# Layer: kernel

# Module: bootloader

#

# Policy for the kernel modules, kernel image, and bootloader.

# 

bootloader = module

# Layer: kernel

# Module: corecommands

# Required in base

#

# Core policy for shells, and generic programs

# in /bin, /sbin, /usr/bin, and /usr/sbin.

#

corecommands = base

# Layer: kernel

# Module: corenetwork

# Required in base

#

# Policy controlling access to network objects

#

corenetwork = base

# Layer: admin

# Module: dmesg

#

# Policy for dmesg.

# 

dmesg = module

# Layer: admin

# Module: netutils

#

# Network analysis utilities

# 

netutils = module

# Layer: admin

# Module: sudo

#

# Execute a command with a substitute user

# 

sudo = module

# Layer: admin

# Module: su

#

# Run shells with substitute user and group

# 

su = module

# Layer: admin

# Module: usermanage

#

# Policy for managing user accounts.

# 

usermanage = module

# Layer: apps

# Module: seunshare

#

# seunshare executable

# 

seunshare = module

# Module: devices

# Required in base

#

# Device nodes and interfaces for many basic system devices.

# 

devices = base

# Module: domain

# Required in base

#

# Core policy for domains.

# 

domain = base

# Layer: system

# Module: userdomain

#

# Policy for user domains

# 

userdomain = module

# Module: files

# Required in base

#

# Basic filesystem types and interfaces.

# 

files = base

# Layer: system

# Module: miscfiles

#

# Miscelaneous files.

# 

miscfiles = module

# Module: filesystem

# Required in base

#

# Policy for filesystems.

# 

filesystem = base

# Module: kernel

# Required in base

#

# Policy for kernel threads, proc filesystem,and unlabeled processes and objects.

# 

kernel = base

# Module: mcs

# Required in base

#

# MultiCategory security policy

# 

mcs = base

# Module: mls

# Required in base

#

# Multilevel security policy

# 

mls = base

# Module: selinux

# Required in base

#

# Policy for kernel security interface, in particular, selinuxfs.

# 

selinux = base

# Layer: kernel

# Module: storage

#

# Policy controlling access to storage devices

# 

storage = base

# Module: terminal

# Required in base

#

# Policy for terminals.

# 

terminal = base

# Layer: kernel

# Module: ubac

#

# 

# 

ubac = base

# Layer: kernel

# Module: unconfined

#

# The unlabelednet module.

#

unlabelednet = module

# Layer: role

# Module: auditadm

#

# auditadm account on tty logins

# 

auditadm = module

# Layer: role

# Module: logadm

#

# Minimally prived root role for managing logging system

# 

logadm = module

# Layer: role

# Module: secadm

#

# secadm account on tty logins

# 

secadm = module

# Layer:role

# Module: sysadm_secadm

#

# System Administrator with Security Admin rules

# 

sysadm_secadm = module

# Module: staff

#

# admin account 

# 

staff = module

# Layer:role

# Module: sysadm

#

# System Administrator

# 

sysadm = module

# Layer: role

# Module: unconfineduser

#

# The unconfined user domain.

# 

unconfineduser = module

# Layer: role

# Module: unprivuser

#

# Minimally privs guest account on tty logins

# 

unprivuser = module

# Layer: services

# Module: postgresql

#

# PostgreSQL relational database

# 

postgresql = module

# Layer: services

# Module: ssh

#

# Secure shell client and server policy.

# 

ssh = module

# Layer: services

# Module: xserver

#

# X windows login display manager

# 

xserver = module

# Module: application

# Required in base

#

# Defines attributs and interfaces for all user applications

# 

application = module

# Layer: system

# Module: authlogin

#

# Common policy for authentication and user login.

# 

authlogin = module

# Layer: system

# Module: clock

#

# Policy for reading and setting the hardware clock.

# 

clock = module

# Layer: system

# Module: fstools

#

# Tools for filesystem management, such as mkfs and fsck.

# 

fstools = module

# Layer: system

# Module: getty

#

# Policy for getty.

# 

getty = module

# Layer: system

# Module: hostname

#

# Policy for changing the system host name.

# 

hostname = module

# Layer: system

# Module: init

#

# System initialization programs (init and init scripts).

# 

init = module

# Layer: system

# Module: ipsec

#

# TCP/IP encryption

# 

ipsec = module

# Layer: system

# Module: iptables

#

# Policy for iptables.

# 

iptables = module

# Layer: system

# Module: libraries

#

# Policy for system libraries.

# 

libraries = module

# Layer: system

# Module: locallogin

#

# Policy for local logins.

# 

locallogin = module

# Layer: system

# Module: logging

#

# Policy for the kernel message logger and system logging daemon.

# 

logging = module

# Layer: system

# Module: lvm

#

# Policy for logical volume management programs.

# 

lvm = module

# Layer: system

# Module: modutils

#

# Policy for kernel module utilities

# 

modutils = module

# Layer: system

# Module: mount

#

# Policy for mount.

# 

mount = module

# Layer: system

# Module: netlabel

#

# Basic netlabel types and interfaces.

# 

netlabel = module

# Layer: system

# Module: selinuxutil

#

# Policy for SELinux policy and userland applications.

# 

selinuxutil = module

# Module: setrans

# Required in base

#

# Policy for setrans

# 

setrans = module

# Layer: system

# Module: sysnetwork

#

# Policy for network configuration: ifconfig and dhcp client.

# 

sysnetwork = module

# Layer: system

# Module: systemd

#

# Policy for systemd components

# 

systemd = module

# Layer: system

# Module: udev

#

# Policy for udev.

# 

udev = module

# Layer: system

# Module: unconfined

#

# The unconfined domain.

# 

unconfined = module

# Layer: services

# Module: abrt

#

# Automatic bug detection and reporting tool

# 

abrt = module

# Layer: services

# Module: accountsd

#

#  An application to view and modify user accounts information

# 

accountsd = module

# Layer: admin

# Module: acct

#

# Berkeley process accounting

# 

acct = module

# Layer: services

# Module: afs

#

# Andrew Filesystem server

# 

afs = module

# Layer: services

# Module: aiccu

#

# SixXS Automatic IPv6 Connectivity Client Utility

# 

aiccu = module

# Layer: services

# Module: aide

#

# Policy for aide

# 

aide = module

# Layer: admin

# Module: alsa

#

# Ainit ALSA configuration tool

# 

alsa = module

# Layer: admin

# Module: amanda

#

# Automated backup program.

# 

amanda = module

# Layer: admin

# Module: amtu

#

# Abstract Machine Test Utility (AMTU)

# 

amtu = module

# Layer: admin

# Module: anaconda

#

# Policy for the Anaconda installer.

# 

anaconda = module

# Layer: contrib

# Module: antivirus

#

# SELinux policy for antivirus programs

#

antivirus = module

# Layer: services

# Module: apache

#

# Apache web server

# 

apache = module

# Layer: services

# Module: apcupsd

#

# daemon for most APC’s UPS for Linux

#

apcupsd = module

# Layer: services

# Module: apm

#

# Advanced power management daemon

# 

apm = module

# Layer: services

# Module: arpwatch

#

# Ethernet activity monitor.

# 

arpwatch = module

# Layer: services

# Module: asterisk

#

# Asterisk IP telephony server

# 

asterisk = module

# Layer: services

# Module: automount

#

# Filesystem automounter service.

# 

automount = module

# Layer: services

# Module: avahi

#

# mDNS/DNS-SD daemon implementing Apple ZeroConf architecture

# 

avahi = module

# Layer: module

# Module: awstats

#

# awstats executable

# 

awstats = module

# Layer: services

# Module: bcfg2

#

# Configuration management server

#

bcfg2 = module

# Layer: services

# Module: bind

#

# Berkeley internet name domain DNS server.

# 

bind = module

# Layer: contrib

# Module: rngd

#

#  Daemon used to feed random data from hardware device to kernel random device

# 

rngd = module

# Layer: services

# Module: bitlbee

#

# An IRC to other chat networks  gateway

# 

bitlbee = module

# Layer: services

# Module: blueman

#

# Blueman tools and system services.

# 

blueman = module

# Layer: services

# Module: bluetooth

#

# Bluetooth tools and system services.

# 

bluetooth = module

# Layer: services

# Module: boinc

#

# Berkeley Open Infrastructure for Network Computing

#

boinc = module

# Layer: system

# Module: brctl

#

# Utilities for configuring the linux ethernet bridge

# 

brctl = module

# Layer: services

# Module: bugzilla

#

# Bugzilla server

# 

bugzilla = module

# Layer: services

# Module: cachefilesd

#

# CacheFiles userspace management daemon

# 

cachefilesd = module

# Module: calamaris

#

#

# Squid log analysis

# 

calamaris = module

# Layer: services

# Module: callweaver

#

# callweaver telephony sever

# 

callweaver = module

# Layer: services

# Module: canna

#

# Canna - kana-kanji conversion server

# 

canna = module

# Layer: services

# Module: ccs

#

# policy for ccs

# 

ccs = module

# Layer: apps

# Module: cdrecord

#

# Policy for cdrecord

# 

cdrecord = module

# Layer: admin

# Module: certmaster

#

# Digital Certificate master

# 

certmaster = module

# Layer: services

# Module: certmonger

#

# Certificate status monitor and PKI enrollment client

# 

certmonger = module

# Layer: admin

# Module: certwatch

#

# Digital Certificate Tracking

# 

certwatch = module

# Layer: services

# Module: cfengine

#

# cfengine

#

cfengine = module

# Layer: services

# Module: cgroup

#

# Tools and libraries to control and monitor control groups

# 

cgroup = module

# Layer: apps

# Module: chrome

#

# chrome sandbox

# 

chrome = module

# Layer: services

# Module: chronyd

#

# Daemon for maintaining clock time

# 

chronyd = module

# Layer: services

# Module: cipe

#

# Encrypted tunnel daemon

# 

cipe = module

# Layer: services

# Module: clogd

#

# clogd - clustered mirror log server

# 

clogd = module

# Layer: services

# Module: cloudform

# 

#  cloudform daemons 

#

cloudform = module

# Layer: services

# Module: cmirrord

#

# cmirrord - daemon providing device-mapper-base mirrors in a shared-storege cluster

# 

cmirrord = module

# Layer: services

# Module: cobbler

#

# cobbler

# 

cobbler = module

# Layer: services

# Module: collectd

#

# Statistics collection daemon for filling RRD files

# 

collectd = module

# Layer: services

# Module: colord

#

# color device daemon

# 

colord = module

# Layer: services

# Module: comsat

#

# Comsat, a biff server.

# 

comsat = module

# Layer: services

# Module: condor

# 

#  policy for condor

# 

condor = module 

# Layer: services

# Module: conman

#

# Conman is a program for connecting to remote consoles being managed by conmand

#

conman = module

# Layer: services

# Module: consolekit

#

# ConsoleKit is a system daemon for tracking what users are logged

# 

consolekit = module

# Layer: services

# Module: couchdb

#

# Apache CouchDB database server

# 

couchdb = module

# Layer: services

# Module: courier

#

# IMAP and POP3 email servers

# 

courier = module

# Layer: services

# Module: cpucontrol

#

# Services for loading CPU microcode and CPU frequency scaling.

# 

cpucontrol = module

# Layer: apps

# Module: cpufreqselector 

#

# cpufreqselector executable

# 

cpufreqselector = module

# Layer: services

# Module: cron

#

# Periodic execution of scheduled commands.

# 

cron = module

# Layer: services

# Module: ctdbd

#

# Cluster Daemon

# 

ctdb = module

# Layer: services

# Module: cups

#

# Common UNIX printing system

# 

cups = module

# Layer: services

# Module: cvs

#

# Concurrent versions system

# 

cvs = module

# Layer: services

# Module: cyphesis

#

# cyphesis game server

# 

cyphesis = module

# Layer: services

# Module: cyrus

#

# Cyrus is an IMAP service intended to be run on sealed servers

# 

cyrus = module

# Layer: system

# Module: daemontools

#

# Collection of tools for managing UNIX services

# 

daemontools = module

# Layer: role

# Module: dbadm

#

# Minimally prived root role for managing databases

# 

dbadm = module

# Layer: services

# Module: dbskk

#

# Dictionary server for the SKK Japanese input method system.

# 

dbskk = module

# Layer: services

# Module: dbus

#

# Desktop messaging bus

# 

dbus = module

# Layer: services

# Module: dcc

#

# A distributed, collaborative, spam detection and filtering network.

# 

dcc = module

# Layer: services

# Module: ddclient

#

# Update dynamic IP address at DynDNS.org

#

ddclient = module

# Layer: admin

# Module: ddcprobe

#

# ddcprobe retrieves monitor and graphics card information

# 

ddcprobe = off

# Layer: services

# Module: denyhosts