#

# This file contains a listing of available modules.

# To prevent a module from  being used in policy

# creation, set the module name to "off".

#

# For monolithic policies, modules set to "base" and "module"

# will be built into the policy.

#

# For modular policies, modules set to "base" will be

# included in the base module.  "module" will be compiled

# as individual loadable modules.

#

# Layer: kernel

# Module: devices

# Required in base

#

# Device nodes and interfaces for many basic system devices.

# 

devices = base

# Layer: kernel

# Module: filesystem

# Required in base

#

# Policy for filesystems.

# 

filesystem = base

# Layer: kernel

# Module: selinux

# Required in base

#

# Policy for kernel security interface, in particular, selinuxfs.

# 

selinux = base

# Layer: kernel

# Module: terminal

# Required in base

#

# Policy for terminals.

# 

terminal = base

# Layer: kernel

# Module: kernel

# Required in base

#

# Policy for kernel threads, proc filesystem,and unlabeled processes and objects.

# 

kernel = base

# Layer: kernel

# Module: corenetwork

# Required in base

#

# Policy controlling access to network objects

# 

corenetwork = base

# Layer: system

# Module: files

# Required in base

#

# Basic filesystem types and interfaces.

# 

files = base

# Layer: system

# Module: domain

# Required in base

#

# Core policy for domains.

# 

domain = base

# Layer: admin

# Module: usermanage

#

# Policy for managing user accounts.

# 

usermanage = module

# Layer: admin

# Module: rpm

#

# Policy for the RPM package manager.

# 

rpm = off

# Layer: admin

# Module: dmesg

#

# Policy for dmesg.

# 

dmesg = module

# Layer: admin

# Module: logrotate

#

# Rotate and archive system logs

# 

logrotate = off

# Layer: admin

# Module: consoletype

#

# Determine of the console connected to the controlling terminal.

# 

consoletype = module

# Layer: admin

# Module: netutils

#

# Network analysis utilities

# 

netutils = module

# Layer: admin

# Module: acct

#

# Berkeley process accounting

# 

acct = module

# Layer: admin

# Module: tmpreaper

#

# Manage temporary directory sizes and file ages

# 

tmpreaper = module

# Layer: admin

# Module: updfstab

#

# Red Hat utility to change /etc/fstab.

# 

updfstab = module

# Layer: admin

# Module: su

#

# Run shells with substitute user and group

# 

su = off

# Layer: admin

# Module: sudo

#

# Execute a command with a substitute user

# 

sudo = module

# Layer: admin

# Module: quota

#

# File system quota management

# 

quota = module

# Layer: admin

# Module: firstboot

#

# Final system configuration run during the first boot

# after installation of Red Hat/Fedora systems.

# 

firstboot = module

# Layer: apps

# Module: gpg

#

# Policy for GNU Privacy Guard and related programs.

# 

gpg = off

# Layer: apps

# Module: loadkeys

#

# Load keyboard mappings.

# 

loadkeys = module

# Layer: kernel

# Module: bootloader

#

# Policy for the kernel modules, kernel image, and bootloader.

# 

bootloader = module

# Layer: kernel

# Module: storage

#

# Policy controlling access to storage devices

# 

storage = module

# Layer: services

# Module: remotelogin

#

# Policy for rshd, rlogind, and telnetd.

# 

remotelogin = module

# Layer: services

# Module: nscd

#

# Name service cache daemon

# 

nscd = module

# Layer: services

# Module: nis

#

# Policy for NIS (YP) servers and clients

# 

nis = module

# Layer: services

# Module: sendmail

#

# Policy for sendmail.

# 

sendmail = off

# Layer: services

# Module: ssh

#

# Secure shell client and server policy.

# 

ssh = off

# Layer: services

# Module: cron

#

# Periodic execution of scheduled commands.

# 

cron = module

# Layer: services

# Module: inetd

#

# Internet services daemon.

# 

inetd = module

# Layer: services

# Module: kerberos

#

# MIT Kerberos admin and KDC

# 

kerberos = module

# Layer: services

# Module: mta

#

# Policy common to all email tranfer agents.

# 

mta = module

# Layer: services

# Module: mysql

#

# Policy for MySQL

# 

mysql = module

# Layer: services

# Module: tcpd

#

# Policy for TCP daemon.

# 

tcpd = module

# Layer: services

# Module: rshd

#

# Remote shell service.

# 

rshd = module

# Layer: services

# Module: ldap

#

# OpenLDAP directory server

# 

ldap = module

# Layer: services

# Module: gpm

#

# General Purpose Mouse driver

# 

gpm = module

# Layer: services

# Module: howl

#

# Port of Apple Rendezvous multicast DNS

# 

howl = module

# Layer: services

# Module: rsync

#

# Fast incremental file transfer for synchronization

# 

rsync = module

# Layer: services

# Module: privoxy

#

# Privacy enhancing web proxy.

# 

privoxy = module

# Layer: services

# Module: bind

#

# Berkeley internet name domain DNS server.

# 

bind = module

# Layer: system

# Module: unconfined

#

# The unconfined domain.

# 

unconfined = module

# Layer: system

# Module: authlogin

#

# Common policy for authentication and user login.

# 

authlogin = module

# Layer: system

# Module: selinuxutil

#

# Policy for SELinux policy and userland applications.

# 

selinuxutil = module

# Layer: system

# Module: getty

#

# Policy for getty.

# 

getty = module

# Layer: system

# Module: mount

#

# Policy for mount.

# 

mount = module

# Layer: system

# Module: ipsec

#

# TCP/IP encryption

# 

ipsec = module

# Layer: system

# Module: locallogin

#

# Policy for local logins.

# 

locallogin = module

# Layer: system

# Module: logging

#

# Policy for the kernel message logger and system logging daemon.

# 

logging = module

# Layer: system

# Module: sysnetwork

#

# Policy for network configuration: ifconfig and dhcp client.

# 

sysnetwork = module

# Layer: system

# Module: fstools

#

# Tools for filesystem management, such as mkfs and fsck.

# 

fstools = module

# Layer: system

# Module: pcmcia

#

# PCMCIA card management services

# 

pcmcia = module

# Layer: system

# Module: iptables

#

# Policy for iptables.

# 

iptables = module

# Layer: system

# Module: userdomain

#

# Policy for user domains

# 

userdomain = module

# Layer: system

# Module: corecommands

#

# Core policy for shells, and generic programs

# in /bin, /sbin, /usr/bin, and /usr/sbin.

# 

corecommands = base

# Layer: system

# Module: hotplug

#

# Policy for hotplug system, for supporting the

# connection and disconnection of devices at runtime.

# 

hotplug = module

# Layer: system

# Module: clock

#

# Policy for reading and setting the hardware clock.

# 

clock = module

# Layer: system

# Module: lvm

#

# Policy for logical volume management programs.

# 

lvm = module

# Layer: system

# Module: modutils

#

# Policy for kernel module utilities

# 

modutils = module

# Layer: system

# Module: init

#

# System initialization programs (init and init scripts).

# 

init = module

# Layer: system

# Module: udev

#

# Policy for udev.

# 

udev = module

# Layer: system

# Module: hostname

#

# Policy for changing the system host name.

# 

hostname = module

# Layer: system

# Module: raid

#

# RAID array management tools

# 

raid = module

# Layer: system

# Module: libraries

#

# Policy for system libraries.

# 

libraries = module

# Layer: system

# Module: miscfiles

#

# Miscelaneous files.

# 

miscfiles = module