Chris PeBenito e3a8e3
<html>
Chris PeBenito e3a8e3
<head>
Chris PeBenito e3a8e3
<title>
Chris PeBenito e3a8e3
 Security Enhanced Linux Reference Policy
Chris PeBenito e3a8e3
 </title>
Chris PeBenito e3a8e3
<style type="text/css" media="all">@import "style.css";</style>
Chris PeBenito e3a8e3
</head>
Chris PeBenito e3a8e3
<body>
Chris PeBenito e3a8e3
Chris PeBenito e3a8e3
Chris PeBenito e3a8e3
	
Chris PeBenito e3a8e3
		
Chris PeBenito e3a8e3
		admin
Chris PeBenito e3a8e3
		
Chris PeBenito e3a8e3
		
Chris PeBenito e3a8e3
		
Chris PeBenito e3a8e3
	
Chris PeBenito e3a8e3
		
Chris PeBenito e3a8e3
		apps
Chris PeBenito e3a8e3
		
Chris PeBenito e3a8e3
		
Chris PeBenito e3a8e3
		
Chris PeBenito e3a8e3
	
Chris PeBenito e3a8e3
		
Chris PeBenito e3a8e3
		kernel
Chris PeBenito e3a8e3
		
Chris PeBenito e3a8e3
		
Chris PeBenito e3a8e3
		
Chris PeBenito e3a8e3
	
Chris PeBenito e3a8e3
		
Chris PeBenito e3a8e3
		services
Chris PeBenito e3a8e3
		
Chris PeBenito e3a8e3
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			apache
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			apm
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			arpwatch
Chris PeBenito 862a1e
		
Chris PeBenito c2ecf0
			   - 
Chris PeBenito c2ecf0
			bind
Chris PeBenito c2ecf0
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			bluetooth
Chris PeBenito 862a1e
		
Chris PeBenito e376ad
			   - 
Chris PeBenito e376ad
			comsat
Chris PeBenito e376ad
		
Chris PeBenito 44a4c2
			   - 
Chris PeBenito 44a4c2
			cpucontrol
Chris PeBenito 44a4c2
		
Chris PeBenito e3a8e3
			   - 
Chris PeBenito e3a8e3
			cron
Chris PeBenito e3a8e3
		
Chris PeBenito 44a4c2
			   - 
Chris PeBenito 44a4c2
			cvs
Chris PeBenito 44a4c2
		
Chris PeBenito e376ad
			   - 
Chris PeBenito e376ad
			dbus
Chris PeBenito e376ad
		
Chris PeBenito e376ad
			   - 
Chris PeBenito e376ad
			dhcp
Chris PeBenito e376ad
		
Chris PeBenito e376ad
			   - 
Chris PeBenito e376ad
			dictd
Chris PeBenito e376ad
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			finger
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			ftp
Chris PeBenito 862a1e
		
Chris PeBenito c2ecf0
			   - 
Chris PeBenito c2ecf0
			gpm
Chris PeBenito c2ecf0
		
Chris PeBenito e376ad
			   - 
Chris PeBenito e376ad
			hal
Chris PeBenito e376ad
		
Chris PeBenito c2ecf0
			   - 
Chris PeBenito c2ecf0
			howl
Chris PeBenito c2ecf0
		
Chris PeBenito e3a8e3
			   - 
Chris PeBenito e3a8e3
			inetd
Chris PeBenito e3a8e3
		
Chris PeBenito e376ad
			   - 
Chris PeBenito e376ad
			inn
Chris PeBenito e376ad
		
Chris PeBenito e3a8e3
			   - 
Chris PeBenito e3a8e3
			kerberos
Chris PeBenito e3a8e3
		
Chris PeBenito 44a4c2
			   - 
Chris PeBenito 44a4c2
			ktalk
Chris PeBenito 44a4c2
		
Chris PeBenito c2ecf0
			   - 
Chris PeBenito c2ecf0
			ldap
Chris PeBenito c2ecf0
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			mailman
Chris PeBenito 862a1e
		
Chris PeBenito e3a8e3
			   - 
Chris PeBenito e3a8e3
			mta
Chris PeBenito e3a8e3
		
Chris PeBenito c2ecf0
			   - 
Chris PeBenito c2ecf0
			mysql
Chris PeBenito c2ecf0
		
Chris PeBenito e3a8e3
			   - 
Chris PeBenito e3a8e3
			nis
Chris PeBenito e3a8e3
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			nscd
Chris PeBenito 8b1125
		
Chris PeBenito e376ad
			   - 
Chris PeBenito e376ad
			ntp
Chris PeBenito e376ad
		
Chris PeBenito 44a4c2
			   - 
Chris PeBenito 44a4c2
			portmap
Chris PeBenito 44a4c2
		
Chris PeBenito 44a4c2
			   - 
Chris PeBenito 44a4c2
			postgresql
Chris PeBenito 44a4c2
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			ppp
Chris PeBenito 862a1e
		
Chris PeBenito c2ecf0
			   - 
Chris PeBenito c2ecf0
			privoxy
Chris PeBenito c2ecf0
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			radvd
Chris PeBenito 862a1e
		
Chris PeBenito e3a8e3
			   - 
Chris PeBenito e3a8e3
			remotelogin
Chris PeBenito e3a8e3
		
Chris PeBenito 44a4c2
			   - 
Chris PeBenito 44a4c2
			rlogin
Chris PeBenito 44a4c2
		
Chris PeBenito c2ecf0
			   - 
Chris PeBenito c2ecf0
			rshd
Chris PeBenito c2ecf0
		
Chris PeBenito c2ecf0
			   - 
Chris PeBenito c2ecf0
			rsync
Chris PeBenito c2ecf0
		
Chris PeBenito 44a4c2
			   - 
Chris PeBenito 44a4c2
			samba
Chris PeBenito 44a4c2
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			sasl
Chris PeBenito 862a1e
		
Chris PeBenito e3a8e3
			   - 
Chris PeBenito e3a8e3
			sendmail
Chris PeBenito e3a8e3
		
Chris PeBenito 44a4c2
			   - 
Chris PeBenito 44a4c2
			snmp
Chris PeBenito 44a4c2
		
Chris PeBenito e376ad
			   - 
Chris PeBenito e376ad
			squid
Chris PeBenito e376ad
		
Chris PeBenito e3a8e3
			   - 
Chris PeBenito e3a8e3
			ssh
Chris PeBenito e3a8e3
		
Chris PeBenito 44a4c2
			   - 
Chris PeBenito 44a4c2
			stunnel
Chris PeBenito 44a4c2
		
Chris PeBenito c2ecf0
			   - 
Chris PeBenito c2ecf0
			tcpd
Chris PeBenito c2ecf0
		
Chris PeBenito 44a4c2
			   - 
Chris PeBenito 44a4c2
			telnet
Chris PeBenito 44a4c2
		
Chris PeBenito 44a4c2
			   - 
Chris PeBenito 44a4c2
			tftp
Chris PeBenito 44a4c2
		
Chris PeBenito 44a4c2
			   - 
Chris PeBenito 44a4c2
			uucp
Chris PeBenito 44a4c2
		
Chris PeBenito 44a4c2
			   - 
Chris PeBenito 44a4c2
			zebra
Chris PeBenito 44a4c2
		
Chris PeBenito e3a8e3
		
Chris PeBenito e3a8e3
	
Chris PeBenito e3a8e3
		
Chris PeBenito e3a8e3
		system
Chris PeBenito e3a8e3
		
Chris PeBenito e3a8e3
		
Chris PeBenito e3a8e3
		
Chris PeBenito e3a8e3
	
Chris PeBenito e3a8e3
	

Chris PeBenito 8b1125
	* Global Booleans 
Chris PeBenito 8b1125
	

Chris PeBenito 8b1125
	* Global Tunables 
Chris PeBenito 8b1125
	


Chris PeBenito 8b1125
	* Layer Index
Chris PeBenito e3a8e3
	

Chris PeBenito 8b1125
	* Interface Index
Chris PeBenito 8b1125
	

Chris PeBenito 8b1125
	* Template Index
Chris PeBenito e3a8e3
Chris PeBenito e3a8e3
Chris PeBenito e3a8e3
Chris PeBenito e3a8e3
Chris PeBenito e3a8e3

Layer: services

Chris PeBenito e3a8e3

Module: kerberos

Chris PeBenito e3a8e3
Chris PeBenito e3a8e3

Description:

Chris PeBenito e3a8e3
 
Chris PeBenito 767266

Chris PeBenito e3a8e3

Chris PeBenito e3a8e3
This policy supports:
Chris PeBenito e3a8e3

Chris PeBenito e3a8e3

Chris PeBenito e3a8e3
Servers:
Chris PeBenito 8b1125

Chris PeBenito 862a1e

  • kadmind

  • Chris PeBenito 862a1e

  • krb5kdc

  • Chris PeBenito 8b1125

    Chris PeBenito 8b1125

    Chris PeBenito e3a8e3

    Chris PeBenito e3a8e3
    Clients:
    Chris PeBenito 8b1125

    Chris PeBenito 862a1e

  • kinit

  • Chris PeBenito 862a1e

  • kdestroy

  • Chris PeBenito 862a1e

  • klist

  • Chris PeBenito 862a1e

  • ksu (incomplete)

  • Chris PeBenito 8b1125

    Chris PeBenito 8b1125

    Chris PeBenito 767266

    Chris PeBenito 767266
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3

    Interfaces:

    Chris PeBenito e3a8e3
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    kerberos_dontaudit_write_config(
    Chris PeBenito 44a4c2
    	
    Chris PeBenito 44a4c2
    		
    Chris PeBenito 44a4c2
    		
    Chris PeBenito 44a4c2
    		
    Chris PeBenito 44a4c2
    		domain
    Chris PeBenito 44a4c2
    		
    Chris PeBenito 44a4c2
    	
    Chris PeBenito 44a4c2
    	)
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Summary
    Chris PeBenito 44a4c2

    Chris PeBenito 44a4c2
    Do not audit attempts to write the kerberos
    Chris PeBenito 44a4c2
    configuration file (/etc/krb5.conf).
    Chris PeBenito 44a4c2

    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Parameters
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Parameter:Description:Optional:
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    domain
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Domain to not audit.
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    No
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito c2ecf0
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito c2ecf0
    kerberos_read_config(
    Chris PeBenito e3a8e3
    	
    Chris PeBenito e3a8e3
    		
    Chris PeBenito e3a8e3
    		
    Chris PeBenito e3a8e3
    		
    Chris PeBenito e3a8e3
    		domain
    Chris PeBenito e3a8e3
    		
    Chris PeBenito e3a8e3
    	
    Chris PeBenito e3a8e3
    	)
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Summary
    Chris PeBenito e3a8e3

    Chris PeBenito e3a8e3
    Read the kerberos configuration file (/etc/krb5.conf).
    Chris PeBenito e3a8e3

    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Parameters
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Parameter:Description:Optional:
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    domain
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Domain allowed access.
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    No
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    kerberos_read_keytab(
    Chris PeBenito 44a4c2
    	
    Chris PeBenito 44a4c2
    		
    Chris PeBenito 44a4c2
    		
    Chris PeBenito 44a4c2
    		
    Chris PeBenito 44a4c2
    		domain
    Chris PeBenito 44a4c2
    		
    Chris PeBenito 44a4c2
    	
    Chris PeBenito 44a4c2
    	)
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Summary
    Chris PeBenito 44a4c2

    Chris PeBenito 44a4c2
    Read the kerberos key table.
    Chris PeBenito 44a4c2

    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Parameters
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Parameter:Description:Optional:
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    domain
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Domain allowed access.
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    No
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    kerberos_rw_config(
    Chris PeBenito c2ecf0
    	
    Chris PeBenito c2ecf0
    		
    Chris PeBenito c2ecf0
    		
    Chris PeBenito c2ecf0
    		
    Chris PeBenito c2ecf0
    		domain
    Chris PeBenito c2ecf0
    		
    Chris PeBenito c2ecf0
    	
    Chris PeBenito c2ecf0
    	)
    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    Summary
    Chris PeBenito c2ecf0

    Chris PeBenito c2ecf0
    Read and write the kerberos configuration file (/etc/krb5.conf).
    Chris PeBenito c2ecf0

    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    Parameters
    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    Parameter:Description:Optional:
    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    domain
    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    Domain allowed access.
    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    No
    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    Chris PeBenito 8b1125
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    kerberos_use(
    Chris PeBenito e3a8e3
    	
    Chris PeBenito e3a8e3
    		
    Chris PeBenito e3a8e3
    		
    Chris PeBenito e3a8e3
    		
    Chris PeBenito e3a8e3
    		domain
    Chris PeBenito e3a8e3
    		
    Chris PeBenito e3a8e3
    	
    Chris PeBenito e3a8e3
    	)
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Summary
    Chris PeBenito e3a8e3

    Chris PeBenito e3a8e3
    Use kerberos services
    Chris PeBenito e3a8e3

    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Parameters
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Parameter:Description:Optional:
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    domain
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Domain allowed access.
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    No
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Return
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e376ad
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    </body>
    Chris PeBenito e3a8e3
    </html>