Chris PeBenito 8b1125
<html>
Chris PeBenito 8b1125
<head>
Chris PeBenito 8b1125
<title>
Chris PeBenito 8b1125
 Security Enhanced Linux Reference Policy
Chris PeBenito 8b1125
 </title>
Chris PeBenito 8b1125
<style type="text/css" media="all">@import "style.css";</style>
Chris PeBenito 8b1125
</head>
Chris PeBenito 8b1125
<body>
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
	
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
		admin
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
		
Chris PeBenito c2ecf0
			   - 
Chris PeBenito c2ecf0
			acct
Chris PeBenito c2ecf0
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			alsa
Chris PeBenito 26deab
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			amanda
Chris PeBenito 885e75
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			anaconda
Chris PeBenito 862a1e
		
Chris PeBenito af3dd8
			   - 
Chris PeBenito af3dd8
			bootloader
Chris PeBenito af3dd8
		
Chris PeBenito af3dd8
			   - 
Chris PeBenito af3dd8
			certwatch
Chris PeBenito af3dd8
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			consoletype
Chris PeBenito 8b1125
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			ddcprobe
Chris PeBenito 26deab
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			dmesg
Chris PeBenito 8b1125
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			dmidecode
Chris PeBenito 862a1e
		
Chris PeBenito c2ecf0
			   - 
Chris PeBenito c2ecf0
			firstboot
Chris PeBenito c2ecf0
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			kudzu
Chris PeBenito 862a1e
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			logrotate
Chris PeBenito 8b1125
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			logwatch
Chris PeBenito 26deab
		
Chris PeBenito af3dd8
			   - 
Chris PeBenito af3dd8
			mrtg
Chris PeBenito af3dd8
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			netutils
Chris PeBenito 8b1125
		
Chris PeBenito af3dd8
			   - 
Chris PeBenito af3dd8
			portage
Chris PeBenito af3dd8
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			prelink
Chris PeBenito 26deab
		
Chris PeBenito c2ecf0
			   - 
Chris PeBenito c2ecf0
			quota
Chris PeBenito c2ecf0
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			readahead
Chris PeBenito 26deab
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			rpm
Chris PeBenito 8b1125
		
Chris PeBenito c2ecf0
			   - 
Chris PeBenito c2ecf0
			su
Chris PeBenito c2ecf0
		
Chris PeBenito c2ecf0
			   - 
Chris PeBenito c2ecf0
			sudo
Chris PeBenito c2ecf0
		
Chris PeBenito c2ecf0
			   - 
Chris PeBenito c2ecf0
			tmpreaper
Chris PeBenito c2ecf0
		
Chris PeBenito c2ecf0
			   - 
Chris PeBenito c2ecf0
			updfstab
Chris PeBenito c2ecf0
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			usbmodules
Chris PeBenito 26deab
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			usermanage
Chris PeBenito 8b1125
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			vbetool
Chris PeBenito 26deab
		
Chris PeBenito 44a4c2
			   - 
Chris PeBenito 44a4c2
			vpn
Chris PeBenito 44a4c2
		
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
	
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
		apps
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			cdrecord
Chris PeBenito 26deab
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			gpg
Chris PeBenito 8b1125
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			irc
Chris PeBenito 26deab
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			java
Chris PeBenito 26deab
		
Chris PeBenito c2ecf0
			   - 
Chris PeBenito c2ecf0
			loadkeys
Chris PeBenito c2ecf0
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			lockdev
Chris PeBenito 26deab
		
Chris PeBenito af3dd8
			   - 
Chris PeBenito af3dd8
			mono
Chris PeBenito af3dd8
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			screen
Chris PeBenito 26deab
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			slocate
Chris PeBenito 26deab
		
Chris PeBenito af3dd8
			   - 
Chris PeBenito af3dd8
			tvtime
Chris PeBenito af3dd8
		
Chris PeBenito af3dd8
			   - 
Chris PeBenito af3dd8
			uml
Chris PeBenito af3dd8
		
Chris PeBenito af3dd8
			   - 
Chris PeBenito af3dd8
			userhelper
Chris PeBenito af3dd8
		
Chris PeBenito af3dd8
			   - 
Chris PeBenito af3dd8
			usernetctl
Chris PeBenito af3dd8
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			webalizer
Chris PeBenito 862a1e
		
Chris PeBenito af3dd8
			   - 
Chris PeBenito af3dd8
			wine
Chris PeBenito af3dd8
		
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
	
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
		kernel
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			corecommands
Chris PeBenito 885e75
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			corenetwork
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			devices
Chris PeBenito 8b1125
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			domain
Chris PeBenito 885e75
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			files
Chris PeBenito 885e75
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			filesystem
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			kernel
Chris PeBenito 8b1125
		
Chris PeBenito af3dd8
			   - 
Chris PeBenito af3dd8
			mcs
Chris PeBenito af3dd8
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			mls
Chris PeBenito 862a1e
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			selinux
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			storage
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			terminal
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
	
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
		services
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			apache
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			apm
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			arpwatch
Chris PeBenito 862a1e
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			automount
Chris PeBenito 26deab
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			avahi
Chris PeBenito 885e75
		
Chris PeBenito c2ecf0
			   - 
Chris PeBenito c2ecf0
			bind
Chris PeBenito c2ecf0
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			bluetooth
Chris PeBenito 862a1e
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			canna
Chris PeBenito 885e75
		
Chris PeBenito e376ad
			   - 
Chris PeBenito e376ad
			comsat
Chris PeBenito e376ad
		
Chris PeBenito 44a4c2
			   - 
Chris PeBenito 44a4c2
			cpucontrol
Chris PeBenito 44a4c2
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			cron
Chris PeBenito 8b1125
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			cups
Chris PeBenito 885e75
		
Chris PeBenito 44a4c2
			   - 
Chris PeBenito 44a4c2
			cvs
Chris PeBenito 44a4c2
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			cyrus
Chris PeBenito 885e75
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			dbskk
Chris PeBenito 885e75
		
Chris PeBenito e376ad
			   - 
Chris PeBenito e376ad
			dbus
Chris PeBenito e376ad
		
Chris PeBenito e376ad
			   - 
Chris PeBenito e376ad
			dhcp
Chris PeBenito e376ad
		
Chris PeBenito e376ad
			   - 
Chris PeBenito e376ad
			dictd
Chris PeBenito e376ad
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			distcc
Chris PeBenito 885e75
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			djbdns
Chris PeBenito 26deab
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			dovecot
Chris PeBenito 885e75
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			fetchmail
Chris PeBenito 26deab
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			finger
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			ftp
Chris PeBenito 862a1e
		
Chris PeBenito c2ecf0
			   - 
Chris PeBenito c2ecf0
			gpm
Chris PeBenito c2ecf0
		
Chris PeBenito e376ad
			   - 
Chris PeBenito e376ad
			hal
Chris PeBenito e376ad
		
Chris PeBenito c2ecf0
			   - 
Chris PeBenito c2ecf0
			howl
Chris PeBenito c2ecf0
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			i18n_input
Chris PeBenito 885e75
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			inetd
Chris PeBenito 8b1125
		
Chris PeBenito e376ad
			   - 
Chris PeBenito e376ad
			inn
Chris PeBenito e376ad
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			irqbalance
Chris PeBenito 885e75
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			kerberos
Chris PeBenito 8b1125
		
Chris PeBenito 44a4c2
			   - 
Chris PeBenito 44a4c2
			ktalk
Chris PeBenito 44a4c2
		
Chris PeBenito c2ecf0
			   - 
Chris PeBenito c2ecf0
			ldap
Chris PeBenito c2ecf0
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			lpd
Chris PeBenito 885e75
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			mailman
Chris PeBenito 862a1e
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			mta
Chris PeBenito 8b1125
		
Chris PeBenito c2ecf0
			   - 
Chris PeBenito c2ecf0
			mysql
Chris PeBenito c2ecf0
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			networkmanager
Chris PeBenito 885e75
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			nis
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			nscd
Chris PeBenito 8b1125
		
Chris PeBenito e376ad
			   - 
Chris PeBenito e376ad
			ntp
Chris PeBenito e376ad
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			openct
Chris PeBenito 26deab
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			pegasus
Chris PeBenito 885e75
		
Chris PeBenito 44a4c2
			   - 
Chris PeBenito 44a4c2
			portmap
Chris PeBenito 44a4c2
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			postfix
Chris PeBenito 885e75
		
Chris PeBenito 44a4c2
			   - 
Chris PeBenito 44a4c2
			postgresql
Chris PeBenito 44a4c2
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			ppp
Chris PeBenito 862a1e
		
Chris PeBenito c2ecf0
			   - 
Chris PeBenito c2ecf0
			privoxy
Chris PeBenito c2ecf0
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			procmail
Chris PeBenito 885e75
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			publicfile
Chris PeBenito 26deab
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			radius
Chris PeBenito 885e75
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			radvd
Chris PeBenito 862a1e
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			rdisc
Chris PeBenito 885e75
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			remotelogin
Chris PeBenito 8b1125
		
Chris PeBenito 44a4c2
			   - 
Chris PeBenito 44a4c2
			rlogin
Chris PeBenito 44a4c2
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			roundup
Chris PeBenito 26deab
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			rpc
Chris PeBenito 885e75
		
Chris PeBenito c2ecf0
			   - 
Chris PeBenito c2ecf0
			rshd
Chris PeBenito c2ecf0
		
Chris PeBenito c2ecf0
			   - 
Chris PeBenito c2ecf0
			rsync
Chris PeBenito c2ecf0
		
Chris PeBenito 44a4c2
			   - 
Chris PeBenito 44a4c2
			samba
Chris PeBenito 44a4c2
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			sasl
Chris PeBenito 862a1e
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			sendmail
Chris PeBenito 8b1125
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			slrnpull
Chris PeBenito 26deab
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			smartmon
Chris PeBenito 26deab
		
Chris PeBenito 44a4c2
			   - 
Chris PeBenito 44a4c2
			snmp
Chris PeBenito 44a4c2
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			spamassassin
Chris PeBenito 885e75
		
Chris PeBenito e376ad
			   - 
Chris PeBenito e376ad
			squid
Chris PeBenito e376ad
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			ssh
Chris PeBenito 8b1125
		
Chris PeBenito 44a4c2
			   - 
Chris PeBenito 44a4c2
			stunnel
Chris PeBenito 44a4c2
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			sysstat
Chris PeBenito 26deab
		
Chris PeBenito c2ecf0
			   - 
Chris PeBenito c2ecf0
			tcpd
Chris PeBenito c2ecf0
		
Chris PeBenito 44a4c2
			   - 
Chris PeBenito 44a4c2
			telnet
Chris PeBenito 44a4c2
		
Chris PeBenito 44a4c2
			   - 
Chris PeBenito 44a4c2
			tftp
Chris PeBenito 44a4c2
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			timidity
Chris PeBenito 885e75
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			ucspitcp
Chris PeBenito 26deab
		
Chris PeBenito 44a4c2
			   - 
Chris PeBenito 44a4c2
			uucp
Chris PeBenito 44a4c2
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			xfs
Chris PeBenito 885e75
		
Chris PeBenito af3dd8
			   - 
Chris PeBenito af3dd8
			xserver
Chris PeBenito af3dd8
		
Chris PeBenito 44a4c2
			   - 
Chris PeBenito 44a4c2
			zebra
Chris PeBenito 44a4c2
		
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
	
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
		system
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			authlogin
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			clock
Chris PeBenito 8b1125
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			daemontools
Chris PeBenito 26deab
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			fstools
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			getty
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			hostname
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			hotplug
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			init
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			ipsec
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			iptables
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			libraries
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			locallogin
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			logging
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			lvm
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			miscfiles
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			modutils
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			mount
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			pcmcia
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			raid
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			selinuxutil
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			sysnetwork
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			udev
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			unconfined
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			userdomain
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
	
Chris PeBenito 8b1125
	

Chris PeBenito 8b1125
	* Global Booleans 
Chris PeBenito 8b1125
	

Chris PeBenito 8b1125
	* Global Tunables 
Chris PeBenito 8b1125
	


Chris PeBenito 8b1125
	* Layer Index
Chris PeBenito 8b1125
	

Chris PeBenito 8b1125
	* Interface Index
Chris PeBenito 8b1125
	

Chris PeBenito 8b1125
	* Template Index
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125

Global tunables:

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 26deab
allow_cvs_read_shadow
Chris PeBenito 26deab
Chris PeBenito 26deab
Default value
Chris PeBenito 26deab

false

Chris PeBenito 26deab
Chris PeBenito 26deab
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow cvs daemon to read shadow
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Chris PeBenito af3dd8
Chris PeBenito af3dd8
Chris PeBenito af3dd8
Chris PeBenito af3dd8
allow_execheap
Chris PeBenito af3dd8
Chris PeBenito af3dd8
Default value
Chris PeBenito af3dd8

false

Chris PeBenito af3dd8
Chris PeBenito af3dd8
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow making the heap executable.
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 8b1125
allow_execmem
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow making anonymous memory executable, e.g.
Chris PeBenito af3dd8
for runtime-code generation or executable stack.
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
allow_execmod
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow making a modified private file
Chris PeBenito af3dd8
mapping executable (text relocation).
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 44a4c2
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2
allow_execstack
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2
Default value
Chris PeBenito 44a4c2

false

Chris PeBenito 44a4c2
Chris PeBenito 44a4c2
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow making the stack executable via mprotect.
Chris PeBenito af3dd8
Also requires allow_execmem.
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
allow_ftpd_anon_write
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Default value
Chris PeBenito 862a1e

false

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow ftp servers to modify public files
Chris PeBenito af3dd8
used for public file transfer services.
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
allow_gpg_execstack
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow gpg executable stack
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 885e75
allow_gssd_read_tmp
Chris PeBenito 885e75
Chris PeBenito 885e75
Default value
Chris PeBenito 885e75

true

Chris PeBenito 885e75
Chris PeBenito 885e75
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow gssd to read temp directory.
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 885e75
Chris PeBenito 885e75
Chris PeBenito 885e75
Chris PeBenito 885e75
Chris PeBenito 862a1e
allow_httpd_anon_write
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Default value
Chris PeBenito 862a1e

false

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow Apache to modify public files
Chris PeBenito af3dd8
used for public file transfer services.
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 26deab
allow_java_execstack
Chris PeBenito 26deab
Chris PeBenito 26deab
Default value
Chris PeBenito 26deab

false

Chris PeBenito 26deab
Chris PeBenito 26deab
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow java executable stack
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 8b1125
allow_kerberos
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow system to run with kerberos
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
allow_ptrace
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Default value
Chris PeBenito 862a1e

false

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow sysadm to ptrace all processes
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 885e75
allow_rsync_anon_write
Chris PeBenito 885e75
Chris PeBenito 885e75
Default value
Chris PeBenito 885e75

false

Chris PeBenito 885e75
Chris PeBenito 885e75
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow rsync to modify public files
Chris PeBenito af3dd8
used for public file transfer services.
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 885e75
Chris PeBenito 885e75
Chris PeBenito 885e75
Chris PeBenito 885e75
Chris PeBenito 862a1e
allow_saslauthd_read_shadow
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Default value
Chris PeBenito 862a1e

false

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow sasl to read shadow
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 885e75
allow_smbd_anon_write
Chris PeBenito 885e75
Chris PeBenito 885e75
Default value
Chris PeBenito 885e75

false

Chris PeBenito 885e75
Chris PeBenito 885e75
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow samba to modify public files
Chris PeBenito af3dd8
used for public file transfer services.
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 885e75
Chris PeBenito 885e75
Chris PeBenito 885e75
Chris PeBenito 885e75
Chris PeBenito 44a4c2
allow_ssh_keysign
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2
Default value
Chris PeBenito 44a4c2

false

Chris PeBenito 44a4c2
Chris PeBenito 44a4c2
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
allow host key based authentication
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 44a4c2
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2
Chris PeBenito c2ecf0
allow_user_mysql_connect
Chris PeBenito c2ecf0
Chris PeBenito c2ecf0
Default value
Chris PeBenito c2ecf0

false

Chris PeBenito c2ecf0
Chris PeBenito c2ecf0
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow users to connect to mysql
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Chris PeBenito af3dd8
Chris PeBenito af3dd8
Chris PeBenito af3dd8
Chris PeBenito af3dd8
allow_write_xshm
Chris PeBenito af3dd8
Chris PeBenito af3dd8
Default value
Chris PeBenito af3dd8

false

Chris PeBenito af3dd8
Chris PeBenito af3dd8
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allows clients to write to the X server shared
Chris PeBenito af3dd8
memory segments.
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito c2ecf0
Chris PeBenito c2ecf0
Chris PeBenito c2ecf0
Chris PeBenito c2ecf0
Chris PeBenito 8b1125
allow_ypbind
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow system to run with NIS
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 26deab
cdrecord_read_content
Chris PeBenito 26deab
Chris PeBenito 26deab
Default value
Chris PeBenito 26deab

false

Chris PeBenito 26deab
Chris PeBenito 26deab
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow cdrecord to read various content.
Chris PeBenito af3dd8
nfs, samba, removable devices, user temp
Chris PeBenito af3dd8
and untrusted content files
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 8b1125
cron_can_relabel
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow system cron jobs to relabel filesystem
Chris PeBenito af3dd8
for restoring file contexts.
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
fcron_crond
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Enable extra rules in the cron domain
Chris PeBenito af3dd8
to support fcron.
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
ftp_home_dir
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Default value
Chris PeBenito 862a1e

false

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow ftp to read and write files in the user home directories
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
ftpd_is_daemon
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Default value
Chris PeBenito 862a1e

false

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow ftpd to run directly without inetd
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
httpd_builtin_scripting
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Default value
Chris PeBenito 862a1e

false

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow httpd to use built in scripting (usually php)
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
httpd_can_network_connect
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Default value
Chris PeBenito 862a1e

false

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow http daemon to tcp connect
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 26deab
httpd_can_network_connect_db
Chris PeBenito 26deab
Chris PeBenito 26deab
Default value
Chris PeBenito 26deab

false

Chris PeBenito 26deab
Chris PeBenito 26deab
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow httpd to connect to mysql/posgresql
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
httpd_can_network_relay
Chris PeBenito 26deab
Chris PeBenito 26deab
Default value
Chris PeBenito 26deab

false

Chris PeBenito 26deab
Chris PeBenito 26deab
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow httpd to act as a relay
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 26deab
Chris PeBenito 862a1e
httpd_enable_cgi
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Default value
Chris PeBenito 862a1e

false

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow httpd cgi support
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 885e75
httpd_enable_ftp_server
Chris PeBenito 885e75
Chris PeBenito 885e75
Default value
Chris PeBenito 885e75

false

Chris PeBenito 885e75
Chris PeBenito 885e75
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow httpd to act as a FTP server by
Chris PeBenito af3dd8
listening on the ftp port.
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 885e75
Chris PeBenito 885e75
Chris PeBenito 885e75
Chris PeBenito 885e75
Chris PeBenito 862a1e
httpd_enable_homedirs
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Default value
Chris PeBenito 862a1e

false

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow httpd to read home directories
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
httpd_ssi_exec
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Default value
Chris PeBenito 862a1e

false

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Run SSI execs in system CGI script domain.
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
httpd_tty_comm
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Default value
Chris PeBenito 862a1e

false

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow http daemon to communicate with the TTY
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
httpd_unified
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Default value
Chris PeBenito 862a1e

false

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Run CGI in the main httpd domain
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito c2ecf0
named_write_master_zones
Chris PeBenito c2ecf0
Chris PeBenito c2ecf0
Default value
Chris PeBenito c2ecf0

false

Chris PeBenito c2ecf0
Chris PeBenito c2ecf0
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow BIND to write the master zone files.
Chris PeBenito af3dd8
Generally this is used for dynamic DNS.
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 885e75
nfs_export_all_ro
Chris PeBenito 885e75
Chris PeBenito 885e75
Default value
Chris PeBenito 885e75

false

Chris PeBenito 885e75
Chris PeBenito 885e75
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow nfs to be exported read only
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 885e75
Chris PeBenito 885e75
Chris PeBenito 885e75
Chris PeBenito 885e75
Chris PeBenito 885e75
nfs_export_all_rw
Chris PeBenito 885e75
Chris PeBenito 885e75
Default value
Chris PeBenito 885e75

false

Chris PeBenito 885e75
Chris PeBenito 885e75
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow nfs to be exported read/write.
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 885e75
Chris PeBenito 885e75
Chris PeBenito 885e75
Chris PeBenito 885e75
Chris PeBenito 862a1e
pppd_can_insmod
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Default value
Chris PeBenito 862a1e

false

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow pppd to load kernel modules for certain modems
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Chris PeBenito 862a1e
pppd_for_user
Chris PeBenito 862a1e
Chris PeBenito 862a1e
Default value
Chris PeBenito 862a1e

false

Chris PeBenito 862a1e
Chris PeBenito 862a1e
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow pppd to be run for a regular user
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito c2ecf0
Chris PeBenito c2ecf0
Chris PeBenito c2ecf0
Chris PeBenito c2ecf0
Chris PeBenito 8b1125
read_default_t
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow reading of default_t files.
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 44a4c2
read_untrusted_content
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2
Default value
Chris PeBenito 44a4c2

false

Chris PeBenito 44a4c2
Chris PeBenito 44a4c2
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow applications to read untrusted content
Chris PeBenito af3dd8
If this is disallowed, Internet content has
Chris PeBenito af3dd8
to be manually relabeled for read access to be granted
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 44a4c2
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2
Chris PeBenito 8b1125
run_ssh_inetd
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow ssh to run from inetd instead of as a daemon.
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 885e75
samba_enable_home_dirs
Chris PeBenito 885e75
Chris PeBenito 885e75
Default value
Chris PeBenito 885e75

false

Chris PeBenito 885e75
Chris PeBenito 885e75
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow samba to export user home directories.
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 885e75
Chris PeBenito 885e75
Chris PeBenito 885e75
Chris PeBenito 885e75
Chris PeBenito 885e75
spamassasin_can_network
Chris PeBenito 885e75
Chris PeBenito 885e75
Default value
Chris PeBenito 885e75

false

Chris PeBenito 885e75
Chris PeBenito 885e75
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow spamassassin to do DNS lookups
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 885e75
Chris PeBenito 885e75
Chris PeBenito 885e75
Chris PeBenito 885e75
Chris PeBenito 885e75
spamassassin_can_network
Chris PeBenito 885e75
Chris PeBenito 885e75
Default value
Chris PeBenito 885e75

false

Chris PeBenito 885e75
Chris PeBenito 885e75
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow user spamassassin clients to use the network.
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Chris PeBenito af3dd8
Chris PeBenito af3dd8
Chris PeBenito af3dd8
Chris PeBenito af3dd8
spamd_enable_home_dirs
Chris PeBenito af3dd8
Chris PeBenito af3dd8
Default value
Chris PeBenito af3dd8

true

Chris PeBenito af3dd8
Chris PeBenito af3dd8
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow spammd to read/write user home directories.
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 885e75
Chris PeBenito 885e75
Chris PeBenito 885e75
Chris PeBenito 885e75
Chris PeBenito 44a4c2
squid_connect_any
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow squid to connect to all ports, not just
Chris PeBenito af3dd8
HTTP, FTP, and Gopher ports.
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 44a4c2
ssh_sysadm_login
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow ssh logins as sysadm_r:sysadm_t
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 44a4c2
staff_read_sysadm_file
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow staff_r users to search the sysadm home
Chris PeBenito af3dd8
dir and read files (such as ~/.bashrc)
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 885e75
stunnel_is_daemon
Chris PeBenito 885e75
Chris PeBenito 885e75
Default value
Chris PeBenito 885e75

false

Chris PeBenito 885e75
Chris PeBenito 885e75
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Configure stunnel to be a standalone daemon or
Chris PeBenito af3dd8
inetd service.
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 885e75
Chris PeBenito 885e75
Chris PeBenito 885e75
Chris PeBenito 885e75
Chris PeBenito 8b1125
use_nfs_home_dirs
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Support NFS home directories
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
use_samba_home_dirs
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Support SAMBA home directories
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
user_direct_mouse
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow regular users direct mouse access
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
user_dmesg
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow users to read system messages.
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
user_net_control
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow users to control network interfaces
Chris PeBenito af3dd8
(also needs USERCTL=true)
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
user_ping
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Control users use of ping and traceroute
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
user_rw_noexattrfile
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow user to r/w files on filesystems
Chris PeBenito af3dd8
that do not have extended attributes (FAT, CDROM, FLOPPY)
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
user_rw_usb
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow users to rw usb devices
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
user_tcp_server
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow users to run TCP servers (bind to ports and accept connection from
Chris PeBenito af3dd8
the same domain and outside users)  disabling this forces FTP passive mode
Chris PeBenito af3dd8
and may change other protocols.
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
user_ttyfile_stat
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow w to display everyone
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2
write_untrusted_content
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2
Default value
Chris PeBenito 44a4c2

false

Chris PeBenito 44a4c2
Chris PeBenito 44a4c2
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow applications to write untrusted content
Chris PeBenito af3dd8
If this is disallowed, no Internet content
Chris PeBenito af3dd8
will be stored.
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Chris PeBenito af3dd8
Chris PeBenito af3dd8
Chris PeBenito af3dd8
Chris PeBenito af3dd8
xdm_sysadm_login
Chris PeBenito af3dd8
Chris PeBenito af3dd8
Default value
Chris PeBenito af3dd8

false

Chris PeBenito af3dd8
Chris PeBenito af3dd8
Description
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito af3dd8
Allow xdm logins as sysadm
Chris PeBenito af3dd8

Chris PeBenito af3dd8

Chris PeBenito 44a4c2
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
</body>
Chris PeBenito 8b1125
</html>