rpms / selinux-policy

Clone
Source Code
GIT

Blame www/api-docs/global_tunables.html

c10s-sig-hyperscale c4 c5 c5-plus c6 c6-plus c7 c7-alt c7-atomic c7-beta c8 c8-beta c8s c8s-sig-hyperscale c9 c9-beta c9s-sig-hyperscale
  1.   8f6cbfebd154f4d3c60c2efb741b4a4c84d24a9f
  2.   www
  3.   api-docs
  4.   global_tunables.html
Blob History Raw
Chris PeBenito 8b1125 
<html>
Chris PeBenito 8b1125 
<head>
Chris PeBenito 8b1125 
<title>
Chris PeBenito 8b1125 
 Security Enhanced Linux Reference Policy
Chris PeBenito 8b1125 
 </title>
Chris PeBenito 8b1125 
<style type="text/css" media="all">@import "style.css";</style>
Chris PeBenito 8b1125 
</head>
Chris PeBenito 8b1125 
<body>
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
		+ 
Chris PeBenito 8b1125 
		admin
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito c2ecf0 
			   - 
Chris PeBenito c2ecf0 
			acct
Chris PeBenito c2ecf0
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			consoletype
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			dmesg
Chris PeBenito 8b1125
Chris PeBenito c2ecf0 
			   - 
Chris PeBenito c2ecf0 
			firstboot
Chris PeBenito c2ecf0
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			logrotate
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			netutils
Chris PeBenito 8b1125
Chris PeBenito c2ecf0 
			   - 
Chris PeBenito c2ecf0 
			quota
Chris PeBenito c2ecf0
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			rpm
Chris PeBenito 8b1125
Chris PeBenito c2ecf0 
			   - 
Chris PeBenito c2ecf0 
			su
Chris PeBenito c2ecf0
Chris PeBenito c2ecf0 
			   - 
Chris PeBenito c2ecf0 
			sudo
Chris PeBenito c2ecf0
Chris PeBenito c2ecf0 
			   - 
Chris PeBenito c2ecf0 
			tmpreaper
Chris PeBenito c2ecf0
Chris PeBenito c2ecf0 
			   - 
Chris PeBenito c2ecf0 
			updfstab
Chris PeBenito c2ecf0
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			usermanage
Chris PeBenito 8b1125
Chris PeBenito 44a4c2 
			   - 
Chris PeBenito 44a4c2 
			vpn
Chris PeBenito 44a4c2
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
		+ 
Chris PeBenito 8b1125 
		apps
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			gpg
Chris PeBenito 8b1125
Chris PeBenito c2ecf0 
			   - 
Chris PeBenito c2ecf0 
			loadkeys
Chris PeBenito c2ecf0
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
		+ 
Chris PeBenito 8b1125 
		kernel
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			bootloader
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			corenetwork
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			devices
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			filesystem
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			kernel
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			selinux
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			storage
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			terminal
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
		+ 
Chris PeBenito 8b1125 
		services
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito c2ecf0 
			   - 
Chris PeBenito c2ecf0 
			bind
Chris PeBenito c2ecf0
Chris PeBenito e376ad 
			   - 
Chris PeBenito e376ad 
			comsat
Chris PeBenito e376ad
Chris PeBenito 44a4c2 
			   - 
Chris PeBenito 44a4c2 
			cpucontrol
Chris PeBenito 44a4c2
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			cron
Chris PeBenito 8b1125
Chris PeBenito 44a4c2 
			   - 
Chris PeBenito 44a4c2 
			cvs
Chris PeBenito 44a4c2
Chris PeBenito e376ad 
			   - 
Chris PeBenito e376ad 
			dbus
Chris PeBenito e376ad
Chris PeBenito e376ad 
			   - 
Chris PeBenito e376ad 
			dhcp
Chris PeBenito e376ad
Chris PeBenito e376ad 
			   - 
Chris PeBenito e376ad 
			dictd
Chris PeBenito e376ad
Chris PeBenito c2ecf0 
			   - 
Chris PeBenito c2ecf0 
			gpm
Chris PeBenito c2ecf0
Chris PeBenito e376ad 
			   - 
Chris PeBenito e376ad 
			hal
Chris PeBenito e376ad
Chris PeBenito c2ecf0 
			   - 
Chris PeBenito c2ecf0 
			howl
Chris PeBenito c2ecf0
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			inetd
Chris PeBenito 8b1125
Chris PeBenito e376ad 
			   - 
Chris PeBenito e376ad 
			inn
Chris PeBenito e376ad
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			kerberos
Chris PeBenito 8b1125
Chris PeBenito 44a4c2 
			   - 
Chris PeBenito 44a4c2 
			ktalk
Chris PeBenito 44a4c2
Chris PeBenito c2ecf0 
			   - 
Chris PeBenito c2ecf0 
			ldap
Chris PeBenito c2ecf0
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			mta
Chris PeBenito 8b1125
Chris PeBenito c2ecf0 
			   - 
Chris PeBenito c2ecf0 
			mysql
Chris PeBenito c2ecf0
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			nis
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			nscd
Chris PeBenito 8b1125
Chris PeBenito e376ad 
			   - 
Chris PeBenito e376ad 
			ntp
Chris PeBenito e376ad
Chris PeBenito 44a4c2 
			   - 
Chris PeBenito 44a4c2 
			portmap
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2 
			   - 
Chris PeBenito 44a4c2 
			postgresql
Chris PeBenito 44a4c2
Chris PeBenito c2ecf0 
			   - 
Chris PeBenito c2ecf0 
			privoxy
Chris PeBenito c2ecf0
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			remotelogin
Chris PeBenito 8b1125
Chris PeBenito 44a4c2 
			   - 
Chris PeBenito 44a4c2 
			rlogin
Chris PeBenito 44a4c2
Chris PeBenito c2ecf0 
			   - 
Chris PeBenito c2ecf0 
			rshd
Chris PeBenito c2ecf0
Chris PeBenito c2ecf0 
			   - 
Chris PeBenito c2ecf0 
			rsync
Chris PeBenito c2ecf0
Chris PeBenito 44a4c2 
			   - 
Chris PeBenito 44a4c2 
			samba
Chris PeBenito 44a4c2
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			sendmail
Chris PeBenito 8b1125
Chris PeBenito 44a4c2 
			   - 
Chris PeBenito 44a4c2 
			snmp
Chris PeBenito 44a4c2
Chris PeBenito e376ad 
			   - 
Chris PeBenito e376ad 
			squid
Chris PeBenito e376ad
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			ssh
Chris PeBenito 8b1125
Chris PeBenito 44a4c2 
			   - 
Chris PeBenito 44a4c2 
			stunnel
Chris PeBenito 44a4c2
Chris PeBenito c2ecf0 
			   - 
Chris PeBenito c2ecf0 
			tcpd
Chris PeBenito c2ecf0
Chris PeBenito 44a4c2 
			   - 
Chris PeBenito 44a4c2 
			telnet
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2 
			   - 
Chris PeBenito 44a4c2 
			tftp
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2 
			   - 
Chris PeBenito 44a4c2 
			uucp
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2 
			   - 
Chris PeBenito 44a4c2 
			zebra
Chris PeBenito 44a4c2
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
		+ 
Chris PeBenito 8b1125 
		system
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			authlogin
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			clock
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			corecommands
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			domain
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			files
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			fstools
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			getty
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			hostname
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			hotplug
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			init
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			ipsec
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			iptables
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			libraries
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			locallogin
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			logging
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			lvm
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			miscfiles
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			modutils
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			mount
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			pcmcia
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			raid
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			selinuxutil
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			sysnetwork
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			udev
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			unconfined
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
			   - 
Chris PeBenito 8b1125 
			userdomain
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
	* Global Booleans 
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
	* Global Tunables 
Chris PeBenito 8b1125

Chris PeBenito 8b1125 
	* Layer Index
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
	* Interface Index
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
	* Template Index
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Global tunables:
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
allow_execmem
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Default value
Chris PeBenito 8b1125 
false
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Description
Chris PeBenito 8b1125
Chris PeBenito 44a4c2 
Allow making anonymous memory executable, e.g.
Chris PeBenito 44a4c2 
for runtime-code generation or executable stack.
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
allow_execmod
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Default value
Chris PeBenito 8b1125 
false
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Description
Chris PeBenito 8b1125
Chris PeBenito 44a4c2 
Allow making a modified private file
Chris PeBenito 44a4c2 
mapping executable (text relocation).
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2 
allow_execstack
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2 
Default value
Chris PeBenito 44a4c2 
false
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2 
Description
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2 
Allow making the stack executable via mprotect.
Chris PeBenito 44a4c2 
Also requires allow_execmem.
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
allow_gpg_execstack
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Default value
Chris PeBenito 8b1125 
false
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Description
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Allow gpg executable stack
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
allow_kerberos
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Default value
Chris PeBenito 8b1125 
false
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Description
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Allow system to run with kerberos
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 44a4c2 
allow_ssh_keysign
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2 
Default value
Chris PeBenito 44a4c2 
false
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2 
Description
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2 
allow host key based authentication
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2
Chris PeBenito c2ecf0 
allow_user_mysql_connect
Chris PeBenito c2ecf0
Chris PeBenito c2ecf0 
Default value
Chris PeBenito c2ecf0 
false
Chris PeBenito c2ecf0
Chris PeBenito c2ecf0 
Description
Chris PeBenito c2ecf0
Chris PeBenito c2ecf0 
Allow users to connect to mysql
Chris PeBenito c2ecf0
Chris PeBenito c2ecf0
Chris PeBenito c2ecf0
Chris PeBenito c2ecf0
Chris PeBenito c2ecf0
Chris PeBenito 8b1125 
allow_ypbind
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Default value
Chris PeBenito 8b1125 
false
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Description
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Allow system to run with NIS
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
cron_can_relabel
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Default value
Chris PeBenito 8b1125 
false
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Description
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Allow system cron jobs to relabel filesystem
Chris PeBenito 8b1125 
for restoring file contexts.
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
fcron_crond
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Default value
Chris PeBenito 8b1125 
false
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Description
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Enable extra rules in the cron domain
Chris PeBenito 8b1125 
to support fcron.
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito c2ecf0 
named_write_master_zones
Chris PeBenito c2ecf0
Chris PeBenito c2ecf0 
Default value
Chris PeBenito c2ecf0 
false
Chris PeBenito c2ecf0
Chris PeBenito c2ecf0 
Description
Chris PeBenito c2ecf0
Chris PeBenito c2ecf0 
Allow BIND to write the master zone files.
Chris PeBenito c2ecf0 
Generally this is used for dynamic DNS.
Chris PeBenito c2ecf0
Chris PeBenito c2ecf0
Chris PeBenito c2ecf0
Chris PeBenito c2ecf0
Chris PeBenito c2ecf0
Chris PeBenito 8b1125 
read_default_t
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Default value
Chris PeBenito 8b1125 
false
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Description
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Allow reading of default_t files.
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 44a4c2 
read_untrusted_content
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2 
Default value
Chris PeBenito 44a4c2 
false
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2 
Description
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2 
Allow applications to read untrusted content
Chris PeBenito 44a4c2 
If this is disallowed, Internet content has
Chris PeBenito 44a4c2 
to be manually relabeled for read access to be granted
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2
Chris PeBenito 8b1125 
run_ssh_inetd
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Default value
Chris PeBenito 8b1125 
false
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Description
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Allow ssh to run from inetd instead of as a daemon.
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 44a4c2 
squid_connect_any
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Default value
Chris PeBenito 8b1125 
false
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Description
Chris PeBenito 8b1125
Chris PeBenito 44a4c2 
Allow squid to connect to all ports, not just
Chris PeBenito 44a4c2 
HTTP, FTP, and Gopher ports.
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 44a4c2 
ssh_sysadm_login
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Default value
Chris PeBenito 8b1125 
false
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Description
Chris PeBenito 8b1125
Chris PeBenito 44a4c2 
Allow ssh logins as sysadm_r:sysadm_t
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 44a4c2 
staff_read_sysadm_file
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Default value
Chris PeBenito 8b1125 
false
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Description
Chris PeBenito 8b1125
Chris PeBenito 44a4c2 
Allow staff_r users to search the sysadm home
Chris PeBenito 44a4c2 
dir and read files (such as ~/.bashrc)
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
use_nfs_home_dirs
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Default value
Chris PeBenito 8b1125 
false
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Description
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Support NFS home directories
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
use_samba_home_dirs
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Default value
Chris PeBenito 8b1125 
false
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Description
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Support SAMBA home directories
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
user_direct_mouse
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Default value
Chris PeBenito 8b1125 
false
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Description
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Allow regular users direct mouse access
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
user_dmesg
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Default value
Chris PeBenito 8b1125 
false
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Description
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Allow users to read system messages.
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
user_net_control
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Default value
Chris PeBenito 8b1125 
false
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Description
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Allow users to control network interfaces
Chris PeBenito 8b1125 
(also needs USERCTL=true)
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
user_ping
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Default value
Chris PeBenito 8b1125 
false
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Description
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Control users use of ping and traceroute
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
user_rw_noexattrfile
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Default value
Chris PeBenito 8b1125 
false
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Description
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Allow user to r/w noextattrfile (FAT, CDROM, FLOPPY)
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
user_rw_usb
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Default value
Chris PeBenito 8b1125 
false
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Description
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Allow users to rw usb devices
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
user_tcp_server
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Default value
Chris PeBenito 8b1125 
false
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Description
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Allow users to run TCP servers (bind to ports and accept connection from
Chris PeBenito 8b1125 
the same domain and outside users)  disabling this forces FTP passive mode
Chris PeBenito 8b1125 
and may change other protocols.
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
user_ttyfile_stat
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Default value
Chris PeBenito 8b1125 
false
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Description
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
Allow w to display everyone
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2 
write_untrusted_content
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2 
Default value
Chris PeBenito 44a4c2 
false
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2 
Description
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2 
Allow applications to write untrusted content
Chris PeBenito 44a4c2 
If this is disallowed, no Internet content
Chris PeBenito 44a4c2 
will be stored.
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2
Chris PeBenito 44a4c2
Chris PeBenito 8b1125
Chris PeBenito 8b1125
Chris PeBenito 8b1125 
</body>
Chris PeBenito 8b1125 
</html>

Powered by Pagure 5.14.1

SSH Hostkey/Fingerprint | Documentation