#

# This file contains a listing of available modules.

# To prevent a module from  being used in policy

# creation, set the module name to "off".

#

# For monolithic policies, modules set to "base" and "module"

# will be built into the policy.

#

# For modular policies, modules set to "base" will be

# included in the base module.  "module" will be compiled

# as individual loadable modules.

#

# Layer: services

# Module: accountsd

#

#  An application to view and modify user accounts information

# 

accountsd = module

# Layer: admin

# Module: acct

#

# Berkeley process accounting

# 

acct = base

# Layer: admin

# Module: alsa

#

# Ainit ALSA configuration tool

# 

alsa = base

# Layer: apps

# Module: ada

#

# ada executable

# 

ada = module

# Layer: services

# Module: cachefilesd

#

# CacheFiles userspace management daemon

# 

cachefilesd = module

# Layer: apps

# Module: cpufreqselector 

#

# cpufreqselector executable

# 

cpufreqselector = module

# Layer: apps

# Module: chrome

#

# chrome sandbox

# 

chrome = module

# Layer: modules

# Module: awstats

#

# awstats executable

# 

awstats = module

# Layer: admin

# Module: amanda

#

# Automated backup program.

# 

amanda = module

# Layer: services

# Module: afs

#

# Andrew Filesystem server

# 

afs = module

# Layer: services

# Module: amavis

#

# Anti-virus

# 

amavis = module

# Layer: admin

# Module: anaconda

#

# Policy for the Anaconda installer.

# 

anaconda = base

# Layer: services

# Module: apache

#

# Apache web server

# 

apache = module

# Layer: services

# Module: apm

#

# Advanced power management daemon

# 

apm = base

# Layer: system

# Module: application

# Required in base

#

# Defines attributs and interfaces for all user applications

# 

application = base

# Layer: services

# Module: arpwatch

#

# Ethernet activity monitor.

# 

arpwatch = module

# Layer: services

# Module: audioentropy

#

# Generate entropy from audio input

# 

audioentropy = module

# Layer: system

# Module: authlogin

#

# Common policy for authentication and user login.

# 

authlogin = base

# Layer: services

# Module: automount

#

# Filesystem automounter service.

# 

automount = module

# Layer: services

# Module: avahi

#

# mDNS/DNS-SD daemon implementing Apple ZeroConf architecture

# 

avahi = module

# Layer: services

# Module: boinc

#

# Berkeley Open Infrastructure for Network Computing

#

boinc = module

# Layer: services

# Module: bind

#

# Berkeley internet name domain DNS server.

# 

bind = module

# Layer: services

# Module: bugzilla

#

# Bugzilla server

# 

bugzilla = module

# Layer: services

# Module: dnsmasq

#

# A lightweight DHCP and caching DNS server.

# 

dnsmasq = module

# Layer: services

# Module: bluetooth

#

# Bluetooth tools and system services.

# 

bluetooth = module

# Layer: kernel

# Module: ubac

#

# 

# 

ubac = base

#

# Layer: kernel

# Module: bootloader

#

# Policy for the kernel modules, kernel image, and bootloader.

# 

bootloader = base

# Layer: services

# Module: canna

#

# Canna - kana-kanji conversion server

# 

canna = module

# Layer: services

# Module: ccs

#

# policy for ccs

# 

ccs = module

# Layer: apps

# Module: calamaris

#

#

# Squid log analysis

# 

calamaris = module

# Layer: apps

# Module: cdrecord

#

# Policy for cdrecord

# 

cdrecord = module

# Layer: admin

# Module: certwatch

#

# Digital Certificate Tracking

# 

certwatch = module

# Layer: admin

# Module: certmaster

#

# Digital Certificate master

# 

certmaster = module

# Layer: services

# Module: certmonger

#

# Certificate status monitor and PKI enrollment client

# 

certmonger = module

# Layer: services

# Module: chronyd

#

# Daemon for maintaining clock time

# 

chronyd = module

q# Layer: services

# Module: cipe

#

# Encrypted tunnel daemon

# 

cipe = module

# Layer: services

# Module: comsat

#

# Comsat, a biff server.

# 

comsat = module

# Layer: services

# Module: corosync

#

# Corosync Cluster Engine Executive

# 

corosync = module

# Layer: services

# Module: clamav

#

# ClamAV Virus Scanner

# 

clamav = module

# Layer: system

# Module: clock

#

# Policy for reading and setting the hardware clock.

# 

clock = base

# Layer: services

# Module: consolekit

#

# ConsoleKit is a system daemon for tracking what users are logged

# 

consolekit = module

# Layer: admin

# Module: consoletype

#

# Determine of the console connected to the controlling terminal.

# 

consoletype = base

# Layer: kernel

# Module: corecommands

# Required in base

#

# Core policy for shells, and generic programs

# in /bin, /sbin, /usr/bin, and /usr/sbin.

# 

corecommands = base

# Layer: kernel

# Module: corenetwork

# Required in base

#

# Policy controlling access to network objects

# 

corenetwork = base

# Layer: services

# Module: cpucontrol

#

# Services for loading CPU microcode and CPU frequency scaling.

# 

cpucontrol = base

# Layer: services

# Module: cron

#

# Periodic execution of scheduled commands.

# 

cron = base

# Layer: services

# Module: cups

#

# Common UNIX printing system

# 

cups = module

# Layer: services

# Module: cvs

#

# Concurrent versions system

# 

cvs = module

# Layer: services

# Module: cyphesis

#

# cyphesis game server

# 

cyphesis = module

# Layer: services

# Module: cyrus

#

# Cyrus is an IMAP service intended to be run on sealed servers

# 

cyrus = module

# Layer: system

# Module: daemontools

#

# Collection of tools for managing UNIX services

# 

daemontools = module

# Layer: services

# Module: dbskk

#

# Dictionary server for the SKK Japanese input method system.

# 

dbskk = module

# Layer: services

# Module: dbus

#

# Desktop messaging bus

# 

dbus = base

# Layer: services

# Module: dcc

#

# A distributed, collaborative, spam detection and filtering network.

# 

dcc = module

# Layer: admin

# Module: ddcprobe

#

# ddcprobe retrieves monitor and graphics card information

# 

ddcprobe = off

# Layer: services

# Module: devicekit

#

# devicekit-daemon

# 

devicekit = module

# Layer: kernel

# Module: devices

# Required in base

#

# Device nodes and interfaces for many basic system devices.

# 

devices = base

# Layer: services

# Module: dhcp

#

# Dynamic host configuration protocol (DHCP) server

# 

dhcp = module

# Layer: services

# Module: dictd

#

# Dictionary daemon

# 

dictd = module

# Layer: services

# Module: distcc

#

# Distributed compiler daemon

# 

distcc = off

# Layer: admin

# Module: dmesg

#

# Policy for dmesg.

# 

dmesg = base

# Layer: admin

# Module: dmidecode

#

# Decode DMI data for x86/ia64 bioses.

# 

dmidecode = base

# Layer: system

# Module: domain

# Required in base

#

# Core policy for domains.

# 

domain = base

# Layer: services

# Module: dovecot

#

# Dovecot POP and IMAP mail server

# 

dovecot = module

# Layer: services

# Module: git

#

# Policy for the stupid content tracker

# 

git = module

# Layer: apps

# Module: gitosis

#

# Policy for gitosis

# 

gitosis = module

# Layer: apps

# Module: gpg

#

# Policy for GNU Privacy Guard and related programs.

# 

gpg = module

# Layer: services

# Module: gpsd

#

# gpsd monitor daemon

#

# 

gpsd = module

# Layer: services

# Module: gpm

#

# General Purpose Mouse driver

# 

gpm = module

# Layer: services

# Module: fail2ban

#

# daiemon that bans IP that makes too many password failures

# 

fail2ban = module

# Layer: services

# Module: fetchmail

#

# Remote-mail retrieval and forwarding utility

# 

fetchmail = module

# Layer: kernel

# Module: files

# Required in base

#

# Basic filesystem types and interfaces.

# 

files = base

# Layer: kernel

# Module: filesystem

# Required in base

#

# Policy for filesystems.

# 

filesystem = base

# Layer: services

# Module: finger

#

# Finger user information service.

# 

finger = module

# Layer: admin

# Module: firstboot

#

# Final system configuration run during the first boot

# after installation of Red Hat/Fedora systems.

# 

firstboot = base

# Layer: apps

# Module: firewallgui

#

# policy for system-config-firewall

# 

firewallgui = module

# Layer: services

# Module: fprintd

#

# finger print server

# 

fprintd = module

# Layer: system

# Module: fstools

#

# Tools for filesystem management, such as mkfs and fsck.

# 

fstools = base

# Layer: services

# Module: ftp

#

# File transfer protocol service

# 

ftp = module

# Layer: apps

# Module: games

#

# The Open Group Pegasus CIM/WBEM Server.

# 

games = module

# Layer: system

# Module: getty

#

# Policy for getty.

# 

getty = base

# Layer: apps

# Module: gnome

#

# gnome session and gconf

# 

gnome = module

# Layer: services

# Module: gnomeclock

#

# gnomeclock used by dbus/polkit to set time

# 

gnomeclock = module

# Layer: services

# Module: hal

#

# Hardware abstraction layer

# 

hal = module

# Layer: services

# Module: plymouthd

#

#  Plymouth

# 

plymouthd = module

# Layer: services

# Module: policykit

#

# Hardware abstraction layer

# 

policykit = module

# Layer: apps

# Module: ptchown

#

# helper function for grantpt(3), changes ownship and permissions of pseudotty

# 

ptchown = module

# Layer: services

# Module: psad

#

# Analyze iptables log for hostile traffic

# 

psad = module

# Layer: system

# Module: hostname

#

# Policy for changing the system host name.

# 

hostname = base

# Layer: system

# Module: hotplug

#

# Policy for hotplug system, for supporting the

# connection and disconnection of devices at runtime.

# 

hotplug = base

# Layer: services

# Module: howl

#

# Port of Apple Rendezvous multicast DNS

# 

howl = module

# Layer: services

# Module: inetd

#

# Internet services daemon.

# 

inetd = base

# Layer: system

# Module: init

#

# System initialization programs (init and init scripts).

# 

init = base

# Layer: services

# Module: inn

#

# Internet News NNTP server

# 

inn = module

# Layer: system

# Module: iptables

#

# Policy for iptables.

# 

iptables = base

# Layer: system

# Module: ipsec

#

# TCP/IP encryption

# 

ipsec = module

# Layer: apps

# Module: irc

#

# IRC client policy

# 

irc = module

# Layer: services

# Module: irqbalance

#

# IRQ balancing daemon

# 

irqbalance = base

# Layer: system

# Module: iscsi

#

# Open-iSCSI daemon

# 

iscsi = module

# Layer: services

# Module: i18n_input

#

# IIIMF htt server

# 

i18n_input = off

# Layer: services

# Module: jabber

#

# Jabber instant messaging server

# 

jabber = module

# Layer: apps

# Module: java

#

# java executable

# 

java = module

# Layer: system

# Module: kdump

#

# kdump is kernel crash dumping mechanism

# 

kdump = module

# Layer: apps

# Module: kdumpgui

#

# system-config-kdump policy

# 

kdumpgui = module

# Layer: services

# Module: ksmtuned

#

#  Kernel Samepage Merging (KSM) Tuning Daemon

# 

ksmtuned = module

# Layer: services

# Module: kerberos

#

# MIT Kerberos admin and KDC

# 

kerberos = module

# Layer: kernel

# Module: kernel

# Required in base

#

# Policy for kernel threads, proc filesystem,and unlabeled processes and objects.

# 

kernel = base

# Layer: services

# Module: ktalk

#

# KDE Talk daemon

# 

ktalk = module

# Layer: admin

# Module: kudzu

#

# Hardware detection and configuration tools

# 

kudzu = base

# Layer: services

# Module: lircd

#

# LIRC daemon - decodes infrared signals and provides them on a Unix domain socket.  

# 

lircd = module

# Layer: services

# Module: ldap

#

# OpenLDAP directory server

# 

ldap = module

# Layer: system

# Module: libraries

#

# Policy for system libraries.

# 

libraries = base

# Layer: apps

# Module: loadkeys

#

# Load keyboard mappings.

# 

loadkeys = base

# Layer: system

# Module: locallogin

#

# Policy for local logins.

# 

locallogin = base

# Layer: apps

# Module: lockdev

#

# device locking policy for lockdev

# 

lockdev = module

# Layer: system

# Module: logging

#

# Policy for the kernel message logger and system logging daemon.

# 

logging = base

# Layer: admin

# Module: logrotate

#

# Rotate and archive system logs

# 

logrotate = base

# Layer: services

# Module: logwatch

#

# logwatch executable

# 

logwatch = base

# Layer: services

# Module: lpd

#

# Line printer daemon

# 

lpd = module

# Layer: system

# Module: lvm

#

# Policy for logical volume management programs.

# 

lvm = base

# Layer: admin

# Module: mcelog

#

# mcelog is a daemon that collects and decodes Machine Check Exception data on x86-64 machines. 

# 

mcelog = base

# Layer: services