclock = module
b53db53
b53db53
# Layer: services
2a9b648
# Module: hal
e568731
#
2a9b648
# Hardware abstraction layer
e568731
# 
530772a
hal = module
e568731
9281e2c
# Layer: services
9281e2c
# Module: polkit
9281e2c
#
9281e2c
# Hardware abstraction layer
9281e2c
# 
9281e2c
polkit = module
9281e2c
1b94a13
# Layer: services
1b94a13
# Module: psad
1b94a13
#
1b94a13
# Analyze iptables log for hostile traffic
1b94a13
# 
1b94a13
psad = module
1b94a13
2a9b648
# Layer: system
2a9b648
# Module: hostname
e568731
#
2a9b648
# Policy for changing the system host name.
e568731
# 
2a9b648
hostname = base
e568731
2a9b648
2a9b648
# Layer: system
2a9b648
# Module: hotplug
e568731
#
2a9b648
# Policy for hotplug system, for supporting the
2a9b648
# connection and disconnection of devices at runtime.
e568731
# 
2a9b648
hotplug = base
e568731
e568731
# Layer: services
2a9b648
# Module: howl
e568731
#
2a9b648
# Port of Apple Rendezvous multicast DNS
e568731
# 
8a482d6
howl = module
e568731
e568731
# Layer: services
2a9b648
# Module: inetd
e568731
#
2a9b648
# Internet services daemon.
e568731
# 
2a9b648
inetd = base
e568731
2a9b648
# Layer: system
2a9b648
# Module: init
e24a8b1
#
2a9b648
# System initialization programs (init and init scripts).
e24a8b1
# 
2a9b648
init = base
e24a8b1
e24a8b1
# Layer: services
2a9b648
# Module: inn
e568731
#
2a9b648
# Internet News NNTP server
e568731
# 
8a482d6
inn = module
2a9b648
2a9b648
# Layer: system
2a9b648
# Module: iptables
2a9b648
#
2a9b648
# Policy for iptables.
2a9b648
# 
2a9b648
iptables = base
2a9b648
2a9b648
# Layer: system
2a9b648
# Module: ipsec
2a9b648
#
2a9b648
# TCP/IP encryption
2a9b648
# 
154d823
ipsec = module
2a9b648
2a9b648
# Layer: apps
2a9b648
# Module: irc
2a9b648
#
2a9b648
# IRC client policy
2a9b648
# 
2a9b648
irc = module
e568731
e568731
# Layer: services
2a9b648
# Module: irqbalance
e568731
#
2a9b648
# IRQ balancing daemon
e568731
# 
2a9b648
irqbalance = base
2a9b648
2a9b648
# Layer: system
2a9b648
# Module: iscsi
2a9b648
#
2a9b648
# Open-iSCSI daemon
2a9b648
# 
2a9b648
iscsi = module
e568731
e568731
# Layer: services
451d9b4
# Module: i18n_input
451d9b4
#
451d9b4
# IIIMF htt server
451d9b4
# 
129ba16
i18n_input = off
451d9b4
2a9b648
87fb153
# Layer: services
87fb153
# Module: jabber
87fb153
#
87fb153
# Jabber instant messaging server
87fb153
# 
87fb153
jabber = module
87fb153
2a9b648
# Layer: apps
2a9b648
# Module: java
e568731
#
2a9b648
# java executable
e568731
# 
8a482d6
java = module
e568731
e568731
# Layer: services
2a9b648
# Module: kerberos
e568731
#
2a9b648
# MIT Kerberos admin and KDC
e568731
# 
8a482d6
kerberos = module
e568731
2a9b648
# Layer: kernel
2a9b648
# Module: kernel
2a9b648
# Required in base
e568731
#
2a9b648
# Policy for kernel threads, proc filesystem,and unlabeled processes and objects.
e568731
# 
2a9b648
kernel = base
e568731
e568731
# Layer: services
2a9b648
# Module: ktalk
e568731
#
2a9b648
# KDE Talk daemon
e568731
# 
8a482d6
ktalk = module
e568731
2a9b648
# Layer: admin
2a9b648
# Module: kudzu
e568731
#
2a9b648
# Hardware detection and configuration tools
e568731
# 
2a9b648
kudzu = base
2a9b648
e568731
e568731
# Layer: services
2a9b648
# Module: ldap
e568731
#
2a9b648
# OpenLDAP directory server
e568731
# 
8a482d6
ldap = module
e568731
2a9b648
# Layer: system
2a9b648
# Module: libraries
e568731
#
2a9b648
# Policy for system libraries.
e568731
# 
2a9b648
libraries = base
e568731
2a9b648
# Layer: apps
2a9b648
# Module: loadkeys
e568731
#
2a9b648
# Load keyboard mappings.
e568731
# 
2a9b648
loadkeys = base
e568731
2a9b648
# Layer: system
2a9b648
# Module: locallogin
451d9b4
#
2a9b648
# Policy for local logins.
451d9b4
# 
2a9b648
locallogin = base
451d9b4
2a9b648
# Layer: apps
2a9b648
# Module: lockdev
e568731
#
2a9b648
# device locking policy for lockdev
e568731
# 
2a9b648
lockdev = module
e568731
2a9b648
# Layer: system
2a9b648
# Module: logging
451d9b4
#
2a9b648
# Policy for the kernel message logger and system logging daemon.
451d9b4
# 
2a9b648
logging = base
451d9b4
2a9b648
# Layer: admin
2a9b648
# Module: logrotate
e568731
#
2a9b648
# Rotate and archive system logs
e568731
# 
2a9b648
logrotate = base
e568731
e568731
# Layer: services
2a9b648
# Module: logwatch
e568731
#
2a9b648
# logwatch executable
e568731
# 
2a9b648
logwatch = base
e568731
e568731
# Layer: services
2a9b648
# Module: lpd
e568731
#
2a9b648
# Line printer daemon
e568731
# 
8a482d6
lpd = module
e568731
2a9b648
# Layer: system
2a9b648
# Module: lvm
d4da533
#
2a9b648
# Policy for logical volume management programs.
d4da533
# 
2a9b648
lvm = base
d4da533
d4da533
# Layer: services
e568731
# Module: mailman
e568731
#
e568731
# Mailman is for managing electronic mail discussion and e-newsletter lists
e568731
# 
8a482d6
mailman = module
a4ec9b7
2a9b648
# Layer: kernel
2a9b648
# Module: mcs
2a9b648
# Required in base
e568731
#
2a9b648
# MultiCategory security policy
e568731
# 
2a9b648
mcs = base
e568731
2a9b648
# Layer: system
2a9b648
# Module: miscfiles
e568731
#
2a9b648
# Miscelaneous files.
e568731
# 
2a9b648
miscfiles = base
e568731
2a9b648
# Layer: kernel
2a9b648
# Module: mls
2a9b648
# Required in base
e568731
#
2a9b648
# Multilevel security policy
e568731
# 
2a9b648
mls = base
e568731
2a9b648
# Layer: system
2a9b648
# Module: modutils
e568731
#
2a9b648
# Policy for kernel module utilities
e568731
# 
2a9b648
modutils = base
e568731
2a9b648
# Layer: apps
2a9b648
# Module: mono
e568731
#
2a9b648
# mono executable
e568731
# 
8d197dd
mono = module
e568731
2a9b648
# Layer: system
2a9b648
# Module: mount
e568731
#
2a9b648
# Policy for mount.
e568731
# 
2a9b648
mount = base
e568731
2a9b648
# Layer: apps
2a9b648
# Module: mozilla
e568731
#
2a9b648
# Policy for Mozilla and related web browsers
e568731
# 
2a9b648
mozilla = module
e568731
a502c55
# Layer: apps
a502c55
# Module: nsplugin
a502c55
#
a502c55
# Policy for nspluginwrapper 
a502c55
# 
a502c55
nsplugin = module
e568731
2a9b648
# Layer: apps
2a9b648
# Module: mplayer
e568731
#
2a9b648
# Policy for Mozilla and related web browsers
e568731
# 
2a9b648
mplayer = module
e568731
a502c55
# Layer: apps
a502c55
# Module: gpg
a502c55
#
a502c55
# Policy for Mozilla and related web browsers
a502c55
# 
a502c55
gpg = module
a502c55
2a9b648
# Layer: admin
2a9b648
# Module: mrtg
d4da533
#
2a9b648
# Network traffic graphing
d4da533
# 
2a9b648
mrtg = module
2a9b648
d4da533
# Layer: services
2a9b648
# Module: mta
e568731
#
2a9b648
# Policy common to all email tranfer agents.
e568731
# 
2a9b648
mta = base
2a9b648
e568731
# Layer: services
2a9b648
# Module: mysql
e568731
#
2a9b648
# Policy for MySQL
e568731
# 
8a482d6
mysql = module
e568731
e568731
# Layer: services
2a9b648
# Module: nagios
e568731
#
2a9b648
# policy for nagios Host/service/network monitoring program
e568731
# 
2a9b648
nagios = module
e568731
2a9b648
# Layer: admin
2a9b648
# Module: netutils
d4da533
#
2a9b648
# Network analysis utilities
d4da533
# 
2a9b648
netutils = base
d4da533
d4da533
# Layer: services
2a9b648
# Module: networkmanager
e568731
#
2a9b648
# Manager for dynamically switching between networks.
e568731
# 
2a9b648
networkmanager = base
e568731
e568731
# Layer: services
2a9b648
# Module: nis
e568731
#
2a9b648
# Policy for NIS (YP) servers and clients
e568731
# 
8a482d6
nis = module
2a9b648
e568731
e568731
# Layer: services
2a9b648
# Module: nscd
e568731
#
2a9b648
# Name service cache daemon
e568731
# 
2a9b648
nscd = base
2a9b648
e568731
e568731
# Layer: services
2a9b648
# Module: ntp
e568731
#
2a9b648
# Network time protocol daemon
e568731
# 
8a482d6
ntp = module
e568731
e568731
# Layer: services
ddf4ec4
# Module: nx
ddf4ec4
#
ddf4ec4
# NX Remote Desktop
ddf4ec4
# 
ddf4ec4
nx = module
ddf4ec4
ddf4ec4
ddf4ec4
# Layer: services
2a9b648
# Module: oddjob
d4da533
#
2a9b648
# policy for oddjob
d4da533
# 
2a9b648
oddjob = module
d4da533
d4da533
# Layer: services
2a9b648
# Module: openct
e568731
#
2a9b648
# Service for handling smart card readers.
e568731
# 
2a9b648
openct = off
e568731
e568731
# Layer: services
2a9b648
# Module: openvpn
66ca8d0
#
2a9b648
# Policy for OPENVPN full-featured SSL VPN solution
66ca8d0
# 
8a482d6
openvpn = module
66ca8d0
2a9b648
2a9b648
# Layer: service
2a9b648
# Module: pcscd
e568731
#
2a9b648
# PC/SC Smart Card Daemon
2a9b648
#
2a9b648
pcscd = module
daa6abe
daa6abe
# Layer: service
daa6abe
# Module: openct
daa6abe
# 
daa6abe
# Middleware framework for smart card terminals
daa6abe
#
daa6abe
openct = module
e568731
2a9b648
# Layer: system
2a9b648
# Module: pcmcia
e568731
#
2a9b648
# PCMCIA card management services
e568731
# 
2a9b648
pcmcia = base
e568731
e568731
# Layer: services
2a9b648
# Module: pegasus
e568731
#
2a9b648
# The Open Group Pegasus CIM/WBEM Server.
e568731
# 
8a482d6
pegasus = module
e568731
e568731
# Layer: services
2a9b648
# Module: postgresql
e568731
#
2a9b648
# PostgreSQL relational database
e568731
# 
8a482d6
postgresql = module
e568731
e568731
# Layer: services
2a9b648
# Module: portmap
e568731
#
2a9b648
# RPC port mapping service.
e568731
# 
8a482d6
portmap = module
e568731
e568731
# Layer: services
e568731
# Module: postfix
e568731
#
e568731
# Postfix email server
e568731
# 
8a482d6
postfix = module
e568731
7330e86
o# Layer: services
7330e86
# Module: postgrey
7330e86
#
7330e86
# email scanner
7330e86
# 
8a482d6
postgrey = module
7330e86
e568731
# Layer: services
2a9b648
# Module: ppp
2a9b648
#
2a9b648
# Point to Point Protocol daemon creates links in ppp networks
2a9b648
# 
8a482d6
ppp = module
2a9b648
2a9b648
# Layer: admin
2a9b648
# Module: prelink
d4da533
#
2a9b648
# Manage temporary directory sizes and file ages
d4da533
# 
2a9b648
prelink = base
d4da533
d4da533
# Layer: services
2a9b648
# Module: procmail
e568731
#
2a9b648
# Procmail mail delivery agent
e568731
# 
8a482d6
procmail = module
e568731
e568731
# Layer: services
2a9b648
# Module: privoxy
e568731
#
2a9b648
# Privacy enhancing web proxy.
e568731
# 
8a482d6
privoxy = module
e568731
e568731
# Layer: services
2a9b648
# Module: publicfile
e568731
#
2a9b648
# publicfile supplies files to the public through HTTP and FTP
e568731
# 
2a9b648
publicfile = module
e568731
0c34c69
# Layer: apps
0c34c69
# Module: pulseaudio
0c34c69
#
0c34c69
# The PulseAudio Sound System
0c34c69
# 
0c34c69
pulseaudio = module
0c34c69
e568731
# Layer: services
2a9b648
# Module: pyzor
13893ed
#
2a9b648
# Spam Blocker
13893ed
# 
2a9b648
pyzor = module
2a9b648
13893ed
13893ed
# Layer: services
2a9b648
# Module: qmail
e568731
#
98f84cb
# Policy for qmail
e568731
# 
e1060e2
qmail = module
e568731
2a9b648
# Layer: admin
2a9b648
# Module: quota
e568731
#
2a9b648
# File system quota management
e568731
# 
8d197dd
quota = base
e568731
2a9b648
# Layer: system
2a9b648
# Module: raid
e568731
#
2a9b648
# RAID array management tools
e568731
# 
2a9b648
raid = base
e568731
e568731
# Layer: services
2a9b648
# Module: radius
451d9b4
#
2a9b648
# RADIUS authentication and accounting server.
451d9b4
# 
8a482d6
radius = module
e568731
e568731
# Layer: services
2a9b648
# Module: radvd
d4da533
#
2a9b648
# IPv6 router advertisement daemon
d4da533
# 
8a482d6
radvd = module
d4da533
d4da533
# Layer: services
2a9b648
# Module: razor
e568731
#
2a9b648
# A distributed, collaborative, spam detection and filtering network.
e568731
# 
2a9b648
razor = module
e568731
2a9b648
# Layer: admin
2a9b648
# Module: readahead
e568731
#
2a9b648
# Readahead, read files into page cache for improved performance
e568731
# 
2a9b648
readahead = base
e568731
e568731
# Layer: services
2a9b648
# Module: rhgb
e568731
#
2a9b648
# X windows login display manager
e568731
# 
8d197dd
rhgb = module
e568731
e568731
# Layer: services
2a9b648
# Module: rdisc
e568731
#
2a9b648
# Network router discovery daemon
e568731
# 
8a482d6
rdisc = module
e568731
e568731
# Layer: services
2a9b648
# Module: remotelogin
e568731
#
2a9b648
# Policy for rshd, rlogind, and telnetd.
e568731
# 
11ef247
remotelogin = module
e568731
e568731
# Layer: services
2a9b648
# Module: ricci
e568731
#
2a9b648
# policy for ricci
e568731
# 
2a9b648
ricci = module
e568731
e568731
# Layer: services
2a9b648
# Module: rlogin
e568731
#
2a9b648
# Remote login daemon
e568731
# 
8a482d6
rlogin = module
e568731
e568731
# Layer: services
2a9b648
# Module: roundup
e568731
#
2a9b648
# Roundup Issue Tracking System policy
e568731
# 
2a9b648
roundup = module
e568731
e568731
# Layer: services
2a9b648
# Module: rpc
e568731
#
2a9b648
# Remote Procedure Call Daemon for managment of network based process communication
e568731
# 
2a9b648
rpc = base
e568731
2a9b648
# Layer: admin
2a9b648
# Module: rpm
e568731
#
2a9b648
# Policy for the RPM package manager.
e568731
# 
2a9b648
rpm = base
2a9b648
e568731
e568731
# Layer: services
2a9b648
# Module: rshd
e568731
#
2a9b648
# Remote shell service.
e568731
# 
8a482d6
rshd = module
e568731
e568731
# Layer: services
2a9b648
# Module: rsync
e568731
#
2a9b648
# Fast incremental file transfer for synchronization
e568731
# 
8a482d6
rsync = module
2a9b648
9fc00bc
# Layer: services
9fc00bc
# Module: rwho
9fc00bc
#
9fc00bc
# who is logged in on local machines
9fc00bc
# 
9fc00bc
rwho = module
e568731
e568731
# Layer: services
2a9b648
# Module: sasl
e568731
#
2a9b648
# SASL authentication server
e568731
# 
8a482d6
sasl = module
e568731
e568731
# Layer: services
2a9b648
# Module: sendmail
e568731
#
2a9b648
# Policy for sendmail.
e568731
# 
2a9b648
sendmail = base
e568731
e568731
# Layer: services
2a9b648
# Module: samba
e568731
#
2a9b648
# SMB and CIFS client/server programs for UNIX and
2a9b648
# name  Service  Switch  daemon for resolving names
2a9b648
# from Windows NT servers.
e568731
# 
8a482d6
samba = module
e568731
2a9b648
# Layer: apps
411a424
# Module: sambagui
411a424
#
411a424
# policy for system-config-samba
411a424
# 
411a424
sambagui = module
411a424
411a424
# Layer: apps
2a9b648
# Module: screen
e568731
#
2a9b648
# GNU terminal multiplexer
e568731
# 
2a9b648
screen = module
e568731
2a9b648
# Layer: kernel
2a9b648
# Module: selinux
5ad70cf
# Required in base
5ad70cf
#
2a9b648
# Policy for kernel security interface, in particular, selinuxfs.
5ad70cf
# 
2a9b648
selinux = base
5ad70cf
5ad70cf
# Layer: system
2a9b648
# Module: selinuxutil
e568731
#
2a9b648
# Policy for SELinux policy and userland applications.
e568731
# 
2a9b648
selinuxutil = base
e568731
e568731
# Layer: system
2a9b648
# Module: setrans
2a9b648
# Required in base
e568731
#
2a9b648
# Policy for setrans
e568731
# 
2a9b648
setrans = base
e568731
2a9b648
# Layer: services
2a9b648
# Module: setroubleshoot
e568731
#
2a9b648
# Policy for the SELinux troubleshooting utility
e568731
# 
2a9b648
setroubleshoot = base
e568731
2a9b648
# Layer: services
2a9b648
# Module: slrnpull
e568731
#
2a9b648
# Service for downloading news feeds the slrn newsreader.
e568731
# 
2a9b648
slrnpull = off
e568731
2a9b648
# Layer: apps
2a9b648
# Module: slocate
e568731
#
2a9b648
# Update database for mlocate
e568731
# 
2a9b648
slocate = module
e568731
2a9b648
# Layer: services
2a9b648
# Module: smartmon
e568731
#
2a9b648
# Smart disk monitoring daemon policy
e568731
# 
2a9b648
smartmon = module
e568731
2a9b648
# Layer: services
2a9b648
# Module: snmp
e568731
#
2a9b648
# Simple network management protocol services
e568731
# 
8a482d6
snmp = module
e568731
2a9b648
# Layer: services
2a9b648
# Module: spamassassin
e568731
#
2a9b648
# Filter used for removing unsolicited email.
e568731
# 
8a482d6
spamassassin = module
e568731
2a9b648
# Layer: services
2a9b648
# Module: squid
e568731
#
2a9b648
# Squid caching http proxy server
e568731
# 
8a482d6
squid = module
e568731
2a9b648
# Layer: services
2a9b648
# Module: ssh
e568731
#
2a9b648
# Secure shell client and server policy.
e568731
# 
2a9b648
ssh = base
e568731
46b5649
# Layer: services
46b5649
# Module: sssd
46b5649
#
46b5649
# System Security Services Daemon
46b5649
# 
46b5649
sssd = module
46b5649
2a9b648
# Layer: kernel
2a9b648
# Module: storage
e568731
#
2a9b648
# Policy controlling access to storage devices
e568731
# 
2a9b648
storage = base
e568731
2a9b648
# Layer: services
2a9b648
# Module: stunnel
e568731
#
2a9b648
# SSL Tunneling Proxy
e568731
# 
8a482d6
stunnel = module
e568731
2a9b648
# Layer: admin
2a9b648
# Module: su
e568731
#
2a9b648
# Run shells with substitute user and group
e568731
# 
2a9b648
su = base
e568731
2a9b648
# Layer: admin
2a9b648
# Module: sudo
e568731
#
2a9b648
# Execute a command with a substitute user
e568731
# 
2a9b648
sudo = base
e568731
e568731
# Layer: system
2a9b648
# Module: sysnetwork
e568731
#
2a9b648
# Policy for network configuration: ifconfig and dhcp client.
e568731
# 
2a9b648
sysnetwork = base
e568731
2a9b648
2a9b648
# Layer: services
2a9b648
# Module: sysstat
e568731
#
2a9b648
# Policy for sysstat. Reports on various system states
e568731
# 
8a482d6
sysstat = module
e568731
2a9b648
# Layer: services
2a9b648
# Module: tcpd
e568731
#
2a9b648
# Policy for TCP daemon.
e568731
# 
8a482d6
tcpd = module
e568731
e568731
# Layer: system
2a9b648
# Module: udev
e568731
#
2a9b648
# Policy for udev.
e568731
# 
2a9b648
udev = base
e568731
e568731
# Layer: system
2a9b648
# Module: userdomain
e568731
#
2a9b648
# Policy for user domains
e568731
# 
2a9b648
userdomain = base
e568731
e568731
# Layer: system
e568731
# Module: unconfined
e568731
#
e568731
# The unconfined domain.
e568731
# 
56187c2
unconfined = module
e568731
6a09cfb
# Layer: services
6a09cfb
# Module: ulogd
6a09cfb
#
6a09cfb
# 
6a09cfb
# 
6a09cfb
ulogd = module
6a09cfb
2a9b648
# Layer: apps
2a9b648
# Module: wine
e568731
#
2a9b648
# wine executable
e568731
# 
8a482d6
wine = module
e568731
2a9b648
# Layer: admin
2a9b648
# Module: tzdata
0204772
#
2a9b648
# Policy for tzdata-update
0204772
# 
2a9b648
tzdata = base
0204772
1c86025
# Layer: apps
2a9b648
# Module: userhelper
1c86025
#
2a9b648
# A helper interface to pam.
1c86025
# 
2a9b648
userhelper = module
1c86025
a08ba87
# Layer: services
2a9b648
# Module: tor
a08ba87
#
2a9b648
# TOR, the onion router
a08ba87
# 
2a9b648
tor = module
26e33df
26e33df
# Layer: apps
2a9b648
# Module: tvtime
26e33df
#
2a9b648
# tvtime - a high quality television application
26e33df
# 
2a9b648
tvtime = module
26e33df
30a020f
# Layer: apps
2a9b648
# Module: uml
ea725ce
#
2a9b648
# Policy for UML
ea725ce
# 
2a9b648
uml = module
ea725ce
2a9b648
# Layer: admin
2a9b648
# Module: usbmodules
ea725ce
#
2a9b648
# List kernel modules of USB devices
ea725ce
# 
2a9b648
usbmodules = module
ea725ce
2a9b648
# Layer: apps
2a9b648
# Module: usernetctl
529f12c
#
2a9b648
# User network interface configuration helper
529f12c
# 
2a9b648
usernetctl = module
529f12c
a522754
# Layer: system
2a9b648
# Module: xen
a522754
#
e8b5993
# virtualization software
a522754
# 
8a482d6
xen = module
a522754
6ed8533
# Layer: services
e8b5993
# Module: virt
e8b5993
#
e8b5993
# Virtualization libraries
e8b5993
# 
b19d470
virt = module
b19d470
4967525
# Layer: system
4967525
# Module: virtual
4967525
#
4967525
# Virtualization libraries
4967525
# 
4967525
virtual = base
4967525
6ed8533
# Layer: apps
b19d470
# Module: qemu
b19d470
#
b19d470
# Virtualization emulator 
b19d470
# 
b19d470
qemu = module
e8b5993
e8b5993
# Layer: system
154d823
# Module: brctl
154d823
#
154d823
# Utilities for configuring the linux ethernet bridge
154d823
# 
154d823
brctl = base
154d823
539ba8a
# Layer: services
2a9b648
# Module: telnet
539ba8a
#
2a9b648
# Telnet daemon
539ba8a
# 
8a482d6
telnet = module
1f20939
8a7ef5e
# Layer: services
2a9b648
# Module: timidity
8a7ef5e
#
2a9b648
# MIDI to WAV converter and player configured as a service
8a7ef5e
# 
2a9b648
timidity = off
8a7ef5e
1f20939
# Layer: services
2a9b648
# Module: tftp
1f20939
#
2a9b648
# Trivial file transfer protocol daemon
1f20939
# 
8a482d6
tftp = module
f4d1707
2a9b648
# Layer: services
2a9b648
# Module: uucp
c22acae
#
2a9b648
# Unix to Unix Copy
c22acae
# 
8a482d6
uucp = module
c22acae
2a9b648
# Layer: services
2a9b648
# Module: vbetool 
e4d46c9
#
2a9b648
# run real-mode video BIOS code to alter hardware state
e4d46c9
# 
2a9b648
vbetool = base
e4d46c9
e4d46c9
# Layer: apps
2a9b648
# Module: webalizer
c22acae
#
2a9b648
# Web server log analysis
c22acae
# 
8a482d6
webalizer = module
1616552
1616552
# Layer: services
2a9b648
# Module: xfs
1616552
#
2a9b648
# X Windows Font Server
1616552
# 
8a482d6
xfs = module
1616552
1616552
# Layer: services
2a9b648
# Module: xserver
1616552
#
2a9b648
# X windows login display manager
1616552
# 
2a9b648
xserver = base
1616552
1616552
# Layer: services
2a9b648
# Module: zebra
1616552
#
2a9b648
# Zebra border gateway protocol network routing service
1616552
# 
8a482d6
zebra = module
1616552
2a9b648
# Layer: admin
2a9b648
# Module: usermanage
b4815d0
#
2a9b648
# Policy for managing user accounts.
b4815d0
# 
2a9b648
usermanage = base
b4815d0
2a9b648
# Layer: admin
2a9b648
# Module: updfstab
b4815d0
#
2a9b648
# Red Hat utility to change /etc/fstab.
b4815d0
# 
2a9b648
updfstab = base
b4815d0
2a9b648
# Layer: admin
2a9b648
# Module: vpn
a76cf8a
#
2a9b648
# Virtual Private Networking client
a76cf8a
# 
8d197dd
vpn = module
036c1c2
b7da3b9
# Layer: admin
2a9b648
# Module: vbetool
e3b143b
#
2a9b648
# run real-mode video BIOS code to alter hardware state
e3b143b
# 
2a9b648
vbetool = base
e3b143b
2a9b648
# Layer: kernel
2a9b648
# Module: terminal
2a9b648
# Required in base
9aff35b
#
2a9b648
# Policy for terminals.
9aff35b
# 
2a9b648
terminal = base
1a24735
2a9b648
# Layer: admin
2a9b648
# Module: tmpreaper
1a24735
#
2a9b648
# Manage temporary directory sizes and file ages
1a24735
# 
a4ec9b7
tmpreaper = module
1a24735
2a9b648
# Layer: admin
2a9b648
# Module: amtu
9a8202d
#
2a9b648
# Abstract Machine Test Utility (AMTU)
9a8202d
# 
2a9b648
amtu = module
bdb7f99
bdb7f99
# Layer: services
bdb7f99
# Module: zabbix
bdb7f99
#
bdb7f99
# Open-source monitoring solution for your IT infrastructure
bdb7f99
#
bdb7f99
zabbix = module
bdb7f99
ce7f30a
# Layer: services
ce7f30a
# Module: apcupsd
ce7f30a
#
ce7f30a
# daemon for most APC’s UPS for Linux
ce7f30a
#
ce7f30a
apcupsd = module
8e5289e
8e5289e
# Layer: services
8e5289e
# Module: aide
8e5289e
#
8e5289e
# Policy for aide
8e5289e
# 
8a482d6
aide = module
6821c3d
6821c3d
# Layer: services
a3b1a2c
# Module: w3c
a3b1a2c
#
a3b1a2c
# w3c
a3b1a2c
# 
a3b1a2c
w3c = module
a3b1a2c
346d2dc
# Layer: services
4125702
# Module: portreserve
4125702
#
4125702
#  reserve ports to prevent portmap mapping them
4125702
# 
4125702
portreserve = module
4125702
4125702
# Layer: services
346d2dc
# Module: rpcbind
346d2dc
#
346d2dc
#  universal addresses to RPC program number mapper
346d2dc
# 
346d2dc
rpcbind = module
346d2dc
56187c2
# Layer: apps
56187c2
# Module: vmware
56187c2
#
56187c2
# VMWare Workstation virtual machines
56187c2
# 
56187c2
vmware = module
56187c2
4b7f030
# Layer: role
a4ec9b7
# Module: logadm
a4ec9b7
#
a4ec9b7
# Minimally prived root role for managing logging system
a4ec9b7
# 
a4ec9b7
logadm = module
a4ec9b7
4b7f030
# Layer: role
a4ec9b7
# Module: webadm
a4ec9b7
#
a4ec9b7
# Minimally prived root role for managing apache
a4ec9b7
# 
a4ec9b7
webadm = module
25d5868
25d5868
#
25d5868
# Layer: services
25d5868
# Module: exim
25d5868
#
25d5868
# exim mail server 
25d5868
# 
25d5868
exim = module
25d5868
ccf8a72
a1341a8
# Layer: services
ccf8a72
# Module: kismet
ccf8a72
#
ccf8a72
# Wireless sniffing and monitoring
ccf8a72
# 
ccf8a72
kismet = module
ccf8a72
fa0d1c8
# Layer: services
fa0d1c8
# Module: munin
fa0d1c8
#
fa0d1c8
# Munin
fa0d1c8
# 
fa0d1c8
munin = module
fa0d1c8
fa0d1c8
# Layer: services
fa0d1c8
# Module: bitlbee
fa0d1c8
#
fa0d1c8
# An IRC to other chat networks  gateway
fa0d1c8
# 
fa0d1c8
bitlbee = module
fa0d1c8
194f6c1
# Layer: services
194f6c1
# Module: soundserver
194f6c1
#
194f6c1
# sound server for network audio server programs, nasd, yiff, etc</summary>
194f6c1
# 
194f6c1
soundserver = module
194f6c1
4b7f030
# Layer:role
a502c55
# Module: staff
a502c55
#
4b7f030
# admin account 
a502c55
# 
7e6a2a4
staff = module
a502c55
4b7f030
# Layer:role
4b7f030
# Module: sysadm
4b7f030
#
4b7f030
# System Administrator
4b7f030
# 
7fd4585
sysadm = base
4b7f030
4b7f030
# Layer: role
4b7f030
# Module: unprivuser
a502c55
#
a502c55
# Minimally privs guest account on tty logins
a502c55
# 
7e6a2a4
unprivuser = module
a502c55
f18a882
# Layer: services
f18a882
# Module: prelude
f18a882
#
f18a882
prelude = module
f18a882
b53db53
# Layer: services
59571ab
# Module: pads
59571ab
#
59571ab
pads = module
59571ab
59571ab
# Layer: services
b53db53
# Module: kerneloops
b53db53
#
b53db53
# program  to  collect  and  submit  kernel oopses to kerneloops.org
b53db53
# 
b53db53
kerneloops = module
b53db53
987b10f
# Layer: apps
987b10f
# Module: openoffice
987b10f
#
987b10f
# openoffice executable
987b10f
# 
8a482d6
openoffice = module
987b10f
6ed8533
# Layer: apps
6c25b42
# Module: podsleuth
6c25b42
#
6c25b42
# Podsleuth probes, identifies, and exposes properties and metadata bound to iPods.
6c25b42
# 
6c25b42
podsleuth = module
6c25b42
4b7f030
# Layer: role
4b7f030
# Module: guest
4b7f030
#
4b7f030
# Minimally privs guest account on tty logins
4b7f030
# 
4b7f030
guest = module
4b7f030
4b7f030
# Layer: role
4b7f030
# Module: xguest
4b7f030
#
4b7f030
# Minimally privs guest account on X Windows logins
4b7f030
# 
4b7f030
xguest = module
4b7f030
a4995d5
# Layer: services
a4995d5
# Module: courier
a4995d5
#
a4995d5
# IMAP and POP3 email servers
a4995d5
# 
a4995d5
courier = module
15f71c5
15f71c5
# Layer: apps
15f71c5
# Module: livecd
15f71c5
#
15f71c5
# livecd creator
15f71c5
# 
15f71c5
livecd = module
1a0f642
1a0f642
# Layer: services
1a0f642
# Module: snort
1a0f642
#
1a0f642
# Snort network intrusion detection system
1a0f642
# 
cd8bee5
snort = module
0a219fe
0a219fe
# Layer: services
0a219fe
# Module: memcached
0a219fe
#
0a219fe
#  high-performance memory object caching system
0a219fe
# 
0a219fe
memcached = module
8d197dd
8d197dd
# Layer: system
8d197dd
# Module: netlabel
8d197dd
#
8d197dd
# Basic netlabel types and interfaces.
8d197dd
# 
8d197dd
netlabel = module
8d197dd
675bbab
# Layer: services
675bbab
# Module: zosremote
675bbab
#
675bbab
# policy for z/OS Remote-services Audit dispatcher plugin</summary>
675bbab
# 
675bbab
zosremote = module
675bbab
02d888c
# Layer: services
02d888c
# Module: pingd
02d888c
#
02d888c
# 
02d888c
pingd = module
02d888c
02d888c
# Layer: services
02d888c
# Module: milter
02d888c
#
02d888c
# 
02d888c
# 
02d888c
milter = module