<html> <head> <title> Security Enhanced Linux Reference Policy </title> <style type="text/css" media="all">@import "style.css";</style> </head> <body> <div id="Header">Security Enhanced Linux Reference Policy</div> <div id='Menu'> <a href="admin.html">+ admin</a></br/> <div id='subitem'> - <a href='admin_bootloader.html'> bootloader</a><br/> - <a href='admin_consoletype.html'> consoletype</a><br/> - <a href='admin_dmesg.html'> dmesg</a><br/> - <a href='admin_netutils.html'> netutils</a><br/> - <a href='admin_su.html'> su</a><br/> - <a href='admin_sudo.html'> sudo</a><br/> - <a href='admin_usermanage.html'> usermanage</a><br/> </div> <a href="apps.html">+ apps</a></br/> <div id='subitem'> - <a href='apps_seunshare.html'> seunshare</a><br/> </div> <a href="contrib.html">+ contrib</a></br/> <div id='subitem'> - <a href='contrib_abrt.html'> abrt</a><br/> - <a href='contrib_accountsd.html'> accountsd</a><br/> - <a href='contrib_acct.html'> acct</a><br/> - <a href='contrib_ada.html'> ada</a><br/> - <a href='contrib_afs.html'> afs</a><br/> - <a href='contrib_aiccu.html'> aiccu</a><br/> - <a href='contrib_aide.html'> aide</a><br/> - <a href='contrib_aisexec.html'> aisexec</a><br/> - <a href='contrib_ajaxterm.html'> ajaxterm</a><br/> - <a href='contrib_alsa.html'> alsa</a><br/> - <a href='contrib_amanda.html'> amanda</a><br/> - <a href='contrib_amavis.html'> amavis</a><br/> - <a href='contrib_amtu.html'> amtu</a><br/> - <a href='contrib_anaconda.html'> anaconda</a><br/> - <a href='contrib_antivirus.html'> antivirus</a><br/> - <a href='contrib_apache.html'> apache</a><br/> - <a href='contrib_apcupsd.html'> apcupsd</a><br/> - <a href='contrib_apm.html'> apm</a><br/> - <a href='contrib_apt.html'> apt</a><br/> - <a href='contrib_arpwatch.html'> arpwatch</a><br/> - <a href='contrib_asterisk.html'> asterisk</a><br/> - <a href='contrib_authbind.html'> authbind</a><br/> - <a href='contrib_authconfig.html'> authconfig</a><br/> - <a href='contrib_automount.html'> automount</a><br/> - <a href='contrib_avahi.html'> avahi</a><br/> - <a href='contrib_awstats.html'> awstats</a><br/> - <a href='contrib_backup.html'> backup</a><br/> - <a href='contrib_bacula.html'> bacula</a><br/> - <a href='contrib_bcfg2.html'> bcfg2</a><br/> - <a href='contrib_bind.html'> bind</a><br/> - <a href='contrib_bird.html'> bird</a><br/> - <a href='contrib_bitlbee.html'> bitlbee</a><br/> - <a href='contrib_blkmapd.html'> blkmapd</a><br/> - <a href='contrib_blueman.html'> blueman</a><br/> - <a href='contrib_bluetooth.html'> bluetooth</a><br/> - <a href='contrib_boinc.html'> boinc</a><br/> - <a href='contrib_brctl.html'> brctl</a><br/> - <a href='contrib_brltty.html'> brltty</a><br/> - <a href='contrib_bugzilla.html'> bugzilla</a><br/> - <a href='contrib_bumblebee.html'> bumblebee</a><br/> - <a href='contrib_cachefilesd.html'> cachefilesd</a><br/> - <a href='contrib_calamaris.html'> calamaris</a><br/> - <a href='contrib_callweaver.html'> callweaver</a><br/> - <a href='contrib_canna.html'> canna</a><br/> - <a href='contrib_ccs.html'> ccs</a><br/> - <a href='contrib_cdrecord.html'> cdrecord</a><br/> - <a href='contrib_certmaster.html'> certmaster</a><br/> - <a href='contrib_certmonger.html'> certmonger</a><br/> - <a href='contrib_certwatch.html'> certwatch</a><br/> - <a href='contrib_cfengine.html'> cfengine</a><br/> - <a href='contrib_cgdcbxd.html'> cgdcbxd</a><br/> - <a href='contrib_cgroup.html'> cgroup</a><br/> - <a href='contrib_chrome.html'> chrome</a><br/> - <a href='contrib_chronyd.html'> chronyd</a><br/> - <a href='contrib_cinder.html'> cinder</a><br/> - <a href='contrib_cipe.html'> cipe</a><br/> - <a href='contrib_clamav.html'> clamav</a><br/> - <a href='contrib_clockspeed.html'> clockspeed</a><br/> - <a href='contrib_clogd.html'> clogd</a><br/> - <a href='contrib_cloudform.html'> cloudform</a><br/> - <a href='contrib_cmirrord.html'> cmirrord</a><br/> - <a href='contrib_cobbler.html'> cobbler</a><br/> - <a href='contrib_cockpit.html'> cockpit</a><br/> - <a href='contrib_collectd.html'> collectd</a><br/> - <a href='contrib_colord.html'> colord</a><br/> - <a href='contrib_comsat.html'> comsat</a><br/> - <a href='contrib_condor.html'> condor</a><br/> - <a href='contrib_conman.html'> conman</a><br/> - <a href='contrib_consolekit.html'> consolekit</a><br/> - <a href='contrib_container.html'> container</a><br/> - <a href='contrib_corosync.html'> corosync</a><br/> - <a href='contrib_couchdb.html'> couchdb</a><br/> - <a href='contrib_courier.html'> courier</a><br/> - <a href='contrib_cpucontrol.html'> cpucontrol</a><br/> - <a href='contrib_cpufreqselector.html'> cpufreqselector</a><br/> - <a href='contrib_cpuplug.html'> cpuplug</a><br/> - <a href='contrib_cron.html'> cron</a><br/> - <a href='contrib_ctdb.html'> ctdb</a><br/> - <a href='contrib_cups.html'> cups</a><br/> - <a href='contrib_cvs.html'> cvs</a><br/> - <a href='contrib_cyphesis.html'> cyphesis</a><br/> - <a href='contrib_cyrus.html'> cyrus</a><br/> - <a href='contrib_daemontools.html'> daemontools</a><br/> - <a href='contrib_dante.html'> dante</a><br/> - <a href='contrib_dbadm.html'> dbadm</a><br/> - <a href='contrib_dbskk.html'> dbskk</a><br/> - <a href='contrib_dbus.html'> dbus</a><br/> - <a href='contrib_dcc.html'> dcc</a><br/> - <a href='contrib_ddclient.html'> ddclient</a><br/> - <a href='contrib_ddcprobe.html'> ddcprobe</a><br/> - <a href='contrib_denyhosts.html'> denyhosts</a><br/> - <a href='contrib_devicekit.html'> devicekit</a><br/> - <a href='contrib_dhcp.html'> dhcp</a><br/> - <a href='contrib_dictd.html'> dictd</a><br/> - <a href='contrib_dirmngr.html'> dirmngr</a><br/> - <a href='contrib_dirsrv.html'> dirsrv</a><br/> - <a href='contrib_dirsrv-admin.html'> dirsrv-admin</a><br/> - <a href='contrib_distcc.html'> distcc</a><br/> - <a href='contrib_djbdns.html'> djbdns</a><br/> - <a href='contrib_dkim.html'> dkim</a><br/> - <a href='contrib_dmidecode.html'> dmidecode</a><br/> - <a href='contrib_dnsmasq.html'> dnsmasq</a><br/> - <a href='contrib_dnssec.html'> dnssec</a><br/> - <a href='contrib_dnssectrigger.html'> dnssectrigger</a><br/> - <a href='contrib_dovecot.html'> dovecot</a><br/> - <a href='contrib_dpkg.html'> dpkg</a><br/> - <a href='contrib_drbd.html'> drbd</a><br/> - <a href='contrib_dspam.html'> dspam</a><br/> - <a href='contrib_entropyd.html'> entropyd</a><br/> - <a href='contrib_etcd.html'> etcd</a><br/> - <a href='contrib_evolution.html'> evolution</a><br/> - <a href='contrib_exim.html'> exim</a><br/> - <a href='contrib_fail2ban.html'> fail2ban</a><br/> - <a href='contrib_fcoe.html'> fcoe</a><br/> - <a href='contrib_fetchmail.html'> fetchmail</a><br/> - <a href='contrib_finger.html'> finger</a><br/> - <a href='contrib_firewalld.html'> firewalld</a><br/> - <a href='contrib_firewallgui.html'> firewallgui</a><br/> - <a href='contrib_firstboot.html'> firstboot</a><br/> - <a href='contrib_fprintd.html'> fprintd</a><br/> - <a href='contrib_freeipmi.html'> freeipmi</a><br/> - <a href='contrib_freqset.html'> freqset</a><br/> - <a href='contrib_ftp.html'> ftp</a><br/> - <a href='contrib_fwupd.html'> fwupd</a><br/> - <a href='contrib_games.html'> games</a><br/> - <a href='contrib_gatekeeper.html'> gatekeeper</a><br/> - <a href='contrib_gdomap.html'> gdomap</a><br/> - <a href='contrib_gear.html'> gear</a><br/> - <a href='contrib_geoclue.html'> geoclue</a><br/> - <a href='contrib_gift.html'> gift</a><br/> - <a href='contrib_git.html'> git</a><br/> - <a href='contrib_gitosis.html'> gitosis</a><br/> - <a href='contrib_glance.html'> glance</a><br/> - <a href='contrib_glusterd.html'> glusterd</a><br/> - <a href='contrib_gnome.html'> gnome</a><br/> - <a href='contrib_gnomeclock.html'> gnomeclock</a><br/> - <a href='contrib_gpg.html'> gpg</a><br/> - <a href='contrib_gpm.html'> gpm</a><br/> - <a href='contrib_gpsd.html'> gpsd</a><br/> - <a href='contrib_gssproxy.html'> gssproxy</a><br/> - <a href='contrib_guest.html'> guest</a><br/> - <a href='contrib_hadoop.html'> hadoop</a><br/> - <a href='contrib_hal.html'> hal</a><br/> - <a href='contrib_hddtemp.html'> hddtemp</a><br/> - <a href='contrib_hostapd.html'> hostapd</a><br/> - <a href='contrib_howl.html'> howl</a><br/> - <a href='contrib_hsqldb.html'> hsqldb</a><br/> - <a href='contrib_hwloc.html'> hwloc</a><br/> - <a href='contrib_hypervkvp.html'> hypervkvp</a><br/> - <a href='contrib_i18n_input.html'> i18n_input</a><br/> - <a href='contrib_icecast.html'> icecast</a><br/> - <a href='contrib_ifplugd.html'> ifplugd</a><br/> - <a href='contrib_imaze.html'> imaze</a><br/> - <a href='contrib_inetd.html'> inetd</a><br/> - <a href='contrib_inn.html'> inn</a><br/> - <a href='contrib_iodine.html'> iodine</a><br/> - <a href='contrib_iotop.html'> iotop</a><br/> - <a href='contrib_ipa.html'> ipa</a><br/> - <a href='contrib_ipmievd.html'> ipmievd</a><br/> - <a href='contrib_irc.html'> irc</a><br/> - <a href='contrib_ircd.html'> ircd</a><br/> - <a href='contrib_irqbalance.html'> irqbalance</a><br/> - <a href='contrib_iscsi.html'> iscsi</a><br/> - <a href='contrib_isns.html'> isns</a><br/> - <a href='contrib_jabber.html'> jabber</a><br/> - <a href='contrib_java.html'> java</a><br/> - <a href='contrib_jetty.html'> jetty</a><br/> - <a href='contrib_jockey.html'> jockey</a><br/> - <a href='contrib_journalctl.html'> journalctl</a><br/> - <a href='contrib_kde.html'> kde</a><br/> - <a href='contrib_kdump.html'> kdump</a><br/> - <a href='contrib_kdumpgui.html'> kdumpgui</a><br/> - <a href='contrib_keepalived.html'> keepalived</a><br/> - <a href='contrib_kerberos.html'> kerberos</a><br/> - <a href='contrib_kerneloops.html'> kerneloops</a><br/> - <a href='contrib_keyboardd.html'> keyboardd</a><br/> - <a href='contrib_keystone.html'> keystone</a><br/> - <a href='contrib_kismet.html'> kismet</a><br/> - <a href='contrib_kmscon.html'> kmscon</a><br/> - <a href='contrib_ksmtuned.html'> ksmtuned</a><br/> - <a href='contrib_ktalk.html'> ktalk</a><br/> - <a href='contrib_kubernetes.html'> kubernetes</a><br/> - <a href='contrib_kudzu.html'> kudzu</a><br/> - <a href='contrib_l2tp.html'> l2tp</a><br/> - <a href='contrib_ldap.html'> ldap</a><br/> - <a href='contrib_lightsquid.html'> lightsquid</a><br/> - <a href='contrib_likewise.html'> likewise</a><br/> - <a href='contrib_linuxptp.html'> linuxptp</a><br/> - <a href='contrib_lircd.html'> lircd</a><br/> - <a href='contrib_livecd.html'> livecd</a><br/> - <a href='contrib_lldpad.html'> lldpad</a><br/> - <a href='contrib_loadkeys.html'> loadkeys</a><br/> - <a href='contrib_lockdev.html'> lockdev</a><br/> - <a href='contrib_logrotate.html'> logrotate</a><br/> - <a href='contrib_logwatch.html'> logwatch</a><br/> - <a href='contrib_lpd.html'> lpd</a><br/> - <a href='contrib_lsm.html'> lsm</a><br/> - <a href='contrib_lttng-tools.html'> lttng-tools</a><br/> - <a href='contrib_mailman.html'> mailman</a><br/> - <a href='contrib_mailscanner.html'> mailscanner</a><br/> - <a href='contrib_man2html.html'> man2html</a><br/> - <a href='contrib_mandb.html'> mandb</a><br/> - <a href='contrib_mcelog.html'> mcelog</a><br/> - <a href='contrib_mcollective.html'> mcollective</a><br/> - <a href='contrib_mediawiki.html'> mediawiki</a><br/> - <a href='contrib_memcached.html'> memcached</a><br/> - <a href='contrib_milter.html'> milter</a><br/> - <a href='contrib_minidlna.html'> minidlna</a><br/> - <a href='contrib_minissdpd.html'> minissdpd</a><br/> - <a href='contrib_mip6d.html'> mip6d</a><br/> - <a href='contrib_mirrormanager.html'> mirrormanager</a><br/> - <a href='contrib_mock.html'> mock</a><br/> - <a href='contrib_modemmanager.html'> modemmanager</a><br/> - <a href='contrib_mojomojo.html'> mojomojo</a><br/> - <a href='contrib_mon_statd.html'> mon_statd</a><br/> - <a href='contrib_mongodb.html'> mongodb</a><br/> - <a href='contrib_mono.html'> mono</a><br/> - <a href='contrib_monop.html'> monop</a><br/> - <a href='contrib_motion.html'> motion</a><br/> - <a href='contrib_mozilla.html'> mozilla</a><br/> - <a href='contrib_mpd.html'> mpd</a><br/> - <a href='contrib_mplayer.html'> mplayer</a><br/> - <a href='contrib_mrtg.html'> mrtg</a><br/> - <a href='contrib_mta.html'> mta</a><br/> - <a href='contrib_munin.html'> munin</a><br/> - <a href='contrib_mysql.html'> mysql</a><br/> - <a href='contrib_mythtv.html'> mythtv</a><br/> - <a href='contrib_naemon.html'> naemon</a><br/> - <a href='contrib_nagios.html'> nagios</a><br/> - <a href='contrib_namespace.html'> namespace</a><br/> - <a href='contrib_ncftool.html'> ncftool</a><br/> - <a href='contrib_nessus.html'> nessus</a><br/> - <a href='contrib_networkmanager.html'> networkmanager</a><br/> - <a href='contrib_ninfod.html'> ninfod</a><br/> - <a href='contrib_nis.html'> nis</a><br/> - <a href='contrib_nova.html'> nova</a><br/> - <a href='contrib_nscd.html'> nscd</a><br/> - <a href='contrib_nsd.html'> nsd</a><br/> - <a href='contrib_nslcd.html'> nslcd</a><br/> - <a href='contrib_nsplugin.html'> nsplugin</a><br/> - <a href='contrib_ntop.html'> ntop</a><br/> - <a href='contrib_ntp.html'> ntp</a><br/> - <a href='contrib_numad.html'> numad</a><br/> - <a href='contrib_nut.html'> nut</a><br/> - <a href='contrib_nx.html'> nx</a><br/> - <a href='contrib_oav.html'> oav</a><br/> - <a href='contrib_obex.html'> obex</a><br/> - <a href='contrib_oddjob.html'> oddjob</a><br/> - <a href='contrib_oident.html'> oident</a><br/> - <a href='contrib_openca.html'> openca</a><br/> - <a href='contrib_openct.html'> openct</a><br/> - <a href='contrib_opendnssec.html'> opendnssec</a><br/> - <a href='contrib_openfortivpn.html'> openfortivpn</a><br/> - <a href='contrib_openhpi.html'> openhpi</a><br/> - <a href='contrib_openhpid.html'> openhpid</a><br/> - <a href='contrib_openshift.html'> openshift</a><br/> - <a href='contrib_openshift-origin.html'> openshift-origin</a><br/> - <a href='contrib_opensm.html'> opensm</a><br/> - <a href='contrib_openvpn.html'> openvpn</a><br/> - <a href='contrib_openvswitch.html'> openvswitch</a><br/> - <a href='contrib_openwsman.html'> openwsman</a><br/> - <a href='contrib_oracleasm.html'> oracleasm</a><br/> - <a href='contrib_osad.html'> osad</a><br/> - <a href='contrib_pacemaker.html'> pacemaker</a><br/> - <a href='contrib_pads.html'> pads</a><br/> - <a href='contrib_passenger.html'> passenger</a><br/> - <a href='contrib_pcmcia.html'> pcmcia</a><br/> - <a href='contrib_pcp.html'> pcp</a><br/> - <a href='contrib_pcscd.html'> pcscd</a><br/> - <a href='contrib_pdns.html'> pdns</a><br/> - <a href='contrib_pegasus.html'> pegasus</a><br/> - <a href='contrib_perdition.html'> perdition</a><br/> - <a href='contrib_pesign.html'> pesign</a><br/> - <a href='contrib_pingd.html'> pingd</a><br/> - <a href='contrib_piranha.html'> piranha</a><br/> - <a href='contrib_pkcs.html'> pkcs</a><br/> - <a href='contrib_pkcs11proxyd.html'> pkcs11proxyd</a><br/> - <a href='contrib_pki.html'> pki</a><br/> - <a href='contrib_plymouthd.html'> plymouthd</a><br/> - <a href='contrib_podsleuth.html'> podsleuth</a><br/> - <a href='contrib_policykit.html'> policykit</a><br/> - <a href='contrib_polipo.html'> polipo</a><br/> - <a href='contrib_portage.html'> portage</a><br/> - <a href='contrib_portmap.html'> portmap</a><br/> - <a href='contrib_portreserve.html'> portreserve</a><br/> - <a href='contrib_portslave.html'> portslave</a><br/> - <a href='contrib_postfix.html'> postfix</a><br/> - <a href='contrib_postfixpolicyd.html'> postfixpolicyd</a><br/> - <a href='contrib_postgrey.html'> postgrey</a><br/> - <a href='contrib_ppp.html'> ppp</a><br/> - <a href='contrib_prelink.html'> prelink</a><br/> - <a href='contrib_prelude.html'> prelude</a><br/> - <a href='contrib_privoxy.html'> privoxy</a><br/> - <a href='contrib_procmail.html'> procmail</a><br/> - <a href='contrib_prosody.html'> prosody</a><br/> - <a href='contrib_psad.html'> psad</a><br/> - <a href='contrib_ptchown.html'> ptchown</a><br/> - <a href='contrib_publicfile.html'> publicfile</a><br/> - <a href='contrib_pulseaudio.html'> pulseaudio</a><br/> - <a href='contrib_puppet.html'> puppet</a><br/> - <a href='contrib_pwauth.html'> pwauth</a><br/> - <a href='contrib_pxe.html'> pxe</a><br/> - <a href='contrib_pyzor.html'> pyzor</a><br/> - <a href='contrib_qemu.html'> qemu</a><br/> - <a href='contrib_qmail.html'> qmail</a><br/> - <a href='contrib_qpid.html'> qpid</a><br/> - <a href='contrib_quantum.html'> quantum</a><br/> - <a href='contrib_quota.html'> quota</a><br/> - <a href='contrib_rabbitmq.html'> rabbitmq</a><br/> - <a href='contrib_radius.html'> radius</a><br/> - <a href='contrib_radvd.html'> radvd</a><br/> - <a href='contrib_raid.html'> raid</a><br/> - <a href='contrib_rasdaemon.html'> rasdaemon</a><br/> - <a href='contrib_razor.html'> razor</a><br/> - <a href='contrib_rdisc.html'> rdisc</a><br/> - <a href='contrib_readahead.html'> readahead</a><br/> - <a href='contrib_realmd.html'> realmd</a><br/> - <a href='contrib_redis.html'> redis</a><br/> - <a href='contrib_remotelogin.html'> remotelogin</a><br/> - <a href='contrib_resmgr.html'> resmgr</a><br/> - <a href='contrib_rgmanager.html'> rgmanager</a><br/> - <a href='contrib_rhcs.html'> rhcs</a><br/> - <a href='contrib_rhev.html'> rhev</a><br/> - <a href='contrib_rhgb.html'> rhgb</a><br/> - <a href='contrib_rhnsd.html'> rhnsd</a><br/> - <a href='contrib_rhsmcertd.html'> rhsmcertd</a><br/> - <a href='contrib_ricci.html'> ricci</a><br/> - <a href='contrib_rkhunter.html'> rkhunter</a><br/> - <a href='contrib_rkt.html'> rkt</a><br/> - <a href='contrib_rlogin.html'> rlogin</a><br/> - <a href='contrib_rngd.html'> rngd</a><br/> - <a href='contrib_rolekit.html'> rolekit</a><br/> - <a href='contrib_roundup.html'> roundup</a><br/> - <a href='contrib_rpc.html'> rpc</a><br/> - <a href='contrib_rpcbind.html'> rpcbind</a><br/> - <a href='contrib_rpm.html'> rpm</a><br/> - <a href='contrib_rshd.html'> rshd</a><br/> - <a href='contrib_rssh.html'> rssh</a><br/> - <a href='contrib_rsync.html'> rsync</a><br/> - <a href='contrib_rtas.html'> rtas</a><br/> - <a href='contrib_rtkit.html'> rtkit</a><br/> - <a href='contrib_rwho.html'> rwho</a><br/> - <a href='contrib_samba.html'> samba</a><br/> - <a href='contrib_sambagui.html'> sambagui</a><br/> - <a href='contrib_samhain.html'> samhain</a><br/> - <a href='contrib_sandbox.html'> sandbox</a><br/> - <a href='contrib_sandboxX.html'> sandboxX</a><br/> - <a href='contrib_sanlock.html'> sanlock</a><br/> - <a href='contrib_sasl.html'> sasl</a><br/> - <a href='contrib_sbd.html'> sbd</a><br/> - <a href='contrib_sblim.html'> sblim</a><br/> - <a href='contrib_screen.html'> screen</a><br/> - <a href='contrib_sectoolm.html'> sectoolm</a><br/> - <a href='contrib_sendmail.html'> sendmail</a><br/> - <a href='contrib_sensord.html'> sensord</a><br/> - <a href='contrib_setroubleshoot.html'> setroubleshoot</a><br/> - <a href='contrib_sge.html'> sge</a><br/> - <a href='contrib_shorewall.html'> shorewall</a><br/> - <a href='contrib_shutdown.html'> shutdown</a><br/> - <a href='contrib_slocate.html'> slocate</a><br/> - <a href='contrib_slpd.html'> slpd</a><br/> - <a href='contrib_slrnpull.html'> slrnpull</a><br/> - <a href='contrib_smartmon.html'> smartmon</a><br/> - <a href='contrib_smokeping.html'> smokeping</a><br/> - <a href='contrib_smoltclient.html'> smoltclient</a><br/> - <a href='contrib_smsd.html'> smsd</a><br/> - <a href='contrib_smstools.html'> smstools</a><br/> - <a href='contrib_snapper.html'> snapper</a><br/> - <a href='contrib_snmp.html'> snmp</a><br/> - <a href='contrib_snort.html'> snort</a><br/> - <a href='contrib_sosreport.html'> sosreport</a><br/> - <a href='contrib_soundserver.html'> soundserver</a><br/> - <a href='contrib_spamassassin.html'> spamassassin</a><br/> - <a href='contrib_speech-dispatcher.html'> speech-dispatcher</a><br/> - <a href='contrib_speedtouch.html'> speedtouch</a><br/> - <a href='contrib_squid.html'> squid</a><br/> - <a href='contrib_sslh.html'> sslh</a><br/> - <a href='contrib_sssd.html'> sssd</a><br/> - <a href='contrib_stapserver.html'> stapserver</a><br/> - <a href='contrib_stunnel.html'> stunnel</a><br/> - <a href='contrib_svnserve.html'> svnserve</a><br/> - <a href='contrib_swift.html'> swift</a><br/> - <a href='contrib_swift_alias.html'> swift_alias</a><br/> - <a href='contrib_sxid.html'> sxid</a><br/> - <a href='contrib_sysstat.html'> sysstat</a><br/> - <a href='contrib_targetd.html'> targetd</a><br/> - <a href='contrib_tcpd.html'> tcpd</a><br/> - <a href='contrib_tcsd.html'> tcsd</a><br/> - <a href='contrib_telepathy.html'> telepathy</a><br/> - <a href='contrib_telnet.html'> telnet</a><br/> - <a href='contrib_tftp.html'> tftp</a><br/> - <a href='contrib_tgtd.html'> tgtd</a><br/> - <a href='contrib_thin.html'> thin</a><br/> - <a href='contrib_thumb.html'> thumb</a><br/> - <a href='contrib_thunderbird.html'> thunderbird</a><br/> - <a href='contrib_timidity.html'> timidity</a><br/> - <a href='contrib_tlp.html'> tlp</a><br/> - <a href='contrib_tmpreaper.html'> tmpreaper</a><br/> - <a href='contrib_tomcat.html'> tomcat</a><br/> - <a href='contrib_tor.html'> tor</a><br/> - <a href='contrib_transproxy.html'> transproxy</a><br/> - <a href='contrib_tripwire.html'> tripwire</a><br/> - <a href='contrib_tuned.html'> tuned</a><br/> - <a href='contrib_tvtime.html'> tvtime</a><br/> - <a href='contrib_tzdata.html'> tzdata</a><br/> - <a href='contrib_ucspitcp.html'> ucspitcp</a><br/> - <a href='contrib_udisks2.html'> udisks2</a><br/> - <a href='contrib_ulogd.html'> ulogd</a><br/> - <a href='contrib_uml.html'> uml</a><br/> - <a href='contrib_updfstab.html'> updfstab</a><br/> - <a href='contrib_uptime.html'> uptime</a><br/> - <a href='contrib_usbmodules.html'> usbmodules</a><br/> - <a href='contrib_usbmuxd.html'> usbmuxd</a><br/> - <a href='contrib_userhelper.html'> userhelper</a><br/> - <a href='contrib_usernetctl.html'> usernetctl</a><br/> - <a href='contrib_uucp.html'> uucp</a><br/> - <a href='contrib_uuidd.html'> uuidd</a><br/> - <a href='contrib_uwimap.html'> uwimap</a><br/> - <a href='contrib_varnishd.html'> varnishd</a><br/> - <a href='contrib_vbetool.html'> vbetool</a><br/> - <a href='contrib_vdagent.html'> vdagent</a><br/> - <a href='contrib_vhostmd.html'> vhostmd</a><br/> - <a href='contrib_virt.html'> virt</a><br/> - <a href='contrib_vlock.html'> vlock</a><br/> - <a href='contrib_vmtools.html'> vmtools</a><br/> - <a href='contrib_vmware.html'> vmware</a><br/> - <a href='contrib_vnstatd.html'> vnstatd</a><br/> - <a href='contrib_vpn.html'> vpn</a><br/> - <a href='contrib_w3c.html'> w3c</a><br/> - <a href='contrib_watchdog.html'> watchdog</a><br/> - <a href='contrib_wdmd.html'> wdmd</a><br/> - <a href='contrib_webadm.html'> webadm</a><br/> - <a href='contrib_webalizer.html'> webalizer</a><br/> - <a href='contrib_wine.html'> wine</a><br/> - <a href='contrib_wireshark.html'> wireshark</a><br/> - <a href='contrib_wm.html'> wm</a><br/> - <a href='contrib_xen.html'> xen</a><br/> - <a href='contrib_xfs.html'> xfs</a><br/> - <a href='contrib_xguest.html'> xguest</a><br/> - <a href='contrib_xprint.html'> xprint</a><br/> - <a href='contrib_xscreensaver.html'> xscreensaver</a><br/> - <a href='contrib_yam.html'> yam</a><br/> - <a href='contrib_zabbix.html'> zabbix</a><br/> - <a href='contrib_zarafa.html'> zarafa</a><br/> - <a href='contrib_zebra.html'> zebra</a><br/> - <a href='contrib_zoneminder.html'> zoneminder</a><br/> - <a href='contrib_zosremote.html'> zosremote</a><br/> </div> <a href="kernel.html">+ kernel</a></br/> <div id='subitem'> - <a href='kernel_corecommands.html'> corecommands</a><br/> - <a href='kernel_corenetwork.html'> corenetwork</a><br/> - <a href='kernel_devices.html'> devices</a><br/> - <a href='kernel_domain.html'> domain</a><br/> - <a href='kernel_files.html'> files</a><br/> - <a href='kernel_filesystem.html'> filesystem</a><br/> - <a href='kernel_kernel.html'> kernel</a><br/> - <a href='kernel_mcs.html'> mcs</a><br/> - <a href='kernel_mls.html'> mls</a><br/> - <a href='kernel_selinux.html'> selinux</a><br/> - <a href='kernel_storage.html'> storage</a><br/> - <a href='kernel_terminal.html'> terminal</a><br/> - <a href='kernel_ubac.html'> ubac</a><br/> - <a href='kernel_unlabelednet.html'> unlabelednet</a><br/> </div> <a href="roles.html">+ roles</a></br/> <div id='subitem'> - <a href='roles_auditadm.html'> auditadm</a><br/> - <a href='roles_logadm.html'> logadm</a><br/> - <a href='roles_secadm.html'> secadm</a><br/> - <a href='roles_staff.html'> staff</a><br/> - <a href='roles_sysadm.html'> sysadm</a><br/> - <a href='roles_sysadm_secadm.html'> sysadm_secadm</a><br/> - <a href='roles_unconfineduser.html'> unconfineduser</a><br/> - <a href='roles_unprivuser.html'> unprivuser</a><br/> </div> <a href="services.html">+ services</a></br/> <div id='subitem'> - <a href='services_postgresql.html'> postgresql</a><br/> - <a href='services_ssh.html'> ssh</a><br/> - <a href='services_xserver.html'> xserver</a><br/> </div> <a href="system.html">+ system</a></br/> <div id='subitem'> - <a href='system_application.html'> application</a><br/> - <a href='system_authlogin.html'> authlogin</a><br/> - <a href='system_clock.html'> clock</a><br/> - <a href='system_fstools.html'> fstools</a><br/> - <a href='system_getty.html'> getty</a><br/> - <a href='system_hostname.html'> hostname</a><br/> - <a href='system_hotplug.html'> hotplug</a><br/> - <a href='system_init.html'> init</a><br/> - <a href='system_ipsec.html'> ipsec</a><br/> - <a href='system_iptables.html'> iptables</a><br/> - <a href='system_kdbus.html'> kdbus</a><br/> - <a href='system_libraries.html'> libraries</a><br/> - <a href='system_locallogin.html'> locallogin</a><br/> - <a href='system_logging.html'> logging</a><br/> - <a href='system_lvm.html'> lvm</a><br/> - <a href='system_miscfiles.html'> miscfiles</a><br/> - <a href='system_modutils.html'> modutils</a><br/> - <a href='system_mount.html'> mount</a><br/> - <a href='system_netlabel.html'> netlabel</a><br/> - <a href='system_selinuxutil.html'> selinuxutil</a><br/> - <a href='system_setrans.html'> setrans</a><br/> - <a href='system_sysnetwork.html'> sysnetwork</a><br/> - <a href='system_systemd.html'> systemd</a><br/> - <a href='system_udev.html'> udev</a><br/> - <a href='system_unconfined.html'> unconfined</a><br/> - <a href='system_userdomain.html'> userdomain</a><br/> </div> <br/><p/> <a href="global_booleans.html">* Global Booleans </a> <br/><p/> <a href="global_tunables.html">* Global Tunables </a> <p/><br/><p/> <a href="index.html">* Layer Index</a> <br/><p/> <a href="booleans.html">* Boolean Index</a> <br/><p/> <a href="tunables.html">* Tunable Index</a> <br/><p/> <a href="interfaces.html">* Interface Index</a> <br/><p/> <a href="templates.html">* Template Index</a> </div> <div id="Content"> <h3>Master tunable index:</h3> <div id="interfacesmall"> Module: <a href='contrib_abrt.html#link_abrt_anon_write'> abrt</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> abrt_anon_write <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow ABRT to modify public files used for public file transfer services. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_abrt.html#link_abrt_handle_event'> abrt</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> abrt_handle_event <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether ABRT can run in the abrt_handle_event_t domain to handle ABRT event scripts. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_abrt.html#link_abrt_upload_watch_anon_write'> abrt</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> abrt_upload_watch_anon_write <small>(Default: true)</small> </div> <div id="description"> <p> </p><p> Determine whether abrt-handle-upload can modify public files used for public file transfer services in /var/spool/abrt-upload/. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_amavis.html#link_amavis_use_jit'> amavis</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> amavis_use_jit <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether amavis can use JIT compiler. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_antivirus.html#link_antivirus_can_scan_system'> antivirus</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> antivirus_can_scan_system <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow antivirus programs to read non security files on a system </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_antivirus.html#link_antivirus_use_jit'> antivirus</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> antivirus_use_jit <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether antivirus programs can use JIT compiler. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='system_authlogin.html#link_authlogin_nsswitch_use_ldap'> authlogin</a><p/> Layer: <a href='system.html'> system</a><p/> <div id="codeblock"> authlogin_nsswitch_use_ldap <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow users to resolve user passwd entries directly from ldap rather then using a sssd server </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='system_authlogin.html#link_authlogin_radius'> authlogin</a><p/> Layer: <a href='system.html'> system</a><p/> <div id="codeblock"> authlogin_radius <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow users to login using a radius server </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='system_authlogin.html#link_authlogin_yubikey'> authlogin</a><p/> Layer: <a href='system.html'> system</a><p/> <div id="codeblock"> authlogin_yubikey <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow users to login using a yubikey OTP server or challenge response mode </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_awstats.html#link_awstats_purge_apache_log_files'> awstats</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> awstats_purge_apache_log_files <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether awstats can purge httpd log files. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_boinc.html#link_boinc_execmem'> boinc</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> boinc_execmem <small>(Default: true)</small> </div> <div id="description"> <p> </p><p> Determine whether boinc can execmem/execstack. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_cdrecord.html#link_cdrecord_read_content'> cdrecord</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> cdrecord_read_content <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether cdrecord can read various content. nfs, samba, removable devices, user temp and untrusted content files </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_clamav.html#link_clamav_read_all_non_security_files_clamscan'> clamav</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> clamav_read_all_non_security_files_clamscan <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether clamscan can read all non-security files. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_clamav.html#link_clamav_read_user_content_files_clamscan'> clamav</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> clamav_read_user_content_files_clamscan <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether clamscan can read user content files. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_clamav.html#link_clamd_use_jit'> clamav</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> clamd_use_jit <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether clamd can use JIT compiler. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_rhcs.html#link_cluster_can_network_connect'> rhcs</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> cluster_can_network_connect <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow cluster administrative domains to connect to the network using TCP. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_rhcs.html#link_cluster_manage_all_files'> rhcs</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> cluster_manage_all_files <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow cluster administrative domains to manage all files on a system. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_rhcs.html#link_cluster_use_execmem'> rhcs</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> cluster_use_execmem <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow cluster administrative cluster domains memcheck-amd64- to use executable memory </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_cobbler.html#link_cobbler_anon_write'> cobbler</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> cobbler_anon_write <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether Cobbler can modify public files used for public file transfer services. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_cobbler.html#link_cobbler_can_network_connect'> cobbler</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> cobbler_can_network_connect <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether Cobbler can connect to the network using TCP. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_cobbler.html#link_cobbler_use_cifs'> cobbler</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> cobbler_use_cifs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether Cobbler can access cifs file systems. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_cobbler.html#link_cobbler_use_nfs'> cobbler</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> cobbler_use_nfs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether Cobbler can access nfs file systems. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_collectd.html#link_collectd_tcp_network_connect'> collectd</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> collectd_tcp_network_connect <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether collectd can connect to the network using TCP. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_condor.html#link_condor_tcp_network_connect'> condor</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> condor_tcp_network_connect <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether Condor can connect to the network using TCP. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_conman.html#link_conman_can_network'> conman</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> conman_can_network <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether conman can connect to all TCP ports </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_container.html#link_container_connect_any'> container</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> container_connect_any <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether container can connect to all TCP ports. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_cron.html#link_cron_can_relabel'> cron</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> cron_can_relabel <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow system cron jobs to relabel filesystem for restoring file contexts. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_cron.html#link_cron_system_cronjob_use_shares'> cron</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> cron_system_cronjob_use_shares <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow system cronjob to be executed on on NFS, CIFS or FUSE filesystem. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_cron.html#link_cron_userdomain_transition'> cron</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> cron_userdomain_transition <small>(Default: true)</small> </div> <div id="description"> <p> </p><p> Determine whether crond can execute jobs in the user domain as opposed to the the generic cronjob domain. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_cups.html#link_cups_execmem'> cups</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> cups_execmem <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow cups execmem/execstack </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_cvs.html#link_cvs_read_shadow'> cvs</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> cvs_read_shadow <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether cvs can read shadow password files. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='system_init.html#link_daemons_dump_core'> init</a><p/> Layer: <a href='system.html'> system</a><p/> <div id="codeblock"> daemons_dump_core <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow all daemons to write corefiles to / </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='system_init.html#link_daemons_enable_cluster_mode'> init</a><p/> Layer: <a href='system.html'> system</a><p/> <div id="codeblock"> daemons_enable_cluster_mode <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Enable cluster mode for daemons. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='system_init.html#link_daemons_use_tcp_wrapper'> init</a><p/> Layer: <a href='system.html'> system</a><p/> <div id="codeblock"> daemons_use_tcp_wrapper <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow all daemons to use tcp wrappers. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='system_init.html#link_daemons_use_tty'> init</a><p/> Layer: <a href='system.html'> system</a><p/> <div id="codeblock"> daemons_use_tty <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow all daemons the ability to read/write terminals </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_dbadm.html#link_dbadm_manage_user_files'> dbadm</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> dbadm_manage_user_files <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether dbadm can manage generic user files. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_dbadm.html#link_dbadm_read_user_files'> dbadm</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> dbadm_read_user_files <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether dbadm can read generic user files. </p><p> </p> </div> </div> <div id="interfacesmall"> Global <div id="codeblock"> deny_execmem <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Deny user domains applications to map a memory region as both executable and writable, this is dangerous and the executable should be reported in bugzilla </p><p> </p> </div> </div> <div id="interfacesmall"> Global <div id="codeblock"> deny_ptrace <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Deny any process from ptracing or debugging any other processes. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='system_sysnetwork.html#link_dhcpc_exec_iptables'> sysnetwork</a><p/> Layer: <a href='system.html'> system</a><p/> <div id="codeblock"> dhcpc_exec_iptables <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow dhcpc client applications to execute iptables commands </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_dhcp.html#link_dhcpd_use_ldap'> dhcp</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> dhcpd_use_ldap <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether DHCP daemon can use LDAP backends. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='kernel_domain.html#link_domain_fd_use'> domain</a><p/> Layer: <a href='kernel.html'> kernel</a><p/> <div id="codeblock"> domain_fd_use <small>(Default: true)</small> </div> <div id="description"> <p> </p><p> Allow all domains to use other domains file descriptors </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='kernel_domain.html#link_domain_kernel_load_modules'> domain</a><p/> Layer: <a href='kernel.html'> kernel</a><p/> <div id="codeblock"> domain_kernel_load_modules <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow all domains to have the kernel load modules </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_entropyd.html#link_entropyd_use_audio'> entropyd</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> entropyd_use_audio <small>(Default: true)</small> </div> <div id="description"> <p> </p><p> Determine whether entropyd can use audio devices as the source for the entropy feeds. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_exim.html#link_exim_can_connect_db'> exim</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> exim_can_connect_db <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether exim can connect to databases. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_exim.html#link_exim_manage_user_files'> exim</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> exim_manage_user_files <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether exim can create, read, write, and delete generic user content files. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_exim.html#link_exim_read_user_files'> exim</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> exim_read_user_files <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether exim can read generic user content files. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_cron.html#link_fcron_crond'> cron</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> fcron_crond <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Enable extra rules in the cron domain to support fcron. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_rhcs.html#link_fenced_can_network_connect'> rhcs</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> fenced_can_network_connect <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether fenced can connect to the TCP network. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_rhcs.html#link_fenced_can_ssh'> rhcs</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> fenced_can_ssh <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether fenced can use ssh. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='kernel_domain.html#link_fips_mode'> domain</a><p/> Layer: <a href='kernel.html'> kernel</a><p/> <div id="codeblock"> fips_mode <small>(Default: true)</small> </div> <div id="description"> <p> </p><p> Allow all domains to execute in fips_mode </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_ftp.html#link_ftpd_anon_write'> ftp</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> ftpd_anon_write <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether ftpd can modify public files used for public file transfer services. Directories/Files must be labeled public_content_rw_t. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_ftp.html#link_ftpd_connect_all_unreserved'> ftp</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> ftpd_connect_all_unreserved <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether ftpd can connect to all unreserved ports. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_ftp.html#link_ftpd_connect_db'> ftp</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> ftpd_connect_db <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether ftpd can connect to databases over the TCP network. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_ftp.html#link_ftpd_full_access'> ftp</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> ftpd_full_access <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether ftpd can login to local users and can read and write all files on the system, governed by DAC. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_ftp.html#link_ftpd_use_cifs'> ftp</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> ftpd_use_cifs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether ftpd can use CIFS used for public file transfer services. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_ftp.html#link_ftpd_use_fusefs'> ftp</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> ftpd_use_fusefs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow ftpd to use ntfs/fusefs volumes. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_ftp.html#link_ftpd_use_nfs'> ftp</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> ftpd_use_nfs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether ftpd can use NFS used for public file transfer services. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_ftp.html#link_ftpd_use_passive_mode'> ftp</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> ftpd_use_passive_mode <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether ftpd can bind to all unreserved ports for passive mode. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_git.html#link_git_cgi_enable_homedirs'> git</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> git_cgi_enable_homedirs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether Git CGI can search home directories. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_git.html#link_git_cgi_use_cifs'> git</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> git_cgi_use_cifs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether Git CGI can access cifs file systems. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_git.html#link_git_cgi_use_nfs'> git</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> git_cgi_use_nfs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether Git CGI can access nfs file systems. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_git.html#link_git_session_bind_all_unreserved_ports'> git</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> git_session_bind_all_unreserved_ports <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether Git session daemon can bind TCP sockets to all unreserved ports. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_git.html#link_git_session_users'> git</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> git_session_users <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether calling user domains can execute Git daemon in the git_session_t domain. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_git.html#link_git_system_enable_homedirs'> git</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> git_system_enable_homedirs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether Git system daemon can search home directories. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_git.html#link_git_system_use_cifs'> git</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> git_system_use_cifs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether Git system daemon can access cifs file systems. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_git.html#link_git_system_use_nfs'> git</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> git_system_use_nfs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether Git system daemon can access nfs file systems. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_gitosis.html#link_gitosis_can_sendmail'> gitosis</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> gitosis_can_sendmail <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether Gitosis can send mail. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_glance.html#link_glance_api_can_network'> glance</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> glance_api_can_network <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether glance-api can connect to all TCP ports </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_glance.html#link_glance_use_execmem'> glance</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> glance_use_execmem <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow glance domain to use executable memory and executable stack </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_glance.html#link_glance_use_fusefs'> glance</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> glance_use_fusefs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow glance domain to manage fuse files </p><p> </p> </div> </div> <div id="interfacesmall"> Global <div id="codeblock"> global_ssp <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Enable reading of urandom for all domains. </p><p> </p><p> This should be enabled when all programs are compiled with ProPolice/SSP stack smashing protection. All domains will be allowed to read from /dev/urandom. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_glusterd.html#link_gluster_anon_write'> glusterd</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> gluster_anon_write <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow glusterfsd to modify public files used for public file transfer services. Files/Directories must be labeled public_content_rw_t. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_glusterd.html#link_gluster_export_all_ro'> glusterd</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> gluster_export_all_ro <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow glusterfsd to share any file/directory read only. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_glusterd.html#link_gluster_export_all_rw'> glusterd</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> gluster_export_all_rw <small>(Default: true)</small> </div> <div id="description"> <p> </p><p> Allow glusterfsd to share any file/directory read/write. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_gpg.html#link_gpg_web_anon_write'> gpg</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> gpg_web_anon_write <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow gpg web domain to modify public files used for public file transfer services. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_rpc.html#link_gssd_read_tmp'> rpc</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> gssd_read_tmp <small>(Default: true)</small> </div> <div id="description"> <p> </p><p> Allow gssd to list tmp directories and read the kerberos credential cache. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_rhcs.html#link_haproxy_connect_any'> rhcs</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> haproxy_connect_any <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether haproxy can connect to all TCP ports. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_anon_write'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_anon_write <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow Apache to modify public files used for public file transfer services. Directories/Files must be labeled public_content_rw_t. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_builtin_scripting'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_builtin_scripting <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow httpd to use built in scripting (usually php) </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_can_check_spam'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_can_check_spam <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow http daemon to check spam </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_can_connect_ftp'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_can_connect_ftp <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow httpd to act as a FTP client connecting to the ftp port and ephemeral ports </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_can_connect_ldap'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_can_connect_ldap <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow httpd to connect to the ldap port </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_can_connect_mythtv'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_can_connect_mythtv <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow http daemon to connect to mythtv </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_can_connect_zabbix'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_can_connect_zabbix <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow http daemon to connect to zabbix </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_can_network_connect'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_can_network_connect <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow HTTPD scripts and modules to connect to the network using TCP. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_can_network_connect_cobbler'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_can_network_connect_cobbler <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow HTTPD scripts and modules to connect to cobbler over the network. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_can_network_connect_db'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_can_network_connect_db <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow HTTPD scripts and modules to connect to databases over the network. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_can_network_memcache'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_can_network_memcache <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow httpd to connect to memcache server </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_can_network_relay'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_can_network_relay <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow httpd to act as a relay </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_can_sendmail'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_can_sendmail <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow http daemon to send mail </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_dbus_avahi'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_dbus_avahi <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow Apache to communicate with avahi service via dbus </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_dbus_sssd'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_dbus_sssd <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow Apache to communicate with sssd service via dbus </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_dontaudit_search_dirs'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_dontaudit_search_dirs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Dontaudit Apache to search dirs. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_enable_cgi'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_enable_cgi <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow httpd cgi support </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_enable_ftp_server'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_enable_ftp_server <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow httpd to act as a FTP server by listening on the ftp port. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_enable_homedirs'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_enable_homedirs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow httpd to read home directories </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_execmem'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_execmem <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow httpd scripts and modules execmem/execstack </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_graceful_shutdown'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_graceful_shutdown <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow HTTPD to connect to port 80 for graceful shutdown </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_manage_ipa'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_manage_ipa <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow httpd processes to manage IPA content </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_mod_auth_ntlm_winbind'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_mod_auth_ntlm_winbind <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow Apache to use mod_auth_ntlm_winbind </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_mod_auth_pam'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_mod_auth_pam <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow Apache to use mod_auth_pam </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_read_user_content'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_read_user_content <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow httpd to read user content </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_run_ipa'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_run_ipa <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow httpd processes to run IPA helper. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_run_preupgrade'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_run_preupgrade <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow Apache to run preupgrade </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_run_stickshift'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_run_stickshift <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow Apache to run in stickshift mode, not transition to passenger </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_serve_cobbler_files'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_serve_cobbler_files <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow HTTPD scripts and modules to server cobbler files. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_setrlimit'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_setrlimit <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow httpd daemon to change its resource limits </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_ssi_exec'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_ssi_exec <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow HTTPD to run SSI executables in the same domain as system CGI scripts. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_sys_script_anon_write'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_sys_script_anon_write <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow apache scripts to write to public content, directories/files must be labeled public_rw_content_t. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_tmp_exec'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_tmp_exec <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow Apache to execute tmp content. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_tty_comm'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_tty_comm <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Unify HTTPD to communicate with the terminal. Needed for entering the passphrase for certificates at the terminal. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_unified'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_unified <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Unify HTTPD handling of all content files. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_use_cifs'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_use_cifs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow httpd to access cifs file systems </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_use_fusefs'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_use_fusefs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow httpd to access FUSE file systems </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_use_gpg'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_use_gpg <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow httpd to run gpg </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_use_nfs'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_use_nfs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow httpd to access nfs file systems </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_use_openstack'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_use_openstack <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow httpd to access openstack ports </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_use_sasl'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_use_sasl <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow httpd to connect to sasl </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_apache.html#link_httpd_verify_dns'> apache</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> httpd_verify_dns <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow Apache to query NS records </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_icecast.html#link_icecast_use_any_tcp_ports'> icecast</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> icecast_use_any_tcp_ports <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether icecast can listen on and connect to any TCP port. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_irc.html#link_irc_use_any_tcp_ports'> irc</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> irc_use_any_tcp_ports <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether irc clients can listen on and connect to any unreserved TCP ports. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_irc.html#link_irssi_use_full_network'> irc</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> irssi_use_full_network <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow the Irssi IRC Client to connect to any port, and to bind to any unreserved port. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_java.html#link_java_execstack'> java</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> java_execstack <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether java can make its stack executable. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_kdumpgui.html#link_kdumpgui_run_bootloader'> kdumpgui</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> kdumpgui_run_bootloader <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow s-c-kdump to run bootloader in bootloader_t. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_kerberos.html#link_kerberos_enabled'> kerberos</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> kerberos_enabled <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow confined applications to run with kerberos. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_ksmtuned.html#link_ksmtuned_use_cifs'> ksmtuned</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> ksmtuned_use_cifs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow ksmtuned to use cifs/Samba file systems </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_ksmtuned.html#link_ksmtuned_use_nfs'> ksmtuned</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> ksmtuned_use_nfs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow ksmtuned to use nfs file systems </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='system_logging.html#link_logging_syslogd_can_sendmail'> logging</a><p/> Layer: <a href='system.html'> system</a><p/> <div id="codeblock"> logging_syslogd_can_sendmail <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow syslogd daemon to send mail </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='system_logging.html#link_logging_syslogd_run_nagios_plugins'> logging</a><p/> Layer: <a href='system.html'> system</a><p/> <div id="codeblock"> logging_syslogd_run_nagios_plugins <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow syslogd the ability to call nagios plugins. It is turned on by omprog rsyslog plugin. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='system_logging.html#link_logging_syslogd_use_tty'> logging</a><p/> Layer: <a href='system.html'> system</a><p/> <div id="codeblock"> logging_syslogd_use_tty <small>(Default: true)</small> </div> <div id="description"> <p> </p><p> Allow syslogd the ability to read/write terminals </p><p> </p> </div> </div> <div id="interfacesmall"> Global <div id="codeblock"> login_console_enabled <small>(Default: true)</small> </div> <div id="description"> <p> </p><p> Allow logging in and using the system from /dev/console. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_logrotate.html#link_logrotate_read_inside_containers'> logrotate</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> logrotate_read_inside_containers <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow logrotate to read logs inside </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_logrotate.html#link_logrotate_use_nfs'> logrotate</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> logrotate_use_nfs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow logrotate to manage nfs files </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_logwatch.html#link_logwatch_can_network_connect_mail'> logwatch</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> logwatch_can_network_connect_mail <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether logwatch can connect to mail over the network. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_lsm.html#link_lsmd_plugin_connect_any'> lsm</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> lsmd_plugin_connect_any <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether lsmd_plugin can connect to all TCP ports. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_mailman.html#link_mailman_use_fusefs'> mailman</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> mailman_use_fusefs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow mailman to access FUSE file systems </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_mcelog.html#link_mcelog_client'> mcelog</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> mcelog_client <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether mcelog supports client mode. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_mcelog.html#link_mcelog_exec_scripts'> mcelog</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> mcelog_exec_scripts <small>(Default: true)</small> </div> <div id="description"> <p> </p><p> Determine whether mcelog can execute scripts. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_mcelog.html#link_mcelog_foreground'> mcelog</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> mcelog_foreground <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether mcelog can use all the user ttys. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_mcelog.html#link_mcelog_server'> mcelog</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> mcelog_server <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether mcelog supports server mode. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_minidlna.html#link_minidlna_read_generic_user_content'> minidlna</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> minidlna_read_generic_user_content <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether minidlna can read generic user content. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='kernel_domain.html#link_mmap_low_allowed'> domain</a><p/> Layer: <a href='kernel.html'> kernel</a><p/> <div id="codeblock"> mmap_low_allowed <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Control the ability to mmap a low area of the address space, as configured by /proc/sys/vm/mmap_min_addr. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_mock.html#link_mock_enable_homedirs'> mock</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> mock_enable_homedirs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow mock to read files in home directories. </p><p> </p> </div> </div> <div id="interfacesmall"> Global <div id="codeblock"> mount_anyfile <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow the mount commands to mount any directory or file. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_mozilla.html#link_mozilla_plugin_bind_unreserved_ports'> mozilla</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> mozilla_plugin_bind_unreserved_ports <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow mozilla plugin domain to bind unreserved tcp/udp ports. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_mozilla.html#link_mozilla_plugin_can_network_connect'> mozilla</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> mozilla_plugin_can_network_connect <small>(Default: true)</small> </div> <div id="description"> <p> </p><p> Allow mozilla plugin domain to connect to the network using TCP. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_mozilla.html#link_mozilla_plugin_use_bluejeans'> mozilla</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> mozilla_plugin_use_bluejeans <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow mozilla plugin to use Bluejeans. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_mozilla.html#link_mozilla_plugin_use_gps'> mozilla</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> mozilla_plugin_use_gps <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow mozilla plugin to support GPS. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_mozilla.html#link_mozilla_plugin_use_spice'> mozilla</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> mozilla_plugin_use_spice <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow mozilla plugin to support spice protocols. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_mozilla.html#link_mozilla_read_content'> mozilla</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> mozilla_read_content <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow confined web browsers to read home directory content </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_mpd.html#link_mpd_enable_homedirs'> mpd</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> mpd_enable_homedirs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether mpd can traverse user home directories. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_mpd.html#link_mpd_use_cifs'> mpd</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> mpd_use_cifs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether mpd can use cifs file systems. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_mpd.html#link_mpd_use_nfs'> mpd</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> mpd_use_nfs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether mpd can use nfs file systems. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_mplayer.html#link_mplayer_execstack'> mplayer</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> mplayer_execstack <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether mplayer can make its stack executable. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_mysql.html#link_mysql_connect_any'> mysql</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> mysql_connect_any <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow mysqld to connect to all ports </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_mysql.html#link_mysql_connect_http'> mysql</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> mysql_connect_http <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow mysqld to connect to http port </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_nagios.html#link_nagios_run_pnp4nagios'> nagios</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> nagios_run_pnp4nagios <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow nagios run in conjunction with PNP4Nagios. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_nagios.html#link_nagios_run_sudo'> nagios</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> nagios_run_sudo <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow nagios/nrpe to call sudo from NRPE utils scripts. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_bind.html#link_named_tcp_bind_http_port'> bind</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> named_tcp_bind_http_port <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether Bind can bind tcp socket to http ports. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_bind.html#link_named_write_master_zones'> bind</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> named_write_master_zones <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether Bind can write to master zone files. Generally this is used for dynamic DNS or zone transfers. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_quantum.html#link_neutron_can_network'> quantum</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> neutron_can_network <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether neutron can connect to all TCP ports </p><p> </p> </div> </div> <div id="interfacesmall"> Global <div id="codeblock"> nfs_export_all_ro <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow any files/directories to be exported read/only via NFS. </p><p> </p> </div> </div> <div id="interfacesmall"> Global <div id="codeblock"> nfs_export_all_rw <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow any files/directories to be exported read/write via NFS. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_rpc.html#link_nfsd_anon_write'> rpc</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> nfsd_anon_write <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow nfs servers to modify public files used for public file transfer services. Files/Directories must be labeled public_content_rw_t. </p><p> </p> </div> </div> <div id="interfacesmall"> Global <div id="codeblock"> nis_enabled <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow system to run with NIS </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_nscd.html#link_nscd_use_shm'> nscd</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> nscd_use_shm <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow confined applications to use nscd shared memory. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_nsplugin.html#link_nsplugin_can_network'> nsplugin</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> nsplugin_can_network <small>(Default: true)</small> </div> <div id="description"> <p> </p><p> Allow nsplugin code to connect to unreserved ports </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_nsplugin.html#link_nsplugin_execmem'> nsplugin</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> nsplugin_execmem <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow nsplugin code to execmem/execstack </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_openshift.html#link_openshift_use_nfs'> openshift</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> openshift_use_nfs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow openshift to access nfs file systems without labels </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_openvpn.html#link_openvpn_can_network_connect'> openvpn</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> openvpn_can_network_connect <small>(Default: true)</small> </div> <div id="description"> <p> </p><p> Determine whether openvpn can connect to the TCP network. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_openvpn.html#link_openvpn_enable_homedirs'> openvpn</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> openvpn_enable_homedirs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether openvpn can read generic user home content files. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_openvpn.html#link_openvpn_run_unconfined'> openvpn</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> openvpn_run_unconfined <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow openvpn to run unconfined scripts </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_pacemaker.html#link_pacemaker_use_execmem'> pacemaker</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> pacemaker_use_execmem <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow pacemaker memcheck-amd64- to use executable memory </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_pcp.html#link_pcp_bind_all_unreserved_ports'> pcp</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> pcp_bind_all_unreserved_ports <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow pcp to bind to all unreserved_ports </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_pcp.html#link_pcp_read_generic_logs'> pcp</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> pcp_read_generic_logs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow pcp to read generic logs </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_pdns.html#link_pdns_can_network_connect_db'> pdns</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> pdns_can_network_connect_db <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow PowerDNS to connect to databases over the network. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_piranha.html#link_piranha_lvs_can_network_connect'> piranha</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> piranha_lvs_can_network_connect <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow piranha-lvs domain to connect to the network using TCP. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_polipo.html#link_polipo_connect_all_unreserved'> polipo</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> polipo_connect_all_unreserved <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow polipo to connect to all ports > 1023 </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_polipo.html#link_polipo_session_bind_all_unreserved_ports'> polipo</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> polipo_session_bind_all_unreserved_ports <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether Polipo session daemon can bind tcp sockets to all unreserved ports. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_polipo.html#link_polipo_session_users'> polipo</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> polipo_session_users <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether calling user domains can execute Polipo daemon in the polipo_session_t domain. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_polipo.html#link_polipo_use_cifs'> polipo</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> polipo_use_cifs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether polipo can access cifs file systems. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_polipo.html#link_polipo_use_nfs'> polipo</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> polipo_use_nfs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether Polipo can access nfs file systems. </p><p> </p> </div> </div> <div id="interfacesmall"> Global <div id="codeblock"> polyinstantiation_enabled <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Enable polyinstantiated directory support. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_portage.html#link_portage_use_nfs'> portage</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> portage_use_nfs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether portage can use nfs filesystems. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_postfix.html#link_postfix_local_write_mail_spool'> postfix</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> postfix_local_write_mail_spool <small>(Default: true)</small> </div> <div id="description"> <p> </p><p> Allow postfix_local domain full write access to mail_spool directories </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='services_postgresql.html#link_postgresql_can_rsync'> postgresql</a><p/> Layer: <a href='services.html'> services</a><p/> <div id="codeblock"> postgresql_can_rsync <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow postgresql to use ssh and rsync for point-in-time recovery </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='services_postgresql.html#link_postgresql_selinux_transmit_client_label'> postgresql</a><p/> Layer: <a href='services.html'> services</a><p/> <div id="codeblock"> postgresql_selinux_transmit_client_label <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow transmit client label to foreign database </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='services_postgresql.html#link_postgresql_selinux_unconfined_dbadm'> postgresql</a><p/> Layer: <a href='services.html'> services</a><p/> <div id="codeblock"> postgresql_selinux_unconfined_dbadm <small>(Default: true)</small> </div> <div id="description"> <p> </p><p> Allow database admins to execute DML statement </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='services_postgresql.html#link_postgresql_selinux_users_ddl'> postgresql</a><p/> Layer: <a href='services.html'> services</a><p/> <div id="codeblock"> postgresql_selinux_users_ddl <small>(Default: true)</small> </div> <div id="description"> <p> </p><p> Allow unprivileged users to execute DDL statement </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_ppp.html#link_pppd_can_insmod'> ppp</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> pppd_can_insmod <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow pppd to load kernel modules for certain modems </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_ppp.html#link_pppd_for_user'> ppp</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> pppd_for_user <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow pppd to be run for a regular user </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_privoxy.html#link_privoxy_connect_any'> privoxy</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> privoxy_connect_any <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether privoxy can connect to all tcp ports. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_prosody.html#link_prosody_bind_http_port'> prosody</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> prosody_bind_http_port <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Permit to prosody to bind apache port. Need to be activated to use BOSH. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_puppet.html#link_puppetagent_manage_all_files'> puppet</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> puppetagent_manage_all_files <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow Puppet client to manage all file types. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_puppet.html#link_puppetmaster_use_db'> puppet</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> puppetmaster_use_db <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow Puppet master to use connect to MySQL and PostgreSQL database </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_qemu.html#link_qemu_full_network'> qemu</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> qemu_full_network <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow qemu to connect fully to the network </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_qemu.html#link_qemu_use_cifs'> qemu</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> qemu_use_cifs <small>(Default: true)</small> </div> <div id="description"> <p> </p><p> Allow qemu to use cifs/Samba file systems </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_qemu.html#link_qemu_use_comm'> qemu</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> qemu_use_comm <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow qemu to use serial/parallel communication ports </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_qemu.html#link_qemu_use_nfs'> qemu</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> qemu_use_nfs <small>(Default: true)</small> </div> <div id="description"> <p> </p><p> Allow qemu to use nfs file systems </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_qemu.html#link_qemu_use_usb'> qemu</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> qemu_use_usb <small>(Default: true)</small> </div> <div id="description"> <p> </p><p> Allow qemu to use usb devices </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='system_ipsec.html#link_racoon_read_shadow'> ipsec</a><p/> Layer: <a href='system.html'> system</a><p/> <div id="codeblock"> racoon_read_shadow <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow racoon to read shadow </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_rgmanager.html#link_rgmanager_can_network_connect'> rgmanager</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> rgmanager_can_network_connect <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow rgmanager domain to connect to the network using TCP. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_rpc.html#link_rpcd_use_fusefs'> rpc</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> rpcd_use_fusefs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow rpcd_t to manage fuse files </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_rsync.html#link_rsync_anon_write'> rsync</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> rsync_anon_write <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow rsync to modify public files used for public file transfer services. Files/Directories must be labeled public_content_rw_t. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_rsync.html#link_rsync_client'> rsync</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> rsync_client <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow rsync to run as a client </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_rsync.html#link_rsync_export_all_ro'> rsync</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> rsync_export_all_ro <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow rsync to export any files/directories read only. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_rsync.html#link_rsync_full_access'> rsync</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> rsync_full_access <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow rsync server to manage all files/directories on the system. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_samba.html#link_samba_create_home_dirs'> samba</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> samba_create_home_dirs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow samba to create new home directories (e.g. via PAM) </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_samba.html#link_samba_domain_controller'> samba</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> samba_domain_controller <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow samba to act as the domain controller, add users, groups and change passwords. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_samba.html#link_samba_enable_home_dirs'> samba</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> samba_enable_home_dirs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow samba to share users home directories. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_samba.html#link_samba_export_all_ro'> samba</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> samba_export_all_ro <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow samba to share any file/directory read only. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_samba.html#link_samba_export_all_rw'> samba</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> samba_export_all_rw <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow samba to share any file/directory read/write. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_samba.html#link_samba_load_libgfapi'> samba</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> samba_load_libgfapi <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow smbd to load libgfapi from gluster. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_samba.html#link_samba_portmapper'> samba</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> samba_portmapper <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow samba to act as a portmapper </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_samba.html#link_samba_run_unconfined'> samba</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> samba_run_unconfined <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow samba to run unconfined scripts </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_samba.html#link_samba_share_fusefs'> samba</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> samba_share_fusefs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow samba to export ntfs/fusefs volumes. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_samba.html#link_samba_share_nfs'> samba</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> samba_share_nfs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow samba to export NFS volumes. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_sanlock.html#link_sanlock_use_fusefs'> sanlock</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> sanlock_use_fusefs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow sanlock to read/write fuse files </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_sanlock.html#link_sanlock_use_nfs'> sanlock</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> sanlock_use_nfs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow sanlock to manage nfs files </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_sanlock.html#link_sanlock_use_samba'> sanlock</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> sanlock_use_samba <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow sanlock to manage cifs files </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_sasl.html#link_saslauthd_read_shadow'> sasl</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> saslauthd_read_shadow <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow sasl to read shadow </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='services_xserver.html#link_selinuxuser_direct_dri_enabled'> xserver</a><p/> Layer: <a href='services.html'> services</a><p/> <div id="codeblock"> selinuxuser_direct_dri_enabled <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow regular users direct dri device access </p><p> </p> </div> </div> <div id="interfacesmall"> Global <div id="codeblock"> selinuxuser_execheap <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow unconfined executables to make their heap memory executable. Doing this is a really bad idea. Probably indicates a badly coded executable, but could indicate an attack. This executable should be reported in bugzilla </p><p> </p> </div> </div> <div id="interfacesmall"> Global <div id="codeblock"> selinuxuser_execmod <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow all unconfined executables to use libraries requiring text relocation that are not labeled textrel_shlib_t </p><p> </p> </div> </div> <div id="interfacesmall"> Global <div id="codeblock"> selinuxuser_execstack <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow unconfined executables to make their stack executable. This should never, ever be necessary. Probably indicates a badly coded executable, but could indicate an attack. This executable should be reported in bugzilla </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='system_userdomain.html#link_selinuxuser_mysql_connect_enabled'> userdomain</a><p/> Layer: <a href='system.html'> system</a><p/> <div id="codeblock"> selinuxuser_mysql_connect_enabled <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow users to connect to the local mysql server </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='admin_netutils.html#link_selinuxuser_ping'> netutils</a><p/> Layer: <a href='admin.html'> admin</a><p/> <div id="codeblock"> selinuxuser_ping <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow confined users the ability to execute the ping and traceroute commands. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='system_userdomain.html#link_selinuxuser_postgresql_connect_enabled'> userdomain</a><p/> Layer: <a href='system.html'> system</a><p/> <div id="codeblock"> selinuxuser_postgresql_connect_enabled <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow users to connect to PostgreSQL </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='system_userdomain.html#link_selinuxuser_rw_noexattrfile'> userdomain</a><p/> Layer: <a href='system.html'> system</a><p/> <div id="codeblock"> selinuxuser_rw_noexattrfile <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow user to r/w files on filesystems that do not have extended attributes (FAT, CDROM, FLOPPY) </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='system_userdomain.html#link_selinuxuser_share_music'> userdomain</a><p/> Layer: <a href='system.html'> system</a><p/> <div id="codeblock"> selinuxuser_share_music <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow user music sharing </p><p> </p> </div> </div> <div id="interfacesmall"> Global <div id="codeblock"> selinuxuser_tcp_server <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow users to run TCP servers (bind to ports and accept connection from the same domain and outside users) disabling this forces FTP passive mode and may change other protocols. </p><p> </p> </div> </div> <div id="interfacesmall"> Global <div id="codeblock"> selinuxuser_udp_server <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow users to run UDP servers (bind to ports and accept connection from the same domain and outside users) disabling this may break avahi discovering services on the network and other udp related services. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='system_userdomain.html#link_selinuxuser_use_ssh_chroot'> userdomain</a><p/> Layer: <a href='system.html'> system</a><p/> <div id="codeblock"> selinuxuser_use_ssh_chroot <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow user to use ssh chroot environment. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_sge.html#link_sge_domain_can_network_connect'> sge</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> sge_domain_can_network_connect <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow sge to connect to the network using any TCP port </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_sge.html#link_sge_use_nfs'> sge</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> sge_use_nfs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow sge to access nfs file systems. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_smartmon.html#link_smartmon_3ware'> smartmon</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> smartmon_3ware <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether smartmon can support devices on 3ware controllers. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_samba.html#link_smbd_anon_write'> samba</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> smbd_anon_write <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow samba to modify public files used for public file transfer services. Files/Directories must be labeled public_content_rw_t. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_spamassassin.html#link_spamassassin_can_network'> spamassassin</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> spamassassin_can_network <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow user spamassassin clients to use the network. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_spamassassin.html#link_spamd_enable_home_dirs'> spamassassin</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> spamd_enable_home_dirs <small>(Default: true)</small> </div> <div id="description"> <p> </p><p> Allow spamd to read/write user home directories. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_spamassassin.html#link_spamd_update_can_network'> spamassassin</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> spamd_update_can_network <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow spamd_update to connect to all ports. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_squid.html#link_squid_connect_any'> squid</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> squid_connect_any <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether squid can connect to all TCP ports. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_squid.html#link_squid_use_tproxy'> squid</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> squid_use_tproxy <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether squid can run as a transparent proxy. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='services_ssh.html#link_ssh_chroot_rw_homedirs'> ssh</a><p/> Layer: <a href='services.html'> services</a><p/> <div id="codeblock"> ssh_chroot_rw_homedirs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow ssh with chroot env to read and write files in the user home directories </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='services_ssh.html#link_ssh_keysign'> ssh</a><p/> Layer: <a href='services.html'> services</a><p/> <div id="codeblock"> ssh_keysign <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> allow host key based authentication </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='services_ssh.html#link_ssh_sysadm_login'> ssh</a><p/> Layer: <a href='services.html'> services</a><p/> <div id="codeblock"> ssh_sysadm_login <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow ssh logins as sysadm_r:sysadm_t </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_sslh.html#link_sslh_can_bind_any_port'> sslh</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> sslh_can_bind_any_port <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether sslh can listen on any tcp port or if it is restricted to the standard http. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_sslh.html#link_sslh_can_connect_any_port'> sslh</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> sslh_can_connect_any_port <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether sslh can connect to any tcp port or if it is restricted to the standard http, openvpn and jabber ports. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='roles_staff.html#link_staff_use_svirt'> staff</a><p/> Layer: <a href='roles.html'> roles</a><p/> <div id="codeblock"> staff_use_svirt <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> allow staff user to create and transition to svirt domains. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_swift.html#link_swift_can_network'> swift</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> swift_can_network <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether swift can connect to all TCP ports </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_telepathy.html#link_telepathy_connect_all_ports'> telepathy</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> telepathy_connect_all_ports <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow the Telepathy connection managers to connect to any network port. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_telepathy.html#link_telepathy_tcp_connect_generic_network_ports'> telepathy</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> telepathy_tcp_connect_generic_network_ports <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow the Telepathy connection managers to connect to any generic TCP port. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_tftp.html#link_tftp_anon_write'> tftp</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> tftp_anon_write <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow tftp to modify public files used for public file transfer services. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_tftp.html#link_tftp_home_dir'> tftp</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> tftp_home_dir <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow tftp to read and write files in the user home directories </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_tmpreaper.html#link_tmpreaper_use_cifs'> tmpreaper</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> tmpreaper_use_cifs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether tmpreaper can use cifs file systems. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_tmpreaper.html#link_tmpreaper_use_nfs'> tmpreaper</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> tmpreaper_use_nfs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether tmpreaper can use nfs file systems. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_tmpreaper.html#link_tmpreaper_use_samba'> tmpreaper</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> tmpreaper_use_samba <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether tmpreaper can use samba_share files </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_tor.html#link_tor_bind_all_unreserved_ports'> tor</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> tor_bind_all_unreserved_ports <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether tor can bind tcp sockets to all unreserved ports. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_tor.html#link_tor_can_network_relay'> tor</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> tor_can_network_relay <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow tor to act as a relay </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='roles_unconfineduser.html#link_unconfined_chrome_sandbox_transition'> unconfineduser</a><p/> Layer: <a href='roles.html'> roles</a><p/> <div id="codeblock"> unconfined_chrome_sandbox_transition <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> allow unconfined users to transition to the chrome sandbox domains when running chrome-sandbox </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='roles_unconfineduser.html#link_unconfined_login'> unconfineduser</a><p/> Layer: <a href='roles.html'> roles</a><p/> <div id="codeblock"> unconfined_login <small>(Default: true)</small> </div> <div id="description"> <p> </p><p> Allow a user to login as an unconfined domain </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='roles_unconfineduser.html#link_unconfined_mozilla_plugin_transition'> unconfineduser</a><p/> Layer: <a href='roles.html'> roles</a><p/> <div id="codeblock"> unconfined_mozilla_plugin_transition <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow unconfined users to transition to the Mozilla plugin domain when running xulrunner plugin-container. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='roles_unprivuser.html#link_unprivuser_use_svirt'> unprivuser</a><p/> Layer: <a href='roles.html'> roles</a><p/> <div id="codeblock"> unprivuser_use_svirt <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow unprivileged user to create and transition to svirt domains. </p><p> </p> </div> </div> <div id="interfacesmall"> Global <div id="codeblock"> use_ecryptfs_home_dirs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Support ecryptfs home directories </p><p> </p> </div> </div> <div id="interfacesmall"> Global <div id="codeblock"> use_fusefs_home_dirs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Support fusefs home directories </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_lpd.html#link_use_lpd_server'> lpd</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> use_lpd_server <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether to support lpd server. </p><p> </p> </div> </div> <div id="interfacesmall"> Global <div id="codeblock"> use_nfs_home_dirs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Support NFS home directories </p><p> </p> </div> </div> <div id="interfacesmall"> Global <div id="codeblock"> use_samba_home_dirs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Support SAMBA home directories </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_varnishd.html#link_varnishd_connect_any'> varnishd</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> varnishd_connect_any <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether varnishd can use the full TCP network. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_vbetool.html#link_vbetool_mmap_zero_ignore'> vbetool</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> vbetool_mmap_zero_ignore <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether attempts by vbetool to mmap low regions should be silently blocked. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_virt.html#link_virt_read_qemu_ga_data'> virt</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> virt_read_qemu_ga_data <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow qemu-ga to read qemu-ga date. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_virt.html#link_virt_rw_qemu_ga_data'> virt</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> virt_rw_qemu_ga_data <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow qemu-ga to manage qemu-ga date. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_virt.html#link_virt_sandbox_use_all_caps'> virt</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> virt_sandbox_use_all_caps <small>(Default: true)</small> </div> <div id="description"> <p> </p><p> Allow sandbox containers to use all capabilities </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_virt.html#link_virt_sandbox_use_audit'> virt</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> virt_sandbox_use_audit <small>(Default: true)</small> </div> <div id="description"> <p> </p><p> Allow sandbox containers to send audit messages </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_virt.html#link_virt_sandbox_use_fusefs'> virt</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> virt_sandbox_use_fusefs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow sandbox containers manage fuse files </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_virt.html#link_virt_sandbox_use_mknod'> virt</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> virt_sandbox_use_mknod <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow sandbox containers to use mknod system calls </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_virt.html#link_virt_sandbox_use_netlink'> virt</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> virt_sandbox_use_netlink <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow sandbox containers to use netlink system calls </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_virt.html#link_virt_sandbox_use_sys_admin'> virt</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> virt_sandbox_use_sys_admin <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow sandbox containers to use sys_admin system calls, for example mount </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_virt.html#link_virt_transition_userdomain'> virt</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> virt_transition_userdomain <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow virtual processes to run as userdomains </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_virt.html#link_virt_use_comm'> virt</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> virt_use_comm <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow confined virtual guests to use serial/parallel communication ports </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_virt.html#link_virt_use_execmem'> virt</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> virt_use_execmem <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow confined virtual guests to use executable memory and executable stack </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_virt.html#link_virt_use_fusefs'> virt</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> virt_use_fusefs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow confined virtual guests to read fuse files </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_virt.html#link_virt_use_nfs'> virt</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> virt_use_nfs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow confined virtual guests to manage nfs files </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_virt.html#link_virt_use_pcscd'> virt</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> virt_use_pcscd <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow confined virtual guests to use smartcards </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_virt.html#link_virt_use_rawip'> virt</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> virt_use_rawip <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow confined virtual guests to interact with rawip sockets </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_virt.html#link_virt_use_samba'> virt</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> virt_use_samba <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow confined virtual guests to manage cifs files </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_virt.html#link_virt_use_sanlock'> virt</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> virt_use_sanlock <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow confined virtual guests to interact with the sanlock </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_virt.html#link_virt_use_usb'> virt</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> virt_use_usb <small>(Default: true)</small> </div> <div id="description"> <p> </p><p> Allow confined virtual guests to use usb devices </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_virt.html#link_virt_use_xserver'> virt</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> virt_use_xserver <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow confined virtual guests to interact with the xserver </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_webadm.html#link_webadm_manage_user_files'> webadm</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> webadm_manage_user_files <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether webadm can manage generic user files. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_webadm.html#link_webadm_read_user_files'> webadm</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> webadm_read_user_files <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether webadm can read generic user files. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_wine.html#link_wine_mmap_zero_ignore'> wine</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> wine_mmap_zero_ignore <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether attempts by wine to mmap low regions should be silently blocked. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='services_xserver.html#link_xdm_bind_vnc_tcp_port'> xserver</a><p/> Layer: <a href='services.html'> services</a><p/> <div id="codeblock"> xdm_bind_vnc_tcp_port <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allows xdm_t to bind on vnc_port_t(5910) </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='services_xserver.html#link_xdm_exec_bootloader'> xserver</a><p/> Layer: <a href='services.html'> services</a><p/> <div id="codeblock"> xdm_exec_bootloader <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow the graphical login program to execute bootloader </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='services_xserver.html#link_xdm_sysadm_login'> xserver</a><p/> Layer: <a href='services.html'> services</a><p/> <div id="codeblock"> xdm_sysadm_login <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow the graphical login program to login directly as sysadm_r:sysadm_t </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='services_xserver.html#link_xdm_write_home'> xserver</a><p/> Layer: <a href='services.html'> services</a><p/> <div id="codeblock"> xdm_write_home <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow the graphical login program to create files in HOME dirs as xdm_home_t. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_xen.html#link_xen_use_nfs'> xen</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> xen_use_nfs <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow xen to manage nfs files </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_xen.html#link_xend_run_blktap'> xen</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> xend_run_blktap <small>(Default: true)</small> </div> <div id="description"> <p> </p><p> Allow xend to run blktapctrl/tapdisk. Not required if using dedicated logical volumes for disk images. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_xen.html#link_xend_run_qemu'> xen</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> xend_run_qemu <small>(Default: true)</small> </div> <div id="description"> <p> </p><p> Allow xend to run qemu-dm. Not required if using paravirt and no vfb. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_xguest.html#link_xguest_connect_network'> xguest</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> xguest_connect_network <small>(Default: true)</small> </div> <div id="description"> <p> </p><p> Allow xguest users to configure Network Manager and connect to apache ports </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_xguest.html#link_xguest_mount_media'> xguest</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> xguest_mount_media <small>(Default: true)</small> </div> <div id="description"> <p> </p><p> Allow xguest users to mount removable media </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_xguest.html#link_xguest_use_bluetooth'> xguest</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> xguest_use_bluetooth <small>(Default: true)</small> </div> <div id="description"> <p> </p><p> Allow xguest to use blue tooth devices </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='services_xserver.html#link_xserver_clients_write_xshm'> xserver</a><p/> Layer: <a href='services.html'> services</a><p/> <div id="codeblock"> xserver_clients_write_xshm <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allows clients to write to the X server shared memory segments. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='services_xserver.html#link_xserver_execmem'> xserver</a><p/> Layer: <a href='services.html'> services</a><p/> <div id="codeblock"> xserver_execmem <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allows XServer to execute writable memory </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='services_xserver.html#link_xserver_object_manager'> xserver</a><p/> Layer: <a href='services.html'> services</a><p/> <div id="codeblock"> xserver_object_manager <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Support X userspace object manager </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_zabbix.html#link_zabbix_can_network'> zabbix</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> zabbix_can_network <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Determine whether zabbix can connect to all TCP ports </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_zarafa.html#link_zarafa_setrlimit'> zarafa</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> zarafa_setrlimit <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow zarafa domains to setrlimit/sys_resource. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_zebra.html#link_zebra_write_config'> zebra</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> zebra_write_config <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow zebra daemon to write it configuration files </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_zoneminder.html#link_zoneminder_anon_write'> zoneminder</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> zoneminder_anon_write <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow ZoneMinder to modify public files used for public file transfer services. </p><p> </p> </div> </div> <div id="interfacesmall"> Module: <a href='contrib_zoneminder.html#link_zoneminder_run_sudo'> zoneminder</a><p/> Layer: <a href='contrib.html'> contrib</a><p/> <div id="codeblock"> zoneminder_run_sudo <small>(Default: false)</small> </div> <div id="description"> <p> </p><p> Allow ZoneMinder to run su/sudo. </p><p> </p> </div> </div> </div> </body> </html>
