Chris PeBenito e3a8e3
<html>
Chris PeBenito e3a8e3
<head>
Chris PeBenito e3a8e3
<title>
Chris PeBenito e3a8e3
 Security Enhanced Linux Reference Policy
Chris PeBenito e3a8e3
 </title>
Chris PeBenito e3a8e3
<style type="text/css" media="all">@import "style.css";</style>
Chris PeBenito e3a8e3
</head>
Chris PeBenito e3a8e3
<body>
Chris PeBenito e3a8e3
Chris PeBenito e3a8e3
Chris PeBenito e3a8e3
	
Chris PeBenito e3a8e3
		
Chris PeBenito e3a8e3
		admin
Chris PeBenito e3a8e3
		
Chris PeBenito e3a8e3
		
Chris PeBenito e3a8e3
		
Chris PeBenito e3a8e3
	
Chris PeBenito e3a8e3
		
Chris PeBenito e3a8e3
		apps
Chris PeBenito e3a8e3
		
Chris PeBenito e3a8e3
		
Chris PeBenito e3a8e3
		
Chris PeBenito e3a8e3
	
Chris PeBenito e3a8e3
		
Chris PeBenito e3a8e3
		kernel
Chris PeBenito e3a8e3
		
Chris PeBenito e3a8e3
		
Chris PeBenito e3a8e3
		
Chris PeBenito e3a8e3
	
Chris PeBenito e3a8e3
		
Chris PeBenito e3a8e3
		services
Chris PeBenito e3a8e3
		
Chris PeBenito e3a8e3
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			apache
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			apm
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			arpwatch
Chris PeBenito 862a1e
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			automount
Chris PeBenito 26deab
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			avahi
Chris PeBenito 885e75
		
Chris PeBenito c2ecf0
			   - 
Chris PeBenito c2ecf0
			bind
Chris PeBenito c2ecf0
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			bluetooth
Chris PeBenito 862a1e
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			canna
Chris PeBenito 885e75
		
Chris PeBenito e376ad
			   - 
Chris PeBenito e376ad
			comsat
Chris PeBenito e376ad
		
Chris PeBenito 44a4c2
			   - 
Chris PeBenito 44a4c2
			cpucontrol
Chris PeBenito 44a4c2
		
Chris PeBenito e3a8e3
			   - 
Chris PeBenito e3a8e3
			cron
Chris PeBenito e3a8e3
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			cups
Chris PeBenito 885e75
		
Chris PeBenito 44a4c2
			   - 
Chris PeBenito 44a4c2
			cvs
Chris PeBenito 44a4c2
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			cyrus
Chris PeBenito 885e75
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			dbskk
Chris PeBenito 885e75
		
Chris PeBenito e376ad
			   - 
Chris PeBenito e376ad
			dbus
Chris PeBenito e376ad
		
Chris PeBenito e376ad
			   - 
Chris PeBenito e376ad
			dhcp
Chris PeBenito e376ad
		
Chris PeBenito e376ad
			   - 
Chris PeBenito e376ad
			dictd
Chris PeBenito e376ad
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			distcc
Chris PeBenito 885e75
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			djbdns
Chris PeBenito 26deab
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			dovecot
Chris PeBenito 885e75
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			fetchmail
Chris PeBenito 26deab
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			finger
Chris PeBenito 862a1e
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			ftp
Chris PeBenito 862a1e
		
Chris PeBenito c2ecf0
			   - 
Chris PeBenito c2ecf0
			gpm
Chris PeBenito c2ecf0
		
Chris PeBenito e376ad
			   - 
Chris PeBenito e376ad
			hal
Chris PeBenito e376ad
		
Chris PeBenito c2ecf0
			   - 
Chris PeBenito c2ecf0
			howl
Chris PeBenito c2ecf0
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			i18n_input
Chris PeBenito 885e75
		
Chris PeBenito e3a8e3
			   - 
Chris PeBenito e3a8e3
			inetd
Chris PeBenito e3a8e3
		
Chris PeBenito e376ad
			   - 
Chris PeBenito e376ad
			inn
Chris PeBenito e376ad
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			irqbalance
Chris PeBenito 885e75
		
Chris PeBenito e3a8e3
			   - 
Chris PeBenito e3a8e3
			kerberos
Chris PeBenito e3a8e3
		
Chris PeBenito 44a4c2
			   - 
Chris PeBenito 44a4c2
			ktalk
Chris PeBenito 44a4c2
		
Chris PeBenito c2ecf0
			   - 
Chris PeBenito c2ecf0
			ldap
Chris PeBenito c2ecf0
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			lpd
Chris PeBenito 885e75
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			mailman
Chris PeBenito 862a1e
		
Chris PeBenito e3a8e3
			   - 
Chris PeBenito e3a8e3
			mta
Chris PeBenito e3a8e3
		
Chris PeBenito c2ecf0
			   - 
Chris PeBenito c2ecf0
			mysql
Chris PeBenito c2ecf0
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			networkmanager
Chris PeBenito 885e75
		
Chris PeBenito e3a8e3
			   - 
Chris PeBenito e3a8e3
			nis
Chris PeBenito e3a8e3
		
Chris PeBenito 8b1125
			   - 
Chris PeBenito 8b1125
			nscd
Chris PeBenito 8b1125
		
Chris PeBenito e376ad
			   - 
Chris PeBenito e376ad
			ntp
Chris PeBenito e376ad
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			openct
Chris PeBenito 26deab
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			pegasus
Chris PeBenito 885e75
		
Chris PeBenito 44a4c2
			   - 
Chris PeBenito 44a4c2
			portmap
Chris PeBenito 44a4c2
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			postfix
Chris PeBenito 885e75
		
Chris PeBenito 44a4c2
			   - 
Chris PeBenito 44a4c2
			postgresql
Chris PeBenito 44a4c2
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			ppp
Chris PeBenito 862a1e
		
Chris PeBenito c2ecf0
			   - 
Chris PeBenito c2ecf0
			privoxy
Chris PeBenito c2ecf0
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			procmail
Chris PeBenito 885e75
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			publicfile
Chris PeBenito 26deab
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			radius
Chris PeBenito 885e75
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			radvd
Chris PeBenito 862a1e
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			rdisc
Chris PeBenito 885e75
		
Chris PeBenito e3a8e3
			   - 
Chris PeBenito e3a8e3
			remotelogin
Chris PeBenito e3a8e3
		
Chris PeBenito 44a4c2
			   - 
Chris PeBenito 44a4c2
			rlogin
Chris PeBenito 44a4c2
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			roundup
Chris PeBenito 26deab
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			rpc
Chris PeBenito 885e75
		
Chris PeBenito c2ecf0
			   - 
Chris PeBenito c2ecf0
			rshd
Chris PeBenito c2ecf0
		
Chris PeBenito c2ecf0
			   - 
Chris PeBenito c2ecf0
			rsync
Chris PeBenito c2ecf0
		
Chris PeBenito 44a4c2
			   - 
Chris PeBenito 44a4c2
			samba
Chris PeBenito 44a4c2
		
Chris PeBenito 862a1e
			   - 
Chris PeBenito 862a1e
			sasl
Chris PeBenito 862a1e
		
Chris PeBenito e3a8e3
			   - 
Chris PeBenito e3a8e3
			sendmail
Chris PeBenito e3a8e3
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			slrnpull
Chris PeBenito 26deab
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			smartmon
Chris PeBenito 26deab
		
Chris PeBenito 44a4c2
			   - 
Chris PeBenito 44a4c2
			snmp
Chris PeBenito 44a4c2
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			spamassassin
Chris PeBenito 885e75
		
Chris PeBenito e376ad
			   - 
Chris PeBenito e376ad
			squid
Chris PeBenito e376ad
		
Chris PeBenito e3a8e3
			   - 
Chris PeBenito e3a8e3
			ssh
Chris PeBenito e3a8e3
		
Chris PeBenito 44a4c2
			   - 
Chris PeBenito 44a4c2
			stunnel
Chris PeBenito 44a4c2
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			sysstat
Chris PeBenito 26deab
		
Chris PeBenito c2ecf0
			   - 
Chris PeBenito c2ecf0
			tcpd
Chris PeBenito c2ecf0
		
Chris PeBenito 44a4c2
			   - 
Chris PeBenito 44a4c2
			telnet
Chris PeBenito 44a4c2
		
Chris PeBenito 44a4c2
			   - 
Chris PeBenito 44a4c2
			tftp
Chris PeBenito 44a4c2
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			timidity
Chris PeBenito 885e75
		
Chris PeBenito 26deab
			   - 
Chris PeBenito 26deab
			ucspitcp
Chris PeBenito 26deab
		
Chris PeBenito 44a4c2
			   - 
Chris PeBenito 44a4c2
			uucp
Chris PeBenito 44a4c2
		
Chris PeBenito 885e75
			   - 
Chris PeBenito 885e75
			xfs
Chris PeBenito 885e75
		
Chris PeBenito af3dd8
			   - 
Chris PeBenito af3dd8
			xserver
Chris PeBenito af3dd8
		
Chris PeBenito 44a4c2
			   - 
Chris PeBenito 44a4c2
			zebra
Chris PeBenito 44a4c2
		
Chris PeBenito e3a8e3
		
Chris PeBenito e3a8e3
	
Chris PeBenito e3a8e3
		
Chris PeBenito e3a8e3
		system
Chris PeBenito e3a8e3
		
Chris PeBenito e3a8e3
		
Chris PeBenito e3a8e3
		
Chris PeBenito e3a8e3
	
Chris PeBenito e3a8e3
	

Chris PeBenito 8b1125
	* Global Booleans 
Chris PeBenito 8b1125
	

Chris PeBenito 8b1125
	* Global Tunables 
Chris PeBenito 8b1125
	


Chris PeBenito 8b1125
	* Layer Index
Chris PeBenito e3a8e3
	

Chris PeBenito 8b1125
	* Interface Index
Chris PeBenito 8b1125
	

Chris PeBenito 8b1125
	* Template Index
Chris PeBenito e3a8e3
Chris PeBenito e3a8e3
Chris PeBenito e3a8e3
Chris PeBenito e3a8e3
Chris PeBenito e3a8e3

Layer: services

Chris PeBenito e3a8e3

Module: kerberos

Chris PeBenito e3a8e3
Chris PeBenito e3a8e3

Description:

Chris PeBenito e3a8e3
 
Chris PeBenito 767266

Chris PeBenito e3a8e3

Chris PeBenito e3a8e3
This policy supports:
Chris PeBenito e3a8e3

Chris PeBenito e3a8e3

Chris PeBenito e3a8e3
Servers:
Chris PeBenito 8b1125

Chris PeBenito 862a1e

  • kadmind

  • Chris PeBenito 862a1e

  • krb5kdc

  • Chris PeBenito 8b1125

    Chris PeBenito 8b1125

    Chris PeBenito e3a8e3

    Chris PeBenito e3a8e3
    Clients:
    Chris PeBenito 8b1125

    Chris PeBenito 862a1e

  • kinit

  • Chris PeBenito 862a1e

  • kdestroy

  • Chris PeBenito 862a1e

  • klist

  • Chris PeBenito 862a1e

  • ksu (incomplete)

  • Chris PeBenito 8b1125

    Chris PeBenito 8b1125

    Chris PeBenito 767266

    Chris PeBenito 767266
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3

    Interfaces:

    Chris PeBenito e3a8e3
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    kerberos_dontaudit_write_config(
    Chris PeBenito 44a4c2
    	
    Chris PeBenito 44a4c2
    		
    Chris PeBenito 44a4c2
    		
    Chris PeBenito 44a4c2
    		
    Chris PeBenito 44a4c2
    		domain
    Chris PeBenito 44a4c2
    		
    Chris PeBenito 44a4c2
    	
    Chris PeBenito 44a4c2
    	)
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Summary
    Chris PeBenito 44a4c2

    Chris PeBenito 44a4c2
    Do not audit attempts to write the kerberos
    Chris PeBenito 44a4c2
    configuration file (/etc/krb5.conf).
    Chris PeBenito 44a4c2

    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Parameters
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Parameter:Description:Optional:
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    domain
    Chris PeBenito 44a4c2
    Chris PeBenito af3dd8

    Chris PeBenito 44a4c2
    Domain to not audit.
    Chris PeBenito af3dd8

    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    No
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito c2ecf0
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito c2ecf0
    kerberos_read_config(
    Chris PeBenito e3a8e3
    	
    Chris PeBenito e3a8e3
    		
    Chris PeBenito e3a8e3
    		
    Chris PeBenito e3a8e3
    		
    Chris PeBenito e3a8e3
    		domain
    Chris PeBenito e3a8e3
    		
    Chris PeBenito e3a8e3
    	
    Chris PeBenito e3a8e3
    	)
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Summary
    Chris PeBenito e3a8e3

    Chris PeBenito e3a8e3
    Read the kerberos configuration file (/etc/krb5.conf).
    Chris PeBenito e3a8e3

    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Parameters
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Parameter:Description:Optional:
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    domain
    Chris PeBenito e3a8e3
    Chris PeBenito af3dd8

    Chris PeBenito e3a8e3
    Domain allowed access.
    Chris PeBenito af3dd8

    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    No
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    kerberos_read_keytab(
    Chris PeBenito 44a4c2
    	
    Chris PeBenito 44a4c2
    		
    Chris PeBenito 44a4c2
    		
    Chris PeBenito 44a4c2
    		
    Chris PeBenito 44a4c2
    		domain
    Chris PeBenito 44a4c2
    		
    Chris PeBenito 44a4c2
    	
    Chris PeBenito 44a4c2
    	)
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Summary
    Chris PeBenito 44a4c2

    Chris PeBenito 44a4c2
    Read the kerberos key table.
    Chris PeBenito 44a4c2

    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Parameters
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Parameter:Description:Optional:
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    domain
    Chris PeBenito 44a4c2
    Chris PeBenito af3dd8

    Chris PeBenito 44a4c2
    Domain allowed access.
    Chris PeBenito af3dd8

    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    No
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito 44a4c2
    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    kerberos_rw_config(
    Chris PeBenito c2ecf0
    	
    Chris PeBenito c2ecf0
    		
    Chris PeBenito c2ecf0
    		
    Chris PeBenito c2ecf0
    		
    Chris PeBenito c2ecf0
    		domain
    Chris PeBenito c2ecf0
    		
    Chris PeBenito c2ecf0
    	
    Chris PeBenito c2ecf0
    	)
    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    Summary
    Chris PeBenito c2ecf0

    Chris PeBenito c2ecf0
    Read and write the kerberos configuration file (/etc/krb5.conf).
    Chris PeBenito c2ecf0

    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    Parameters
    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    Parameter:Description:Optional:
    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    domain
    Chris PeBenito c2ecf0
    Chris PeBenito af3dd8

    Chris PeBenito c2ecf0
    Domain allowed access.
    Chris PeBenito af3dd8

    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    No
    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    Chris PeBenito c2ecf0
    Chris PeBenito 8b1125
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    kerberos_use(
    Chris PeBenito e3a8e3
    	
    Chris PeBenito e3a8e3
    		
    Chris PeBenito e3a8e3
    		
    Chris PeBenito e3a8e3
    		
    Chris PeBenito e3a8e3
    		domain
    Chris PeBenito e3a8e3
    		
    Chris PeBenito e3a8e3
    	
    Chris PeBenito e3a8e3
    	)
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Summary
    Chris PeBenito e3a8e3

    Chris PeBenito e3a8e3
    Use kerberos services
    Chris PeBenito e3a8e3

    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Parameters
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Parameter:Description:Optional:
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    domain
    Chris PeBenito e3a8e3
    Chris PeBenito af3dd8

    Chris PeBenito e3a8e3
    Domain allowed access.
    Chris PeBenito af3dd8

    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    No
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Return
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    Chris PeBenito e376ad
    Chris PeBenito e3a8e3
    Chris PeBenito e3a8e3
    </body>
    Chris PeBenito e3a8e3
    </html>