# Allow making anonymous memory executable, e.g.for runtime-code generation or executable stack.

# 

allow_execmem = false

# Allow making a modified private filemapping executable (text relocation).

# 

allow_execmod = false

# Allow making the stack executable via mprotect.Also requires allow_execmem.

# 

allow_execstack = false

# Allow ftp servers to modify public filesused for public file transfer services.

# 

allow_ftpd_anon_write = false

# Allow gssd to read temp directory.

# 

allow_gssd_read_tmp = false

# Allow sysadm to ptrace all processes

# 

allow_ptrace = false

# Allow reading of default_t files.

# 

read_default_t = false

# Allow system cron jobs to relabel filesystemfor restoring file contexts.

# 

cron_can_relabel = false

# Allow staff_r users to search the sysadm homedir and read files (such as ~/.bashrc)

# 

staff_read_sysadm_file = false

# Allow users to read system messages.

# 

user_dmesg = false

# Allow sysadm to ptrace all processes

# 

allow_ptrace = false

## Control users use of ping and traceroute

user_ping = true

# Allow unlabeled packets to flow

# 

allow_unlabeled_packets = true