Chris PeBenito 8b1125
<html>
Chris PeBenito 8b1125
<head>
Chris PeBenito 8b1125
<title>
Chris PeBenito 8b1125
 Security Enhanced Linux Reference Policy
Chris PeBenito 8b1125
 </title>
Chris PeBenito 8b1125
<style type="text/css" media="all">@import "style.css";</style>
Chris PeBenito 8b1125
</head>
Chris PeBenito 8b1125
<body>
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
	
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
		admin
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			consoletype
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			dmesg
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			logrotate
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			netutils
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			rpm
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			usermanage
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
	
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
		apps
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			gpg
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
	
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
		kernel
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			bootloader
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			corenetwork
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			devices
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			filesystem
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			kernel
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			selinux
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			storage
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			terminal
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
	
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
		services
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			cron
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			inetd
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			kerberos
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			mta
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			nis
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			nscd
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			remotelogin
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			sendmail
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			ssh
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
	
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
		system
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			authlogin
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			clock
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			corecommands
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			domain
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			files
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			fstools
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			getty
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			hostname
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			hotplug
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			init
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			ipsec
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			iptables
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			libraries
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			locallogin
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			logging
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			lvm
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			miscfiles
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			modutils
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			mount
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			pcmcia
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			raid
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			selinuxutil
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			sysnetwork
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			udev
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			unconfined
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			userdomain
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
		
Chris PeBenito 8b1125
	
Chris PeBenito 8b1125
	

Chris PeBenito 8b1125
	* Global Booleans 
Chris PeBenito 8b1125
	

Chris PeBenito 8b1125
	* Global Tunables 
Chris PeBenito 8b1125
	


Chris PeBenito 8b1125
	* Layer Index
Chris PeBenito 8b1125
	

Chris PeBenito 8b1125
	* Interface Index
Chris PeBenito 8b1125
	

Chris PeBenito 8b1125
	* Template Index
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125

Global tunables:

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
allow_execmem
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Allow execution of anonymous mappings, e.g. executable stack.
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
allow_execmod
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Support Share libraries with text relocations
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
allow_gpg_execstack
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Allow gpg executable stack
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
allow_kerberos
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Allow system to run with kerberos
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
allow_ypbind
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Allow system to run with NIS
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
cron_can_relabel
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Allow system cron jobs to relabel filesystem
Chris PeBenito 8b1125
for restoring file contexts.
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
fcron_crond
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Enable extra rules in the cron domain
Chris PeBenito 8b1125
to support fcron.
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
read_default_t
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Allow reading of default_t files.
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
run_ssh_inetd
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Allow ssh to run from inetd instead of as a daemon.
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
ssh_sysadm_login
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Allow ssh logins as sysadm_r:sysadm_t
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
staff_read_sysadm_file
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Allow staff_r users to search the sysadm home 
Chris PeBenito 8b1125
dir and read files (such as ~/.bashrc)
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
use_dns
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Allow the use of DNS for name resolution.
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
use_nfs_home_dirs
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Support NFS home directories
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
use_samba_home_dirs
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Support SAMBA home directories
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
user_direct_mouse
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Allow regular users direct mouse access 
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
user_dmesg
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Allow users to read system messages.
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
user_net_control
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Allow users to control network interfaces
Chris PeBenito 8b1125
(also needs USERCTL=true)
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
user_ping
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Control users use of ping and traceroute
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
user_rw_noexattrfile
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Allow user to r/w noextattrfile (FAT, CDROM, FLOPPY)
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
user_rw_usb
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Allow users to rw usb devices
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
user_tcp_server
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Allow users to run TCP servers (bind to ports and accept connection from
Chris PeBenito 8b1125
the same domain and outside users)  disabling this forces FTP passive mode
Chris PeBenito 8b1125
and may change other protocols.
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
user_ttyfile_stat
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Default value
Chris PeBenito 8b1125

false

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Description
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Allow w to display everyone
Chris PeBenito 8b1125

Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
</body>
Chris PeBenito 8b1125
</html>