Layer: admin

+ +

Layer: apps

+ + +

Description

+This template creates derived domains which are used +for cdrecord. +

+This template is invoked automatically for each user, and +generally does not need to be invoked directly +by policy writers. +

+ +

Parameters

+ + + + + + + + + +

Parameter:	Description:	Optional:
+userdomain_prefix +	+ +The prefix of the user domain (e.g., user +is the prefix for user_t). + +	+No +
+user_domain +	+ +The type of the user domain. + +	+No +
+user_role +	+ +The role associated with the user domain. + +	+No +

+ + +Return + + + +

+ + diff --git a/www/api-docs/apps_gpg.html b/www/api-docs/apps_gpg.html index a60e44b..2f17bce 100644 --- a/www/api-docs/apps_gpg.html +++ b/www/api-docs/apps_gpg.html @@ -19,12 +19,30 @@ apps

+    - + cdrecord
+    - gpg
+    - + irc
+ +    - + java
+    - loadkeys
+    - + lockdev
+ +    - + screen
+ +    - + slocate
+    - webalizer
diff --git a/www/api-docs/apps_irc.html b/www/api-docs/apps_irc.html new file mode 100644 index 0000000..a3f5cbf --- /dev/null +++ b/www/api-docs/apps_irc.html @@ -0,0 +1,195 @@ + + + + Security Enhanced Linux Reference Policy + + + + + +

+ + + + admin
+

+ +

+ + + + apps
+

+ +    - + cdrecord
+ +    - + gpg
+ +    - + irc
+ +    - + java
+ +    - + loadkeys
+ +    - + lockdev
+ +    - + screen
+ +    - + slocate
+ +    - + webalizer
+ +

+ + + + kernel
+

+ +

+ + + + services
+

+ +

+ + + + system
+

+ +

+ +

Layer: apps

+ + +

Description

+This template creates a derived domains which are used +for an irc client sessions. +

+This template is invoked automatically for each user, and +generally does not need to be invoked directly +by policy writers. +

+ +

Parameters

+ + + + + + + + + +

Parameter:	Description:	Optional:
+userdomain_prefix +	+ +The prefix of the user domain (e.g., user +is the prefix for user_t). + +	+No +
+user_domain +	+ +The type of the user domain. + +	+No +
+user_role +	+ +The role associated with the user domain. + +	+No +

+ + +Return + + + +

+ + diff --git a/www/api-docs/apps_java.html b/www/api-docs/apps_java.html new file mode 100644 index 0000000..b9a8e77 --- /dev/null +++ b/www/api-docs/apps_java.html @@ -0,0 +1,195 @@ + + + + Security Enhanced Linux Reference Policy + + + + + +

+ + + + admin
+

+ +

+ + + + apps
+

+ +    - + cdrecord
+ +    - + gpg
+ +    - + irc
+ +    - + java
+ +    - + loadkeys
+ +    - + lockdev
+ +    - + screen
+ +    - + slocate
+ +    - + webalizer
+ +

+ + + + kernel
+

+ +

+ + + + services
+

+ +

+ + + + system
+

+ +

+ +

Layer: apps

+ + +

Description

+This template creates a derived domains which are used +for java plugins that are executed by a browser. +

+This template is invoked automatically for each user, and +generally does not need to be invoked directly +by policy writers. +

+ +

Parameters

+ + + + + + + + + +

Parameter:	Description:	Optional:
+userdomain_prefix +	+ +The prefix of the user domain (e.g., user +is the prefix for user_t). + +	+No +
+user_domain +	+ +The type of the user domain. + +	+No +
+user_role +	+ +The role associated with the user domain. + +	+No +

+ + +Return + + + +

+ + diff --git a/www/api-docs/apps_loadkeys.html b/www/api-docs/apps_loadkeys.html index 44b768c..5dbab61 100644 --- a/www/api-docs/apps_loadkeys.html +++ b/www/api-docs/apps_loadkeys.html @@ -19,12 +19,30 @@ apps

+    - + cdrecord
+    - gpg
+    - + irc
+ +    - + java
+    - loadkeys
+    - + lockdev
+ +    - + screen
+ +    - + slocate
+    - webalizer
diff --git a/www/api-docs/apps_lockdev.html b/www/api-docs/apps_lockdev.html new file mode 100644 index 0000000..4b9dd81 --- /dev/null +++ b/www/api-docs/apps_lockdev.html @@ -0,0 +1,196 @@ + + + + Security Enhanced Linux Reference Policy + + + + + +

+ + + + admin
+

+ +

+ + + + apps
+

+ +    - + cdrecord
+ +    - + gpg
+ +    - + irc
+ +    - + java
+ +    - + loadkeys
+ +    - + lockdev
+ +    - + screen
+ +    - + slocate
+ +    - + webalizer
+ +

+ + + + kernel
+

+ +

+ + + + services
+

+ +

+ + + + system
+

+ +

+ +

Layer: apps

+ + +

Description

+This template creates derived domains which are used +for lockdev. A derived type is also created to protect +the user's device locks. +

+This template is invoked automatically for each user, and +generally does not need to be invoked directly +by policy writers. +

+ +

Parameters

+ + + + + + + + + +

Parameter:	Description:	Optional:
+userdomain_prefix +	+ +The prefix of the user domain (e.g., user +is the prefix for user_t). + +	+No +
+user_domain +	+ +The type of the user domain. + +	+No +
+user_role +	+ +The role associated with the user domain. + +	+No +

+ + +Return + + + +

+ + diff --git a/www/api-docs/apps_screen.html b/www/api-docs/apps_screen.html new file mode 100644 index 0000000..c7ab2d6 --- /dev/null +++ b/www/api-docs/apps_screen.html @@ -0,0 +1,195 @@ + + + + Security Enhanced Linux Reference Policy + + + + + +

+ + + + admin
+

+ +

+ + + + apps
+

+ +    - + cdrecord
+ +    - + gpg
+ +    - + irc
+ +    - + java
+ +    - + loadkeys
+ +    - + lockdev
+ +    - + screen
+ +    - + slocate
+ +    - + webalizer
+ +

+ + + + kernel
+

+ +

+ + + + services
+

+ +

+ + + + system
+

+ +

+ +

Layer: apps

+ + +

Description

+This template creates a derived domains which are used +for screen sessions. +

+This template is invoked automatically for each user, and +generally does not need to be invoked directly +by policy writers. +

+ +

Parameters

+ + + + + + + + + +

Parameter:	Description:	Optional:
+userdomain_prefix +	+ +The prefix of the user domain (e.g., user +is the prefix for user_t). + +	+No +
+user_domain +	+ +The type of the user domain. + +	+No +
+user_role +	+ +The role associated with the user domain. + +	+No +

+ + +Return + + + +

+ + diff --git a/www/api-docs/apps_slocate.html b/www/api-docs/apps_slocate.html new file mode 100644 index 0000000..0dcf640 --- /dev/null +++ b/www/api-docs/apps_slocate.html @@ -0,0 +1,145 @@ + + + + Security Enhanced Linux Reference Policy + + + + + +

+ + + + admin
+

+ +

+ + + + apps
+

+ +    - + cdrecord
+ +    - + gpg
+ +    - + irc
+ +    - + java
+ +    - + loadkeys
+ +    - + lockdev
+ +    - + screen
+ +    - + slocate
+ +    - + webalizer
+ +

+ + + + kernel
+

+ +

+ + + + services
+

+ +

+ + + + system
+

+ +

-Module: +Module: authlogin

+ +

Layer: apps

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

+ + amanda

Automated backup program.

@@ -465,6 +542,11 @@ Determine of the console connected to the controlling terminal.

+ + ddcprobe +

ddcprobe retrieves monitor and graphics card information

+ + dmesg

Policy for dmesg.

@@ -493,16 +575,31 @@ after installation of Red Hat/Fedora systems.

Rotate and archive system logs

+ + logwatch +

System log analyzer and reporter

+ + netutils

Network analysis utilities

+ + prelink +

Prelink ELF shared library mappings.

+ + quota

File system quota management

+ + readahead +

Readahead, read files into page cache for improved performance

+ + rpm

Policy for the RPM package manager.

@@ -528,11 +625,21 @@ after installation of Red Hat/Fedora systems.

Red Hat utility to change /etc/fstab.

+ + usbmodules +

List kernel modules of USB devices

+ + usermanage

Policy for managing user accounts.

+ + vbetool +

run real-mode video BIOS code to alter hardware state

+ + vpn

Virtual Private Networking client

@@ -557,7 +664,8 @@ after installation of Red Hat/Fedora systems.

Layer: kernel

-Policy for kernel threads, proc filesystem,and unlabeled processes and objects. +Policy for kernel threads, proc filesystem, +and unlabeled processes and objects.

@@ -617,7 +725,8 @@ Basic filesystem types and interfaces. kernel

-Policy for kernel threads, proc filesystem,and unlabeled processes and objects. +Policy for kernel threads, proc filesystem, +and unlabeled processes and objects.

@@ -666,16 +775,46 @@ Policy for kernel security interface, in particular, selinuxfs. + + cdrecord +

Policy for cdrecord

+ + gpg

Policy for GNU Privacy Guard and related programs.

+ + irc +

IRC client policy

+ + + + java +

Java virtual machine

+ + loadkeys

Load keyboard mappings.

+ + lockdev +

device locking policy for lockdev

+ + + + screen +

GNU terminal multiplexer

+ + + + slocate +

Update database for mlocate

+ + webalizer

Web server log analysis

@@ -728,6 +867,11 @@ Policy for kernel security interface, in particular, selinuxfs.

Policy for reading and setting the hardware clock.

+ + daemontools +

Collection of tools for managing UNIX services

+ + fstools

Tools for filesystem management, such as mkfs and fsck.

@@ -877,6 +1021,11 @@ connection and disconnection of devices at runtime.

Ethernet activity monitor.

+ + automount +

Filesystem automounter service.

+ + avahi

mDNS/DNS-SD daemon implementing Apple ZeroConf architecture

@@ -952,11 +1101,21 @@ connection and disconnection of devices at runtime.

Distributed compiler daemon

+ + djbdns +

small and secure DNS daemon

+ + dovecot

Dovecot POP and IMAP mail server

+ + fetchmail +

Remote-mail retrieval and forwarding utility

+ + finger

Finger user information service.

@@ -1057,6 +1216,11 @@ connection and disconnection of devices at runtime.

Network time protocol daemon

+ + openct +

Service for handling smart card readers.

+ + pegasus

The Open Group Pegasus CIM/WBEM Server.

@@ -1092,6 +1256,11 @@ connection and disconnection of devices at runtime.

Procmail mail delivery agent

+ + publicfile +

publicfile supplies files to the public through HTTP and FTP

+ + radius

RADIUS authentication and accounting server.

@@ -1117,6 +1286,11 @@ connection and disconnection of devices at runtime.

Remote login daemon

+ + roundup +

Roundup Issue Tracking System policy

+ + rpc

Remote Procedure Call Daemon for managment of network based process communication

@@ -1151,6 +1325,16 @@ from Windows NT servers.

Policy for sendmail.

+ + slrnpull +

Service for downloading news feeds the slrn newsreader.

+ + + + smartmon +

Smart disk monitoring daemon policy

+ + snmp

Simple network management protocol services

@@ -1176,6 +1360,11 @@ from Windows NT servers.

SSL Tunneling Proxy

+ + sysstat +

Policy for sysstat. Reports on various system states

+ + tcpd

Policy for TCP daemon.

@@ -1196,6 +1385,11 @@ from Windows NT servers.

MIDI to WAV converter and player configured as a service

+ + ucspitcp +

ucspitcp policy

+ + uucp

Unix to Unix Copy

diff --git a/www/api-docs/interfaces.html b/www/api-docs/interfaces.html index 05bc884..adfe364 100644 --- a/www/api-docs/interfaces.html +++ b/www/api-docs/interfaces.html @@ -16,6 +16,9 @@    - acct
+    - + alsa
+    - amanda
@@ -25,6 +28,9 @@    - consoletype
+    - + ddcprobe
+    - dmesg
@@ -40,12 +46,21 @@    - logrotate
+    - + logwatch
+    - netutils
+    - + prelink
+    - quota
+    - + readahead
+    - rpm
@@ -61,9 +76,15 @@    - updfstab
+    - + usbmodules
+    - usermanage
+    - + vbetool
+    - vpn
@@ -73,12 +94,30 @@ apps

+Module: +alsa

+Layer: +admin

+
+alsa_domtrans(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Domain transition to alsa +

+ +

+Module: +alsa

+Layer: +admin

+
+alsa_rw_semaphores(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Allow read and write access to alsa semaphores. +

+ +

+Module: +alsa

+Layer: +admin

+
+alsa_rw_shared_mem(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Allow read and write access to alsa shared memory. +

+ +

Module: amanda

Layer: @@ -1613,13 +1763,13 @@ Append to login records (wtmp).

Layer: system

 
-auth_create_login_records(
+auth_can_read_shadow_passwords(
 	
@@ -1829,6 +1979,32 @@ Execute utempter programs in the utempter domain.

+Module: +authlogin

+Layer: +system

+
+auth_dontaudit_exec_utempter(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Do not audit attemps to execute utempter executable. +

+ +

Module: authlogin

Layer: @@ -1961,6 +2137,32 @@ Execute the pam program.

+Module: +authlogin

+Layer: +system

+
+auth_filetrans_login_records(
+	
+		
+		
+		
+		?
+		
+	
+	)

+

+ +

+Summary is missing! +

+ +

Module: authlogin

Layer: @@ -2711,6 +2913,58 @@ pam_console data directory.

+Module: +authlogin

+Layer: +system

+
+auth_setattr_login_records(
+	
+		
+		
+		
+		?
+		
+	
+	)

+

+ +

+Summary is missing! +

+ +

+Module: +authlogin

+Layer: +system

+
+auth_tunable_read_shadow(
+	
+		
+		
+		
+		?
+		
+	
+	)

+

+ +

+Summary is missing! +

+ +

Module: authlogin

Layer: @@ -2789,6 +3043,58 @@ Write to login records (wtmp).

+Module: +automount

+Layer: +services

+
+automount_domtrans(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Execute automount in the automount domain. +

+ +

+Module: +automount

+Layer: +services

+
+automount_exec_config(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Execute automount in the caller domain. +

+ +

Module: avahi

Layer: @@ -2974,6 +3280,32 @@ Read DNSSEC keys.

+Module: +bind

+Layer: +services

+
+bind_read_zone(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Read BIND zone files. +

+ +

Module: bind

Layer: @@ -3017,6 +3349,32 @@ allow the specified role the ndc domain.

+Module: +bind

+Layer: +services

+
+bind_search_cache(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Search the BIND cache directory. +

+ +

Module: bind

Layer: @@ -3175,6 +3533,32 @@ Read bluetooth helper files.

+Module: +bluetooth

+Layer: +services

+
+bluetooth_read_config(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Read bluetooth daemon configuration. +

+ +

Module: bluetooth

Layer: @@ -3218,13 +3602,13 @@ allow the specified role the bluetooth_helper domain.

-Module: +Module: bootloader

Layer: kernel

 
-bootloader_create_kernel(
+bootloader_create_kernel_img(
 	
@@ -3270,18 +3654,18 @@ Install a system.map into the /boot directory.

-Module: +Module: bootloader

Layer: kernel

-bootloader_create_modules( +bootloader_create_runtime_file( - ? + domain )
@@ -3289,20 +3673,21 @@ kernel

-Summary is missing! +Read and write the bootloader +temporary data in /tmp.

-Module: +Module: bootloader

Layer: kernel

-bootloader_create_runtime_file( +bootloader_delete_kernel( @@ -3315,21 +3700,20 @@ kernel

-Read and write the bootloader -temporary data in /tmp. +Delete a kernel from /boot.

-Module: +Module: bootloader

Layer: kernel

-bootloader_delete_kernel( +bootloader_delete_kernel_symbol_table( @@ -3342,20 +3726,20 @@ kernel

-Delete a kernel from /boot. +Delete a system.map in the /boot directory.

-Module: +Module: bootloader

Layer: kernel

-bootloader_delete_kernel_symbol_table( +bootloader_domtrans( @@ -3368,20 +3752,20 @@ kernel

-Delete a system.map in the /boot directory. +Execute bootloader in the bootloader domain.

-Module: +Module: bootloader

Layer: kernel

-bootloader_domtrans( +bootloader_dontaudit_getattr_boot_dir( @@ -3394,20 +3778,21 @@ kernel

-Execute bootloader in the bootloader domain. +Do not audit attempts to get attributes +of the /boot directory.

-Module: +Module: bootloader

Layer: kernel

-bootloader_dontaudit_getattr_boot_dir( +bootloader_dontaudit_search_boot( @@ -3420,21 +3805,46 @@ kernel

-Do not audit attempts to get attributes -of the /boot directory. +Do not audit attempts to search the /boot directory.

-Module: +Module: bootloader

Layer: kernel

 
-bootloader_dontaudit_search_boot(
+bootloader_filetrans_modules(
+	
+		
+		
+		
+		?
+		
+	
+	)

+

+ +

+Summary is missing! +

+ +

+Module: +bootloader

+Layer: +kernel

+ +bootloader_getattr_boot_dir( @@ -3447,7 +3857,7 @@ kernel

-Do not audit attempts to search the /boot directory. +Get attributes of the /boot directory.

@@ -4386,6 +4796,110 @@ Summary is missing!

+Module: +corecommands

+Layer: +kernel

+
+corecmd_manage_bin_files(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Create, read, write, and delete bin files. +

+ +

+Module: +corecommands

+Layer: +kernel

+
+corecmd_manage_sbin_files(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Create, read, write, and delete sbin files. +

+ +

+Module: +corecommands

+Layer: +kernel

+
+corecmd_mmap_bin_files(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Mmap a bin file as executable. +

+ +

+Module: +corecommands

+Layer: +kernel

+
+corecmd_mmap_sbin_files(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Mmap a sbin file as executable. +

+ +

Module: corecommands

Layer: @@ -4594,6 +5108,58 @@ Read symbolic links in sbin directories.

+Module: +corecommands

+Layer: +kernel

+
+corecmd_relabel_bin_files(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Relabel to and from the bin type. +

+ +

+Module: +corecommands

+Layer: +kernel

+
+corecmd_relabel_sbin_files(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Relabel to and from the sbin type. +

+ +

Module: corecommands

Layer: @@ -5092,6 +5658,32 @@ Receive raw IP packets on the link_local node.

Layer: @@ -5404,6 +5996,32 @@ Send raw IP packets on the link_local node.

+Layer: +kernel

+
+corenet_raw_receive_lo_if(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Receive raw IP packets on the lo interface. +

+ +

Module: corenetwork

Layer: @@ -5716,6 +6334,32 @@ Send and receive raw IP packets on the link_local node.

+Layer: +kernel

+
+corenet_raw_send_lo_if(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Send raw IP packets on the lo interface. +

+ +

Module: corenetwork

Layer: @@ -12164,6 +12808,32 @@ Send and receive TCP traffic on the link_local node.

+Layer: +kernel

+
+corenet_raw_sendrecv_lo_if(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Send and receive raw IP packets on the lo interface. +

+ +

Module: corenetwork

Layer: @@ -17364,6 +18034,32 @@ Receive UDP traffic on the link_local node.

+Layer: +kernel

+
+corenet_tcp_sendrecv_lo_if(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Send and receive TCP network traffic on the lo interface. +

+ +

Module: corenetwork

Layer: @@ -19990,6 +20686,32 @@ Send UDP traffic on the link_local node.

+Layer: +kernel

+
+corenet_udp_receive_lo_if(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Receive UDP network traffic on the lo interface. +

+ +

Module: corenetwork

Layer: @@ -22616,6 +23338,32 @@ Send and receive UDP traffic on the link_local node.

+Layer: +kernel

+
+corenet_udp_send_lo_if(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Send UDP network traffic on the lo interface. +

+ +

Module: corenetwork

Layer: @@ -24643,13 +25633,13 @@ Allow unconfined access to the system DBUS.

+Layer: +kernel

+
+corenet_udp_sendrecv_lo_if(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Send and receive UDP network traffic on the lo interface. +

+ +

Module: corenetwork

Layer: @@ -23999,6 +24747,32 @@ files from the system cron jobs.

+Module: +cron

+Layer: +services

+
+cron_dontaudit_write_pipe(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Do not audit attempts to write cron daemon unnamed pipes. +

+ +

Module: cron

Layer: @@ -24534,6 +25308,196 @@ and delete cyrus data files.

+Module: +daemontools

+Layer: +system

+
+daemontools_domtrans_multilog(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Execute in the svc_multilog_t domain. +

+ +

+Module: +daemontools

+Layer: +system

+
+daemontools_domtrans_run(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Execute in the svc_run_t domain. +

+ +

+Module: +daemontools

+Layer: +system

+
+daemontools_domtrans_start(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Execute in the svc_start_t domain. +

+ +

+Module: +daemontools

+Layer: +system

+
+daemontools_ipc_domain(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+An ipc channel between the supervised domain and svc_start_t +

+ +

+Module: +daemontools

+Layer: +system

+
+daemontools_manage_svc(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Allow a domain to create svc_svc_t files. +

+ +

+Module: +daemontools

+Layer: +system

+
+daemontools_read_svc(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Allow a domain to read svc_svc_t files. +

+ +

+Module: +daemontools

+Layer: +system

+
+daemontools_service_domain(
+	
+		
+		
+		
+		domain
+		
+	
+		
+			,
+		
+		
+		
+		entrypoint
+		
+	
+	)

+

+ +

+Define a specified domain as a supervised service. +

+ +

Module: dbus

Layer: @@ -24561,6 +25525,32 @@ for service (acquire_svc).

+Module: +dbus

+Layer: +services

+
+dbus_read_config(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Read dbus configuration. +

+ +

Module: dbus

-Module: -devices

-Layer: -kernel

+Module: +ddcprobe

+Layer: +admin

-dev_append_printer( +ddcprobe_domtrans( @@ -24662,20 +25652,20 @@ kernel

-Append the printer device. +Execute ddcprobe in the ddcprobe domain.

-Module: -devices

-Layer: -kernel

+Module: +ddcprobe

+Layer: +admin

-dev_associate_usbfs( +ddcprobe_run( @@ -24683,25 +25673,42 @@ kernel

domain + + , + + + + role + + + + , + + + + terminal + + )

-Mount a usbfs filesystem. +Execute ddcprobe in the ddcprobe domain, and +allow the specified role the ddcprobe domain.

-Module: +Module: devices

Layer: kernel

-dev_create_cardmgr( +dev_append_printer( @@ -24714,22 +25721,20 @@ kernel

-Create, read, write, and delete -the PCMCIA card manager device -with the correct type. +Append the printer device.

-Module: +Module: devices

Layer: kernel

-dev_create_dev_node( +dev_associate_usbfs( @@ -24737,20 +25742,30 @@ kernel

domain - - , - - - - file - + )
+

+ +

+Mount a usbfs filesystem. +

+ +

+Module: +devices

+Layer: +kernel

+ +dev_create_cardmgr( - , - - objectclass(es) + domain )
@@ -24758,8 +25773,9 @@ kernel

-Create, read, and write device nodes. The node -will be transitioned to the type provided. +Create, read, write, and delete +the PCMCIA card manager device +with the correct type.

@@ -25053,6 +26069,32 @@ Dontaudit getattr on generic pipes.

+Module: +devices

+Layer: +kernel

+
+dev_dontaudit_getattr_memory_dev(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+dontaudit getattr raw memory devices (e.g. /dev/mem). +

+ +

Module: devices

Layer: @@ -25584,6 +26626,49 @@ of video4linux device nodes.

+Module: +devices

+Layer: +kernel

+
+dev_filetrans_dev_node(
+	
+		
+		
+		
+		domain
+		
+	
+		
+			,
+		
+		
+		
+		file
+		
+	
+		
+			,
+		
+		
+		
+		objectclass(es)
+		
+	
+	)

+

+ +

+Create, read, and write device nodes. The node +will be transitioned to the type provided. +

+ +

Module: devices

Layer: @@ -29023,6 +30108,59 @@ Send a kill signal to all domains.

+Module: +domain

+Layer: +kernel

+
+domain_manage_all_entry_files(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Create, read, write, and delete all +entrypoint files. +

+ +

+Module: +domain

+Layer: +kernel

+
+domain_mmap_all_entry_files(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Mmap all entry point files as executable. +

+ +

Module: domain

Layer: @@ -29154,6 +30292,33 @@ Read the process state (/proc/pid) of all confined domains.

+Module: +domain

+Layer: +kernel

+
+domain_relabel_all_entry_files(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Relabel to and from all entry point +file types. +

+ +

Module: domain

Layer: @@ -29659,13 +30824,13 @@ Summary is missing!

-Module: +Module: files

Layer: kernel

 
-files_create_etc_config(
+files_delete_all_locks(
 	
@@ -29685,26 +30850,18 @@ Summary is missing!

-Module: +Module: files

Layer: kernel

-files_create_home_dirs( - - - - - domain - +files_delete_all_pid_dirs( - , - - home_type + ? )
@@ -29712,20 +30869,20 @@ kernel

-Create home directories +Summary is missing!

-Module: +Module: files

Layer: kernel

 
-files_create_lock(
+files_delete_all_pids(
 	
@@ -29745,18 +30902,18 @@ Summary is missing!

-Module: +Module: files

Layer: kernel

-files_create_pid( +files_delete_etc_files( - ? + domain )
@@ -29764,49 +30921,25 @@ kernel

-Summary is missing! +Delete system configuration files in /etc.

-Module: +Module: files

Layer: kernel

-files_create_root( - - - - - domain - - - - , - - - - [ - - private type - - ] - +files_delete_root_dir_entry( - , - - [ - - object - - ] + ? )
@@ -29814,27 +30947,25 @@ kernel

-Create an object in the root directory, with a private -type. If no object class is specified, the -default is file. +Summary is missing!

-Module: +Module: files

Layer: kernel

-files_create_tmp_files( +files_dontaudit_getattr_all_dirs( - ? + domain )
@@ -29842,20 +30973,21 @@ kernel

-Summary is missing! +Do not audit attempts to get the attributes +of all directories.

-Module: +Module: files

Layer: kernel

-files_create_usr( +files_dontaudit_getattr_all_files( @@ -29863,24 +30995,31 @@ kernel

domain - - , - - - - file_type - + )
+

+ +

+Do not audit attempts to get the attributes +of all files. +

+ +

+Module: +files

+Layer: +kernel

+ +files_dontaudit_getattr_all_pipes( - , - - [ - - object_class - - ] + domain )
@@ -29888,20 +31027,21 @@ kernel

-Create objects in the /usr directory +Do not audit attempts to get the attributes +of all named pipes.

-Module: +Module: files

Layer: kernel

-files_create_var( +files_dontaudit_getattr_all_sockets( @@ -29909,24 +31049,31 @@ kernel

domain - - , - - - - file_type - + )
+

+ +

+Do not audit attempts to get the attributes +of all named sockets. +

+ +

+Module: +files

+Layer: +kernel

+ +files_dontaudit_getattr_all_symlinks( - , - - [ - - object_class - - ] + domain )
@@ -29934,20 +31081,21 @@ kernel

-Create objects in the /var directory +Do not audit attempts to get the attributes +of all symbolic links.

-Module: +Module: files

Layer: kernel

-files_create_var_lib( +files_dontaudit_getattr_default_dir( @@ -29955,24 +31103,31 @@ kernel

domain - - , - - - - file_type - + )
+

+ +

+Do not audit attempts to get the attributes of +directories with the default file type. +

+ +

+Module: +files

+Layer: +kernel

+ +files_dontaudit_getattr_default_files( - , - - [ - - object_class - - ] + domain )
@@ -29980,25 +31135,26 @@ kernel

-Create objects in the /var/lib directory +Do not audit attempts to get the attributes of +files with the default file type.

-Module: +Module: files

Layer: kernel

-files_delete_all_locks( +files_dontaudit_getattr_home_dir( - ? + domain )
@@ -30006,25 +31162,27 @@ kernel

-Summary is missing! +Do not audit attempts to get the +attributes of the home directories root +(/home).

-Module: +Module: files

Layer: kernel

-files_delete_all_pid_dirs( +files_dontaudit_getattr_non_security_blk_dev( - ? + domain )
@@ -30032,25 +31190,26 @@ kernel

-Summary is missing! +Do not audit attempts to get the attributes +of non security block devices.

-Module: +Module: files

Layer: kernel

-files_delete_all_pids( +files_dontaudit_getattr_non_security_chr_dev( - ? + domain )
@@ -30058,20 +31217,21 @@ kernel

-Summary is missing! +Do not audit attempts to get the attributes +of non security character devices.

-Module: +Module: files

Layer: kernel

-files_delete_etc_files( +files_dontaudit_getattr_non_security_files( @@ -30084,25 +31244,26 @@ kernel

-Delete system configuration files in /etc. +Do not audit attempts to get the attributes +of non security files.

-Module: +Module: files

Layer: kernel

-files_delete_root_dir_entry( +files_dontaudit_getattr_non_security_pipes( - ? + domain )
@@ -30110,20 +31271,21 @@ kernel

-Summary is missing! +Do not audit attempts to get the attributes +of non security named pipes.

-Module: +Module: files

Layer: kernel

-files_dontaudit_getattr_all_dirs( +files_dontaudit_getattr_non_security_sockets( @@ -30137,20 +31299,20 @@ kernel

Do not audit attempts to get the attributes -of all directories. +of non security named sockets.

-Module: +Module: files

Layer: kernel

-files_dontaudit_getattr_all_files( +files_dontaudit_getattr_non_security_symlinks( @@ -30164,20 +31326,20 @@ kernel

Do not audit attempts to get the attributes -of all files. +of non security symbolic links.

-Module: +Module: files

Layer: kernel

-files_dontaudit_getattr_all_pipes( +files_dontaudit_getattr_pid_dir( @@ -30191,20 +31353,20 @@ kernel

Do not audit attempts to get the attributes -of all named pipes. +of the /var/run directory.

-Module: +Module: files

Layer: kernel

-files_dontaudit_getattr_all_sockets( +files_dontaudit_getattr_tmp_dir( @@ -30217,21 +31379,21 @@ kernel

-Do not audit attempts to get the attributes -of all named sockets. +Do not audit attempts to get the +attributes of the tmp directory (/tmp).

-Module: +Module: files

Layer: kernel

-files_dontaudit_getattr_all_symlinks( +files_dontaudit_ioctl_all_pids( @@ -30244,21 +31406,20 @@ kernel

-Do not audit attempts to get the attributes -of all symbolic links. +Do not audit attempts to ioctl daemon runtime data files.

-Module: +Module: files

Layer: kernel

-files_dontaudit_getattr_default_dir( +files_dontaudit_list_default( @@ -30271,7 +31432,7 @@ kernel

-Do not audit attempts to get the attributes of +Do not audit attempts to list contents of directories with the default file type.

@@ -30279,13 +31440,13 @@ directories with the default file type.

-Module: +Module: files

Layer: kernel

-files_dontaudit_getattr_default_files( +files_dontaudit_list_home( @@ -30298,21 +31459,21 @@ kernel

-Do not audit attempts to get the attributes of -files with the default file type. +Do not audit attempts to list +home directories root (/home).

-Module: +Module: files

Layer: kernel

-files_dontaudit_getattr_home_dir( +files_dontaudit_list_non_security( @@ -30325,22 +31486,21 @@ kernel

-Do not audit attempts to get the -attributes of the home directories root -(/home). +Do not audit attempts to list all +non-security directories.

-Module: +Module: files

Layer: kernel

-files_dontaudit_getattr_non_security_blk_dev( +files_dontaudit_list_tmp( @@ -30353,21 +31513,20 @@ kernel

-Do not audit attempts to get the attributes -of non security block devices. +Do not audit listing of the tmp directory (/tmp).

-Module: +Module: files

Layer: kernel

-files_dontaudit_getattr_non_security_chr_dev( +files_dontaudit_read_default_files( @@ -30380,21 +31539,21 @@ kernel

-Do not audit attempts to get the attributes -of non security character devices. +Do not audit attempts to read files +with the default file type.

-Module: +Module: files

Layer: kernel

-files_dontaudit_getattr_non_security_files( +files_dontaudit_read_etc_runtime_files( @@ -30407,26 +31566,27 @@ kernel

-Do not audit attempts to get the attributes -of non security files. +Do not audit attempts to read files +in /etc that are dynamically +created on boot, such as mtab.

-Module: +Module: files

Layer: kernel

-files_dontaudit_getattr_non_security_pipes( +files_dontaudit_read_root_file( - domain + ? )
@@ -30434,26 +31594,25 @@ kernel

-Do not audit attempts to get the attributes -of non security named pipes. +Summary is missing!

-Module: +Module: files

Layer: kernel

-files_dontaudit_getattr_non_security_sockets( +files_dontaudit_rw_root_chr_dev( - domain + ? )
@@ -30461,26 +31620,25 @@ kernel

-Do not audit attempts to get the attributes -of non security named sockets. +Summary is missing!

-Module: +Module: files

Layer: kernel

-files_dontaudit_getattr_non_security_symlinks( +files_dontaudit_rw_root_file( - domain + ? )
@@ -30488,26 +31646,25 @@ kernel

-Do not audit attempts to get the attributes -of non security symbolic links. +Summary is missing!

-Module: +Module: files

Layer: kernel

-files_dontaudit_getattr_pid_dir( +files_dontaudit_search_all_dirs( - domain + ? )
@@ -30515,21 +31672,20 @@ kernel

-Do not audit attempts to get the attributes -of the /var/run directory. +Summary is missing!

-Module: +Module: files

Layer: kernel

-files_dontaudit_getattr_tmp_dir( +files_dontaudit_search_home( @@ -30542,21 +31698,21 @@ kernel

-Do not audit attempts to get the -attributes of the tmp directory (/tmp). +Do not audit attempts to search +home directories root (/home).

-Module: +Module: files

Layer: kernel

-files_dontaudit_ioctl_all_pids( +files_dontaudit_search_isid_type_dir( @@ -30569,20 +31725,21 @@ kernel

-Do not audit attempts to ioctl daemon runtime data files. +Do not audit attempts to search directories on new filesystems +that have not yet been labeled.

-Module: +Module: files

Layer: kernel

-files_dontaudit_list_default( +files_dontaudit_search_locks( @@ -30595,21 +31752,21 @@ kernel

-Do not audit attempts to list contents of -directories with the default file type. +Do not audit attempts to search the +locks directory (/var/lock).

-Module: +Module: files

Layer: kernel

-files_dontaudit_list_non_security( +files_dontaudit_search_pids( @@ -30622,26 +31779,26 @@ kernel

-Do not audit attempts to list all -non security directories. +Do not audit attempts to search +the /var/run directory.

-Module: +Module: files

Layer: kernel

-files_dontaudit_read_default_files( +files_dontaudit_search_src( - domain + ? )
@@ -30649,21 +31806,20 @@ kernel

-Do not audit attempts to read files -with the default file type. +Summary is missing!

-Module: +Module: files

Layer: kernel

-files_dontaudit_read_etc_runtime_files( +files_dontaudit_search_var( @@ -30676,27 +31832,26 @@ kernel

-Do not audit attempts to read files -in /etc that are dynamically -created on boot, such as mtab. +Do not audit attempts to search +the contents of /var.

-Module: +Module: files

Layer: kernel

-files_dontaudit_read_root_file( +files_dontaudit_write_all_pids( - ? + domain )
@@ -30704,25 +31859,25 @@ kernel

-Summary is missing! +Do not audit attempts to write to daemon runtime data files.

-Module: +Module: files

Layer: kernel

-files_dontaudit_rw_root_chr_dev( +files_dontaudit_write_var( - ? + domain )
@@ -30730,20 +31885,20 @@ kernel

-Summary is missing! +Do not audit attempts to write to /var.

-Module: +Module: files

Layer: kernel

 
-files_dontaudit_rw_root_file(
+files_exec_etc_files(
 	
@@ -30763,18 +31918,18 @@ Summary is missing!

-Module: +Module: files

Layer: kernel

-files_dontaudit_search_all_dirs( +files_exec_usr_files( - ? + domain )
@@ -30782,20 +31937,20 @@ kernel

-Summary is missing! +Execute generic programs in /usr in the caller domain.

-Module: +Module: files

Layer: kernel

-files_dontaudit_search_home( +files_exec_usr_src_files( @@ -30808,26 +31963,25 @@ kernel

-Do not audit attempts to search -home directories root (/home). +Execute programs in /usr/src in the caller domain.

-Module: +Module: files

Layer: kernel

-files_dontaudit_search_isid_type_dir( +files_filetrans_etc( - domain + ? )
@@ -30835,21 +31989,20 @@ kernel

-Do not audit attempts to search directories on new filesystems -that have not yet been labeled. +Summary is missing!

-Module: +Module: files

Layer: kernel

-files_dontaudit_search_locks( +files_filetrans_home( @@ -30857,31 +32010,50 @@ kernel

domain + + , + + + + home_type + + + + , + + + + [ + + object + + ] + + )

-Do not audit attempts to search the -locks directory (/var/lock). +Create objects in /home.

-Module: +Module: files

Layer: kernel

-files_dontaudit_search_pids( +files_filetrans_lock( - domain + ? )
@@ -30889,21 +32061,20 @@ kernel

-Do not audit attempts to search -the /var/run directory. +Summary is missing!

-Module: +Module: files

Layer: kernel

 
-files_dontaudit_search_src(
+files_filetrans_pid(
 	
@@ -30923,13 +32094,13 @@ Summary is missing!

-Module: +Module: files

Layer: kernel

-files_dontaudit_search_var( +files_filetrans_root( @@ -30937,31 +32108,51 @@ kernel

domain + + , + + + + private type + + + + , + + + + [ + + object + + ] + + )

-Do not audit attempts to search -the contents of /var. +Create an object in the root directory, with a private +type.

-Module: +Module: files

Layer: kernel

-files_dontaudit_write_all_pids( +files_filetrans_tmp( - domain + ? )
@@ -30969,25 +32160,45 @@ kernel

-Do not audit attempts to write to daemon runtime data files. +Summary is missing!

-Module: +Module: files

Layer: kernel

-files_exec_etc_files( +files_filetrans_usr( - ? + domain + + + + , + + + + file_type + + + + , + + + + [ + + object_class + + ] )
@@ -30995,20 +32206,20 @@ kernel

-Summary is missing! +Create objects in the /usr directory

-Module: +Module: files

Layer: kernel

-files_exec_usr_files( +files_filetrans_var( @@ -31016,25 +32227,45 @@ kernel

domain + + , + + + + file_type + + + + , + + + + [ + + object_class + + ] + + )

-Execute generic programs in /usr in the caller domain. +Create objects in the /var directory

-Module: +Module: files

Layer: kernel

-files_exec_usr_src_files( +files_filetrans_var_lib( @@ -31042,12 +32273,32 @@ kernel

domain + + , + + + + file_type + + + + , + + + + [ + + object_class + + ] + + )

-Execute programs in /usr/src in the caller domain. +Create objects in the /var/lib directory

@@ -31211,6 +32462,32 @@ Get the attributes of all symbolic links.

+Module: +files

+Layer: +kernel

+
+files_getattr_default_dir(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Getattr of directories with the default file type. +

+ +

Module: files

Layer: @@ -31264,6 +32541,33 @@ Get the attributes of the home directories root

+Layer: +kernel

+
+files_getattr_isid_type_dir(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Getattr of directories on new filesystems +that have not yet been labeled. +

+ +

Module: files

Layer: @@ -31525,6 +32829,32 @@ Summary is missing!

+Layer: +kernel

+
+files_list_non_security(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+List all non-security directories. +

+ +

Module: files

Layer: @@ -32356,6 +33686,33 @@ Summary is missing!

+Layer: +kernel

+
+files_mounton_all_poly_members(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Mount filesystems on all polyinstantiation +member directories. +

+ +

Module: files

Layer: @@ -32603,6 +33960,33 @@ of a polyinstantiated directory.

+Layer: +kernel

+
+files_polyinstantiate_all(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Allow access to manage all polyinstantiated +directories on the system. +

+ +

Module: files

Layer: @@ -32712,7 +34096,72 @@ kernel

-Read all directories on the filesystem, except +Read all directories on the filesystem, except +the listed exceptions. +

+ +

+Module: +files

+Layer: +kernel

+
+files_read_all_files(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Read all files. +

+ +

+Module: +files

+Layer: +kernel

+
+files_read_all_files_except(
+	
+		
+		
+		
+		domain
+		
+	
+		
+			,
+		
+		
+		
+			[
+		
+		exception_types
+		
+			]
+		
+	
+	)

+

+ +

+Read all files on the filesystem, except the listed exceptions.

@@ -32720,13 +34169,13 @@ the listed exceptions.

-Module: +Module: files

Layer: kernel

-files_read_all_files( +files_read_all_locks( @@ -32739,46 +34188,7 @@ kernel

-Read all files. -

- -

-Module: -files

-Layer: -kernel

-
-files_read_all_files_except(
-	
-		
-		
-		
-		domain
-		
-	
-		
-			,
-		
-		
-		
-			[
-		
-		exception_types
-		
-			]
-		
-	
-	)

-

- -

-Read all files on the filesystem, except -the listed exceptions. +Read all lock files.

@@ -32868,7 +34278,7 @@ kernel

-Read all symbloic links on the filesystem, except +Read all symbolic links on the filesystem, except the listed exceptions.

@@ -33138,6 +34548,32 @@ that have not yet been labeled.

+Module: +files

+Layer: +kernel

+
+files_read_non_security_files(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Read all non-security files. +

+ +

Module: files

Layer: @@ -34330,6 +35766,32 @@ Summary is missing!

-Module: +Module: filesystem

+Layer: +kernel

+
+files_write_non_security_dir(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Allow attempts to modify any directory +

+ +

Module: finger

Layer: @@ -34650,18 +36112,18 @@ in the specified domain.

Layer: kernel

-fs_create_tmpfs_data( +fs_donaudit_read_removable_files( - ? + domain )
@@ -34669,7 +36131,7 @@ kernel

-Summary is missing! +Do not audit attempts to read removable storage files.

@@ -34840,6 +36302,33 @@ attributes, such as ext3, JFS, or XFS.

+Module: +filesystem

+Layer: +kernel

+
+fs_dontaudit_list_auto_mountpoints(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Do not audit attempts to list directories of automatically +mounted filesystems. +

+ +

Module: filesystem

Layer: @@ -34894,6 +36383,32 @@ of directories on a NFS filesystem.

+Layer: +kernel

+
+fs_dontaudit_list_removable_dirs(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Do not audit attempts to list removable storage directories. +

+ +

Module: filesystem

Layer: @@ -35141,6 +36656,59 @@ write files on a NFS filesystem.

+Layer: +kernel

+
+fs_dontaudit_rw_tmpfs_files(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Do not audit attempts to read or write +generic tmpfs files. +

+ +

+Module: +filesystem

+Layer: +kernel

+
+fs_dontaudit_use_tmpfs_chr_dev(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+dontaudit Read and write character nodes on tmpfs filesystems. +

+ +

Module: filesystem

Layer: @@ -35222,6 +36790,32 @@ Execute files on a NFS filesystem.

Layer: @@ -35839,6 +37433,33 @@ List all directories with a filesystem type.

+Layer: +kernel

+
+fs_filetrans_tmpfs(
+	
+		
+		
+		
+		?
+		
+	
+	)

+

+ +

+Summary is missing! +

+ +

Module: filesystem

+Layer: +kernel

+
+fs_list_auto_mountpoints(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Read directories of automatically +mounted filesystems. +

+ +

Module: filesystem

Layer: @@ -35866,6 +37487,32 @@ CIFS or SMB filesystem.

+Layer: +kernel

+
+fs_list_nfs(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+List NFS filesystem. +

+ +

Module: filesystem

Layer: @@ -35946,6 +37593,33 @@ support.

Layer: @@ -36781,6 +38455,32 @@ Read symbolic links on a CIFS or SMB filesystem.

+Layer: +kernel

+
+fs_manage_auto_mountpoints(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Create, read, write, and delete +auto moutpoints. +

+ +

Module: filesystem

+Layer: +kernel

+
+fs_read_eventpollfs(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Read eventpollfs files +

+ +

Module: filesystem

Layer: @@ -36885,6 +38585,58 @@ Read all noxattrfs symbolic links.

+Layer: +kernel

+
+fs_read_removable_files(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Read removable storage files. +

+ +

+Module: +filesystem

+Layer: +kernel

+
+fs_read_removable_symlinks(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Read removable storage symbolic links. +

+ +

Module: filesystem

Layer: @@ -37716,6 +39468,58 @@ Search directories on a ramfs

Layer: @@ -39512,53 +41316,6 @@ Inherit and use file descriptors from inetd.

+Layer: +kernel

+
+fs_search_removable_dirs(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Search removable storage directories. +

+ +

+Module: +filesystem

+Layer: +kernel

+
+fs_search_rpc_dirs(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Search directories of RPC file system pipes. +

+ +

Module: filesystem

-Module: -init

-Layer: -system

-
-init_create_script_tmp(
-	
-		
-		
-		
-		domain
-		
-	
-		
-			,
-		
-		
-		
-		file_type
-		
-	
-		
-			,
-		
-		
-		
-			[
-		
-		object_class
-		
-			]
-		
-	
-	)

-

- -

-Create files in a init script -temporary data directory. -

- -

Module: init

Layer: @@ -39733,6 +41490,33 @@ Summary is missing!

+Module: +init

+Layer: +system

+
+init_dontaudit_lock_pid(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Do not audit attempts to lock +init script pid files. +

+ +

Module: init

Layer: @@ -39969,6 +41753,53 @@ Summary is missing!

+Module: +init

+Layer: +system

+
+init_filetrans_script_tmp(
+	
+		
+		
+		
+		domain
+		
+	
+		
+			,
+		
+		
+		
+		file_type
+		
+	
+		
+			,
+		
+		
+		
+			[
+		
+		object_class
+		
+			]
+		
+	
+	)

+

+ +

+Create files in a init script +temporary data directory. +

+ +

Module: init

Layer: @@ -43870,7 +45701,7 @@ kernel

-Unconfined access to the kernel. +Unconfined access to kernel module resources.

@@ -44122,6 +45953,32 @@ Execute kudzu in the kudzu domain.

+Module: +kudzu

+Layer: +admin

+
+kudzu_getattr_exec_file(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Get attributes of kudzu executable. +

+ +

Module: kudzu

Layer: @@ -44376,6 +46233,86 @@ with legacy support.

+Module: +libraries

+Layer: +system

+
+libs_manage_ld_so(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Create, read, write, and delete the +dynamic link/loader. +

+ +

+Module: +libraries

+Layer: +system

+
+libs_manage_lib_files(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Create, read, write, and delete generic +files in library directories. +

+ +

+Module: +libraries

+Layer: +system

+
+libs_manage_shared_libs(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Create, read, write, and delete shared libraries. +

+ +

Module: libraries

Layer: @@ -44403,6 +46340,87 @@ as static libraries.

+Module: +libraries

+Layer: +system

+
+libs_relabel_ld_so(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Relabel to and from the type used for +the dynamic link/loader. +

+ +

+Module: +libraries

+Layer: +system

+
+libs_relabel_lib_files(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Relabel to and from the type used +for generic lib files. +

+ +

+Module: +libraries

+Layer: +system

+
+libs_relabel_shared_libs(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Relabel to and from the type used for +shared libraries. +

+ +

Module: libraries

Layer: @@ -44828,18 +46846,18 @@ Summary is missing!

-Module: +Module: logging

Layer: system

-logging_create_log( +logging_domtrans_auditctl( - ? + domain )
@@ -44847,20 +46865,20 @@ system

-Summary is missing! +Execute auditctl in the auditctl domain.

-Module: +Module: logging

Layer: system

-logging_domtrans_auditctl( +logging_domtrans_syslog( @@ -44873,25 +46891,25 @@ system

-Execute auditctl in the auditctl domain. +Execute syslogd in the syslog domain.

-Module: +Module: logging

Layer: system

-logging_domtrans_syslog( +logging_dontaudit_getattr_all_logs( - domain + ? )
@@ -44899,25 +46917,25 @@ system

-Execute syslogd in the syslog domain. +Summary is missing!

-Module: +Module: logging

Layer: system

-logging_dontaudit_getattr_all_logs( +logging_exec_all_logs( - ? + domain )
@@ -44925,25 +46943,25 @@ system

-Summary is missing! +Execute all log files in the caller domain.

-Module: +Module: logging

Layer: system

-logging_exec_all_logs( +logging_filetrans_log( - domain + ? )
@@ -44951,7 +46969,7 @@ system

-Execute all log files in the caller domain. +Summary is missing!

@@ -45090,6 +47108,32 @@ Summary is missing!

+Module: +logging

+Layer: +system

+
+logging_read_audit_log(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Read the audit log. +

+ +

Module: logging

Layer: @@ -45447,6 +47491,32 @@ Inherit and use logrotate file descriptors.

+Module: +logwatch

+Layer: +admin

+
+logwatch_read_tmp_files(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Read logwatch temporary files. +

+ +

Module: lpd

Layer: @@ -46979,6 +49049,32 @@ Execute mount in the mount domain.

+Module: +mount

+Layer: +system

+
+mount_exec(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Execute mount in the caller domain. +

+ +

Module: mount

Layer: @@ -47235,6 +49331,80 @@ Summary is missing!

+Module: +mta

+Layer: +services

+
+mta_filetrans_etc_aliases(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Type transition files created in /etc +to the mail address aliases type. +

+ +

+Module: +mta

+Layer: +services

+
+mta_filetrans_spool(
+	
+		
+		
+		
+		domain
+		
+	
+		
+			,
+		
+		
+		
+		private type
+		
+	
+		
+			,
+		
+		
+		
+			[
+		
+		object
+		
+			]
+		
+	
+	)

+

+ +

+Create private objects in the +mail spool directory. +

+ +

Module: mta

Layer: @@ -49236,53 +51406,6 @@ Send UDP network traffic to portmap.

-Module: -postfix

-Layer: -services

-
-postfix_create_config(
-	
-		
-		
-		
-		domain
-		
-	
-		
-			,
-		
-		
-		
-		private type
-		
-	
-		
-			,
-		
-		
-		
-			[
-		
-		object
-		
-			]
-		
-	
-	)

-

- -

-Create files with the specified type in -the postfix configuration directories. -

- -

Module: postfix

Layer: @@ -49446,6 +51569,53 @@ caller domain.

+Module: +postfix

+Layer: +services

+
+postfix_filetrans_config(
+	
+		
+		
+		
+		domain
+		
+	
+		
+			,
+		
+		
+		
+		private type
+		
+	
+		
+			,
+		
+		
+		
+			[
+		
+		object
+		
+			]
+		
+	
+	)

+

+ +

+Create files with the specified type in +the postfix configuration directories. +

+ +

Module: postfix

Layer: @@ -49936,6 +52106,137 @@ Use PPP file discriptors.

+Module: +prelink

+Layer: +admin

+
+prelink_delete_cache(
+	
+		
+		
+		
+		file_type
+		
+	
+	)

+

+ +

+Delete the prelink cache. +

+ +

+Module: +prelink

+Layer: +admin

+
+prelink_domtrans(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Execute the prelink program in the prelink domain. +

+ +

+Module: +prelink

+Layer: +admin

+
+prelink_manage_log(
+	
+		
+		
+		
+		file_type
+		
+	
+	)

+

+ +

+Create, read, write, and delete +prelink log files. +

+ +

+Module: +prelink

+Layer: +admin

+
+prelink_object_file(
+	
+		
+		
+		
+		file_type
+		
+	
+	)

+

+ +

+Make the specified file type prelinkable. +

+ +

+Module: +prelink

+Layer: +admin

+
+prelink_read_cache(
+	
+		
+		
+		
+		file_type
+		
+	
+	)

+

+ +

+Read the prelink cache. +

+ +

Module: procmail

Layer: @@ -50727,6 +53028,32 @@ Read and write an unnamed RPM pipe.

+Module: +rpm

+Layer: +admin

+
+rpm_script_domtrans(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Execute rpm_script programs in the rpm_script domain. +

+ +

Module: rpm

Layer: @@ -52662,8 +54989,52 @@ system

-Execute restorecon in the restorecon domain, and -allow the specified role the restorecon domain, +Execute restorecon in the restorecon domain, and +allow the specified role the restorecon domain, +and use the caller's terminal. +

+ +

+Module: +selinuxutil

+Layer: +system

+
+seutil_run_runinit(
+	
+		
+		
+		
+		domain
+		
+	
+		
+			,
+		
+		
+		
+		role
+		
+	
+		
+			,
+		
+		
+		
+		terminal
+		
+	
+	)

+

+ +

+Execute run_init in the run_init domain, and +allow the specified role the run_init domain, and use the caller's terminal.

@@ -52671,13 +55042,13 @@ and use the caller's terminal.

-Module: +Module: selinuxutil

Layer: system

-seutil_run_runinit( +seutil_run_setfiles( @@ -52706,8 +55077,8 @@ system

-Execute run_init in the run_init domain, and -allow the specified role the run_init domain, +Execute setfiles in the setfiles domain, and +allow the specified role the setfiles domain, and use the caller's terminal.

@@ -52715,13 +55086,13 @@ and use the caller's terminal.

-Module: +Module: selinuxutil

Layer: system

-seutil_run_setfiles( +seutil_search_default_contexts( @@ -52729,20 +55100,30 @@ system

domain - - , - - - - role - + )
+

+ +

+Search the policy directory with default_context files. +

+ +

+Module: +selinuxutil

+Layer: +system

+ +seutil_sigchld_newrole( - , - - terminal + ? )
@@ -52750,27 +55131,25 @@ system

-Execute setfiles in the setfiles domain, and -allow the specified role the setfiles domain, -and use the caller's terminal. +Summary is missing!

-Module: +Module: selinuxutil

Layer: system

-seutil_search_default_contexts( +seutil_use_newrole_fd( - domain + ? )
@@ -52778,20 +55157,20 @@ system

-Search the policy directory with default_context files. +Summary is missing!

-Module: +Module: selinuxutil

Layer: system

 
-seutil_sigchld_newrole(
+seutil_use_runinit_fd(
 	
@@ -52811,18 +55190,18 @@ Summary is missing!

-Module: -selinuxutil

-Layer: -system

+Module: +slocate

+Layer: +apps

-seutil_use_newrole_fd( +slocate_create_append_log( - ? + domain )
@@ -52830,25 +55209,25 @@ system

-Summary is missing! +Create the locate log with append mode.

-Module: -selinuxutil

-Layer: -system

+Module: +slrnpull

+Layer: +services

-seutil_use_runinit_fd( +slrnpull_manage_spool( - ? + pty_type )
@@ -52856,7 +55235,60 @@ system

-Summary is missing! +Allow the domain to create, read, +write, and delete slrnpull spools. +

+ +

+Module: +slrnpull

+Layer: +services

+
+slrnpull_search_spool(
+	
+		
+		
+		
+		pty_type
+		
+	
+	)

+

+ +

+Allow the domain to search slrnpull spools. +

+ +

+Module: +smartmon

+Layer: +services

+
+smartmon_read_tmp(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Allow caller to read smartmon temporary files.

@@ -54001,13 +56433,13 @@ Execute su in the caller domain.

-Module: +Module: sysnetwork

Layer: system

-sysnet_create_config( +sysnet_dbus_chat_dhcpc( @@ -54020,21 +56452,21 @@ system

-Create files in /etc with the type used for -the network config files. +Send and receive messages from +dhcpc over dbus.

-Module: +Module: sysnetwork

Layer: system

-sysnet_create_dhcp_state( +sysnet_delete_dhcpc_pid( @@ -54042,45 +56474,25 @@ system

domain - - , - - - - file_type - - - - , - - - - [ - - object_class - - ] - - )

-Create DHCP state data. +Delete the dhcp client pid file.

-Module: +Module: sysnetwork

Layer: system

-sysnet_dbus_chat_dhcpc( +sysnet_dns_name_resolve( @@ -54093,21 +56505,20 @@ system

-Send and receive messages from -dhcpc over dbus. +Perform a DNS name resolution.

-Module: +Module: sysnetwork

Layer: system

-sysnet_delete_dhcpc_pid( +sysnet_domtrans_dhcpc( @@ -54120,20 +56531,20 @@ system

-Delete the dhcp client pid file. +Execute dhcp client in dhcpc domain.

-Module: +Module: sysnetwork

Layer: system

-sysnet_dns_name_resolve( +sysnet_domtrans_ifconfig( @@ -54146,20 +56557,20 @@ system

-Perform a DNS name resolution. +Execute ifconfig in the ifconfig domain.

-Module: +Module: sysnetwork

Layer: system

-sysnet_domtrans_dhcpc( +sysnet_dontaudit_read_config( @@ -54172,20 +56583,20 @@ system

-Execute dhcp client in dhcpc domain. +Do not audit attempts to read network config files.

-Module: +Module: sysnetwork

Layer: system

-sysnet_domtrans_ifconfig( +sysnet_exec_ifconfig( @@ -54198,20 +56609,20 @@ system

-Execute ifconfig in the ifconfig domain. +Execute ifconfig in the caller domain.

-Module: +Module: sysnetwork

Layer: system

-sysnet_dontaudit_read_config( +sysnet_filetrans_config( @@ -54224,20 +56635,21 @@ system

-Do not audit attempts to read network config files. +Create files in /etc with the type used for +the network config files.

-Module: +Module: sysnetwork

Layer: system

-sysnet_exec_ifconfig( +sysnet_filetrans_dhcp_state( @@ -54245,12 +56657,32 @@ system

domain + + , + + + + file_type + + + + , + + + + [ + + object_class + + ] + + )

-Execute ifconfig in the caller domain. +Create DHCP state data.

@@ -54708,6 +57140,32 @@ Connect and use remote port mappers.

+Module: +sysstat

+Layer: +services

+
+sysstat_manage_log(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Manage sysstat logs. +

+ +

Module: tcpd

Layer: @@ -54878,6 +57336,33 @@ of all unallocated tty device nodes.

+Module: +terminal

+Layer: +kernel

+
+term_dontaudit_ioctl_unallocated_ttys(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Do not audit attempts to ioctl +unallocated tty device nodes. +

+ +

Module: terminal

Layer: @@ -54932,6 +57417,33 @@ write, or delete the /dev/pts directory.

+Module: +terminal

+Layer: +kernel

+
+term_dontaudit_search_ptys(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Do not audit attempts to search the +contents of the /dev/pts directory. +

+ +

Module: terminal

Layer: @@ -55282,6 +57794,32 @@ Transform specified type into a pty type.

+Module: +terminal

+Layer: +kernel

+
+term_read_console(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Read from the console. +

+ +

Module: terminal

Layer: @@ -55928,6 +58466,40 @@ Execute tmpreaper in the caller domain.

+Module: +ucspitcp

+Layer: +services

+
+ucspitcp_service_domain(
+	
+		
+		
+		
+		domain
+		
+	
+		
+			,
+		
+		
+		
+		entrypoint
+		
+	
+	)

+

+ +

+Define a specified domain as a ucspitcp service. +

+ +

Module: udev

Layer: @@ -56467,13 +59039,13 @@ Execute updfstab in the updfstab domain.

-Module: -userdomain

-Layer: -system

+Module: +usbmodules

+Layer: +admin

-userdom_create_generic_user_home( +usbmodules_domtrans( @@ -56481,38 +59053,25 @@ system

domain - - , - - - - [ - - object_class - - ] - - )

-Create objects in generic user home directories -with automatic file type transition. +Execute usbmodules in the usbmodules domain.

-Module: -userdomain

-Layer: -system

+Module: +usbmodules

+Layer: +admin

-userdom_create_generic_user_home_dir( +usbmodules_run( @@ -56520,13 +59079,30 @@ system

domain + + , + + + + role + + + + , + + + + terminal + + )

-Create generic user home directories -with automatic file type transition. +Execute usbmodules in the usbmodules domain, and +allow the specified role the usbmodules domain, +and use the caller's terminal.

@@ -56972,6 +59548,72 @@ user ttys.

+Module: +userdomain

+Layer: +system

+
+userdom_filetrans_generic_user_home(
+	
+		
+		
+		
+		domain
+		
+	
+		
+			,
+		
+		
+		
+			[
+		
+		object_class
+		
+			]
+		
+	
+	)

+

+ +

+Create objects in generic user home directories +with automatic file type transition. +

+ +

+Module: +userdomain

+Layer: +system

+
+userdom_filetrans_generic_user_home_dir(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Create generic user home directories +with automatic file type transition. +

+ +

Module: userdomain

Layer: @@ -57321,6 +59963,59 @@ links in generic user home directories.

+Module: +userdomain

+Layer: +system

+
+userdom_manage_unpriv_user_semaphores(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Manage unpriviledged user SysV sempaphores. +

+ +

+Module: +userdomain

+Layer: +system

+
+userdom_manage_unpriv_user_shared_mem(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Manage unpriviledged user SysV shared +memory segments. +

+ +

Module: userdomain

Layer: @@ -58532,6 +61227,36 @@ allow the specified role the useradd domain.

+Module: +vbetool

+Layer: +admin

+
+vbetool_domtrans(
+	
+		
+		
+		
+			[
+		
+		domain
+		
+			]
+		
+	
+	)

+

+ +

+Execute vbetool application in the vbetool domain. +

+ +

Module: vpn

Layer: @@ -58601,6 +61326,32 @@ allow the specified role the vpnc domain.

+Module: +vpn

+Layer: +admin

+
+vpn_signal(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

-Do not audit attempts to get attributes -of the /boot directory. +Do not audit attempts to search the /boot directory.

@@ -429,7 +429,7 @@ of the /boot directory. domain -Domain to not audit. +The type of the process performing this action. No @@ -439,13 +439,55 @@ No

- +

 
-bootloader_dontaudit_search_boot(
+bootloader_filetrans_modules(
+	
+		
+		
+		
+		?
+		
+	
+	)

+

+ +

Summary

+Summary is missing! +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+? +	+ +Parameter descriptions are missing! + +	+No +

+ + +

+ +bootloader_getattr_boot_dir( @@ -459,7 +501,7 @@ No

Summary

-Do not audit attempts to search the /boot directory. +Get attributes of the /boot directory.

@@ -471,7 +513,7 @@ Do not audit attempts to search the /boot directory. domain -The type of the process performing this action. +Domain to not audit. No diff --git a/www/api-docs/kernel_corecommands.html b/www/api-docs/kernel_corecommands.html index 9068d76..c44acb3 100644 --- a/www/api-docs/kernel_corecommands.html +++ b/www/api-docs/kernel_corecommands.html @@ -746,6 +746,174 @@ No

+ +

+ + +

+
+corecmd_manage_bin_files(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Create, read, write, and delete bin files. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

+ + +

+
+corecmd_manage_sbin_files(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Create, read, write, and delete sbin files. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

+ + +

+
+corecmd_mmap_bin_files(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Mmap a bin file as executable. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

+ + +

+
+corecmd_mmap_sbin_files(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Mmap a sbin file as executable. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

@@ -1082,6 +1250,90 @@ No

+ +

+ + +

+
+corecmd_relabel_bin_files(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Relabel to and from the bin type. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

+ + +

+
+corecmd_relabel_sbin_files(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Relabel to and from the sbin type. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

diff --git a/www/api-docs/kernel_corenetwork.html b/www/api-docs/kernel_corenetwork.html index 11e61b8..6697c54 100644 --- a/www/api-docs/kernel_corenetwork.html +++ b/www/api-docs/kernel_corenetwork.html @@ -610,6 +610,48 @@ No

+ +

+ + +

+
+corenet_raw_receive_lo_if(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Receive raw IP packets on the lo interface. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +The type of the process performing this action. + +	+No +

@@ -1114,6 +1156,48 @@ No

+ +

+ + +

+
+corenet_raw_send_lo_if(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Send raw IP packets on the lo interface. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +The type of the process performing this action. + +	+No +

@@ -1618,6 +1702,48 @@ No

+ +

+ + +

+
+corenet_raw_sendrecv_lo_if(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Send and receive raw IP packets on the lo interface. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +The type of the process performing this action. + +	+No +

@@ -12034,6 +12160,48 @@ No

+ +

+ + +

+
+corenet_tcp_sendrecv_lo_if(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Send and receive TCP network traffic on the lo interface. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +The type of the process performing this action. + +	+No +

@@ -20434,6 +20602,48 @@ No

+ +

+ + +

+
+corenet_udp_receive_lo_if(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Receive UDP network traffic on the lo interface. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +The type of the process performing this action. + +	+No +

@@ -24676,6 +24886,48 @@ No

+ +

+ + +

+
+corenet_udp_send_lo_if(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Send UDP network traffic on the lo interface. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +The type of the process performing this action. + +	+No +

@@ -28918,6 +29170,48 @@ No

+ +

+ + +

+
+corenet_udp_sendrecv_lo_if(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Send and receive UDP network traffic on the lo interface. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +The type of the process performing this action. + +	+No +

diff --git a/www/api-docs/kernel_devices.html b/www/api-docs/kernel_devices.html index 02f9001..28977b7 100644 --- a/www/api-docs/kernel_devices.html +++ b/www/api-docs/kernel_devices.html @@ -252,86 +252,6 @@ No

- -

- - -

-
-dev_create_dev_node(
-	
-		
-		
-		
-		domain
-		
-	
-		
-			,
-		
-		
-		
-		file
-		
-	
-		
-			,
-		
-		
-		
-		objectclass(es)
-		
-	
-	)

-

- -

Summary

-Create, read, and write device nodes. The node -will be transitioned to the type provided. -

- - -

Parameters

- - - - - - - - - -

Parameter:	Description:	Optional:
-domain -	- -Domain allowed access. - -	-No -
-file -	- -Type to which the created node will be transitioned. - -	-No -
-objectclass(es) -	- -Object class(es) (single or set including {}) for which this -the transition will occur. - -	-No -

@@ -795,6 +715,48 @@ No

+ +

+ + +

+
+dev_dontaudit_getattr_memory_dev(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+dontaudit getattr raw memory devices (e.g. /dev/mem). +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

@@ -1646,6 +1608,86 @@ No

+ +

+ + +

+
+dev_filetrans_dev_node(
+	
+		
+		
+		
+		domain
+		
+	
+		
+			,
+		
+		
+		
+		file
+		
+	
+		
+			,
+		
+		
+		
+		objectclass(es)
+		
+	
+	)

+

+ +

Summary

+Create, read, and write device nodes. The node +will be transitioned to the type provided. +

+ + +

Parameters

+ + + + + + + + + +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +
+file +	+ +Type to which the created node will be transitioned. + +	+No +
+objectclass(es) +	+ +Object class(es) (single or set including {}) for which this +the transition will occur. + +	+No +

diff --git a/www/api-docs/kernel_domain.html b/www/api-docs/kernel_domain.html index c72992b..81fe238 100644 --- a/www/api-docs/kernel_domain.html +++ b/www/api-docs/kernel_domain.html @@ -1543,6 +1543,91 @@ No

+ +

+ + +

+
+domain_manage_all_entry_files(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Create, read, write, and delete all +entrypoint files. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

+ + +

+
+domain_mmap_all_entry_files(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Mmap all entry point files as executable. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

@@ -1754,6 +1839,49 @@ No

+ +

+ + +

+
+domain_relabel_all_entry_files(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Relabel to and from all entry point +file types. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

diff --git a/www/api-docs/kernel_files.html b/www/api-docs/kernel_files.html index 4db3242..b7ed449 100644 --- a/www/api-docs/kernel_files.html +++ b/www/api-docs/kernel_files.html @@ -244,13 +244,13 @@ No

- +

 
-files_create_etc_config(
+files_delete_all_locks(
 	
@@ -286,26 +286,18 @@ No

- +

-files_create_home_dirs( - - - - - domain - +files_delete_all_pid_dirs( - , - - home_type + ? )
@@ -314,7 +306,7 @@ No

Summary

-Create home directories +Summary is missing!

@@ -323,20 +315,52 @@ Create home directories Parameter:Description:Optional: -domain +? -The type of the process performing this action. +Parameter descriptions are missing! No + +

+ + +

+
+files_delete_all_pids(
+	
+		
+		
+		
+		?
+		
+	
+	)

+

+ +

Summary

+Summary is missing! +

+ + +

Parameters

+ + + -

Parameter:	Description:	Optional:
-home_type +?	-The type of the home directory +Parameter descriptions are missing!	No @@ -346,18 +370,18 @@ No - + -files_create_lock( +files_delete_etc_files( - ? + domain ) @@ -366,7 +390,7 @@ No Summary -Summary is missing! +Delete system configuration files in /etc. @@ -375,10 +399,10 @@ Summary is missing!
Parameter:	Description:	Optional:
-? +domain	-Parameter descriptions are missing! +The type of the process performing this action.	No @@ -388,13 +412,13 @@ No - + -files_create_pid( +files_delete_root_dir_entry( @@ -430,13 +454,13 @@ No - + -files_create_root( +files_dontaudit_getattr_all_dirs( @@ -444,39 +468,14 @@ No domain - - , - - - - [ - - private type - - ] - - - - , - - - - [ - - object - - ] - - ) Summary -Create an object in the root directory, with a private -type. If no object class is specified, the -default is file. +Do not audit attempts to get the attributes +of all directories. @@ -488,51 +487,71 @@ default is file. domain	-The type of the process performing this action. +Domain to not audit.	No
-private type -	+

-The type of the object to be created. If no type -is specified, the type of the root directory will -be used. + +

- -yes - + +

+
+files_dontaudit_getattr_all_files(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Do not audit attempts to get the attributes +of all files. +

+ + +

Parameters

+ +

Parameter:	Description:	Optional:
-object +domain	-The object class of the object being created. If -no class is specified, file will be used. +Domain to not audit.	-yes +No

- +

-files_create_tmp_files( +files_dontaudit_getattr_all_pipes( - ? + domain )
@@ -541,7 +560,8 @@ yes

Summary

-Summary is missing! +Do not audit attempts to get the attributes +of all named pipes.

@@ -550,10 +570,10 @@ Summary is missing! Parameter:Description:Optional: -? +domain -Parameter descriptions are missing! +Domain to not audit. No @@ -563,13 +583,13 @@ No

- +

 
-files_create_usr(
+files_dontaudit_getattr_all_sockets(
 	
 		
 		
@@ -577,33 +597,14 @@ No
 		domain
 		
 	
-		
-			,
-		
-		
-		
-		file_type
-		
-	
-		
-			,
-		
-		
-		
-			[
-		
-		object_class
-		
-			]
-		
-	
 	)

 

Summary

-Create objects in the /usr directory +Do not audit attempts to get the attributes +of all named sockets.

@@ -615,43 +616,66 @@ Create objects in the /usr directory domain -Domain allowed access. +Domain to not audit. No - -file_type - + +

-The type of the object to be created + +

- -No - + +

+
+files_dontaudit_getattr_all_symlinks(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Do not audit attempts to get the attributes +of all symbolic links. +

+ + +

Parameters

+ +

Parameter:	Description:	Optional:
-object_class +domain	-The object class. If not specified, file is used. +Domain to not audit.	-yes +No

- +

 
-files_create_var(
+files_dontaudit_getattr_default_dir(
 	
 		
 		
@@ -659,33 +683,14 @@ yes
 		domain
 		
 	
-		
-			,
-		
-		
-		
-		file_type
-		
-	
-		
-			,
-		
-		
-		
-			[
-		
-		object_class
-		
-			]
-		
-	
 	)

 

Summary

-Create objects in the /var directory +Do not audit attempts to get the attributes of +directories with the default file type.

@@ -697,43 +702,66 @@ Create objects in the /var directory domain -Domain allowed access. +Domain to not audit. No - -file_type - + +

-The type of the object to be created + +

- -No - + +

+
+files_dontaudit_getattr_default_files(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Do not audit attempts to get the attributes of +files with the default file type. +

+ + +

Parameters

+ +

Parameter:	Description:	Optional:
-object_class +domain	-The object class. If not specified, file is used. +Domain to not audit.	-yes +No

- +

 
-files_create_var_lib(
+files_dontaudit_getattr_home_dir(
 	
 		
 		
@@ -741,33 +769,15 @@ yes
 		domain
 		
 	
-		
-			,
-		
-		
-		
-		file_type
-		
-	
-		
-			,
-		
-		
-		
-			[
-		
-		object_class
-		
-			]
-		
-	
 	)

 

Summary

-Create objects in the /var/lib directory +Do not audit attempts to get the +attributes of the home directories root +(/home).

@@ -779,48 +789,71 @@ Create objects in the /var/lib directory domain -Domain allowed access. +Domain to not audit. No - -file_type - + +

-The type of the object to be created + +

- -No - + +

+
+files_dontaudit_getattr_non_security_blk_dev(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

-Do not audit attempts to read files -in /etc that are dynamically -created on boot, such as mtab. +Do not audit attempts to write to /var.

@@ -1923,13 +1952,13 @@ No

- +

 
-files_dontaudit_read_root_file(
+files_exec_etc_files(
 	
@@ -1965,18 +1994,18 @@ No

- +

-files_dontaudit_rw_root_chr_dev( +files_exec_usr_files( - ? + domain )
@@ -1985,7 +2014,7 @@ No

Summary

-Summary is missing! +Execute generic programs in /usr in the caller domain.

@@ -1994,10 +2023,10 @@ Summary is missing! Parameter:Description:Optional: -? +domain -Parameter descriptions are missing! +The type of the process performing this action. No @@ -2007,18 +2036,18 @@ No

- +

-files_dontaudit_rw_root_file( +files_exec_usr_src_files( - ? + domain )
@@ -2027,7 +2056,7 @@ No

Summary

-Summary is missing! +Execute programs in /usr/src in the caller domain.

@@ -2036,10 +2065,10 @@ Summary is missing! Parameter:Description:Optional: -? +domain -Parameter descriptions are missing! +The type of the process performing this action. No @@ -2049,13 +2078,13 @@ No

- +

 
-files_dontaudit_search_all_dirs(
+files_filetrans_etc(
 	
@@ -2091,13 +2120,13 @@ No

- +

 
-files_dontaudit_search_home(
+files_filetrans_home(
 	
 		
 		
@@ -2105,14 +2134,33 @@ No
 		domain
 		
 	
+		
+			,
+		
+		
+		
+		home_type
+		
+	
+		
+			,
+		
+		
+		
+			[
+		
+		object
+		
+			]
+		
+	
 	)

 

Summary

-Do not audit attempts to search -home directories root (/home). +Create objects in /home.

@@ -2124,28 +2172,49 @@ home directories root (/home). domain -Domain to not audit. +The type of the process performing this action. + + +No + + + +home_type + + +The private type. No + +object + + +The object class of the object being created. If +no class is specified, dir will be used. + + +yes + +

- +

-files_dontaudit_search_isid_type_dir( +files_filetrans_lock( - domain + ? )
@@ -2154,8 +2223,7 @@ No

Summary

-Do not audit attempts to search directories on new filesystems -that have not yet been labeled. +Summary is missing!

@@ -2164,10 +2232,10 @@ that have not yet been labeled. Parameter:Description:Optional: -domain +? -The type of the process performing this action. +Parameter descriptions are missing! No @@ -2177,18 +2245,18 @@ No

- +

-files_dontaudit_search_locks( +files_filetrans_pid( - domain + ? )
@@ -2197,8 +2265,7 @@ No

Summary

-Do not audit attempts to search the -locks directory (/var/lock). +Summary is missing!

@@ -2207,10 +2274,10 @@ locks directory (/var/lock). Parameter:Description:Optional: -domain +? -Domain to not audit. +Parameter descriptions are missing! No @@ -2220,13 +2287,13 @@ No

- +

 
-files_dontaudit_search_pids(
+files_filetrans_root(
 	
 		
 		
@@ -2234,14 +2301,34 @@ No
 		domain
 		
 	
+		
+			,
+		
+		
+		
+		private type
+		
+	
+		
+			,
+		
+		
+		
+			[
+		
+		object
+		
+			]
+		
+	
 	)

 

Summary

-Do not audit attempts to search -the /var/run directory. +Create an object in the root directory, with a private +type.

@@ -2253,23 +2340,44 @@ the /var/run directory. domain -Domain to not audit. +The type of the process performing this action. + + +No + + + +private type + + +The type of the object to be created. No + +object + + +The object class of the object being created. If +no class is specified, file will be used. + + +yes + +

- +

 
-files_dontaudit_search_src(
+files_filetrans_tmp(
 	
@@ -2305,13 +2413,13 @@ No

- +

 
-files_dontaudit_search_var(
+files_filetrans_usr(
 	
 		
 		
@@ -2319,14 +2427,33 @@ No
 		domain
 		
 	
+		
+			,
+		
+		
+		
+		file_type
+		
+	
+		
+			,
+		
+		
+		
+			[
+		
+		object_class
+		
+			]
+		
+	
 	)

 

Summary

-Do not audit attempts to search -the contents of /var. +Create objects in the /usr directory

@@ -2338,23 +2465,43 @@ the contents of /var. domain -Domain to not audit. +Domain allowed access. + + +No + + + +file_type + + +The type of the object to be created No + +object_class + + +The object class. If not specified, file is used. + + +yes + +

- +

 
-files_dontaudit_write_all_pids(
+files_filetrans_var(
 	
 		
 		
@@ -2362,13 +2509,33 @@ No
 		domain
 		
 	
+		
+			,
+		
+		
+		
+		file_type
+		
+	
+		
+			,
+		
+		
+		
+			[
+		
+		object_class
+		
+			]
+		
+	
 	)

 

+
+files_list_non_security(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+List all non-security directories. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

@@ -4613,6 +4883,49 @@ No

+ +

+ + +

+
+files_mounton_all_poly_members(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Mount filesystems on all polyinstantiation +member directories. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

@@ -5019,6 +5332,49 @@ No

+ +

+ + +

+
+files_polyinstantiate_all(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Allow access to manage all polyinstantiated +directories on the system. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

@@ -5319,6 +5675,48 @@ yes

+ +

+ + +

+
+files_read_all_locks(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Read all lock files. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

@@ -5435,7 +5833,7 @@ No

Summary

-Read all symbloic links on the filesystem, except +Read all symbolic links on the filesystem, except the listed exceptions.

@@ -5891,6 +6289,48 @@ No

+ +

+ + +

+
+files_read_non_security_files(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Read all non-security files. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

@@ -7816,6 +8256,48 @@ No

+ +

+ + +

+
+files_write_non_security_dir(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Allow attempts to modify any directory +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +Domain to allow + +	+No +

+ Return diff --git a/www/api-docs/kernel_filesystem.html b/www/api-docs/kernel_filesystem.html index 081f402..3b6ec3d 100644 --- a/www/api-docs/kernel_filesystem.html +++ b/www/api-docs/kernel_filesystem.html @@ -318,18 +318,18 @@ No

- +

-fs_create_tmpfs_data( +fs_donaudit_read_removable_files( - ? + domain )
@@ -338,7 +338,7 @@ No

Summary

-Summary is missing! +Do not audit attempts to read removable storage files.

@@ -347,10 +347,10 @@ Summary is missing! Parameter:Description:Optional: -? +domain -Parameter descriptions are missing! +Domain not to audit. No @@ -620,6 +620,49 @@ No

+ +

+ + +

+
+fs_dontaudit_list_auto_mountpoints(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Do not audit attempts to list directories of automatically +mounted filesystems. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +The type of the domain performing this action. + +	+No +

@@ -706,6 +749,48 @@ No

+ +

+ + +

+
+fs_dontaudit_list_removable_dirs(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Do not audit attempts to list removable storage directories. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +Domain not to audit. + +	+No +

@@ -1097,6 +1182,91 @@ No

+ +

+ + +

+
+fs_dontaudit_rw_tmpfs_files(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Do not audit attempts to read or write +generic tmpfs files. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +Domain to not audit. + +	+No +

+ + +

+
+fs_dontaudit_use_tmpfs_chr_dev(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+dontaudit Read and write character nodes on tmpfs filesystems. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +The type of the process performing this action. + +	+No +

@@ -1226,6 +1396,48 @@ No

+ +

+ + +

+
+fs_filetrans_tmpfs(
+	
+		
+		
+		
+		?
+		
+	
+	)

+

+ +

Summary

+Summary is missing! +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+? +	+ +Parameter descriptions are missing! + +	+No +

@@ -2056,7 +2268,138 @@ No

 
-fs_getattr_tmpfs(
+fs_getattr_tmpfs(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Get the attributes of a tmpfs +filesystem. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +The type of the domain doing the +getattr on the filesystem. + +	+No +

+ + +

+
+fs_getattr_tmpfs_dir(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Get the attributes of tmpfs directories. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

+ + +

+
+fs_getattr_xattr_fs(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

-Transform specified type into a filesystem -type which does not have extended attribute -support. +Create, read, write, and delete +auto moutpoints.

@@ -2384,7 +2724,7 @@ support. domain -The type of the process performing this action. +Domain allowed access. No @@ -3756,6 +4096,48 @@ No

+ +

+ + +

+
+fs_read_eventpollfs(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Read eventpollfs files +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

@@ -3924,6 +4306,90 @@ No

+ +

+ + +

+
+fs_read_removable_files(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Read removable storage files. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

+ + +

+
+fs_read_removable_symlinks(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Read removable storage symbolic links. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

@@ -5255,6 +5721,90 @@ No

+ +

+ + +

+
+fs_search_removable_dirs(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Search removable storage directories. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

+ + +

+
+fs_search_rpc_dirs(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Search directories of RPC file system pipes. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +The type of the domain reading the symbolic links. + +	+No +

diff --git a/www/api-docs/kernel_kernel.html b/www/api-docs/kernel_kernel.html index f1ab180..28965cd 100644 --- a/www/api-docs/kernel_kernel.html +++ b/www/api-docs/kernel_kernel.html @@ -95,7 +95,8 @@

Description:

-Policy for kernel threads, proc filesystem,and unlabeled processes and objects. +Policy for kernel threads, proc filesystem, +and unlabeled processes and objects.

@@ -3545,7 +3546,7 @@ assocation.

The corenetwork interface -corenet_sendrecv_no_ipsec() should +corenet_non_ipsec_sendrecv() should be used instead of this one.

@@ -4180,7 +4181,7 @@ No

Summary

-Unconfined access to the kernel. +Unconfined access to kernel module resources.

diff --git a/www/api-docs/kernel_terminal.html b/www/api-docs/kernel_terminal.html index eb5f4fc..5915faa 100644 --- a/www/api-docs/kernel_terminal.html +++ b/www/api-docs/kernel_terminal.html @@ -337,6 +337,49 @@ No

+ +

+ + +

+
+term_dontaudit_ioctl_unallocated_ttys(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Do not audit attempts to ioctl +unallocated tty device nodes. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

@@ -423,6 +466,49 @@ No

+ +

+ + +

+
+term_dontaudit_search_ptys(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Do not audit attempts to search the +contents of the /dev/pts directory. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

@@ -981,6 +1067,48 @@ No

+ +

+ + +

+
+term_read_console(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Read from the console. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

diff --git a/www/api-docs/services.html b/www/api-docs/services.html index f034e1a..cd38764 100644 --- a/www/api-docs/services.html +++ b/www/api-docs/services.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
@@ -300,6 +330,11 @@

Ethernet activity monitor.

+ + automount +

Filesystem automounter service.

+ + avahi

mDNS/DNS-SD daemon implementing Apple ZeroConf architecture

@@ -375,11 +410,21 @@

Distributed compiler daemon

+ + djbdns +

small and secure DNS daemon

+ + dovecot

Dovecot POP and IMAP mail server

+ + fetchmail +

Remote-mail retrieval and forwarding utility

+ + finger

Finger user information service.

@@ -480,6 +525,11 @@

Network time protocol daemon

+ + openct +

Service for handling smart card readers.

+ + pegasus

The Open Group Pegasus CIM/WBEM Server.

@@ -515,6 +565,11 @@

Procmail mail delivery agent

+ + publicfile +

publicfile supplies files to the public through HTTP and FTP

+ + radius

RADIUS authentication and accounting server.

@@ -540,6 +595,11 @@

Remote login daemon

+ + roundup +

Roundup Issue Tracking System policy

+ + rpc

Remote Procedure Call Daemon for managment of network based process communication

@@ -574,6 +634,16 @@ from Windows NT servers.

Policy for sendmail.

+ + slrnpull +

Service for downloading news feeds the slrn newsreader.

+ + + + smartmon +

Smart disk monitoring daemon policy

+ + snmp

Simple network management protocol services

@@ -599,6 +669,11 @@ from Windows NT servers.

SSL Tunneling Proxy

+ + sysstat +

Policy for sysstat. Reports on various system states

+ + tcpd

Policy for TCP daemon.

@@ -619,6 +694,11 @@ from Windows NT servers.

MIDI to WAV converter and player configured as a service

+ + ucspitcp +

ucspitcp policy

+ + uucp

Unix to Unix Copy

diff --git a/www/api-docs/services_apache.html b/www/api-docs/services_apache.html index fbc55f3..2b2fcc1 100644 --- a/www/api-docs/services_apache.html +++ b/www/api-docs/services_apache.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_apm.html b/www/api-docs/services_apm.html index 77943dd..d169cd5 100644 --- a/www/api-docs/services_apm.html +++ b/www/api-docs/services_apm.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_arpwatch.html b/www/api-docs/services_arpwatch.html index 383ae0c..48266bf 100644 --- a/www/api-docs/services_arpwatch.html +++ b/www/api-docs/services_arpwatch.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_automount.html b/www/api-docs/services_automount.html new file mode 100644 index 0000000..8b57fd2 --- /dev/null +++ b/www/api-docs/services_automount.html @@ -0,0 +1,400 @@ + + + + Security Enhanced Linux Reference Policy + + + + + +

+ + + + admin
+

+ +

+ + + + apps
+

+ +

+ + + + kernel
+

+ +

+ + + + services
+

+ +    - + apache
+ +    - + apm
+ +    - + arpwatch
+ +    - + automount
+ +    - + avahi
+ +    - + bind
+ +    - + bluetooth
+ +    - + canna
+ +    - + comsat
+ +    - + cpucontrol
+ +    - + cron
+ +    - + cups
+ +    - + cvs
+ +    - + cyrus
+ +    - + dbskk
+ +    - + dbus
+ +    - + dhcp
+ +    - + dictd
+ +    - + distcc
+ +    - + djbdns
+ +    - + dovecot
+ +    - + fetchmail
+ +    - + finger
+ +    - + ftp
+ +    - + gpm
+ +    - + hal
+ +    - + howl
+ +    - + i18n_input
+ +    - + inetd
+ +    - + inn
+ +    - + irqbalance
+ +    - + kerberos
+ +    - + ktalk
+ +    - + ldap
+ +    - + lpd
+ +    - + mailman
+ +    - + mta
+ +    - + mysql
+ +    - + networkmanager
+ +    - + nis
+ +    - + nscd
+ +    - + ntp
+ +    - + openct
+ +    - + pegasus
+ +    - + portmap
+ +    - + postfix
+ +    - + postgresql
+ +    - + ppp
+ +    - + privoxy
+ +    - + procmail
+ +    - + publicfile
+ +    - + radius
+ +    - + radvd
+ +    - + rdisc
+ +    - + remotelogin
+ +    - + rlogin
+ +    - + roundup
+ +    - + rpc
+ +    - + rshd
+ +    - + rsync
+ +    - + samba
+ +    - + sasl
+ +    - + sendmail
+ +    - + slrnpull
+ +    - + smartmon
+ +    - + snmp
+ +    - + spamassassin
+ +    - + squid
+ +    - + ssh
+ +    - + stunnel
+ +    - + sysstat
+ +    - + tcpd
+ +    - + telnet
+ +    - + tftp
+ +    - + timidity
+ +    - + ucspitcp
+ +    - + uucp
+ +    - + xdm
+ +    - + xfs
+ +    - + zebra
+ +

+ + + + system
+

+ +

+ +

Layer: services

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

+ + +

+
+automount_exec_config(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Execute automount in the caller domain. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

+ + +Return + + + + +

+ + diff --git a/www/api-docs/services_avahi.html b/www/api-docs/services_avahi.html index beb9fbf..0fb2104 100644 --- a/www/api-docs/services_avahi.html +++ b/www/api-docs/services_avahi.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_bind.html b/www/api-docs/services_bind.html index 7e4e3dc..ce9952e 100644 --- a/www/api-docs/services_bind.html +++ b/www/api-docs/services_bind.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
@@ -529,6 +559,48 @@ No

+ +

+ + +

+
+bind_read_zone(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Read BIND zone files. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

@@ -608,6 +680,48 @@ No

+ +

+ + +

+
+bind_search_cache(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Search the BIND cache directory. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

diff --git a/www/api-docs/services_bluetooth.html b/www/api-docs/services_bluetooth.html index 68cb976..7d047a7 100644 --- a/www/api-docs/services_bluetooth.html +++ b/www/api-docs/services_bluetooth.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
@@ -402,6 +432,48 @@ No

+ +

+ + +

+
+bluetooth_read_config(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Read bluetooth daemon configuration. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

diff --git a/www/api-docs/services_canna.html b/www/api-docs/services_canna.html index 265c4af..65f9814 100644 --- a/www/api-docs/services_canna.html +++ b/www/api-docs/services_canna.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_comsat.html b/www/api-docs/services_comsat.html index 67bb85a..94ba93d 100644 --- a/www/api-docs/services_comsat.html +++ b/www/api-docs/services_comsat.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_cpucontrol.html b/www/api-docs/services_cpucontrol.html index 4efe63b..1862b08 100644 --- a/www/api-docs/services_cpucontrol.html +++ b/www/api-docs/services_cpucontrol.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_cron.html b/www/api-docs/services_cron.html index 2c5558d..edff2da 100644 --- a/www/api-docs/services_cron.html +++ b/www/api-docs/services_cron.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
@@ -405,6 +435,48 @@ No

+ +

+ + +

+
+cron_dontaudit_write_pipe(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Do not audit attempts to write cron daemon unnamed pipes. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

diff --git a/www/api-docs/services_cups.html b/www/api-docs/services_cups.html index a05da6c..388b501 100644 --- a/www/api-docs/services_cups.html +++ b/www/api-docs/services_cups.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_cvs.html b/www/api-docs/services_cvs.html index fced0b6..fa3eb7c 100644 --- a/www/api-docs/services_cvs.html +++ b/www/api-docs/services_cvs.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_cyrus.html b/www/api-docs/services_cyrus.html index 92eeb12..5d91df8 100644 --- a/www/api-docs/services_cyrus.html +++ b/www/api-docs/services_cyrus.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_dbskk.html b/www/api-docs/services_dbskk.html index 3a0af0f..8eeb9dd 100644 --- a/www/api-docs/services_dbskk.html +++ b/www/api-docs/services_dbskk.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_dbus.html b/www/api-docs/services_dbus.html index fc7d228..87739f1 100644 --- a/www/api-docs/services_dbus.html +++ b/www/api-docs/services_dbus.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
@@ -321,6 +351,48 @@ No

+ +

+ + +

+
+dbus_read_config(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Read dbus configuration. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

diff --git a/www/api-docs/services_dhcp.html b/www/api-docs/services_dhcp.html index 9779a73..0974ce8 100644 --- a/www/api-docs/services_dhcp.html +++ b/www/api-docs/services_dhcp.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_dictd.html b/www/api-docs/services_dictd.html index 037b857..b8e2fd6 100644 --- a/www/api-docs/services_dictd.html +++ b/www/api-docs/services_dictd.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_distcc.html b/www/api-docs/services_distcc.html index 2bd0e00..e774d37 100644 --- a/www/api-docs/services_distcc.html +++ b/www/api-docs/services_distcc.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_djbdns.html b/www/api-docs/services_djbdns.html new file mode 100644 index 0000000..d38b50c --- /dev/null +++ b/www/api-docs/services_djbdns.html @@ -0,0 +1,359 @@ + + + + Security Enhanced Linux Reference Policy + + + + + +

+ + + + admin
+

+ +

+ + + + apps
+

+ +

+ + + + kernel
+

+ +

+ + + + services
+

+ + + + system
+

+ +

+ +

Layer: services

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+prefix +	+ +The prefix to be used for deriving type names. + +	+No +

+ + +Return + + + +

+ + diff --git a/www/api-docs/services_dovecot.html b/www/api-docs/services_dovecot.html index de3dd85..234d06e 100644 --- a/www/api-docs/services_dovecot.html +++ b/www/api-docs/services_dovecot.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_fetchmail.html b/www/api-docs/services_fetchmail.html new file mode 100644 index 0000000..2115aad --- /dev/null +++ b/www/api-docs/services_fetchmail.html @@ -0,0 +1,312 @@ + + + + Security Enhanced Linux Reference Policy + + + + + +

+ + + + admin
+

+ +

+ + + + apps
+

+ +

+ + + + kernel
+

+ +

+ + + + services
+

+ + + + system
+

+ +

+ +

Layer: services

Module: fetchmail

+ +

Description:

+ +

Remote-mail retrieval and forwarding utility

+ + + + + +

No interfaces or templates.

+ + +

+ + diff --git a/www/api-docs/services_finger.html b/www/api-docs/services_finger.html index cc8a528..7367b29 100644 --- a/www/api-docs/services_finger.html +++ b/www/api-docs/services_finger.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_ftp.html b/www/api-docs/services_ftp.html index a468326..34147ad 100644 --- a/www/api-docs/services_ftp.html +++ b/www/api-docs/services_ftp.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_gpm.html b/www/api-docs/services_gpm.html index d858df8..1e59ca4 100644 --- a/www/api-docs/services_gpm.html +++ b/www/api-docs/services_gpm.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_hal.html b/www/api-docs/services_hal.html index 29df8e3..0454f4c 100644 --- a/www/api-docs/services_hal.html +++ b/www/api-docs/services_hal.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_howl.html b/www/api-docs/services_howl.html index c190610..f1b1ad7 100644 --- a/www/api-docs/services_howl.html +++ b/www/api-docs/services_howl.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_i18n_input.html b/www/api-docs/services_i18n_input.html index f5e836d..1f190c7 100644 --- a/www/api-docs/services_i18n_input.html +++ b/www/api-docs/services_i18n_input.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_inetd.html b/www/api-docs/services_inetd.html index 66dee8c..a110089 100644 --- a/www/api-docs/services_inetd.html +++ b/www/api-docs/services_inetd.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_inn.html b/www/api-docs/services_inn.html index d38ac30..411f719 100644 --- a/www/api-docs/services_inn.html +++ b/www/api-docs/services_inn.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_irqbalance.html b/www/api-docs/services_irqbalance.html index ca2a6ff..97ee46b 100644 --- a/www/api-docs/services_irqbalance.html +++ b/www/api-docs/services_irqbalance.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_kerberos.html b/www/api-docs/services_kerberos.html index e0fac65..68ea859 100644 --- a/www/api-docs/services_kerberos.html +++ b/www/api-docs/services_kerberos.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_ktalk.html b/www/api-docs/services_ktalk.html index c7a8ce2..8a66795 100644 --- a/www/api-docs/services_ktalk.html +++ b/www/api-docs/services_ktalk.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_ldap.html b/www/api-docs/services_ldap.html index 220f195..4b9ace7 100644 --- a/www/api-docs/services_ldap.html +++ b/www/api-docs/services_ldap.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_lpd.html b/www/api-docs/services_lpd.html index 46f63e4..dafce81 100644 --- a/www/api-docs/services_lpd.html +++ b/www/api-docs/services_lpd.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_mailman.html b/www/api-docs/services_mailman.html index 67db042..133746d 100644 --- a/www/api-docs/services_mailman.html +++ b/www/api-docs/services_mailman.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_mta.html b/www/api-docs/services_mta.html index 76b2468..05afb9d 100644 --- a/www/api-docs/services_mta.html +++ b/www/api-docs/services_mta.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
@@ -533,6 +563,133 @@ No

+ +

+ + +

+
+mta_filetrans_etc_aliases(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Type transition files created in /etc +to the mail address aliases type. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

+ + +

+
+mta_filetrans_spool(
+	
+		
+		
+		
+		domain
+		
+	
+		
+			,
+		
+		
+		
+		private type
+		
+	
+		
+			,
+		
+		
+		
+			[
+		
+		object
+		
+			]
+		
+	
+	)

+

+ +

Summary

+Create private objects in the +mail spool directory. +

+ + +

Parameters

+ + + + + + + + + +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +
+private type +	+ +The type of the object to be created. + +	+No +
+object +	+ +The object class of the object being created. If +no class is specified, file will be used. + +	+yes +

@@ -863,7 +1020,7 @@ Read mail address aliases. domain -The type of the process performing this action. +Domain allowed access. No @@ -905,7 +1062,7 @@ Read mail server configuration. domain -The type of the process performing this action. +Domain allowed access. No diff --git a/www/api-docs/services_mysql.html b/www/api-docs/services_mysql.html index be814d6..5bcafc7 100644 --- a/www/api-docs/services_mysql.html +++ b/www/api-docs/services_mysql.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_networkmanager.html b/www/api-docs/services_networkmanager.html index cf5fac4..4feec98 100644 --- a/www/api-docs/services_networkmanager.html +++ b/www/api-docs/services_networkmanager.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_nis.html b/www/api-docs/services_nis.html index 8d9cacc..22560d6 100644 --- a/www/api-docs/services_nis.html +++ b/www/api-docs/services_nis.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_nscd.html b/www/api-docs/services_nscd.html index 871381a..c846b3b 100644 --- a/www/api-docs/services_nscd.html +++ b/www/api-docs/services_nscd.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_ntp.html b/www/api-docs/services_ntp.html index 71a41ce..3e47897 100644 --- a/www/api-docs/services_ntp.html +++ b/www/api-docs/services_ntp.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_openct.html b/www/api-docs/services_openct.html new file mode 100644 index 0000000..69539aa --- /dev/null +++ b/www/api-docs/services_openct.html @@ -0,0 +1,312 @@ + + + + Security Enhanced Linux Reference Policy + + + + + +

+ + + + admin
+

+ +

+ + + + apps
+

+ +

+ + + + kernel
+

+ +

+ + + + services
+

+ + + + system
+

+ +

+ +

Layer: services

Module: openct

+ +

Description:

+ +

Service for handling smart card readers.

+ + + + + +

No interfaces or templates.

+ + +

+ + diff --git a/www/api-docs/services_pegasus.html b/www/api-docs/services_pegasus.html index b316f92..da6530c 100644 --- a/www/api-docs/services_pegasus.html +++ b/www/api-docs/services_pegasus.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_portmap.html b/www/api-docs/services_portmap.html index 8101355..ecd695a 100644 --- a/www/api-docs/services_portmap.html +++ b/www/api-docs/services_portmap.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_postfix.html b/www/api-docs/services_postfix.html index 8e67eed..d6bf20c 100644 --- a/www/api-docs/services_postfix.html +++ b/www/api-docs/services_postfix.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
@@ -278,13 +308,13 @@

Interfaces:

- +

 
-postfix_create_config(
+postfix_domtrans_map(
 	
 		
 		
@@ -292,34 +322,13 @@
 		domain
 		
 	
-		
-			,
-		
-		
-		
-		private type
-		
-	
-		
-			,
-		
-		
-		
-			[
-		
-		object
-		
-			]
-		
-	
 	)

 

+ + + + services
+

+ + + + system
+

+ +

+ +

Layer: services

Module: publicfile

+ +

Description:

+ +

publicfile supplies files to the public through HTTP and FTP

+ + + + + +

No interfaces or templates.

+ + +

+ + diff --git a/www/api-docs/services_radius.html b/www/api-docs/services_radius.html index e3c2d6b..349b827 100644 --- a/www/api-docs/services_radius.html +++ b/www/api-docs/services_radius.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_radvd.html b/www/api-docs/services_radvd.html index 41b66e6..7a346fa 100644 --- a/www/api-docs/services_radvd.html +++ b/www/api-docs/services_radvd.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_rdisc.html b/www/api-docs/services_rdisc.html index 362bf2e..3083c2f 100644 --- a/www/api-docs/services_rdisc.html +++ b/www/api-docs/services_rdisc.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_remotelogin.html b/www/api-docs/services_remotelogin.html index 760c912..2c57654 100644 --- a/www/api-docs/services_remotelogin.html +++ b/www/api-docs/services_remotelogin.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_rlogin.html b/www/api-docs/services_rlogin.html index 292758b..a62d51f 100644 --- a/www/api-docs/services_rlogin.html +++ b/www/api-docs/services_rlogin.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_roundup.html b/www/api-docs/services_roundup.html new file mode 100644 index 0000000..6c3088a --- /dev/null +++ b/www/api-docs/services_roundup.html @@ -0,0 +1,312 @@ + + + + Security Enhanced Linux Reference Policy + + + + + +

+ + + + admin
+

+ +

+ + + + apps
+

+ +

+ + + + kernel
+

+ +

+ + + + services
+

+ + + + system
+

+ +

+ +

Layer: services

Module: roundup

+ +

Description:

+ +

Roundup Issue Tracking System policy

+ + + + + +

No interfaces or templates.

+ + +

+ + diff --git a/www/api-docs/services_rpc.html b/www/api-docs/services_rpc.html index f455008..7b13383 100644 --- a/www/api-docs/services_rpc.html +++ b/www/api-docs/services_rpc.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_rshd.html b/www/api-docs/services_rshd.html index 949f13c..add52d9 100644 --- a/www/api-docs/services_rshd.html +++ b/www/api-docs/services_rshd.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_rsync.html b/www/api-docs/services_rsync.html index ca7a406..3c06a63 100644 --- a/www/api-docs/services_rsync.html +++ b/www/api-docs/services_rsync.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_samba.html b/www/api-docs/services_samba.html index 62b0a11..bf7c0da 100644 --- a/www/api-docs/services_samba.html +++ b/www/api-docs/services_samba.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_sasl.html b/www/api-docs/services_sasl.html index 83a2abc..ea35ce2 100644 --- a/www/api-docs/services_sasl.html +++ b/www/api-docs/services_sasl.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_sendmail.html b/www/api-docs/services_sendmail.html index ad39a7b..e545f23 100644 --- a/www/api-docs/services_sendmail.html +++ b/www/api-docs/services_sendmail.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_slrnpull.html b/www/api-docs/services_slrnpull.html new file mode 100644 index 0000000..830422d --- /dev/null +++ b/www/api-docs/services_slrnpull.html @@ -0,0 +1,401 @@ + + + + Security Enhanced Linux Reference Policy + + + + + +

+ + + + admin
+

+ +

+ + + + apps
+

+ +

+ + + + kernel
+

+ +

+ + + + services
+

+ + + + system
+

+ +

+ +

Layer: services

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+pty_type +	+ +domain allowed access + +	+No +

+ + +

+
+slrnpull_search_spool(
+	
+		
+		
+		
+		pty_type
+		
+	
+	)

+

+ +

Summary

+Allow the domain to search slrnpull spools. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+pty_type +	+ +domain allowed access + +	+No +

+ + +Return + + + + +

+ + diff --git a/www/api-docs/services_smartmon.html b/www/api-docs/services_smartmon.html new file mode 100644 index 0000000..0429d46 --- /dev/null +++ b/www/api-docs/services_smartmon.html @@ -0,0 +1,358 @@ + + + + Security Enhanced Linux Reference Policy + + + + + +

+ + + + admin
+

+ +

+ + + + apps
+

+ +

+ + + + kernel
+

+ +

+ + + + services
+

+ + + + system
+

+ +

+ +

Layer: services

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +The process type reading the temporary files. + +	+No +

+ + +Return + + + + +

+ + diff --git a/www/api-docs/services_snmp.html b/www/api-docs/services_snmp.html index 22cd908..bc0bbfb 100644 --- a/www/api-docs/services_snmp.html +++ b/www/api-docs/services_snmp.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_spamassassin.html b/www/api-docs/services_spamassassin.html index e5ccfe8..ba8cf6d 100644 --- a/www/api-docs/services_spamassassin.html +++ b/www/api-docs/services_spamassassin.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_squid.html b/www/api-docs/services_squid.html index 574ea67..7019ea1 100644 --- a/www/api-docs/services_squid.html +++ b/www/api-docs/services_squid.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_ssh.html b/www/api-docs/services_ssh.html index 788c409..437a9af 100644 --- a/www/api-docs/services_ssh.html +++ b/www/api-docs/services_ssh.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_stunnel.html b/www/api-docs/services_stunnel.html index 57b27b4..a17c45b 100644 --- a/www/api-docs/services_stunnel.html +++ b/www/api-docs/services_stunnel.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_sysstat.html b/www/api-docs/services_sysstat.html new file mode 100644 index 0000000..4d7c576 --- /dev/null +++ b/www/api-docs/services_sysstat.html @@ -0,0 +1,358 @@ + + + + Security Enhanced Linux Reference Policy + + + + + +

+ + + + admin
+

+ +

+ + + + apps
+

+ +

+ + + + kernel
+

+ +

+ + + + services
+

+ + + + system
+

+ +

+ +

Layer: services

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

+ + +Return + + + + +

+ + diff --git a/www/api-docs/services_tcpd.html b/www/api-docs/services_tcpd.html index ccb75f1..e58c5df 100644 --- a/www/api-docs/services_tcpd.html +++ b/www/api-docs/services_tcpd.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_telnet.html b/www/api-docs/services_telnet.html index 51bdaba..8a7ff0b 100644 --- a/www/api-docs/services_telnet.html +++ b/www/api-docs/services_telnet.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_tftp.html b/www/api-docs/services_tftp.html index af6d73a..8b0d554 100644 --- a/www/api-docs/services_tftp.html +++ b/www/api-docs/services_tftp.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_timidity.html b/www/api-docs/services_timidity.html index 1fb3ea6..be9e71a 100644 --- a/www/api-docs/services_timidity.html +++ b/www/api-docs/services_timidity.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_ucspitcp.html b/www/api-docs/services_ucspitcp.html new file mode 100644 index 0000000..c04cf98 --- /dev/null +++ b/www/api-docs/services_ucspitcp.html @@ -0,0 +1,380 @@ + + + + Security Enhanced Linux Reference Policy + + + + + +

+ + + + admin
+

+ +

+ + + + apps
+

+ +

+ + + + kernel
+

+ +

+ + + + services
+

+ + + + system
+

+ +

+ +

Layer: services

+ + +

Parameters

+ + + + + + + +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +
+entrypoint +	+ +The type associated with the process program. + +	+No +

+ + +Return + + + + +

+ + diff --git a/www/api-docs/services_uucp.html b/www/api-docs/services_uucp.html index 0a5a55c..6836fa0 100644 --- a/www/api-docs/services_uucp.html +++ b/www/api-docs/services_uucp.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_xdm.html b/www/api-docs/services_xdm.html index 669cdac..01e0011 100644 --- a/www/api-docs/services_xdm.html +++ b/www/api-docs/services_xdm.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_xfs.html b/www/api-docs/services_xfs.html index eaf906a..506bb31 100644 --- a/www/api-docs/services_xfs.html +++ b/www/api-docs/services_xfs.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/services_zebra.html b/www/api-docs/services_zebra.html index 93f3d18..ecc6a8a 100644 --- a/www/api-docs/services_zebra.html +++ b/www/api-docs/services_zebra.html @@ -40,6 +40,9 @@    - arpwatch
+    - + automount
+    - avahi
@@ -85,9 +88,15 @@    - distcc
+    - + djbdns
+    - dovecot
+    - + fetchmail
+    - finger
@@ -148,6 +157,9 @@    - ntp
+    - + openct
+    - pegasus
@@ -169,6 +181,9 @@    - procmail
+    - + publicfile
+    - radius
@@ -184,6 +199,9 @@    - rlogin
+    - + roundup
+    - rpc
@@ -202,6 +220,12 @@    - sendmail
+    - + slrnpull
+ +    - + smartmon
+    - snmp
@@ -217,6 +241,9 @@    - stunnel
+    - + sysstat
+    - tcpd
@@ -229,6 +256,9 @@    - timidity
+    - + ucspitcp
+    - uucp
diff --git a/www/api-docs/system.html b/www/api-docs/system.html index e55ad68..360a79c 100644 --- a/www/api-docs/system.html +++ b/www/api-docs/system.html @@ -43,6 +43,9 @@    - clock
+    - + daemontools
+    - fstools
@@ -156,6 +159,11 @@

Policy for reading and setting the hardware clock.

+ + daemontools +

Collection of tools for managing UNIX services

+ + fstools

Tools for filesystem management, such as mkfs and fsck.

diff --git a/www/api-docs/system_authlogin.html b/www/api-docs/system_authlogin.html index 8353f14..dec0da3 100644 --- a/www/api-docs/system_authlogin.html +++ b/www/api-docs/system_authlogin.html @@ -43,6 +43,9 @@    - clock
+    - + daemontools
+    - fstools
@@ -263,13 +266,13 @@ No

- +

 
-auth_create_login_records(
+auth_can_read_shadow_passwords(
 	
@@ -617,6 +620,48 @@ No

+ +

+ + +

+
+auth_dontaudit_exec_utempter(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

Summary

+Do not audit attemps to execute utempter executable. +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+domain +	+ +Domain to not audit. + +	+No +

@@ -829,6 +874,48 @@ No

+ +

+ + +

+
+auth_filetrans_login_records(
+	
+		
+		
+		
+		?
+		
+	
+	)

+

+ +

Summary

+Summary is missing! +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+? +	+ +Parameter descriptions are missing! + +	+No +

@@ -2074,6 +2161,90 @@ No

+ +

+ + +

+
+auth_setattr_login_records(
+	
+		
+		
+		
+		?
+		
+	
+	)

+

+ +

Summary

+Summary is missing! +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+? +	+ +Parameter descriptions are missing! + +	+No +

+ + +

+
+auth_tunable_read_shadow(
+	
+		
+		
+		
+		?
+		
+	
+	)

+

+ +

Summary

+Summary is missing! +

+ + +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+? +	+ +Parameter descriptions are missing! + +	+No +

@@ -2293,6 +2464,57 @@ No

+ +

+ + +

+
+authlogin_common_auth_domain_template(
+	
+		
+		
+		
+		userdomain_prefix
+		
+	
+	)

+

+ +

Summary

+Common template to create a domain for authentication. +

+ + +

Description

+This template creates a derived domain which is allowed +to authenticate users by using PAM unix_chkpwd support. +

+ +

Parameters

+ + + + + +

Parameter:	Description:	Optional:
+userdomain_prefix +	+ +The prefix of the user domain (e.g., user +is the prefix for user_t). + +	+No +

diff --git a/www/api-docs/system_clock.html b/www/api-docs/system_clock.html index f43a44b..a33a0f3 100644 --- a/www/api-docs/system_clock.html +++ b/www/api-docs/system_clock.html @@ -43,6 +43,9 @@    - clock
+    - + daemontools
+    - fstools
diff --git a/www/api-docs/system_daemontools.html b/www/api-docs/system_daemontools.html new file mode 100644 index 0000000..ea91cb2 --- /dev/null +++ b/www/api-docs/system_daemontools.html @@ -0,0 +1,464 @@ + + + + Security Enhanced Linux Reference Policy + + + + + +

+ + + + admin
+

+ +

+ + + + apps
+

+ +

+ + + + kernel
+

+ +

+ + + + services
+

+ +

+ + + + system
+

+ +    - + authlogin
+ +    - + clock
+ +    - + daemontools
+ +    - + fstools
+ +    - + getty
+ +    - + hostname
+ +    - + hotplug
+ +    - + init
+ +    - + ipsec
+ +    - + iptables
+ +    - + libraries
+ +    - + locallogin
+ +    - + logging
+ +    - + lvm
+ +    - + miscfiles
+ +    - + modutils
+ +    - + mount
+ +    - + pcmcia
+ +    - + raid
+ +    - + selinuxutil
+ +    - + sysnetwork
+ +    - + udev
+ +    - + unconfined
+ +    - + userdomain
+ +

+ +