+ Security Enhanced Linux Reference Policy +

+Portage Package Management System. The primary package management and +distribution system for Gentoo. +

Interfaces:

Description:

Interfaces:

Templates:

Description

-boolean to determine whether the system permits loading policy, settingenforcing mode, and changing boolean values. Set this to true and youhave to reboot to set it back

+boolean to determine whether the system permits loading policy, setting +enforcing mode, and changing boolean values. Set this to true and you +have to reboot to set it back +

Description

-Allow making anonymous memory executable, e.g.for runtime-code generation or executable stack.

+Allow making anonymous memory executable, e.g. +for runtime-code generation or executable stack. +

Description

+Allow making the stack executable via mprotect. +Also requires allow_execmem. +

Description

-Allow ftp servers to modify public filesused for public file transfer services.

+Allow ftp servers to modify public files +used for public file transfer services. +

Description

-Allow cdrecord to read various content.nfs, samba, removable devices, user tempand untrusted content files

+Allow cdrecord to read various content. +nfs, samba, removable devices, user temp +and untrusted content files +

Description

-Allow BIND to write the master zone files.Generally this is used for dynamic DNS.

+Allow BIND to write the master zone files. +Generally this is used for dynamic DNS. +

Description

-Allow applications to read untrusted contentIf this is disallowed, Internet content hasto be manually relabeled for read access to be granted

+Allow applications to read untrusted content +If this is disallowed, Internet content has +to be manually relabeled for read access to be granted +

Description

-Allow staff_r users to search the sysadm homedir and read files (such as ~/.bashrc)

+Allow staff_r users to search the sysadm home +dir and read files (such as ~/.bashrc) +

Description

-Allow user to r/w files on filesystemsthat do not have extended attributes (FAT, CDROM, FLOPPY)

+Allow user to r/w files on filesystems +that do not have extended attributes (FAT, CDROM, FLOPPY) +

Description

-Allow users to run TCP servers (bind to ports and accept connection fromthe same domain and outside users) disabling this forces FTP passive modeand may change other protocols.

+Allow users to run TCP servers (bind to ports and accept connection from +the same domain and outside users) disabling this forces FTP passive mode +and may change other protocols. +

Description

-Allow applications to write untrusted contentIf this is disallowed, no Internet contentwill be stored.

+Allow applications to write untrusted content +If this is disallowed, no Internet content +will be stored. +

Parameter:	Description:	Optional:
+domain +	+ +Domain to allow + +	+No +

Parameter:	Description:	Optional:
+domain +	+ +Domain to allow +	No
domain	- + The type of the process performing this action. - +	No

Parameter:	Description:	Optional:
+domain +	+ +The type of the process performing this action. + +	+No +

Parameter:	Description:	Optional:
+domain +	+ +The type of the process performing this action. + +	+No +

Parameter:	Description:	Optional:
+domain +	+ +The type of the process performing this action. + +	+No +

Parameter:	Description:	Optional:
+domain +	+ +The type of the process performing this action. + +	+No +
+role +	+ +The role to be allowed the bootloader domain. + +	+No +
+terminal +	+ +The type of the terminal allow the bootloader domain to use. + +	+No +

Parameter:	Description:	Optional:
+domain +	+ +The type of the process performing this action. + +	+No +

Parameter:	Description:	Optional:
+domain +	+ +The type of the process performing this action. + +	+No +

Parameter:	Description:	Optional:
+domain +	+ +The type of the process performing this action. + +	+No +
+role +	+ +The role to be allowed the certwatch domain. + +	+No +
+terminal +	+ +The type of the terminal allow the certwatch domain to use. + +	+No +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

Parameter:	Description:	Optional:
+domain +	+ The type of the process performing this action. + +	+No +
+role +	+ +The role to be allowed the consoletype domain. + +	+No +
+terminal +	+ +The type of the terminal allow the consoletype domain to use. +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process performing this action. - +	No
role	- + Role to be authenticated for ddcprobe domain. - +	No
terminal	- + The type of the terminal allow the clock domain to use. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + Domain allowed access. - +	No
domain	- + The type of the process performing this action. - +	No
role	- + The role to be allowed the dmidecode domain. - +	No
terminal	- + The type of the terminal allow the dmidecode domain to use. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + Domain to not audit. - +	No
domain	- + The type of the process performing this action. - +	No
role	- + The role to be allowed the firstboot domain. - +	No
terminal	- + The type of the terminal allow the firstboot domain to use. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process performing this action. - +	No
role	- + The role to be allowed the kudzu domain. - +	No
terminal	- + The type of the terminal allow the kudzu domain to use. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process to not audit. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process to not audit. - +	No
domain	- + The type of the process performing this action. - +	No
role	- + The role to be allowed the logrotate domain. - +	No
terminal	- + The type of the terminal allow the logrotate domain to use. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +
+role +	+ +The role to allow the portage domain. + +	+No +
+terminal +	+ +The type of the terminal allow for portage to use. + +	+No +

Parameter:	Description:	Optional:
+prefix +	+ +Name to be used to derive types. + +	+No +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. +	No
domain	- + Domain to not audit. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process performing this action. - +	No
role	- + The role to allow the RPM domain. - +	No
terminal	- + The type of the terminal allow the RPM domain to use. - +	No
domain	- -The type of the process performing this action. - -	-No -

Parameter:	Description:	Optional:
-domain -	- -Domain allowed access. -	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + Domain allowed access. - +	No
userdomain_prefix	- + The prefix of the user domain (e.g., user is the prefix for user_t). - +	No
user_domain	- + The type of the user domain. - +	No
user_role	- + The role associated with the user domain. - +	No
?	- + Parameter descriptions are missing! - +	No
userdomain_prefix	- + The prefix of the user domain (e.g., user is the prefix for user_t). - +	No
user_domain	- + The type of the user domain. - +	No
user_role	- + The role associated with the user domain. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + Domain allowed access. - +	No
domain	- + The type of the process performing this action. - +	No
role	- + The role to be allowed the usbmodules domain. - +	No
terminal	- + The type of the terminal allow the usbmodules domain to use. - +	No
domain	- + Domain allowed access. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process performing this action. - +	No
role	- + The role to be allowed the admin passwd domain. - +	No
terminal	- + The type of the terminal allow the admin passwd domain to use. - +	No
domain	- + The type of the process performing this action. - +	No
role	- + The role to be allowed the chfn domain. - +	No
terminal	- + The type of the terminal allow the chfn domain to use. - +	No
domain	- + The type of the process performing this action. - +	No
role	- + The role to be allowed the groupadd domain. - +	No
terminal	- + The type of the terminal allow the groupadd domain to use. - +	No
domain	- + The type of the process performing this action. - +	No
role	- + The role to be allowed the passwd domain. - +	No
terminal	- + The type of the terminal allow the passwd domain to use. - +	No
domain	- + The type of the process performing this action. - +	No
role	- + The role to be allowed the useradd domain. - +	No
terminal	- + The type of the terminal allow the useradd domain to use. - +	No
domain	- + N/A - +	-yes +Yes

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

Parameter:	Description:	Optional:
+userdomain_prefix +	+ +The prefix of the user domain (e.g., user +is the prefix for user_t). + +	+No +
+user_domain +	+ +The type of the user domain. + +	+No +
+user_role +	+ +The role associated with the user domain. + +	+No +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

Parameter:	Description:	Optional:
+userdomain_prefix +	+ +The prefix of the user domain (e.g., user +is the prefix for user_t). + +	+No +
+user_domain +	+ +The type of the user domain. + +	+No +
+user_role +	+ +The role associated with the user domain. + +	+No +

Parameter:	Description:	Optional:
+domain +	+ +Domain to not audit. + +	+No +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

Parameter:	Description:	Optional:
+userdomain_prefix +	+ +The prefix of the user domain (e.g., user +is the prefix for user_t). + +	+No +
+user_domain +	+ +The type of the user domain. + +	+No +
+user_role +	+ +The role associated with the user domain. + +	+No +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +
+role +	+ +The role to be allowed the usernetctl domain. + +	+No +
+terminal +	+ +The type of the terminal allow the usernetctl domain to use. + +	+No +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed access. + +	+No +

-Module: +Module: apache

Layer: services

 
-apache_dontaudit_rw_stream_socket(
+apache_dontaudit_rw_stream_sockets(
 	
@@ -997,13 +1079,13 @@ unix domain stream sockets.

-Module: +Module: apache

Layer: services

 
-apache_dontaudit_rw_sys_script_stream_socket(
+apache_dontaudit_rw_sys_script_stream_sockets(
 	
@@ -1024,13 +1106,13 @@ system script unix domain stream sockets.

-Module: +Module: apache

Layer: services

 
-apache_dontaudit_rw_tcp_socket(
+apache_dontaudit_rw_tcp_sockets(
 	
@@ -1078,6 +1160,33 @@ module directories.

+Module: +apache

+Layer: +services

+
+apache_exec_modules(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Allow the specified domain to execute +apache modules. +

+ +

Module: apache

Layer: @@ -1214,6 +1323,32 @@ apache squirrelmail data.

+Module: +apache

+Layer: +services

+
+apache_read_sys_content(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Read apache system content +

+ +

Module: apache

Layer: @@ -1372,13 +1507,13 @@ Send a null signal to apache.

-Module: +Module: apache

Layer: services

 
-apache_use_fd(
+apache_use_fds(
 	
@@ -1450,13 +1585,13 @@ Execute APM in the apm domain.

-Module: +Module: apm

Layer: services

 
-apm_rw_stream_socket(
+apm_rw_stream_sockets(
 	
@@ -1502,13 +1637,13 @@ Connect to apmd over an unix stream socket.

-Module: +Module: apm

Layer: services

 
-apm_use_fd(
+apm_use_fds(
 	
@@ -1528,13 +1663,13 @@ Use file descriptors for apmd.

-Module: +Module: apm

Layer: services

 
-apm_write_pipe(
+apm_write_pipes(
 	
@@ -1554,13 +1689,13 @@ Write to apmd unnamed pipes.

-Module: +Module: arpwatch

Layer: services

 
-arpwatch_dontaudit_rw_packet_socket(
+arpwatch_dontaudit_rw_packet_sockets(
 	
@@ -2137,18 +2272,18 @@ Execute the pam program.

-Module: +Module: authlogin

Layer: system

-auth_filetrans_login_records( +auth_getattr_shadow( - ? + domain )
@@ -2156,25 +2291,25 @@ system

-Summary is missing! +Get the attributes of the shadow passwords file.

-Module: +Module: authlogin

Layer: system

-auth_getattr_shadow( +auth_list_pam_console_data( - domain + ? )
@@ -2182,20 +2317,20 @@ system

-Get the attributes of the shadow passwords file. +Summary is missing!

-Module: +Module: authlogin

Layer: system

-auth_list_pam_console_data( +auth_log_filetrans_login_records( @@ -2260,12 +2395,8 @@ system

- [ - exception_types - ] - )

@@ -2332,6 +2463,32 @@ Summary is missing!

+Module: +authlogin

+Layer: +system

+
+auth_manage_pam_pid(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Manage pam PID files. +

+ +

Module: authlogin

Layer: @@ -2358,6 +2515,33 @@ Summary is missing!

+Module: +authlogin

+Layer: +system

+
+auth_manage_var_auth(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Manage var auth files. Used by various other applications +and pam applets etc. +

+ +

Module: authlogin

Layer: @@ -2377,12 +2561,8 @@ system

- [ - exception_types - ] - )

@@ -2416,12 +2596,8 @@ system

- [ - exception_types - ] - )

@@ -2455,12 +2631,8 @@ system

- [ - exception_types - ] - )

@@ -2624,12 +2796,8 @@ system

- [ - exception_types - ] - )

@@ -3069,6 +3237,33 @@ Execute automount in the automount domain.

+Module: +automount

+Layer: +services

+
+automount_dontaudit_getattr_tmp_dirs(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Do not audit attempts to get the attributes +of automount temporary directories. +

+ +

Module: automount

Layer: @@ -3201,13 +3396,13 @@ BIND cache files.

-Module: +Module: bind

Layer: services

 
-bind_manage_config_dir(
+bind_manage_config_dirs(
 	
@@ -3375,13 +3570,13 @@ Search the BIND cache directory.

-Module: +Module: bind

Layer: services

 
-bind_setattr_pid_dir(
+bind_setattr_pid_dirs(
 	
@@ -3602,62 +3797,10 @@ allow the specified role the bluetooth_helper domain.

-Module: -bootloader

-Layer: -kernel

-
-bootloader_create_kernel_img(
-	
-		
-		
-		
-		domain
-		
-	
-	)

-

- -

-Install a kernel into the /boot directory. -

- -

-Module: -bootloader

-Layer: -kernel

-
-bootloader_create_kernel_symbol_table(
-	
-		
-		
-		
-		domain
-		
-	
-	)

-

- -

-Install a system.map into the /boot directory. -

- -

-Module: +Module: bootloader

-Layer: -kernel

+Layer: +admin

 
 bootloader_create_runtime_file(
@@ -3681,13 +3824,13 @@ temporary data in /tmp.

-Module: +Module: bootloader

-Layer: -kernel

+Layer: +admin

-bootloader_delete_kernel( +bootloader_domtrans( @@ -3700,20 +3843,20 @@ kernel

-Delete a kernel from /boot. +Execute bootloader in the bootloader domain.

-Module: +Module: bootloader

-Layer: -kernel

+Layer: +admin

-bootloader_delete_kernel_symbol_table( +bootloader_read_config( @@ -3726,20 +3869,20 @@ kernel

-Delete a system.map in the /boot directory. +Read the bootloader configuration file.

-Module: +Module: bootloader

-Layer: -kernel

+Layer: +admin

-bootloader_domtrans( +bootloader_run( @@ -3747,57 +3890,20 @@ kernel

domain - )
-

- -

-Execute bootloader in the bootloader domain. -

- -

-Module: -bootloader

-Layer: -kernel

-
-bootloader_dontaudit_getattr_boot_dir(
-	
 		
+			,
 		
 		
-		domain
 		
-	
-	)

-

- -

-Do not audit attempts to get attributes -of the /boot directory. -

- -

-Module: -bootloader

-Layer: -kernel

- -bootloader_dontaudit_search_boot( + role + + , - domain + + terminal )
@@ -3805,25 +3911,26 @@ kernel

-Do not audit attempts to search the /boot directory. +Execute bootloader interactively and do +a domain transition to the bootloader domain.

-Module: +Module: bootloader

-Layer: -kernel

+Layer: +admin

-bootloader_filetrans_modules( +bootloader_rw_config( - ? + domain )
@@ -3831,20 +3938,21 @@ kernel

-Summary is missing! +Read and write the bootloader +configuration file.

-Module: +Module: bootloader

-Layer: -kernel

+Layer: +admin

-bootloader_getattr_boot_dir( +bootloader_rw_tmp_files( @@ -3857,20 +3965,21 @@ kernel

-Get attributes of the /boot directory. +Read and write the bootloader +temporary data in /tmp.

-Module: -bootloader

-Layer: -kernel

+Module: +canna

+Layer: +services

-bootloader_getattr_kernel_modules( +canna_stream_connect( @@ -3883,20 +3992,20 @@ kernel

-Get the attributes of kernel module files. +Connect to Canna using a unix domain stream socket.

-Module: -bootloader

-Layer: -kernel

+Module: +certwatch

+Layer: +admin

-bootloader_list_kernel_modules( +certwatach_run( @@ -3904,30 +4013,20 @@ kernel

domain - )
-

- -

-List the contents of the kernel module directories. -

- -

-Module: -bootloader

-Layer: -kernel

- -bootloader_manage_kernel_modules( + + , + + + + role + + , - domain + + terminal )
@@ -3935,21 +4034,23 @@ kernel

-Create, read, write, and delete -kernel module files. +Execute certwatch in the certwatch domain, and +allow the specified role the certwatch domain, +and use the caller's terminal. Has a sigchld +backchannel.

-Module: -bootloader

-Layer: -kernel

+Module: +certwatch

+Layer: +admin

-bootloader_read_config( +certwatch_domtrans( @@ -3962,20 +4063,20 @@ kernel

-Read the bootloader configuration file. +Domain transition to certwatch.

-Module: -bootloader

-Layer: -kernel

+Module: +clock

+Layer: +system

-bootloader_read_kernel_modules( +clock_domtrans( @@ -3988,20 +4089,20 @@ kernel

-Read kernel module files. +Execute hwclock in the clock domain.

-Module: -bootloader

-Layer: -kernel

+Module: +clock

+Layer: +system

-bootloader_read_kernel_symbol_table( +clock_exec( @@ -4014,20 +4115,20 @@ kernel

-Read system.map in the /boot directory. +Execute hwclock in the caller domain.

-Module: -bootloader

-Layer: -kernel

+Module: +clock

+Layer: +system

-bootloader_run( +clock_run( @@ -4056,21 +4157,21 @@ kernel

-Execute bootloader interactively and do -a domain transition to the bootloader domain. +Execute hwclock in the clock domain, and +allow the specified role the hwclock domain.

-Module: -bootloader

-Layer: -kernel

+Module: +clock

+Layer: +system

-bootloader_rw_boot_symlinks( +clock_rw_adjtime( @@ -4083,21 +4184,20 @@ kernel

-Read and write symbolic links -in the /boot directory. +Allow executing domain to modify clock drift

-Module: -bootloader

-Layer: -kernel

+Module: +consoletype

+Layer: +admin

-bootloader_rw_config( +consoletype_domtrans( @@ -4110,21 +4210,20 @@ kernel

-Read and write the bootloader -configuration file. +Execute consoletype in the consoletype domain.

-Module: -bootloader

-Layer: -kernel

+Module: +consoletype

+Layer: +admin

-bootloader_rw_tmp_file( +consoletype_exec( @@ -4137,21 +4236,20 @@ kernel

-Read and write the bootloader -temporary data in /tmp. +Execute consoletype in the caller domain.

-Module: -bootloader

-Layer: -kernel

+Module: +consoletype

+Layer: +admin

-bootloader_search_boot( +consoletype_run( @@ -4159,25 +4257,42 @@ kernel

domain + + , + + + + role + + + + , + + + + terminal + + )

-Search the /boot directory. +Execute consoletype in the consoletype domain, and +allow the specified role the consoletype domain.

-Module: -bootloader

+Module: +corecommands

Layer: kernel

-bootloader_search_kernel_modules( +corecmd_bin_alias( @@ -4190,20 +4305,20 @@ kernel

-Search the contents of the kernel module directories. +Create a aliased type to generic bin files.

-Module: -bootloader

+Module: +corecommands

Layer: kernel

-bootloader_write_kernel_modules( +corecmd_bin_domtrans( @@ -4211,25 +4326,34 @@ kernel

domain + + , + + + + target_domain + + )

-Write kernel module files. +Execute a file in a bin directory +in the specified domain.

-Module: -canna

-Layer: -services

+Module: +corecommands

+Layer: +kernel

-canna_stream_connect( +corecmd_bin_spec_domtrans( @@ -4237,25 +4361,36 @@ services

domain + + , + + + + target_domain + + )

-Connect to Canna using a unix domain stream socket. +Execute a file in a bin directory +in the specified domain but do not +do it automatically. This is an explicit +transition, requiring the caller to use setexeccon().

-Module: -clock

-Layer: -system

+Module: +corecommands

+Layer: +kernel

-clock_domtrans( +corecmd_check_exec_shell( @@ -4268,25 +4403,25 @@ system

-Execute hwclock in the clock domain. +Check if a shell is executable (DAC-wise).

-Module: -clock

-Layer: -system

+Module: +corecommands

+Layer: +kernel

-clock_exec( +corecmd_dontaudit_getattr_sbin_files( - domain + ? )
@@ -4294,20 +4429,20 @@ system

-Execute hwclock in the caller domain. +Summary is missing!

-Module: -clock

-Layer: -system

+Module: +corecommands

+Layer: +kernel

-clock_run( +corecmd_dontaudit_search_sbin( @@ -4315,47 +4450,31 @@ system

domain - - , - - - - role - - - - , - - - - terminal - - )

-Execute hwclock in the clock domain, and -allow the specified role the hwclock domain. +Do not audit attempts to search +sbin directories.

-Module: -clock

-Layer: -system

+Module: +corecommands

+Layer: +kernel

-clock_rw_adjtime( +corecmd_exec_bin( - domain + ? )
@@ -4363,25 +4482,25 @@ system

-Allow executing domain to modify clock drift +Summary is missing!

-Module: -consoletype

-Layer: -admin

+Module: +corecommands

+Layer: +kernel

-consoletype_domtrans( +corecmd_exec_chroot( - domain + ? )
@@ -4389,25 +4508,25 @@ admin

-Execute consoletype in the consoletype domain. +Summary is missing!

-Module: -consoletype

-Layer: -admin

+Module: +corecommands

+Layer: +kernel

-consoletype_exec( +corecmd_exec_ls( - domain + ? )
@@ -4415,25 +4534,25 @@ admin

-Execute consoletype in the caller domain. +Summary is missing!

-Module: +Module: corecommands

Layer: kernel

-corecmd_bin_alias( +corecmd_exec_sbin( - domain + ? )
@@ -4441,33 +4560,25 @@ kernel

-Create a aliased type to generic bin files. +Summary is missing!

-Module: +Module: corecommands

Layer: kernel

-corecmd_bin_domtrans( - - - - - domain - +corecmd_exec_shell( - , - - target_domain + ? )
@@ -4475,21 +4586,20 @@ kernel

-Execute a file in a bin directory -in the specified domain. +Summary is missing!

-Module: +Module: corecommands

Layer: kernel

-corecmd_check_exec_shell( +corecmd_getattr_bin_files( @@ -4502,229 +4612,20 @@ kernel

-Check if a shell is executable (DAC-wise). +Get the attributes of files in bin directories.

-Module: +Module: corecommands

Layer: kernel

 
-corecmd_dontaudit_getattr_sbin_file(
-	
-		
-		
-		
-		?
-		
-	
-	)

-

- -

-Summary is missing! -

- -

-Module: -corecommands

-Layer: -kernel

-
-corecmd_dontaudit_search_sbin(
-	
-		
-		
-		
-		domain
-		
-	
-	)

-

- -

-Do not audit attempts to search -sbin directories. -

- -

-Module: -corecommands

-Layer: -kernel

-
-corecmd_exec_bin(
-	
-		
-		
-		
-		?
-		
-	
-	)

-

- -

-Summary is missing! -

- -

-Module: -corecommands

-Layer: -kernel

-
-corecmd_exec_chroot(
-	
-		
-		
-		
-		?
-		
-	
-	)

-

- -

-Summary is missing! -

- -

-Module: -corecommands

-Layer: -kernel

-
-corecmd_exec_ls(
-	
-		
-		
-		
-		?
-		
-	
-	)

-

- -

-Summary is missing! -

- -

-Module: -corecommands

-Layer: -kernel

-
-corecmd_exec_sbin(
-	
-		
-		
-		
-		?
-		
-	
-	)

-

- -

-Summary is missing! -

- -

-Module: -corecommands

-Layer: -kernel

-
-corecmd_exec_shell(
-	
-		
-		
-		
-		?
-		
-	
-	)

-

- -

-Summary is missing! -

- -

-Module: -corecommands

-Layer: -kernel

-
-corecmd_getattr_bin_file(
-	
-		
-		
-		
-		domain
-		
-	
-	)

-

- -

-Get the attributes of files in bin directories. -

- -

-Module: -corecommands

-Layer: -kernel

-
-corecmd_getattr_sbin_file(
+corecmd_getattr_sbin_files(
 	
@@ -4900,13 +4801,13 @@ Mmap a sbin file as executable.

-Module: +Module: corecommands

Layer: kernel

 
-corecmd_read_bin_file(
+corecmd_read_bin_files(
 	
@@ -4926,13 +4827,13 @@ Read files in bin directories.

-Module: +Module: corecommands

Layer: kernel

 
-corecmd_read_bin_pipe(
+corecmd_read_bin_pipes(
 	
@@ -4952,13 +4853,13 @@ Read pipes in bin directories.

-Module: +Module: corecommands

Layer: kernel

 
-corecmd_read_bin_socket(
+corecmd_read_bin_sockets(
 	
@@ -4978,13 +4879,13 @@ Read named sockets in bin directories.

-Module: +Module: corecommands

Layer: kernel

 
-corecmd_read_bin_symlink(
+corecmd_read_bin_symlinks(
 	
@@ -5004,13 +4905,13 @@ Read symbolic links in bin directories.

-Module: +Module: corecommands

Layer: kernel

 
-corecmd_read_sbin_file(
+corecmd_read_sbin_files(
 	
@@ -5030,13 +4931,13 @@ Read files in sbin directories.

-Module: +Module: corecommands

Layer: kernel

 
-corecmd_read_sbin_pipe(
+corecmd_read_sbin_pipes(
 	
@@ -5056,13 +4957,13 @@ Read named pipes in sbin directories.

-Module: +Module: corecommands

Layer: kernel

 
-corecmd_read_sbin_socket(
+corecmd_read_sbin_sockets(
 	
@@ -5082,13 +4983,13 @@ Read named sockets in sbin directories.

-Module: +Module: corecommands

Layer: kernel

 
-corecmd_read_sbin_symlink(
+corecmd_read_sbin_symlinks(
 	
@@ -5195,6 +5096,43 @@ in the specified domain.

+Module: +corecommands

+Layer: +kernel

+
+corecmd_sbin_spec_domtrans(
+	
+		
+		
+		
+		domain
+		
+	
+		
+			,
+		
+		
+		
+		target_domain
+		
+	
+	)

+

+ +

+Execute a file in a sbin directory +in the specified domain but do not +do it automatically. This is an explicit +transition, requiring the caller to use setexeccon(). +

+ +

Module: corecommands

Layer: @@ -5343,6 +5281,32 @@ caller to use setexeccon().

+Module: +corenetwork

+Layer: +kernel

+
+corenet_dontaudit_tcp_bind_all_ports(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Do not audit attepts to bind TCP sockets to any ports. +

+ +

Module: corenetwork

Layer: @@ -6490,6 +6454,58 @@ Send and receive raw IP packets on the unspec node.

+Module: +corenetwork

+Layer: +kernel

+
+corenet_rw_ppp_dev(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Read and write the point-to-point device. +

+ +

+Module: +corenetwork

+Layer: +kernel

+
+corenet_rw_tun_tap_dev(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Read and write the TUN/TAP virtual network device. +

+ +

Module: corenetwork

Layer: @@ -6828,6 +6844,32 @@ Bind TCP sockets to the auth port.

+Module: +corenetwork

+Layer: +kernel

+
+corenet_tcp_bind_bgp_port(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Bind TCP sockets to the bgp port. +

+ +

Module: corenetwork

Layer: @@ -8544,6 +8586,32 @@ Bind TCP sockets to the rndc port.

+Module: +corenetwork

+Layer: +kernel

+
+corenet_tcp_bind_router_port(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Bind TCP sockets to the router port. +

+ +

Module: corenetwork

Layer: @@ -9376,6 +9444,32 @@ Make a TCP connection to the auth port.

+Module: +corenetwork

+Layer: +kernel

+
+corenet_tcp_connect_bgp_port(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Make a TCP connection to the bgp port. +

+ +

Module: corenetwork

Layer: @@ -10910,6 +11004,32 @@ Make a TCP connection to the rndc port.

+Module: +corenetwork

+Layer: +kernel

+
+corenet_tcp_connect_router_port(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Make a TCP connection to the router port. +

+ +

Module: corenetwork

Layer: @@ -11742,6 +11862,32 @@ Send and receive TCP traffic on the auth port.

+Module: +corenetwork

+Layer: +kernel

+
+corenet_tcp_sendrecv_bgp_port(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Send and receive TCP traffic on the bgp port. +

+ +

Module: corenetwork

Layer: @@ -13510,6 +13656,32 @@ Send and receive TCP traffic on the rndc port.

+Module: +corenetwork

+Layer: +kernel

+
+corenet_tcp_sendrecv_router_port(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Send and receive TCP traffic on the router port. +

+ +

Module: corenetwork

Layer: @@ -14368,6 +14540,32 @@ Bind UDP sockets to the auth port.

+Module: +corenetwork

+Layer: +kernel

+
+corenet_udp_bind_bgp_port(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Bind UDP sockets to the bgp port. +

+ +

Module: corenetwork

Layer: @@ -16084,6 +16282,32 @@ Bind UDP sockets to the rndc port.

+Module: +corenetwork

+Layer: +kernel

+
+corenet_udp_bind_router_port(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Bind UDP sockets to the router port. +

+ +

Module: corenetwork

Layer: @@ -16968,6 +17192,32 @@ Receive UDP traffic on the auth port.

+Module: +corenetwork

+Layer: +kernel

+
+corenet_udp_receive_bgp_port(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Receive UDP traffic on the bgp port. +

+ +

Module: corenetwork

Layer: @@ -18736,6 +18986,32 @@ Receive UDP traffic on the rndc port.

+Module: +corenetwork

+Layer: +kernel

+
+corenet_udp_receive_router_port(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Receive UDP traffic on the router port. +

+ +

Module: corenetwork

Layer: @@ -19620,6 +19896,32 @@ Send UDP traffic on the auth port.

+Module: +corenetwork

+Layer: +kernel

+
+corenet_udp_send_bgp_port(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Send UDP traffic on the bgp port. +

+ +

Module: corenetwork

Layer: @@ -21388,6 +21690,32 @@ Send UDP traffic on the rndc port.

+Module: +corenetwork

+Layer: +kernel

+
+corenet_udp_send_router_port(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Send UDP traffic on the router port. +

+ +

Module: corenetwork

Layer: @@ -22272,6 +22600,32 @@ Send and receive UDP traffic on the auth port.

+Module: +corenetwork

+Layer: +kernel

+
+corenet_udp_sendrecv_bgp_port(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Send and receive UDP traffic on the bgp port. +

+ +

Module: corenetwork

Layer: @@ -24040,6 +24394,32 @@ Send and receive UDP traffic on the rndc port.

+Module: +corenetwork

+Layer: +kernel

+
+corenet_udp_sendrecv_router_port(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Send and receive UDP traffic on the router port. +

+ +

Module: corenetwork

Layer: @@ -24586,58 +24966,6 @@ Unconfined access to network objects.

-Module: -corenetwork

-Layer: -kernel

-
-corenet_use_ppp_device(
-	
-		
-		
-		
-		domain
-		
-	
-	)

-

- -

-Read and write the point-to-point device. -

- -

-Module: -corenetwork

-Layer: -kernel

-
-corenet_use_tun_tap_device(
-	
-		
-		
-		
-		domain
-		
-	
-	)

-

- -

-Read and write the TUN/TAP virtual network device. -

- -

Module: cpucontrol

Layer: @@ -24649,12 +24977,8 @@ services

- [ - domain - ] - )

@@ -24668,13 +24992,13 @@ CPUcontrol stub interface. No access allowed.

-Module: +Module: cron

Layer: services

-cron_crw_tcp_socket( +cron_anacron_domtrans_system_job( @@ -24687,20 +25011,20 @@ services

-Create, read, and write a cron daemon TCP socket. +Execute APM in the apm domain.

-Module: +Module: cron

Layer: services

-cron_domtrans_anacron_system_job( +cron_dontaudit_append_system_job_tmp_files( @@ -24713,20 +25037,21 @@ services

-Execute APM in the apm domain. +Do not audit attempts to append temporary +files from the system cron jobs.

-Module: +Module: cron

Layer: services

-cron_dontaudit_append_system_job_tmp_files( +cron_dontaudit_write_pipes( @@ -24739,21 +25064,20 @@ services

-Do not audit attempts to append temporary -files from the system cron jobs. +Do not audit attempts to write cron daemon unnamed pipes.

-Module: +Module: cron

Layer: services

-cron_dontaudit_write_pipe( +cron_read_pipes( @@ -24766,20 +25090,20 @@ services

-Do not audit attempts to write cron daemon unnamed pipes. +Read a cron daemon unnamed pipe.

-Module: +Module: cron

Layer: services

-cron_read_pipe( +cron_read_system_job_tmp_files( @@ -24792,20 +25116,20 @@ services

-Read a cron daemon unnamed pipe. +Read temporary files from the system cron jobs.

-Module: +Module: cron

Layer: services

-cron_read_system_job_tmp_files( +cron_rw_pipes( @@ -24818,20 +25142,20 @@ services

-Read temporary files from the system cron jobs. +Read and write a cron daemon unnamed pipe.

-Module: +Module: cron

Layer: services

-cron_rw_pipe( +cron_rw_system_job_pipes( @@ -24844,20 +25168,20 @@ services

-Read and write a cron daemon unnamed pipe. +Read and write a system cron job unnamed pipe.

-Module: +Module: cron

Layer: services

-cron_rw_system_job_pipe( +cron_rw_tcp_sockets( @@ -24870,7 +25194,7 @@ services

-Read and write a system cron job unnamed pipe. +Read, and write cron daemon TCP sockets.

@@ -24964,13 +25288,13 @@ from the system cron jobs.

-Module: +Module: cron

Layer: services

 
-cron_use_fd(
+cron_use_fds(
 	
@@ -24991,13 +25315,13 @@ from the cron daemon.

-Module: +Module: cron

Layer: services

 
-cron_use_system_job_fd(
+cron_use_system_job_fds(
 	
@@ -25018,13 +25342,13 @@ from system cron jobs.

-Module: +Module: cron

Layer: services

 
-cron_write_system_job_pipe(
+cron_write_system_job_pipes(
 	
@@ -25150,6 +25474,32 @@ Execute cups_config in the cups_config domain.

+Module: +cups

+Layer: +services

+
+cups_read_config(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Read cups configuration files. +

+ +

Module: cups

Layer: @@ -25255,6 +25605,58 @@ Connect to ptal over an unix domain stream socket.

+Module: +cups

+Layer: +services

+
+cups_tcp_connect(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Connect to cups over TCP. +

+ +

+Module: +cups

+Layer: +services

+
+cups_write_log(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Write cups log files. +

+ +

Module: cvs

Layer: @@ -25551,13 +25953,13 @@ Read dbus configuration.

-Module: +Module: dbus

Layer: services

-dbus_send_system_bus_msg( +dbus_send_system_bus( @@ -25588,12 +25990,8 @@ services

- [ - domain - ] - )

@@ -25739,7 +26137,7 @@ kernel

- domain + file_type )
@@ -25747,20 +26145,20 @@ kernel

-Mount a usbfs filesystem. +Associate a file to a usbfs filesystem.

-Module: +Module: devices

Layer: kernel

 
-dev_create_cardmgr(
+dev_create_cardmgr_dev(
 	
@@ -25782,39 +26180,13 @@ with the correct type.

-Module: -devices

-Layer: -kernel

-
-dev_create_dir(
-	
-		
-		
-		
-		domain
-		
-	
-	)

-

- -

-Create a directory in the device directory. -

- -

-Module: +Module: devices

Layer: kernel

 
-dev_create_generic_chr_file(
+dev_create_generic_chr_files(
 	
@@ -25834,13 +26206,13 @@ Allow read, write, and create for generic character device files.

-Module: +Module: devices

Layer: kernel

-dev_del_generic_symlinks( +dev_create_generic_dirs( @@ -25853,20 +26225,20 @@ kernel

-Delete symbolic links in device directories. +Create a directory in the device directory.

-Module: +Module: devices

Layer: kernel

 
-dev_delete_generic_file(
+dev_delete_generic_files(
 	
@@ -25886,13 +26258,39 @@ Delete generic files in /dev.

-Module: +Module: devices

Layer: kernel

 
-dev_delete_lvm_control(
+dev_delete_generic_symlinks(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Delete symbolic links in device directories. +

+ +

+Module: +devices

+Layer: +kernel

+
+dev_delete_lvm_control_dev(
 	
@@ -25964,13 +26362,13 @@ Dontaudit getattr on all character file device nodes.

-Module: +Module: devices

Layer: kernel

 
-dev_dontaudit_getattr_apm_bios(
+dev_dontaudit_getattr_apm_bios_dev(
 	
@@ -25991,13 +26389,13 @@ the apm bios device node.

-Module: +Module: devices

Layer: kernel

 
-dev_dontaudit_getattr_generic_blk_file(
+dev_dontaudit_getattr_generic_blk_files(
 	
@@ -26017,13 +26415,13 @@ Dontaudit getattr on generic block devices.

-Module: +Module: devices

Layer: kernel

 
-dev_dontaudit_getattr_generic_chr_file(
+dev_dontaudit_getattr_generic_chr_files(
 	
@@ -26043,13 +26441,13 @@ Dontaudit getattr for generic character device files.

-Module: +Module: devices

Layer: kernel

 
-dev_dontaudit_getattr_generic_pipe(
+dev_dontaudit_getattr_generic_pipes(
 	
@@ -26095,13 +26493,13 @@ dontaudit getattr raw memory devices (e.g. /dev/mem).

-Module: +Module: devices

Layer: kernel

 
-dev_dontaudit_getattr_misc(
+dev_dontaudit_getattr_misc_dev(
 	
@@ -26122,13 +26520,13 @@ of miscellaneous devices.

-Module: +Module: devices

Layer: kernel

 
-dev_dontaudit_getattr_scanner(
+dev_dontaudit_getattr_scanner_dev(
 	
@@ -26149,13 +26547,13 @@ the scanner device.

-Module: +Module: devices

Layer: kernel

 
-dev_dontaudit_getattr_usbfs_dir(
+dev_dontaudit_getattr_usbfs_dirs(
 	
@@ -26307,6 +26705,33 @@ Do not audit attempts to read the framebuffer.

+Module: +devices

+Layer: +kernel

+
+dev_dontaudit_read_rand(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Do not audit attempts to read from random +number generator devices (e.g., /dev/random) +

+ +

Module: devices

Layer: @@ -26334,13 +26759,13 @@ write the PCMCIA card manager device.

-Module: +Module: devices

Layer: kernel

 
-dev_dontaudit_rw_dri_dev(
+dev_dontaudit_rw_dri(
 	
@@ -26386,6 +26811,32 @@ Dontaudit getattr for generic device files.

+Module: +devices

+Layer: +kernel

+
+dev_dontaudit_rw_misc(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Do not audit attempts to read and write miscellaneous devices. +

+ +

Module: devices

Layer: @@ -26412,13 +26863,13 @@ Do not audit attempts to search sysfs.

-Module: +Module: devices

Layer: kernel

 
-dev_dontaudit_setattr_apm_bios(
+dev_dontaudit_setattr_apm_bios_dev(
 	
@@ -26439,13 +26890,13 @@ the apm bios device node.

-Module: +Module: devices

Layer: kernel

 
-dev_dontaudit_setattr_framebuffer(
+dev_dontaudit_setattr_framebuffer_dev(
 	
@@ -26466,13 +26917,13 @@ of the framebuffer device node.

-Module: +Module: devices

Layer: kernel

 
-dev_dontaudit_setattr_generic_blk_file(
+dev_dontaudit_setattr_generic_blk_files(
 	
@@ -26492,13 +26943,13 @@ Dontaudit setattr on generic block devices.

-Module: +Module: devices

Layer: kernel

 
-dev_dontaudit_setattr_generic_chr_file(
+dev_dontaudit_setattr_generic_chr_files(
 	
@@ -26518,13 +26969,13 @@ Dontaudit setattr for generic character device files.

-Module: +Module: devices

Layer: kernel

 
-dev_dontaudit_setattr_generic_symlink(
+dev_dontaudit_setattr_generic_symlinks(
 	
@@ -26545,13 +26996,13 @@ of symbolic links in device directories (/dev).

-Module: +Module: devices

Layer: kernel

 
-dev_dontaudit_setattr_misc(
+dev_dontaudit_setattr_misc_dev(
 	
@@ -26572,13 +27023,13 @@ of miscellaneous devices.

-Module: +Module: devices

Layer: kernel

 
-dev_dontaudit_setattr_scanner(
+dev_dontaudit_setattr_scanner_dev(
 	
@@ -26626,13 +27077,13 @@ of video4linux device nodes.

-Module: +Module: devices

Layer: kernel

 
-dev_filetrans_dev_node(
+dev_filetrans(
 	
@@ -26747,13 +27198,13 @@ Getattr on all character file device nodes.

-Module: +Module: devices

Layer: kernel

 
-dev_getattr_apm_bios(
+dev_getattr_apm_bios_dev(
 	
@@ -26773,13 +27224,13 @@ Get the attributes of the apm bios device node.

-Module: +Module: devices

Layer: kernel

 
-dev_getattr_cpu(
+dev_getattr_cpu_dev(
 	
@@ -26800,13 +27251,39 @@ microcode and id interfaces.

-Module: +Module: +devices

+Layer: +kernel

+
+dev_getattr_dri_dev(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+getattr the dri devices. +

+ +

+Module: devices

Layer: kernel

 
-dev_getattr_framebuffer(
+dev_getattr_framebuffer_dev(
 	
@@ -26826,13 +27303,13 @@ Get the attributes of the framebuffer device node.

-Module: +Module: devices

Layer: kernel

 
-dev_getattr_generic_blk_file(
+dev_getattr_generic_blk_files(
 	
@@ -26852,13 +27329,13 @@ Allow getattr on generic block devices.

-Module: +Module: devices

Layer: kernel

 
-dev_getattr_generic_chr_file(
+dev_getattr_generic_chr_files(
 	
@@ -26878,13 +27355,13 @@ Allow getattr for generic character device files.

-Module: +Module: devices

Layer: kernel

 
-dev_getattr_misc(
+dev_getattr_misc_dev(
 	
@@ -26904,13 +27381,13 @@ Get the attributes of miscellaneous devices.

-Module: +Module: devices

Layer: kernel

 
-dev_getattr_mouse(
+dev_getattr_mouse_dev(
 	
@@ -26930,13 +27407,13 @@ Get the attributes of the mouse devices.

-Module: +Module: devices

Layer: kernel

 
-dev_getattr_mtrr(
+dev_getattr_mtrr_dev(
 	
@@ -26956,13 +27433,13 @@ Get the attributes of the mtrr device.

-Module: +Module: devices

Layer: kernel

 
-dev_getattr_power_management(
+dev_getattr_power_mgmt_dev(
 	
@@ -26982,13 +27459,13 @@ Get the attributes of the the power management device.

-Module: +Module: devices

Layer: kernel

 
-dev_getattr_scanner(
+dev_getattr_scanner_dev(
 	
@@ -27008,13 +27485,13 @@ Get the attributes of the scanner device.

-Module: +Module: devices

Layer: kernel

 
-dev_getattr_snd_dev(
+dev_getattr_sound_dev(
 	
@@ -27034,13 +27511,13 @@ Get the attributes of the sound devices.

-Module: +Module: devices

Layer: kernel

 
-dev_getattr_sysfs_dir(
+dev_getattr_sysfs_dirs(
 	
@@ -27060,13 +27537,13 @@ Get the attributes of sysfs directories.

-Module: +Module: devices

Layer: kernel

 
-dev_getattr_usbfs_dir(
+dev_getattr_usbfs_dirs(
 	
@@ -27268,13 +27745,39 @@ Read, write, create, and delete all character device files.

-Module: +Module: +devices

+Layer: +kernel

+
+dev_manage_all_dev_nodes(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Create, delete, read, and write device nodes in device directories. +

+ +

+Module: devices

Layer: kernel

 
-dev_manage_cardmgr(
+dev_manage_cardmgr_dev(
 	
@@ -27295,13 +27798,13 @@ the PCMCIA card manager device.

-Module: +Module: devices

Layer: kernel

-dev_manage_dev_nodes( +dev_manage_dri_dev( @@ -27314,20 +27817,20 @@ kernel

-Create, delete, read, and write device nodes in device directories. +Create, read, write, and delete the dri devices.

-Module: +Module: devices

Layer: kernel

 
-dev_manage_generic_blk_file(
+dev_manage_generic_blk_files(
 	
@@ -27347,13 +27850,13 @@ Create, delete, read, and write block device files.

-Module: +Module: devices

Layer: kernel

 
-dev_manage_generic_chr_file(
+dev_manage_generic_chr_files(
 	
@@ -27373,6 +27876,32 @@ Create, delete, read, and write character device files.

+Module: +devices

+Layer: +kernel

+
+dev_manage_generic_files(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Create a file in the device directory. +

+ +

Module: devices

Layer: @@ -27653,7 +28182,8 @@ kernel

-Read from random devices (e.g., /dev/random) +Read from random number generator +devices (e.g., /dev/random)

@@ -27712,13 +28242,13 @@ Read the realtime clock (/dev/rtc).

-Module: +Module: devices

Layer: kernel

 
-dev_read_snd_dev(
+dev_read_sound(
 	
@@ -27738,13 +28268,13 @@ Read the sound devices.

-Module: +Module: devices

Layer: kernel

 
-dev_read_snd_mixer_dev(
+dev_read_sound_mixer(
 	
@@ -27869,13 +28399,13 @@ Allow full relabeling (to and from) of all device nodes.

-Module: +Module: devices

Layer: kernel

 
-dev_relabel_dev_dirs(
+dev_relabel_generic_dev_dirs(
 	
@@ -27921,13 +28451,13 @@ Relabel symbolic links in device directories.

-Module: +Module: devices

Layer: kernel

 
-dev_rw_agp_dev(
+dev_rw_agp(
 	
@@ -28052,13 +28582,13 @@ Read and write the the hardware SSL accelerator.

-Module: +Module: devices

Layer: kernel

 
-dev_rw_dri_dev(
+dev_rw_dri(
 	
@@ -28078,13 +28608,39 @@ Read and write the dri devices.

-Module: +Module: +devices

+Layer: +kernel

+
+dev_rw_framebuffer(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Read and write the framebuffer. +

+ +

+Module: devices

Layer: kernel

 
-dev_rw_generic_file(
+dev_rw_generic_files(
 	
@@ -28104,13 +28660,13 @@ Read and write generic files in /dev.

-Module: +Module: devices

Layer: kernel

-dev_rw_lvm_control( +dev_rw_generic_usb_dev( @@ -28123,20 +28679,20 @@ kernel

-Read and write the lvm control device. +Read and write generic the USB devices.

-Module: +Module: devices

Layer: kernel

-dev_rw_mouse( +dev_rw_input_dev( @@ -28149,20 +28705,20 @@ kernel

-Read and write to mouse devices. +Read input event devices (/dev/input).

-Module: +Module: devices

Layer: kernel

-dev_rw_null_dev( +dev_rw_lvm_control( @@ -28175,20 +28731,20 @@ kernel

-Read and write to the null device (/dev/null). +Read and write the lvm control device.

-Module: +Module: devices

Layer: kernel

-dev_rw_power_management( +dev_rw_mouse( @@ -28201,20 +28757,20 @@ kernel

-Read and write the the power management device. +Read and write to mouse devices.

-Module: +Module: devices

Layer: kernel

-dev_rw_printer( +dev_rw_mtrr( @@ -28227,20 +28783,20 @@ kernel

-Read and write the printer device. +Read and write the mtrr device.

-Module: +Module: devices

Layer: kernel

-dev_rw_realtime_clock( +dev_rw_null( @@ -28253,20 +28809,20 @@ kernel

-Read and set the realtime clock (/dev/rtc). +Read and write to the null device (/dev/null).

-Module: +Module: devices

Layer: kernel

-dev_rw_scanner( +dev_rw_power_management( @@ -28279,20 +28835,20 @@ kernel

-Read and write the scanner device. +Read and write the the power management device.

-Module: +Module: devices

Layer: kernel

-dev_rw_sysfs( +dev_rw_printer( @@ -28305,20 +28861,20 @@ kernel

-Allow caller to modify hardware state information. +Read and write the printer device.

-Module: +Module: devices

Layer: kernel

-dev_rw_usbfs( +dev_rw_realtime_clock( @@ -28331,20 +28887,20 @@ kernel

-Allow caller to modify usb hardware configuration files. +Read and set the realtime clock (/dev/rtc).

-Module: +Module: devices

Layer: kernel

-dev_rw_zero_dev( +dev_rw_scanner( @@ -28357,20 +28913,20 @@ kernel

-Read and write to the zero device (/dev/zero). +Read and write the scanner device.

-Module: +Module: devices

Layer: kernel

-dev_rwx_zero_dev( +dev_rw_sysfs( @@ -28383,20 +28939,20 @@ kernel

-Read, write, and execute the zero device (/dev/zero). +Allow caller to modify hardware state information.

-Module: +Module: devices

Layer: kernel

-dev_rx_raw_memory( +dev_rw_usbfs( @@ -28409,20 +28965,20 @@ kernel

-Read and execute raw memory devices (e.g. /dev/mem). +Allow caller to modify usb hardware configuration files.

-Module: +Module: devices

Layer: kernel

-dev_search_sysfs( +dev_rw_xserver_misc( @@ -28435,20 +28991,20 @@ kernel

-Search the sysfs directories. +Read and write X server miscellaneous devices.

-Module: +Module: devices

Layer: kernel

-dev_search_usbfs( +dev_rw_zero( @@ -28461,20 +29017,20 @@ kernel

-Search the directory containing USB hardware information. +Read and write to the zero device (/dev/zero).

-Module: +Module: devices

Layer: kernel

-dev_setattr_all_blk_files( +dev_rwx_zero( @@ -28487,20 +29043,20 @@ kernel

-Setattr on all block file device nodes. +Read, write, and execute the zero device (/dev/zero).

-Module: +Module: devices

Layer: kernel

-dev_setattr_all_chr_files( +dev_rx_raw_memory( @@ -28513,20 +29069,20 @@ kernel

-Setattr on all character file device nodes. +Read and execute raw memory devices (e.g. /dev/mem).

-Module: +Module: devices

Layer: kernel

-dev_setattr_apm_bios( +dev_search_sysfs( @@ -28539,20 +29095,20 @@ kernel

-Set the attributes of the apm bios device node. +Search the sysfs directories.

-Module: +Module: devices

Layer: kernel

-dev_setattr_dev_dir( +dev_search_usbfs( @@ -28565,20 +29121,20 @@ kernel

-Set the attributes of /dev directories. +Search the directory containing USB hardware information.

-Module: +Module: devices

Layer: kernel

-dev_setattr_framebuffer( +dev_setattr_all_blk_files( @@ -28591,20 +29147,20 @@ kernel

-Set the attributes of the framebuffer device node. +Setattr on all block file device nodes.

-Module: +Module: devices

Layer: kernel

-dev_setattr_misc( +dev_setattr_all_chr_files( @@ -28617,20 +29173,20 @@ kernel

-Set the attributes of miscellaneous devices. +Setattr on all character file device nodes.

-Module: +Module: devices

Layer: kernel

-dev_setattr_mouse( +dev_setattr_apm_bios_dev( @@ -28643,20 +29199,150 @@ kernel

-Set the attributes of the mouse devices. +Set the attributes of the apm bios device node.

-Module: +Module: devices

Layer: kernel

 
-dev_setattr_power_management(
+dev_setattr_dri_dev(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Setattr the dri devices. +

+ +

+Module: +devices

+Layer: +kernel

+
+dev_setattr_framebuffer_dev(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Set the attributes of the framebuffer device node. +

+ +

+Module: +devices

+Layer: +kernel

+
+dev_setattr_generic_dirs(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Set the attributes of /dev directories. +

+ +

+Module: +devices

+Layer: +kernel

+
+dev_setattr_misc_dev(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Set the attributes of miscellaneous devices. +

+ +

+Module: +devices

+Layer: +kernel

+
+dev_setattr_mouse_dev(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Set the attributes of the mouse devices. +

+ +

+Module: +devices

+Layer: +kernel

+
+dev_setattr_power_mgmt_dev(
 	
@@ -28676,13 +29362,13 @@ Set the attributes of the the power management device.

-Module: +Module: devices

Layer: kernel

 
-dev_setattr_printer(
+dev_setattr_printer_dev(
 	
@@ -28702,13 +29388,13 @@ Set the attributes of the printer device nodes.

-Module: +Module: devices

Layer: kernel

 
-dev_setattr_scanner(
+dev_setattr_scanner_dev(
 	
@@ -28728,13 +29414,13 @@ Set the attributes of the scanner device.

-Module: +Module: devices

Layer: kernel

 
-dev_setattr_snd_dev(
+dev_setattr_sound_dev(
 	
@@ -28990,13 +29676,13 @@ Set the realtime clock (/dev/rtc).

-Module: +Module: devices

Layer: kernel

 
-dev_write_snd_dev(
+dev_write_sound(
 	
@@ -29016,13 +29702,13 @@ Write the sound devices.

-Module: +Module: devices

Layer: kernel

 
-dev_write_snd_mixer_dev(
+dev_write_sound_mixer(
 	
@@ -29122,13 +29808,13 @@ server state files.

-Module: +Module: dictd

Layer: services

 
-dictd_use(
+dictd_tcp_connect(
 	
@@ -29650,13 +30336,13 @@ session ID of all domains.

-Module: +Module: domain

Layer: kernel

 
-domain_dontaudit_list_all_domains_proc(
+domain_dontaudit_list_all_domains_state(
 	
@@ -29837,13 +30523,13 @@ state directory (/proc/pid) of all domains.

-Module: +Module: domain

Layer: kernel

 
-domain_dontaudit_use_wide_inherit_fd(
+domain_dontaudit_use_interactive_fds(
 	
@@ -29924,6 +30610,32 @@ an entry point for the domain.

+Module: +domain

+Layer: +kernel

+
+domain_entry_file_spec_domtrans(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Execute an entry_type in the specified domain. +

+ +

Module: domain

Layer: @@ -30082,6 +30794,32 @@ Get the session ID of all domains.

+Module: +domain

+Layer: +kernel

+
+domain_interactive_fd(
+	
+		
+		
+		
+		?
+		
+	
+	)

+

+ +

+Summary is missing! +

+ +

Module: domain

Layer: @@ -30161,13 +30899,13 @@ Mmap all entry point files as executable.

-Module: +Module: domain

Layer: kernel

 
-domain_obj_id_change_exempt(
+domain_obj_id_change_exemption(
 	
@@ -30319,13 +31057,13 @@ file types.

-Module: +Module: domain

Layer: kernel

 
-domain_role_change_exempt(
+domain_role_change_exemption(
 	
@@ -30424,13 +31162,13 @@ Send a child terminated signal to all domains.

-Module: +Module: domain

Layer: kernel

 
-domain_sigchld_wide_inherit_fd(
+domain_sigchld_interactive_fds(
 	
@@ -30529,13 +31267,13 @@ Send a stop signal to all domains.

-Module: +Module: domain

Layer: kernel

 
-domain_subj_id_change_exempt(
+domain_subj_id_change_exemption(
 	
@@ -30556,13 +31294,13 @@ changing of user identity.

-Module: +Module: domain

Layer: kernel

 
-domain_system_change_exempt(
+domain_system_change_exemption(
 	
@@ -30636,13 +31374,13 @@ Unconfined access to domains.

-Module: +Module: domain

Layer: kernel

 
-domain_use_wide_inherit_fd(
+domain_use_interactive_fds(
 	
@@ -30691,32 +31429,6 @@ constraints.

-Module: -domain

-Layer: -kernel

-
-domain_wide_inherit_fd(
-	
-		
-		
-		
-		?
-		
-	
-	)

-

- -

-Summary is missing! -

- -

Module: dovecot

Layer: @@ -30771,18 +31483,34 @@ temporary directory (/tmp).

-Module: +Module: files

Layer: kernel

-files_config_file( +files_boot_filetrans( - file_type + domain + + + + , + + + + private_type + + + + , + + + + object_class )
@@ -30790,26 +31518,26 @@ kernel

-Make the specified type a -configuration file. +Create a private type object in boot +with an automatic type transition

-Module: +Module: files

Layer: kernel

-files_create_boot_flag( +files_config_file( - ? + file_type )
@@ -30817,25 +31545,26 @@ kernel

-Summary is missing! +Make the specified type a +configuration file.

-Module: +Module: files

Layer: kernel

-files_delete_all_locks( +files_create_boot_dirs( - ? + domain )
@@ -30843,20 +31572,20 @@ kernel

-Summary is missing! +Create directories in /boot

-Module: +Module: files

Layer: kernel

 
-files_delete_all_pid_dirs(
+files_create_boot_flag(
 	
@@ -30876,18 +31605,18 @@ Summary is missing!

-Module: +Module: files

Layer: kernel

-files_delete_all_pids( +files_create_kernel_img( - ? + domain )
@@ -30895,20 +31624,20 @@ kernel

-Summary is missing! +Install a kernel into the /boot directory.

-Module: +Module: files

Layer: kernel

-files_delete_etc_files( +files_create_kernel_symbol_table( @@ -30921,20 +31650,20 @@ kernel

-Delete system configuration files in /etc. +Install a system.map into the /boot directory.

-Module: +Module: files

Layer: kernel

 
-files_delete_root_dir_entry(
+files_delete_all_locks(
 	
@@ -30954,18 +31683,18 @@ Summary is missing!

-Module: +Module: files

Layer: kernel

-files_dontaudit_getattr_all_dirs( +files_delete_all_pid_dirs( - domain + ? )
@@ -30973,26 +31702,25 @@ kernel

-Do not audit attempts to get the attributes -of all directories. +Summary is missing!

-Module: +Module: files

Layer: kernel

-files_dontaudit_getattr_all_files( +files_delete_all_pids( - domain + ? )
@@ -31000,21 +31728,20 @@ kernel

-Do not audit attempts to get the attributes -of all files. +Summary is missing!

-Module: +Module: files

Layer: kernel

-files_dontaudit_getattr_all_pipes( +files_delete_etc_files( @@ -31027,21 +31754,20 @@ kernel

-Do not audit attempts to get the attributes -of all named pipes. +Delete system configuration files in /etc.

-Module: +Module: files

Layer: kernel

-files_dontaudit_getattr_all_sockets( +files_delete_kernel( @@ -31054,21 +31780,20 @@ kernel

-Do not audit attempts to get the attributes -of all named sockets. +Delete a kernel from /boot.

-Module: +Module: files

Layer: kernel

-files_dontaudit_getattr_all_symlinks( +files_delete_kernel_modules( @@ -31081,21 +31806,234 @@ kernel

-Do not audit attempts to get the attributes -of all symbolic links. +Delete kernel module files.

-Module: +Module: files

Layer: kernel

 
-files_dontaudit_getattr_default_dir(
+files_delete_kernel_symbol_table(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Delete a system.map in the /boot directory. +

+ +

+Module: +files

+Layer: +kernel

+
+files_delete_root_dir_entry(
+	
+		
+		
+		
+		?
+		
+	
+	)

+

+ +

+Summary is missing! +

+ +

+Module: +files

+Layer: +kernel

+
+files_dontaudit_getattr_all_dirs(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Do not audit attempts to get the attributes +of all directories. +

+ +

+Module: +files

+Layer: +kernel

+
+files_dontaudit_getattr_all_files(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Do not audit attempts to get the attributes +of all files. +

+ +

+Module: +files

+Layer: +kernel

+
+files_dontaudit_getattr_all_pipes(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Do not audit attempts to get the attributes +of all named pipes. +

+ +

+Module: +files

+Layer: +kernel

+
+files_dontaudit_getattr_all_sockets(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Do not audit attempts to get the attributes +of all named sockets. +

+ +

+Module: +files

+Layer: +kernel

+
+files_dontaudit_getattr_all_symlinks(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Do not audit attempts to get the attributes +of all symbolic links. +

+ +

+Module: +files

+Layer: +kernel

+
+files_dontaudit_getattr_boot_dirs(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Do not audit attempts to get attributes +of the /boot directory. +

+ +

+Module: +files

+Layer: +kernel

+
+files_dontaudit_getattr_default_dirs(
 	
@@ -31171,13 +32109,13 @@ attributes of the home directories root

-Module: +Module: files

Layer: kernel

 
-files_dontaudit_getattr_non_security_blk_dev(
+files_dontaudit_getattr_non_security_blk_files(
 	
@@ -31198,13 +32136,13 @@ of non security block devices.

-Module: +Module: files

Layer: kernel

 
-files_dontaudit_getattr_non_security_chr_dev(
+files_dontaudit_getattr_non_security_chr_files(
 	
@@ -31333,13 +32271,13 @@ of non security symbolic links.

-Module: +Module: files

Layer: kernel

 
-files_dontaudit_getattr_pid_dir(
+files_dontaudit_getattr_pid_dirs(
 	
@@ -31360,13 +32298,13 @@ of the /var/run directory.

-Module: +Module: files

Layer: kernel

 
-files_dontaudit_getattr_tmp_dir(
+files_dontaudit_getattr_tmp_dirs(
 	
@@ -31575,13 +32513,13 @@ created on boot, such as mtab.

-Module: +Module: files

Layer: kernel

 
-files_dontaudit_read_root_file(
+files_dontaudit_read_root_files(
 	
@@ -31601,13 +32539,13 @@ Summary is missing!

-Module: +Module: files

Layer: kernel

 
-files_dontaudit_rw_root_chr_dev(
+files_dontaudit_rw_root_chr_files(
 	
@@ -31627,13 +32565,13 @@ Summary is missing!

-Module: +Module: files

Layer: kernel

 
-files_dontaudit_rw_root_file(
+files_dontaudit_rw_root_files(
 	
@@ -31679,6 +32617,32 @@ Summary is missing!

+Module: +files

+Layer: +kernel

+
+files_dontaudit_search_boot(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Do not audit attempts to search the /boot directory. +

+ +

Module: files

Layer: @@ -31706,13 +32670,13 @@ home directories root (/home).

-Module: +Module: files

Layer: kernel

 
-files_dontaudit_search_isid_type_dir(
+files_dontaudit_search_isid_type_dirs(
 	
@@ -31787,6 +32751,33 @@ the /var/run directory.

+Module: +files

+Layer: +kernel

+
+files_dontaudit_search_spool(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Do not audit attempts to search generic +spool directories. +

+ +

Module: files

Layer: @@ -31866,13 +32857,13 @@ Do not audit attempts to write to daemon runtime data files.

-Module: +Module: files

Layer: kernel

 
-files_dontaudit_write_var(
+files_dontaudit_write_var_dirs(
 	
@@ -31892,6 +32883,32 @@ Do not audit attempts to write to /var.

+Module: +files

+Layer: +kernel

+
+files_etc_filetrans(
+	
+		
+		
+		
+		?
+		
+	
+	)

+

+ +

+Summary is missing! +

+ +

Module: files

Layer: @@ -31970,18 +32987,18 @@ Execute programs in /usr/src in the caller domain.

-Module: +Module: files

Layer: kernel

-files_filetrans_etc( +files_getattr_all_dirs( - ? + domain )
@@ -31989,20 +33006,20 @@ kernel

-Summary is missing! +Get the attributes of all directories.

-Module: +Module: files

Layer: kernel

-files_filetrans_home( +files_getattr_all_files( @@ -32010,24 +33027,30 @@ kernel

domain - - , - - - - home_type - + )
+

+ +

+Get the attributes of all files. +

+ +

+Module: +files

+Layer: +kernel

+ +files_getattr_all_pipes( - , - - - [ - - object - ] + domain )
@@ -32035,25 +33058,25 @@ kernel

-Create objects in /home. +Get the attributes of all named pipes.

-Module: +Module: files

Layer: kernel

-files_filetrans_lock( +files_getattr_all_sockets( - ? + domain )
@@ -32061,25 +33084,25 @@ kernel

-Summary is missing! +Get the attributes of all named sockets.

-Module: +Module: files

Layer: kernel

-files_filetrans_pid( +files_getattr_all_symlinks( - ? + domain )
@@ -32087,20 +33110,20 @@ kernel

-Summary is missing! +Get the attributes of all symbolic links.

-Module: +Module: files

Layer: kernel

-files_filetrans_root( +files_getattr_boot_dirs( @@ -32108,24 +33131,30 @@ kernel

domain - - , - - - - private type - + )
+

+ +

+Get attributes of the /boot directory. +

+ +

+Module: +files

+Layer: +kernel

+ +files_getattr_default_dirs( - , - - [ - - object - - ] + domain )
@@ -32133,21 +33162,20 @@ kernel

-Create an object in the root directory, with a private -type. +Getattr of directories with the default file type.

-Module: +Module: files

Layer: kernel

 
-files_filetrans_tmp(
+files_getattr_generic_locks(
 	
@@ -32167,13 +33195,13 @@ Summary is missing!

-Module: +Module: files

Layer: kernel

-files_filetrans_usr( +files_getattr_home_dir( @@ -32181,45 +33209,26 @@ kernel

domain - - , - - - - file_type - - - - , - - - - [ - - object_class - - ] - - )

-Create objects in the /usr directory +Get the attributes of the home directories root +(/home).

-Module: +Module: files

Layer: kernel

-files_filetrans_var( +files_getattr_isid_type_dirs( @@ -32227,45 +33236,26 @@ kernel

domain - - , - - - - file_type - - - - , - - - - [ - - object_class - - ] - - )

-Create objects in the /var directory +Getattr of directories on new filesystems +that have not yet been labeled.

-Module: +Module: files

Layer: kernel

-files_filetrans_var_lib( +files_getattr_kernel_modules( @@ -32273,24 +33263,30 @@ kernel

domain - - , - - - - file_type - + )
+

+ +

+Get the attributes of kernel module files. +

+ +

+Module: +files

+Layer: +kernel

+ +files_getattr_tmp_dirs( - , - - [ - - object_class - - ] + domain )
@@ -32298,20 +33294,20 @@ kernel

-Create objects in the /var/lib directory +Get the attributes of the tmp directory (/tmp).

-Module: +Module: files

Layer: kernel

-files_getattr_all_dirs( +files_getattr_usr_files( @@ -32324,20 +33320,20 @@ kernel

-Get the attributes of all directories. +Get the attributes of files in /usr.

-Module: +Module: files

Layer: kernel

-files_getattr_all_file_type_sockets( +files_getattr_var_lib_dirs( @@ -32350,21 +33346,20 @@ kernel

-Get the attributes of all sockets -with the type of a file. +Get the attributes of the /var/lib directory.

-Module: +Module: files

Layer: kernel

-files_getattr_all_files( +files_home_filetrans( @@ -32372,25 +33367,41 @@ kernel

domain + + , + + + + home_type + + + + , + + + + object + + )

-Get the attributes of all files. +Create objects in /home.

-Module: +Module: files

Layer: kernel

-files_getattr_all_pipes( +files_kernel_modules_filetrans( @@ -32398,30 +33409,47 @@ kernel

domain + + , + + + + private_type + + + + , + + + + object_class + + )

-Get the attributes of all named pipes. +Create objects in the kernel module directories +with a private type via an automatic type transition.

-Module: +Module: files

Layer: kernel

-files_getattr_all_sockets( +files_list_all( - domain + ? )
@@ -32429,20 +33457,20 @@ kernel

-Get the attributes of all named sockets. +Summary is missing!

-Module: +Module: files

Layer: kernel

-files_getattr_all_symlinks( +files_list_default( @@ -32455,25 +33483,25 @@ kernel

-Get the attributes of all symbolic links. +List contents of directories with the default file type.

-Module: +Module: files

Layer: kernel

-files_getattr_default_dir( +files_list_etc( - domain + ? )
@@ -32481,25 +33509,25 @@ kernel

-Getattr of directories with the default file type. +Summary is missing!

-Module: +Module: files

Layer: kernel

-files_getattr_generic_locks( +files_list_home( - ? + domain )
@@ -32507,20 +33535,20 @@ kernel

-Summary is missing! +Get listing of home directories.

-Module: +Module: files

Layer: kernel

-files_getattr_home_dir( +files_list_isid_type_dirs( @@ -32533,21 +33561,21 @@ kernel

-Get the attributes of the home directories root -(/home). +List the contents of directories on new filesystems +that have not yet been labeled.

-Module: +Module: files

Layer: kernel

-files_getattr_isid_type_dir( +files_list_kernel_modules( @@ -32560,78 +33588,25 @@ kernel

-Getattr of directories on new filesystems -that have not yet been labeled. -

- -

-Module: -files

-Layer: -kernel

-
-files_getattr_tmp_dir(
-	
-		
-		
-		
-		domain
-		
-	
-	)

-

- -

-Get the attributes of the tmp directory (/tmp). -

- -

-Module: -files

-Layer: -kernel

-
-files_getattr_usr_files(
-	
-		
-		
-		
-		domain
-		
-	
-	)

-

- -

-Get the attributes of files in /usr. +List the contents of the kernel module directories.

-Module: +Module: files

Layer: kernel

-files_getattr_var_lib_dir( +files_list_mnt( - domain + ? )
@@ -32639,20 +33614,20 @@ kernel

-Get the attributes of the /var/lib directory. +Summary is missing!

-Module: +Module: files

Layer: kernel

-files_list_all( +files_list_non_security( @@ -32665,20 +33640,20 @@ kernel

-List the contents of all directories. +List all non-security directories.

-Module: +Module: files

Layer: kernel

 
-files_list_all_dirs(
+files_list_pids(
 	
@@ -32698,18 +33673,18 @@ Summary is missing!

-Module: +Module: files

Layer: kernel

-files_list_default( +files_list_root( - domain + ? )
@@ -32717,20 +33692,20 @@ kernel

-List contents of directories with the default file type. +Summary is missing!

-Module: +Module: files

Layer: kernel

 
-files_list_etc(
+files_list_spool(
 	
@@ -32750,13 +33725,13 @@ Summary is missing!

-Module: +Module: files

Layer: kernel

-files_list_home( +files_list_tmp( @@ -32769,20 +33744,20 @@ kernel

-Get listing of home directories. +Read the tmp directory (/tmp).

-Module: +Module: files

Layer: kernel

-files_list_isid_type_dir( +files_list_usr( @@ -32795,26 +33770,26 @@ kernel

-List the contents of directories on new filesystems -that have not yet been labeled. +List the contents of generic +directories in /usr.

-Module: +Module: files

Layer: kernel

-files_list_mnt( +files_list_var( - ? + domain )
@@ -32822,20 +33797,20 @@ kernel

-Summary is missing! +List the contents of /var.

-Module: +Module: files

Layer: kernel

-files_list_non_security( +files_list_var_lib( @@ -32848,25 +33823,25 @@ kernel

-List all non-security directories. +List the contents of the /var/lib directory.

-Module: +Module: files

Layer: kernel

-files_list_pids( +files_list_world_readable( - ? + domain )
@@ -32874,20 +33849,20 @@ kernel

-Summary is missing! +List world-readable directories.

-Module: +Module: files

Layer: kernel

 
-files_list_root(
+files_lock_file(
 	
@@ -32907,13 +33882,13 @@ Summary is missing!

-Module: +Module: files

Layer: kernel

 
-files_list_spool(
+files_lock_filetrans(
 	
@@ -32933,13 +33908,13 @@ Summary is missing!

-Module: +Module: files

Layer: kernel

-files_list_tmp( +files_manage_all_files( @@ -32947,57 +33922,12 @@ kernel

domain - )
-

- -

-Read the tmp directory (/tmp). -

- -

-Module: -files

-Layer: -kernel

-
-files_list_usr(
-	
-		
-		
-		
-		domain
 		
-	
-	)

-

- -

-List the contents of generic -directories in /usr. -

- -

-Module: -files

-Layer: -kernel

- -files_list_var( - + , - domain + exception_types )
@@ -33005,20 +33935,21 @@ kernel

-List the contents of /var. +Manage all files on the filesystem, except +the listed exceptions.

-Module: +Module: files

Layer: kernel

-files_list_var_lib( +files_manage_boot_files( @@ -33031,20 +33962,21 @@ kernel

-List the contents of the /var/lib directory. +Create, read, write, and delete files +in the /boot directory.

-Module: +Module: files

Layer: kernel

-files_list_world_readable( +files_manage_boot_symlinks( @@ -33057,20 +33989,21 @@ kernel

-List world-readable directories. +Create, read, write, and delete symbolic links +in the /boot directory.

-Module: +Module: files

Layer: kernel

 
-files_lock_file(
+files_manage_etc_files(
 	
@@ -33090,13 +34023,13 @@ Summary is missing!

-Module: +Module: files

Layer: kernel

-files_manage_all_files( +files_manage_etc_runtime_files( @@ -33104,38 +34037,27 @@ kernel

domain - - , - - - - [ - - exception_types - - ] - - )

-Manage all files on the filesystem, except -the listed exceptions. +Create, read, write, and delete files in +/etc that are dynamically created on boot, +such as mtab.

-Module: +Module: files

Layer: kernel

 
-files_manage_etc_files(
+files_manage_generic_locks(
 	
@@ -33155,41 +34077,13 @@ Summary is missing!

-Module: -files

-Layer: -kernel

-
-files_manage_etc_runtime_files(
-	
-		
-		
-		
-		domain
-		
-	
-	)

-

- -

-Create, read, write, and delete files in -/etc that are dynamically created on boot, -such as mtab. -

- -

-Module: +Module: files

Layer: kernel

 
-files_manage_generic_locks(
+files_manage_generic_spool(
 	
@@ -33235,18 +34129,18 @@ Summary is missing!

-Module: +Module: files

Layer: kernel

-files_manage_generic_spools( +files_manage_isid_type_blk_files( - ? + domain )
@@ -33254,20 +34148,21 @@ kernel

-Summary is missing! +Create, read, write, and delete block device nodes +on new filesystems that have not yet been labeled.

-Module: +Module: files

Layer: kernel

-files_manage_isid_type_blk_node( +files_manage_isid_type_chr_files( @@ -33280,7 +34175,7 @@ kernel

-Create, read, write, and delete block device nodes +Create, read, write, and delete character device nodes on new filesystems that have not yet been labeled.

@@ -33288,13 +34183,13 @@ on new filesystems that have not yet been labeled.

-Module: +Module: files

Layer: kernel

-files_manage_isid_type_chr_node( +files_manage_isid_type_dirs( @@ -33307,7 +34202,7 @@ kernel

-Create, read, write, and delete character device nodes +Create, read, write, and delete directories on new filesystems that have not yet been labeled.

@@ -33315,13 +34210,13 @@ on new filesystems that have not yet been labeled.

-Module: +Module: files

Layer: kernel

-files_manage_isid_type_dir( +files_manage_isid_type_files( @@ -33334,7 +34229,7 @@ kernel

-Create, read, write, and delete directories +Create, read, write, and delete files on new filesystems that have not yet been labeled.

@@ -33342,13 +34237,13 @@ on new filesystems that have not yet been labeled.

-Module: +Module: files

Layer: kernel

-files_manage_isid_type_file( +files_manage_isid_type_symlinks( @@ -33361,7 +34256,7 @@ kernel

-Create, read, write, and delete files +Create, read, write, and delete symbolic links on new filesystems that have not yet been labeled.

@@ -33369,13 +34264,13 @@ on new filesystems that have not yet been labeled.

-Module: +Module: files

Layer: kernel

-files_manage_isid_type_symlink( +files_manage_kernel_modules( @@ -33388,8 +34283,8 @@ kernel

-Create, read, write, and delete symbolic links -on new filesystems that have not yet been labeled. +Create, read, write, and delete +kernel module files.

@@ -33739,13 +34634,13 @@ Mount a filesystem on a directory with the default file type.

-Module: +Module: files

Layer: kernel

 
-files_mounton_isid_type_dir(
+files_mounton_isid_type_dirs(
 	
@@ -33844,6 +34739,32 @@ Summary is missing!

+Module: +files

+Layer: +kernel

+
+files_pid_filetrans(
+	
+		
+		
+		
+		?
+		
+	
+	)

+

+ +

+Summary is missing! +

+ +

Module: files

Layer: @@ -34013,13 +34934,13 @@ Summary is missing!

-Module: +Module: files

Layer: kernel

 
-files_read_all_blk_nodes(
+files_read_all_blk_files(
 	
@@ -34039,13 +34960,13 @@ Read all block nodes with file types.

-Module: +Module: files

Layer: kernel

-files_read_all_chr_nodes( +files_read_all_chr_files( @@ -34084,12 +35005,8 @@ kernel

- [ - exception_types - ] - )

@@ -34149,12 +35066,8 @@ kernel

- [ - exception_types - ] - )

@@ -34266,12 +35179,8 @@ kernel

- [ - exception_types - ] - )

@@ -34443,13 +35352,13 @@ created on boot, such as mtab.

-Module: +Module: files

Layer: kernel

 
-files_read_generic_spools(
+files_read_generic_spool(
 	
@@ -34521,13 +35430,13 @@ Read symbolic links in the tmp directory (/tmp).

-Module: +Module: files

Layer: kernel

 
-files_read_isid_type_file(
+files_read_isid_type_files(
 	
@@ -34548,6 +35457,58 @@ that have not yet been labeled.

+Module: +files

+Layer: +kernel

+
+files_read_kernel_modules(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Read kernel module files. +

+ +

+Module: +files

+Layer: +kernel

+
+files_read_kernel_symbol_table(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Read system.map in the /boot directory. +

+ +

Module: files

Layer: @@ -34730,13 +35691,13 @@ Read generic symbolic links in /var/lib

-Module: +Module: files

Layer: kernel

-files_read_var_symlink( +files_read_var_symlinks( @@ -34879,12 +35840,8 @@ kernel

- [ - exception_types - ] - )

@@ -34925,6 +35882,58 @@ Relabel from and to generic files in /etc.

+Module: +files

+Layer: +kernel

+
+files_relabel_kernel_modules(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Relabel from and to kernel module files. +

+ +

+Module: +files

+Layer: +kernel

+
+files_relabelfrom_boot_files(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Relabel from files in the /boot directory. +

+ +

Module: files

Layer: @@ -34977,6 +35986,76 @@ Relabel a file to the type used in /usr.

+Module: +files

+Layer: +kernel

+
+files_root_filetrans(
+	
+		
+		
+		
+		domain
+		
+	
+		
+			,
+		
+		
+		
+		private type
+		
+	
+		
+			,
+		
+		
+		
+		object
+		
+	
+	)

+

+ +

+Create an object in the root directory, with a private +type. +

+ +

+Module: +files

+Layer: +kernel

+
+files_rw_boot_symlinks(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Read and write symbolic links +in the /boot directory. +

+ +

Module: files

Layer: @@ -35082,13 +36161,13 @@ Read and write generic named sockets in the tmp directory (/tmp).

-Module: +Module: files

Layer: kernel

 
-files_rw_isid_type_blk_node(
+files_rw_isid_type_blk_files(
 	
@@ -35109,13 +36188,13 @@ that have not yet been labeled.

-Module: +Module: files

Layer: kernel

 
-files_rw_isid_type_dir(
+files_rw_isid_type_dirs(
 	
@@ -35136,13 +36215,13 @@ that have not yet been labeled.

-Module: +Module: files

Layer: kernel

-files_rw_locks_dir( +files_rw_lock_dirs( @@ -35174,7 +36253,7 @@ kernel

- domain + ? )
@@ -35182,25 +36261,25 @@ kernel

-Search all directories. +Summary is missing!

-Module: +Module: files

Layer: kernel

-files_search_all_dirs( +files_search_boot( - ? + domain )
@@ -35208,7 +36287,7 @@ kernel

-Summary is missing! +Search the /boot directory.

@@ -35293,6 +36372,32 @@ Search home directories root (/home).

+Module: +files

+Layer: +kernel

+
+files_search_kernel_modules(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Search the contents of the kernel module directories. +

+ +

Module: files

Layer: @@ -35304,7 +36409,7 @@ kernel

- ? + domain )
@@ -35312,7 +36417,7 @@ kernel

-Summary is missing! +Search the locks directory (/var/lock).

@@ -35501,18 +36606,18 @@ Search the /var/lib directory.

-Module: +Module: files

Layer: kernel

-files_search_var_lib_dir( +files_security_file( - domain + file_type )
@@ -35520,25 +36625,27 @@ kernel

-Search directories in /var/lib. +Make the specified type a file that +should not be dontaudited from +browsing from user domains.

-Module: +Module: files

Layer: kernel

-files_security_file( +files_setattr_all_tmp_dirs( - file_type + domain )
@@ -35546,22 +36653,20 @@ kernel

-Make the specified type a file that -should not be dontaudited from -browsing from user domains. +Set the attributes of all tmp directories.

-Module: +Module: files

Layer: kernel

-files_setattr_all_tmp_dirs( +files_setattr_etc_dirs( @@ -35574,25 +36679,25 @@ kernel

-Set the attributes of all tmp directories. +Set the attributes of the /etc directories.

-Module: +Module: files

Layer: kernel

-files_setattr_etc_dir( +files_tmp_file( - domain + file_type )
@@ -35600,25 +36705,26 @@ kernel

-Set the attributes of the /etc directories. +Make the specified type a file +used for temporary files.

-Module: +Module: files

Layer: kernel

-files_tmp_file( +files_tmp_filetrans( - file_type + ? )
@@ -35626,8 +36732,7 @@ kernel

-Make the specified type a file -used for temporary files. +Summary is missing!

@@ -35766,13 +36871,165 @@ Summary is missing!

-Module: +Module: files

Layer: kernel

 
-files_write_non_security_dir(
+files_usr_filetrans(
+	
+		
+		
+		
+		domain
+		
+	
+		
+			,
+		
+		
+		
+		file_type
+		
+	
+		
+			,
+		
+		
+		
+		object_class
+		
+	
+	)

+

+ +

+Create objects in the /usr directory +

+ +

+Module: +files

+Layer: +kernel

+
+files_var_filetrans(
+	
+		
+		
+		
+		domain
+		
+	
+		
+			,
+		
+		
+		
+		file_type
+		
+	
+		
+			,
+		
+		
+		
+		object_class
+		
+	
+	)

+

+ +

+Create objects in the /var directory +

+ +

+Module: +files

+Layer: +kernel

+
+files_var_lib_filetrans(
+	
+		
+		
+		
+		domain
+		
+	
+		
+			,
+		
+		
+		
+		file_type
+		
+	
+		
+			,
+		
+		
+		
+		object_class
+		
+	
+	)

+

+ +

+Create objects in the /var/lib directory +

+ +

+Module: +files

+Layer: +kernel

+
+files_write_kernel_modules(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Write kernel module files. +

+ +

+Module: +files

+Layer: +kernel

+
+files_write_non_security_dirs(
 	
@@ -35870,13 +37127,13 @@ Execute firstboot in the firstboot domain.

-Module: +Module: firstboot

Layer: admin

 
-firstboot_dontaudit_use_fd(
+firstboot_dontaudit_use_fds(
 	
@@ -35940,13 +37197,13 @@ allow the specified role the firstboot domain.

-Module: +Module: firstboot

Layer: admin

 
-firstboot_use_fd(
+firstboot_use_fds(
 	
@@ -35966,13 +37223,13 @@ Inherit and use a file descriptor from firstboot.

-Module: +Module: firstboot

Layer: admin

 
-firstboot_write_pipe(
+firstboot_write_pipes(
 	
@@ -36383,13 +37640,13 @@ of directories on a NFS filesystem.

-Module: +Module: filesystem

Layer: kernel

 
-fs_dontaudit_list_removable_dirs(
+fs_dontaudit_list_removable(
 	
@@ -36602,13 +37859,13 @@ files on a NFS filesystem.

-Module: +Module: filesystem

Layer: kernel

-fs_dontaudit_rw_cifs_files( +fs_dontaudit_read_ramfs_files( @@ -36621,21 +37878,46 @@ kernel

-Do not audit attempts to read or -write files on a CIFS or SMB filesystem. +Dontaudit read on a ramfs files.

-Module: +Module: filesystem

Layer: kernel

 
-fs_dontaudit_rw_nfs_files(
+fs_dontaudit_read_ramfs_pipes(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Dontaudit read on a ramfs fifo_files. +

+ +

+Module: +filesystem

+Layer: +kernel

+ +fs_dontaudit_rw_cifs_files( @@ -36649,20 +37931,20 @@ kernel

Do not audit attempts to read or -write files on a NFS filesystem. +write files on a CIFS or SMB filesystem.

-Module: +Module: filesystem

Layer: kernel

-fs_dontaudit_rw_tmpfs_files( +fs_dontaudit_rw_nfs_files( @@ -36675,21 +37957,21 @@ kernel

-Do not audit attempts to read or write -generic tmpfs files. +Do not audit attempts to read or +write files on a NFS filesystem.

-Module: +Module: filesystem

Layer: kernel

-fs_dontaudit_use_tmpfs_chr_dev( +fs_dontaudit_rw_tmpfs_files( @@ -36702,20 +37984,21 @@ kernel

-dontaudit Read and write character nodes on tmpfs filesystems. +Do not audit attempts to read or write +generic tmpfs files.

-Module: +Module: filesystem

Layer: kernel

-fs_exec_noxattr( +fs_dontaudit_search_ramfs( @@ -36728,21 +38011,20 @@ kernel

-Execute files on a filesystem that does -not support extended attributes. +Dontaudit Search directories on a ramfs

-Module: +Module: filesystem

Layer: kernel

-fs_execute_cifs_files( +fs_dontaudit_use_tmpfs_chr_dev( @@ -36755,22 +38037,20 @@ kernel

-Execute files on a CIFS or SMB -network filesystem, in the caller -domain. +dontaudit Read and write character nodes on tmpfs filesystems.

-Module: +Module: filesystem

Layer: kernel

-fs_execute_nfs_files( +fs_exec_cifs_files( @@ -36783,25 +38063,27 @@ kernel

-Execute files on a NFS filesystem. +Execute files on a CIFS or SMB +network filesystem, in the caller +domain.

-Module: +Module: filesystem

Layer: kernel

-fs_filetrans_tmpfs( +fs_exec_nfs_files( - ? + domain )
@@ -36809,20 +38091,20 @@ kernel

-Summary is missing! +Execute files on a NFS filesystem.

-Module: +Module: filesystem

Layer: kernel

-fs_get_all_fs_quotas( +fs_exec_noxattr( @@ -36835,20 +38117,21 @@ kernel

-Get the quotas of all filesystems. +Execute files on a filesystem that does +not support extended attributes.

-Module: +Module: filesystem

Layer: kernel

-fs_get_xattr_fs_quota( +fs_get_all_fs_quotas( @@ -36861,8 +38144,7 @@ kernel

-Get the filesystem quotas of a filesystem -with extended attributes. +Get the quotas of all filesystems.

@@ -36888,9 +38170,8 @@ kernel

-Get the quotas of a persistent -filesystem which has extended -attributes, such as ext3, JFS, or XFS. +Get the filesystem quotas of a filesystem +with extended attributes.

@@ -37353,13 +38634,13 @@ filesystem.

-Module: +Module: filesystem

Layer: kernel

 
-fs_getattr_tmpfs_dir(
+fs_getattr_tmpfs_dirs(
 	
@@ -37487,6 +38768,32 @@ CIFS or SMB filesystem.

+Module: +filesystem

+Layer: +kernel

+
+fs_list_inotifyfs(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+List inotifyfs filesystem. +

+ +

Module: filesystem

Layer: @@ -37539,13 +38846,13 @@ Read all noxattrfs directories.

-Module: +Module: filesystem

Layer: kernel

-fs_list_tmpfs( +fs_list_rpc( @@ -37558,20 +38865,20 @@ kernel

-List the contents of generic tmpfs directories. +Read directories of RPC file system pipes.

-Module: +Module: filesystem

Layer: kernel

-fs_make_noxattr_fs( +fs_list_tmpfs( @@ -37584,9 +38891,7 @@ kernel

-Transform specified type into a filesystem -type which does not have extended attribute -support. +List the contents of generic tmpfs directories.

@@ -37890,13 +39195,13 @@ on a CIFS or SMB network filesystem.

-Module: +Module: filesystem

Layer: kernel

 
-fs_manage_tmpfs_blk_dev(
+fs_manage_tmpfs_blk_files(
 	
@@ -37917,13 +39222,13 @@ on tmpfs filesystems.

-Module: +Module: filesystem

Layer: kernel

 
-fs_manage_tmpfs_chr_dev(
+fs_manage_tmpfs_chr_files(
 	
@@ -38403,6 +39708,34 @@ in the specified domain.

+Module: +filesystem

+Layer: +kernel

+
+fs_noxattr_type(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Transform specified type into a filesystem +type which does not have extended attribute +support. +

+ +

Module: filesystem

Layer: @@ -38637,13 +39970,13 @@ Read removable storage symbolic links.

-Module: +Module: filesystem

Layer: kernel

-fs_read_rpc_dirs( +fs_read_rpc_files( @@ -38656,20 +39989,20 @@ kernel

-Read directories of RPC file system pipes. +Read files of RPC file system pipes.

-Module: +Module: filesystem

Layer: kernel

-fs_read_rpc_files( +fs_read_rpc_sockets( @@ -38682,20 +40015,20 @@ kernel

-Read files of RPC file system pipes. +Read sockets of RPC file system pipes.

-Module: +Module: filesystem

Layer: kernel

-fs_read_rpc_sockets( +fs_read_rpc_symlinks( @@ -38708,20 +40041,20 @@ kernel

-Read sockets of RPC file system pipes. +Read symbolic links of RPC file system pipes.

-Module: +Module: filesystem

Layer: kernel

-fs_read_rpc_symlinks( +fs_read_tmpfs_symlinks( @@ -38734,7 +40067,7 @@ kernel

-Read symbolic links of RPC file system pipes. +Read tmpfs link files.

@@ -38773,13 +40106,13 @@ without specifying the interpreter.

-Module: +Module: filesystem

Layer: kernel

 
-fs_relabel_tmpfs_blk_dev(
+fs_relabel_tmpfs_blk_file(
 	
@@ -38799,13 +40132,13 @@ Relabel block nodes on tmpfs filesystems.

-Module: +Module: filesystem

Layer: kernel

 
-fs_relabel_tmpfs_chr_dev(
+fs_relabel_tmpfs_chr_file(
 	
@@ -39259,13 +40592,13 @@ Read and write NFS server files.

-Module: +Module: filesystem

Layer: kernel

 
-fs_rw_ramfs_pipe(
+fs_rw_ramfs_pipes(
 	
@@ -39285,13 +40618,65 @@ Read and write a named pipe on a ramfs filesystem.

-Module: +Module: +filesystem

+Layer: +kernel

+
+fs_rw_tmpfs_blk_files(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Read and write block nodes on tmpfs filesystems. +

+ +

+Module: filesystem

Layer: kernel

 
-fs_rw_tmpfs_file(
+fs_rw_tmpfs_chr_files(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Read and write character nodes on tmpfs filesystems. +

+ +

+Module: +filesystem

+Layer: +kernel

+
+fs_rw_tmpfs_files(
 	
@@ -39390,6 +40775,32 @@ Search directories on a CIFS or SMB filesystem.

+Module: +filesystem

+Layer: +kernel

+
+fs_search_inotifyfs(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Search inotifyfs filesystem. +

+ +

Module: filesystem

Layer: @@ -39468,13 +40879,13 @@ Search directories on a ramfs

-Module: +Module: filesystem

Layer: kernel

 
-fs_search_removable_dirs(
+fs_search_removable(
 	
@@ -39494,13 +40905,13 @@ Search removable storage directories.

-Module: +Module: filesystem

Layer: kernel

 
-fs_search_rpc_dirs(
+fs_search_rpc(
 	
@@ -39572,13 +40983,13 @@ Set the quotas of all filesystems.

-Module: +Module: filesystem

Layer: kernel

 
-fs_set_xattr_fs_quota(
+fs_set_xattr_fs_quotas(
 	
@@ -39599,13 +41010,13 @@ with extended attributes.

-Module: +Module: filesystem

Layer: kernel

 
-fs_setattr_tmpfs_dir(
+fs_setattr_tmpfs_dirs(
 	
@@ -39625,6 +41036,32 @@ Set the attributes of tmpfs directories.

+Module: +filesystem

+Layer: +kernel

+
+fs_tmpfs_filetrans(
+	
+		
+		
+		
+		?
+		
+	
+	)

+

+ +

+Summary is missing! +

+ +

Module: filesystem

Layer: @@ -39993,58 +41430,6 @@ ext3, JFS, or XFS.

-Module: -filesystem

-Layer: -kernel

-
-fs_use_tmpfs_blk_dev(
-	
-		
-		
-		
-		domain
-		
-	
-	)

-

- -

-Read and write block nodes on tmpfs filesystems. -

- -

-Module: -filesystem

-Layer: -kernel

-
-fs_use_tmpfs_chr_dev(
-	
-		
-		
-		
-		domain
-		
-	
-	)

-

- -

-Read and write character nodes on tmpfs filesystems. -

- -

Module: filesystem

Layer: @@ -40071,13 +41456,13 @@ Read files on a NFS filesystem.

-Module: +Module: filesystem

Layer: kernel

 
-fs_write_ramfs_pipe(
+fs_write_ramfs_pipes(
 	
@@ -40097,13 +41482,13 @@ Write to named pipe on a ramfs filesystem.

-Module: +Module: filesystem

Layer: kernel

 
-fs_write_ramfs_socket(
+fs_write_ramfs_sockets(
 	
@@ -40402,13 +41787,13 @@ Execute gettys in the getty domain.

-Module: +Module: getty

Layer: system

-getty_modify_config( +getty_read_config( @@ -40421,20 +41806,20 @@ system

-Allow process to edit getty config file. +Allow process to read getty config file.

-Module: +Module: getty

Layer: system

-getty_read_config( +getty_read_log( @@ -40447,20 +41832,20 @@ system

-Allow process to read getty config file. +Allow process to read getty log file.

-Module: +Module: getty

Layer: system

-getty_read_log( +getty_rw_config( @@ -40473,7 +41858,33 @@ system

-Allow process to read getty log file. +Allow process to edit getty config file. +

+ +

+Module: +getty

+Layer: +system

+
+getty_use_fds(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Inherit and use getty file descriptors.

@@ -40562,6 +41973,33 @@ control channel named socket.

+Module: +gpm

+Layer: +services

+
+gpm_stream_connect(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Connect to GPM over a unix domain +stream socket. +

+ +

Module: hal

Layer: @@ -40615,13 +42053,13 @@ Send a dbus message to hal.

-Module: +Module: hal

Layer: services

 
-hal_dgram_sendto(
+hal_dgram_send(
 	
@@ -40842,13 +42280,13 @@ Summary is missing!

-Module: +Module: hotplug

Layer: system

 
-hotplug_dontaudit_use_fd(
+hotplug_dontaudit_use_fds(
 	
@@ -40894,13 +42332,13 @@ Summary is missing!

-Module: +Module: hotplug

Layer: system

 
-hotplug_getattr_config_dir(
+hotplug_getattr_config_dirs(
 	
@@ -40972,13 +42410,13 @@ Search the hotplug configuration directory.

-Module: +Module: hotplug

Layer: system

 
-hotplug_use_fd(
+hotplug_use_fds(
 	
@@ -41110,13 +42548,13 @@ Run inetd child process in the inet child domain

-Module: +Module: inetd

Layer: services

 
-inetd_rw_tcp_socket(
+inetd_rw_tcp_sockets(
 	
@@ -41230,13 +42668,13 @@ Define the specified domain as a TCP inetd service.

-Module: +Module: inetd

Layer: services

 
-inetd_udp_sendto(
+inetd_udp_send(
 	
@@ -41290,13 +42728,13 @@ Define the specified domain as a UDP inetd service.

-Module: +Module: inetd

Layer: services

 
-inetd_use_fd(
+inetd_use_fds(
 	
@@ -41490,13 +42928,13 @@ Summary is missing!

-Module: +Module: init

Layer: system

 
-init_dontaudit_lock_pid(
+init_dontaudit_lock_utmp(
 	
@@ -41517,13 +42955,13 @@ init script pid files.

-Module: +Module: init

Layer: system

 
-init_dontaudit_rw_script_pid(
+init_dontaudit_rw_initctl(
 	
@@ -41543,18 +42981,18 @@ Summary is missing!

-Module: +Module: init

Layer: system

-init_dontaudit_unix_connect_script( +init_dontaudit_rw_utmp( - domain + ? )
@@ -41562,26 +43000,25 @@ system

-Dont audit the specified domain connecting to -init scripts with a unix domain stream socket. +Summary is missing!

-Module: +Module: init

Layer: system

-init_dontaudit_use_fd( +init_dontaudit_stream_connect_script( - ? + domain )
@@ -41589,20 +43026,21 @@ system

-Summary is missing! +Dont audit the specified domain connecting to +init scripts with a unix domain stream socket.

-Module: +Module: init

Layer: system

 
-init_dontaudit_use_initctl(
+init_dontaudit_use_fds(
 	
@@ -41622,13 +43060,13 @@ Summary is missing!

-Module: +Module: init

Layer: system

 
-init_dontaudit_use_script_fd(
+init_dontaudit_use_script_fds(
 	
@@ -41648,13 +43086,13 @@ Summary is missing!

-Module: +Module: init

Layer: system

 
-init_dontaudit_use_script_pty(
+init_dontaudit_use_script_ptys(
 	
@@ -41675,13 +43113,13 @@ write the init script pty.

-Module: +Module: init

Layer: system

 
-init_dontaudit_write_script_pid(
+init_dontaudit_write_utmp(
 	
@@ -41727,13 +43165,13 @@ Execute the init program in the caller domain.

-Module: +Module: init

Layer: system

 
-init_exec_script(
+init_exec_script_files(
 	
@@ -41753,38 +43191,44 @@ Summary is missing!

-Module: +Module: init

Layer: system

 
-init_filetrans_script_tmp(
+init_getattr_initctl(
 	
 		
 		
 		
-		domain
+		?
 		
 	
-		
-			,
-		
-		
-		
-		file_type
-		
+	)

+

+ +

+Summary is missing! +

+ +

+Module: +init

+Layer: +system

+ +init_getattr_script_files( - , - - - [ - - object_class - ] + domain )
@@ -41792,26 +43236,25 @@ system

-Create files in a init script -temporary data directory. +Get the attribute of init script entrypoint files.

-Module: +Module: init

Layer: system

-init_get_process_group( +init_getattr_utmp( - ? + domain )
@@ -41819,20 +43262,20 @@ system

-Summary is missing! +Get the attributes of init script process id files.

-Module: +Module: init

Layer: system

 
-init_get_script_process_group(
+init_getpgid(
 	
@@ -41852,13 +43295,13 @@ Summary is missing!

-Module: +Module: init

Layer: system

 
-init_getattr_initctl(
+init_getpgid_script(
 	
@@ -41878,13 +43321,13 @@ Summary is missing!

-Module: +Module: init

Layer: system

-init_getattr_script_entry_file( +init_manage_utmp( @@ -41897,20 +43340,20 @@ system

-Get the attribute of init script entrypoint files. +Create, read, write, and delete utmp.

-Module: +Module: init

Layer: system

-init_getattr_script_pids( +init_read_script_files( @@ -41923,20 +43366,20 @@ system

-Get the attributes of init script process id files. +Read init scripts.

-Module: +Module: init

Layer: system

-init_list_script_pids( +init_read_script_state( @@ -41949,26 +43392,25 @@ system

-List the contents of an init script -process id directory. +Read the process state (/proc/pid) of the init scripts.

-Module: +Module: init

Layer: system

-init_read_script( +init_read_utmp( - domain + ? )
@@ -41976,20 +43418,20 @@ system

-Read init scripts. +Summary is missing!

-Module: +Module: init

Layer: system

-init_read_script_file( +init_run_daemon( @@ -41997,25 +43439,41 @@ system

domain + + , + + + + role + + + + , + + + + terminal + + )

-Read init scripts. +Start and stop daemon programs directly.

-Module: +Module: init

Layer: system

 
-init_read_script_pid(
+init_rw_initctl(
 	
@@ -42035,13 +43493,13 @@ Summary is missing!

-Module: +Module: init

Layer: system

-init_read_script_process_state( +init_rw_script_pipes( @@ -42054,20 +43512,20 @@ system

-Read the process state (/proc/pid) of the init scripts. +Read and write init script unnamed pipes.

-Module: +Module: init

Layer: system

-init_run_daemon( +init_rw_script_tmp_files( @@ -42075,20 +43533,30 @@ system

domain - - , - - - - role - + )
+

+ +

+Read and write init script temporary data. +

+ +

+Module: +init

+Layer: +system

+ +init_rw_utmp( - , - - terminal + ? )
@@ -42096,25 +43564,33 @@ system

-Start and stop daemon programs directly. +Summary is missing!

-Module: +Module: init

Layer: system

-init_rw_script_pid( +init_script_file_domtrans( - ? + source_domain + + + + , + + + + target_domain )
@@ -42122,20 +43598,20 @@ system

-Summary is missing! +Execute a init script in a specified domain.

-Module: +Module: init

Layer: system

-init_rw_script_pipe( +init_script_file_entry_type( @@ -42148,20 +43624,21 @@ system

-Read and write init script unnamed pipes. +Make init scripts an entry point for +the specified domain.

-Module: +Module: init

Layer: system

-init_rw_script_tmp_files( +init_script_tmp_filetrans( @@ -42169,12 +43646,29 @@ system

domain + + , + + + + file_type + + + + , + + + + object_class + + )

-Read and write init script temporary data. +Create files in a init script +temporary data directory.

@@ -42311,13 +43805,13 @@ Send null signals to init scripts.

-Module: +Module: init

Layer: system

-init_system_domain( +init_stream_connect_script( @@ -42325,34 +43819,26 @@ system

domain - - , - - - - entry_point - - )

-Create a domain for short running processes -which can be started by init scripts. +Allow the specified domain to connect to +init scripts with a unix socket.

-Module: +Module: init

Layer: system

-init_udp_sendto( +init_system_domain( @@ -42360,25 +43846,34 @@ system

domain + + , + + + + entry_point + + )

-Send UDP network traffic to init. +Create a domain for short running processes +which can be started by init scripts.

-Module: +Module: init

Layer: system

-init_udp_sendto_script( +init_udp_send( @@ -42391,20 +43886,20 @@ system

-Send UDP network traffic to init scripts. +Send UDP network traffic to init.

-Module: +Module: init

Layer: system

-init_unix_connect_script( +init_udp_send_script( @@ -42417,21 +43912,20 @@ system

-Allow the specified domain to connect to -init scripts with a unix socket. +Send UDP network traffic to init scripts.

-Module: +Module: init

Layer: system

 
-init_use_fd(
+init_use_fds(
 	
@@ -42451,13 +43945,13 @@ Summary is missing!

-Module: +Module: init

Layer: system

 
-init_use_initctl(
+init_use_script_fds(
 	
@@ -42477,18 +43971,18 @@ Summary is missing!

-Module: +Module: init

Layer: system

-init_use_script_fd( +init_use_script_ptys( - ? + domain )
@@ -42496,25 +43990,25 @@ system

-Summary is missing! +Read and write the init script pty.

-Module: +Module: init

Layer: system

-init_use_script_pty( +init_write_initctl( - domain + ? )
@@ -42522,25 +44016,25 @@ system

-Read and write the init script pty. +Summary is missing!

-Module: +Module: init

Layer: system

-init_write_initctl( +init_write_script_pipes( - ? + domain )
@@ -42548,20 +44042,20 @@ system

-Summary is missing! +Write an init script unnamed pipe.

-Module: -init

-Layer: -system

+Module: +inn

+Layer: +services

-init_write_script_pipe( +inn_dgram_send( @@ -42574,7 +44068,7 @@ system

-Write an init script unnamed pipe. +Send to a innd unix dgram socket.

@@ -42765,32 +44259,6 @@ Read innd news library files.

-Module: -inn

-Layer: -services

-
-inn_sendto_unix_dgram_socket(
-	
-		
-		
-		
-		domain
-		
-	
-	)

-

- -

-Send to a innd unix dgram socket. -

- -

Module: ipsec

Layer: @@ -42843,13 +44311,13 @@ Execute the IPSEC management program in the caller domain.

-Module: +Module: ipsec

Layer: system

 
-ipsec_getattr_key_socket(
+ipsec_getattr_key_sockets(
 	
@@ -43042,6 +44510,32 @@ allow the specified role the iptables domain.

+Module: +java

+Layer: +apps

+
+java_domtrans(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Execute the java program in the java domain. +

+ +

Module: kerberos

Layer: @@ -43225,13 +44719,13 @@ Allows the caller to clear the ring buffer.

-Module: +Module: kernel

Layer: kernel

-kernel_dontaudit_getattr_core( +kernel_dgram_send( @@ -43244,21 +44738,20 @@ kernel

-Do not audit attempts to get the attributes of -core kernel interfaces. +Send messages to kernel unix datagram sockets.

-Module: +Module: kernel

Layer: kernel

-kernel_dontaudit_getattr_message_if( +kernel_domtrans_to( @@ -43266,26 +44759,88 @@ kernel

domain + + , + + + + entrypoint + + )

-Do not audit attempts by caller to get the attributes of kernel -message interfaces. +Allows to start userland processes +by transitioning to the specified domain.

-Module: +Module: kernel

Layer: kernel

 
-kernel_dontaudit_getattr_unlabeled_blk_dev(
+kernel_dontaudit_getattr_core_if(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Do not audit attempts to get the attributes of +core kernel interfaces. +

+ +

+Module: +kernel

+Layer: +kernel

+
+kernel_dontaudit_getattr_message_if(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Do not audit attempts by caller to get the attributes of kernel +message interfaces. +

+ +

+Module: +kernel

+Layer: +kernel

+
+kernel_dontaudit_getattr_unlabeled_blk_files(
 	
@@ -43306,13 +44861,13 @@ unlabeled block devices.

-Module: +Module: kernel

Layer: kernel

 
-kernel_dontaudit_getattr_unlabeled_chr_dev(
+kernel_dontaudit_getattr_unlabeled_chr_files(
 	
@@ -43333,13 +44888,13 @@ unlabeled character devices.

-Module: +Module: kernel

Layer: kernel

 
-kernel_dontaudit_getattr_unlabeled_file(
+kernel_dontaudit_getattr_unlabeled_files(
 	
@@ -43494,13 +45049,13 @@ Do not audit attempts to list unlabeled directories.

-Module: +Module: kernel

Layer: kernel

 
-kernel_dontaudit_read_proc_symlink(
+kernel_dontaudit_read_proc_symlinks(
 	
@@ -43574,13 +45129,13 @@ read system state information in proc.

-Module: +Module: kernel

Layer: kernel

 
-kernel_dontaudit_read_unlabeled_file(
+kernel_dontaudit_read_unlabeled_files(
 	
@@ -43707,13 +45262,13 @@ the base directory of sysctls.

-Module: +Module: kernel

Layer: kernel

 
-kernel_dontaudit_use_fd(
+kernel_dontaudit_use_fds(
 	
@@ -43786,13 +45341,13 @@ Get information on all System V IPC objects.

-Module: +Module: kernel

Layer: kernel

 
-kernel_getattr_core(
+kernel_getattr_core_if(
 	
@@ -43943,33 +45498,6 @@ Send a kill signal to unlabeled processes.

-Module: -kernel

-Layer: -kernel

-
-kernel_list_from(
-	
-		
-		
-		
-		dir_type
-		
-	
-	)

-

- -

-Allow the kernel to read the contents -of the specified directory. -

- -

Module: kernel

Layer: @@ -44074,13 +45602,13 @@ Mount a kernel debugging filesystem.

-Module: +Module: kernel

Layer: kernel

 
-kernel_read_all_sysctl(
+kernel_read_all_sysctls(
 	
@@ -44126,13 +45654,13 @@ Read information from the debugging filesystem.

-Module: +Module: kernel

Layer: kernel

 
-kernel_read_device_sysctl(
+kernel_read_device_sysctls(
 	
@@ -44152,40 +45680,13 @@ Allow caller to read the device sysctls.

-Module: -kernel

-Layer: -kernel

-
-kernel_read_file_from(
-	
-		
-		
-		
-		dir_type
-		
-	
-	)

-

- -

-Allow the kernel to read the -specified file. -

- -

-Module: +Module: kernel

Layer: kernel

 
-kernel_read_fs_sysctl(
+kernel_read_fs_sysctls(
 	
@@ -44205,13 +45706,13 @@ Read filesystem sysctls.

-Module: +Module: kernel

Layer: kernel

 
-kernel_read_hotplug_sysctl(
+kernel_read_hotplug_sysctls(
 	
@@ -44231,13 +45732,13 @@ Read the hotplug sysctl.

-Module: +Module: kernel

Layer: kernel

 
-kernel_read_irq_sysctl(
+kernel_read_irq_sysctls(
 	
@@ -44257,13 +45758,13 @@ Read IRQ sysctls.

-Module: +Module: kernel

Layer: kernel

 
-kernel_read_kernel_sysctl(
+kernel_read_kernel_sysctls(
 	
@@ -44310,13 +45811,13 @@ using the /proc/kmsg interface.

-Module: +Module: kernel

Layer: kernel

 
-kernel_read_modprobe_sysctl(
+kernel_read_modprobe_sysctls(
 	
@@ -44336,13 +45837,13 @@ Read the modprobe sysctl.

-Module: +Module: kernel

Layer: kernel

 
-kernel_read_net_sysctl(
+kernel_read_net_sysctls(
 	
@@ -44466,13 +45967,13 @@ Allows caller to read the ring buffer.

-Module: +Module: kernel

Layer: kernel

 
-kernel_read_rpc_sysctl(
+kernel_read_rpc_sysctls(
 	
@@ -44570,13 +46071,13 @@ Allows caller to read system state information in proc.

-Module: +Module: kernel

Layer: kernel

 
-kernel_read_unix_sysctl(
+kernel_read_unix_sysctls(
 	
@@ -44597,13 +46098,13 @@ socket sysctls.

-Module: +Module: kernel

Layer: kernel

 
-kernel_read_vm_sysctl(
+kernel_read_vm_sysctls(
 	
@@ -44623,13 +46124,13 @@ Allow caller to read virtual memory sysctls.

-Module: +Module: kernel

Layer: kernel

-kernel_relabel_unlabeled( +kernel_relabelfrom_unlabeled_dirs( @@ -44642,73 +46143,20 @@ kernel

-Allow caller to relabel unlabeled objects. -

- -

-Module: -kernel

-Layer: -kernel

-
-kernel_remount_debugfs(
-	
-		
-		
-		
-		domain
-		
-	
-	)

-

- -

-Remount a kernel debugging filesystem. -

- -

-Module: -kernel

-Layer: -kernel

-
-kernel_rootfs_mountpoint(
-	
-		
-		
-		
-		directory_type
-		
-	
-	)

-

- -

-Allows the kernel to mount filesystems on -the specified directory type. +Allow caller to relabel unlabeled directories.

-Module: +Module: kernel

Layer: kernel

-kernel_rw_all_sysctl( +kernel_relabelfrom_unlabeled_files( @@ -44721,20 +46169,20 @@ kernel

-Read and write all sysctls. +Allow caller to relabel unlabeled files.

-Module: +Module: kernel

Layer: kernel

-kernel_rw_device_sysctl( +kernel_relabelfrom_unlabeled_pipes( @@ -44747,20 +46195,20 @@ kernel

-Read and write device sysctls. +Allow caller to relabel unlabeled named pipes.

-Module: +Module: kernel

Layer: kernel

-kernel_rw_fs_sysctl( +kernel_relabelfrom_unlabeled_sockets( @@ -44773,20 +46221,20 @@ kernel

-Read and write fileystem sysctls. +Allow caller to relabel unlabeled named sockets.

-Module: +Module: kernel

Layer: kernel

-kernel_rw_hotplug_sysctl( +kernel_relabelfrom_unlabeled_symlinks( @@ -44799,20 +46247,20 @@ kernel

-Read and write the hotplug sysctl. +Allow caller to relabel unlabeled symbolic links.

-Module: +Module: kernel

Layer: kernel

-kernel_rw_irq_sysctl( +kernel_remount_debugfs( @@ -44825,25 +46273,25 @@ kernel

-Read and write IRQ sysctls. +Remount a kernel debugging filesystem.

-Module: +Module: kernel

Layer: kernel

-kernel_rw_kernel_sysctl( +kernel_rootfs_mountpoint( - domain + directory_type )
@@ -44851,20 +46299,21 @@ kernel

-Read and write generic kernel sysctls. +Allows the kernel to mount filesystems on +the specified directory type.

-Module: +Module: kernel

Layer: kernel

-kernel_rw_modprobe_sysctl( +kernel_rw_all_sysctls( @@ -44877,20 +46326,20 @@ kernel

-Read and write the modprobe sysctl. +Read and write all sysctls.

-Module: +Module: kernel

Layer: kernel

-kernel_rw_net_sysctl( +kernel_rw_device_sysctls( @@ -44903,20 +46352,20 @@ kernel

-Allow caller to modiry contents of sysctl network files. +Read and write device sysctls.

-Module: +Module: kernel

Layer: kernel

-kernel_rw_pipe( +kernel_rw_fs_sysctls( @@ -44929,46 +46378,20 @@ kernel

-Read and write kernel unnamed pipes. -

- -

-Module: -kernel

-Layer: -kernel

-
-kernel_rw_rpc_sysctl(
-	
-		
-		
-		
-		?
-		
-	
-	)

-

- -

-Summary is missing! +Read and write fileystem sysctls.

-Module: +Module: kernel

Layer: kernel

-kernel_rw_software_raid_state( +kernel_rw_hotplug_sysctls( @@ -44981,20 +46404,20 @@ kernel

-Allow caller to read and set the state information for software raid. +Read and write the hotplug sysctl.

-Module: +Module: kernel

Layer: kernel

-kernel_rw_unix_dgram_socket( +kernel_rw_irq_sysctls( @@ -45007,20 +46430,20 @@ kernel

-Read and write kernel unix datagram sockets. +Read and write IRQ sysctls.

-Module: +Module: kernel

Layer: kernel

-kernel_rw_unix_sysctl( +kernel_rw_kernel_sysctl( @@ -45033,21 +46456,20 @@ kernel

-Read and write unix domain -socket sysctls. +Read and write generic kernel sysctls.

-Module: +Module: kernel

Layer: kernel

-kernel_rw_unlabeled_dir( +kernel_rw_modprobe_sysctls( @@ -45060,20 +46482,20 @@ kernel

-Read and write unlabeled directories. +Read and write the modprobe sysctl.

-Module: +Module: kernel

Layer: kernel

-kernel_rw_vm_sysctl( +kernel_rw_net_sysctls( @@ -45086,20 +46508,20 @@ kernel

-Read and write virtual memory sysctls. +Allow caller to modiry contents of sysctl network files.

-Module: +Module: kernel

Layer: kernel

-kernel_search_debugfs( +kernel_rw_pipes( @@ -45112,25 +46534,25 @@ kernel

-Search the contents of a kernel debugging filesystem. +Read and write kernel unnamed pipes.

-Module: +Module: kernel

Layer: kernel

-kernel_search_from( +kernel_rw_rpc_sysctls( - dir_type + ? )
@@ -45138,21 +46560,20 @@ kernel

-Allow the kernel to search the -specified directory. +Summary is missing!

-Module: +Module: kernel

Layer: kernel

-kernel_search_network_state( +kernel_rw_software_raid_state( @@ -45165,20 +46586,20 @@ kernel

-Allow searching of network state directory. +Allow caller to read and set the state information for software raid.

-Module: +Module: kernel

Layer: kernel

-kernel_search_network_sysctl( +kernel_rw_unix_dgram_sockets( @@ -45191,20 +46612,20 @@ kernel

-Search network sysctl directories. +Read and write kernel unix datagram sockets.

-Module: +Module: kernel

Layer: kernel

-kernel_search_proc( +kernel_rw_unix_sysctls( @@ -45217,20 +46638,21 @@ kernel

-Search directories in /proc. +Read and write unix domain +socket sysctls.

-Module: +Module: kernel

Layer: kernel

-kernel_search_vm_sysctl( +kernel_rw_unlabeled_blk_files( @@ -45243,57 +46665,20 @@ kernel

-Allow caller to search virtual memory sysctls. -

- -

-Module: -kernel

-Layer: -kernel

-
-kernel_send_syslog_msg_from(
-	
-		
-		
-		
-		socket
-		
-	
-		
-			,
-		
-		
-		
-		syslog_type
-		
-	
-	)

-

- -

-Allow the kernel to send a syslog -message to the specified domain, -connecting over the specified named -socket. +Read and write unlabeled block device nodes.

-Module: +Module: kernel

Layer: kernel

-kernel_sendrecv_unlabeled_association( +kernel_rw_unlabeled_dirs( @@ -45306,21 +46691,20 @@ kernel

-Send and receive messages from an -unlabeled IPSEC association. +Read and write unlabeled directories.

-Module: +Module: kernel

Layer: kernel

-kernel_sendto_unix_dgram_socket( +kernel_rw_vm_sysctls( @@ -45333,20 +46717,20 @@ kernel

-Send messages to kernel unix datagram sockets. +Read and write virtual memory sysctls.

-Module: +Module: kernel

Layer: kernel

-kernel_setpgid( +kernel_search_debugfs( @@ -45359,20 +46743,20 @@ kernel

-Set the process group of kernel threads. +Search the contents of a kernel debugging filesystem.

-Module: +Module: kernel

Layer: kernel

-kernel_share_state( +kernel_search_network_state( @@ -45385,21 +46769,20 @@ kernel

-Allows the kernel to share state information with -the caller. +Allow searching of network state directory.

-Module: +Module: kernel

Layer: kernel

-kernel_sigchld( +kernel_search_network_sysctl( @@ -45412,20 +46795,20 @@ kernel

-Send a SIGCHLD signal to kernel threads. +Search network sysctl directories.

-Module: +Module: kernel

Layer: kernel

-kernel_sigchld_from( +kernel_search_proc( @@ -45438,21 +46821,20 @@ kernel

-Allow the kernel to send a SIGCHLD -signal to the specified domain. +Search directories in /proc.

-Module: +Module: kernel

Layer: kernel

-kernel_sigchld_from_unlabeled( +kernel_search_vm_sysctl( @@ -45465,21 +46847,20 @@ kernel

-Allow unlabeled processes to send a SIGCHLD -signal to the specified domain. +Allow caller to search virtual memory sysctls.

-Module: +Module: kernel

Layer: kernel

-kernel_sigchld_unlabeled( +kernel_sendrecv_unlabeled_association( @@ -45492,20 +46873,21 @@ kernel

-Send a child terminated signal to unlabeled processes. +Send and receive messages from an +unlabeled IPSEC association.

-Module: +Module: kernel

Layer: kernel

-kernel_signal( +kernel_setpgid( @@ -45518,20 +46900,20 @@ kernel

-Send a generic signal to kernel threads. +Set the process group of kernel threads.

-Module: +Module: kernel

Layer: kernel

-kernel_signal_unlabeled( +kernel_share_state( @@ -45544,20 +46926,21 @@ kernel

-Send general signals to unlabeled processes. +Allows the kernel to share state information with +the caller.

-Module: +Module: kernel

Layer: kernel

-kernel_signull_unlabeled( +kernel_sigchld( @@ -45570,20 +46953,20 @@ kernel

-Send a null signal to unlabeled processes. +Send a SIGCHLD signal to kernel threads.

-Module: +Module: kernel

Layer: kernel

-kernel_sigstop_unlabeled( +kernel_sigchld_unlabeled( @@ -45596,20 +46979,20 @@ kernel

-Send a stop signal to unlabeled processes. +Send a child terminated signal to unlabeled processes.

-Module: +Module: kernel

Layer: kernel

-kernel_tcp_recvfrom( +kernel_signal( @@ -45622,20 +47005,20 @@ kernel

-Receive messages from kernel TCP sockets. +Send a generic signal to kernel threads.

-Module: +Module: kernel

Layer: kernel

-kernel_udp_recvfrom( +kernel_signal_unlabeled( @@ -45648,20 +47031,20 @@ kernel

-Receive messages from kernel UDP sockets. +Send general signals to unlabeled processes.

-Module: +Module: kernel

Layer: kernel

-kernel_udp_sendfrom( +kernel_signull_unlabeled( @@ -45674,21 +47057,20 @@ kernel

-Allow the kernel to send UDP network traffic -the specified domain. +Send a null signal to unlabeled processes.

-Module: +Module: kernel

Layer: kernel

-kernel_unconfined( +kernel_sigstop_unlabeled( @@ -45701,20 +47083,20 @@ kernel

-Unconfined access to kernel module resources. +Send a stop signal to unlabeled processes.

-Module: +Module: kernel

Layer: kernel

-kernel_unmount_debugfs( +kernel_tcp_recvfrom( @@ -45727,20 +47109,20 @@ kernel

-Unmount a kernel debugging filesystem. +Receive messages from kernel TCP sockets.

-Module: +Module: kernel

Layer: kernel

-kernel_use_fd( +kernel_udp_recvfrom( @@ -45753,41 +47135,25 @@ kernel

-Permits caller to use kernel file descriptors. +Receive messages from kernel UDP sockets.

-Module: +Module: kernel

Layer: kernel

-kernel_use_ld_so_from( - - - - - lib_type - - - - , - - - - ld_type - +kernel_udp_send( - , - - cache_type + domain )
@@ -45795,36 +47161,25 @@ kernel

-Use the specified types for /lib directory -and use the dynamic link/loader for automatic loading -of shared libraries, and the link/loader -cache. +Send UDP network traffic to the kernel.

-Module: +Module: kernel

Layer: kernel

-kernel_use_shared_libs_from( - - - - - lib_dir_type - +kernel_unconfined( - , - - shlib_type + domain )
@@ -45832,21 +47187,20 @@ kernel

-Allow the kernel to load and execute -functions from the specified shared libraries. +Unconfined access to kernel module resources.

-Module: +Module: kernel

Layer: kernel

-kernel_use_unlabeled_blk_dev( +kernel_unmount_debugfs( @@ -45859,20 +47213,20 @@ kernel

-Read and write unlabeled block device nodes. +Unmount a kernel debugging filesystem.

-Module: +Module: kernel

Layer: kernel

-kernel_userland_entry( +kernel_use_fds( @@ -45880,34 +47234,25 @@ kernel

domain - - , - - - - entrypoint - - )

-Allows to start userland processes -by transitioning to the specified domain. +Permits caller to use kernel file descriptors.

-Module: +Module: kernel

Layer: kernel

 
-kernel_write_proc_file(
+kernel_write_proc_files(
 	
@@ -45953,13 +47298,13 @@ Execute kudzu in the kudzu domain.

-Module: +Module: kudzu

Layer: admin

 
-kudzu_getattr_exec_file(
+kudzu_getattr_exec_files(
 	
@@ -46022,13 +47367,13 @@ allow the specified role the kudzu domain.

-Module: +Module: ldap

Layer: services

 
-ldap_list_db_dir(
+ldap_list_db(
 	
@@ -46101,6 +47446,32 @@ Use LDAP over TCP connection.

+Module: +libraries

+Layer: +system

+
+libs_delete_lib_symlinks(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Delete generic symlinks in library directories. +

+ +

Module: libraries

Layer: @@ -46313,13 +47684,13 @@ Create, read, write, and delete shared libraries.

-Module: +Module: libraries

Layer: system

 
-libs_read_lib(
+libs_read_lib_files(
 	
@@ -46569,13 +47940,13 @@ of shared libraries.

-Module: +Module: libraries

Layer: system

 
-libs_use_lib(
+libs_use_lib_files(
 	
@@ -46742,13 +48113,13 @@ Execute local logins in the local login domain.

-Module: +Module: locallogin

Layer: system

 
-locallogin_dontaudit_use_fd(
+locallogin_dontaudit_use_fds(
 	
@@ -46794,13 +48165,13 @@ Send a null signal to local login processes.

-Module: +Module: locallogin

Layer: system

 
-locallogin_use_fd(
+locallogin_use_fds(
 	
@@ -46950,18 +48321,18 @@ Execute all log files in the caller domain.

-Module: +Module: logging

Layer: system

-logging_filetrans_log( +logging_list_logs( - ? + domain )
@@ -46969,25 +48340,25 @@ system

-Summary is missing! +List the contents of the generic log directory (/var/log).

-Module: +Module: logging

Layer: system

-logging_list_logs( +logging_log_file( - domain + file_type )
@@ -46995,25 +48366,26 @@ system

-List the contents of the generic log directory (/var/log). +Make the specified type a file +used for logs.

-Module: +Module: logging

Layer: system

-logging_log_file( +logging_log_filetrans( - file_type + ? )
@@ -47021,8 +48393,7 @@ system

-Make the specified type a file -used for logs. +Summary is missing!

@@ -47108,13 +48479,13 @@ Summary is missing!

-Module: +Module: logging

Layer: system

-logging_read_audit_log( +logging_read_audit_config( @@ -47127,20 +48498,20 @@ system

-Read the audit log. +Read the auditd configuration files.

-Module: +Module: logging

Layer: system

-logging_read_auditd_config( +logging_read_audit_log( @@ -47153,7 +48524,7 @@ system

-Read the auditd configuration files. +Read the audit log.

@@ -47186,13 +48557,13 @@ Summary is missing!

-Module: +Module: logging

Layer: system

-logging_rw_generic_logs( +logging_rw_generic_log_dirs( @@ -47205,20 +48576,20 @@ system

-Read and write generic log files. +Read and write the generic log directory (/var/log).

-Module: +Module: logging

Layer: system

-logging_rw_log_dir( +logging_rw_generic_logs( @@ -47231,7 +48602,7 @@ system

-Read and write the generic log directory (/var/log). +Read and write generic log files.

@@ -47344,13 +48715,13 @@ Execute logrotate in the logrotate domain.

-Module: +Module: logrotate

Layer: admin

 
-logrotate_dontaudit_use_fd(
+logrotate_dontaudit_use_fds(
 	
@@ -47465,13 +48836,13 @@ allow the specified role the logrotate domain.

-Module: +Module: logrotate

Layer: admin

 
-logrotate_use_fd(
+logrotate_use_fds(
 	
@@ -47994,6 +49365,33 @@ Send generic signals to the mailman cgi domain.

+Module: +mcs

+Layer: +kernel

+
+mcs_killall(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+This domain is allowed to sigkill and sigstop +all domains regardless of their MCS level. +

+ +

Module: miscfiles

Layer: @@ -48814,13 +50212,13 @@ Summary is missing!

-Module: +Module: modutils

Layer: system

-modutils_read_mods_deps( +modutils_read_module_config( @@ -48833,20 +50231,21 @@ system

-Read the dependencies of kernel modules. +Read the configuration options used when +loading modules.

-Module: +Module: modutils

Layer: system

-modutils_read_module_conf( +modutils_read_module_deps( @@ -48859,21 +50258,20 @@ system

-Read the configuration options used when -loading modules. +Read the dependencies of kernel modules.

-Module: +Module: modutils

Layer: system

 
-modutils_rename_module_conf(
+modutils_rename_module_config(
 	
@@ -49023,6 +50421,32 @@ Execute update_modules in the update_modules domain.

+Module: +mono

+Layer: +apps

+
+mono_domtrans(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Execute the mono program in the mono domain. +

+ +

Module: mount

Layer: @@ -49146,13 +50570,13 @@ network drives

-Module: +Module: mount

Layer: system

 
-mount_use_fd(
+mount_use_fds(
 	
@@ -49172,6 +50596,32 @@ Use file descriptors for mount.

+Module: +mrtg

+Layer: +admin

+
+mrtg_append_create_logs(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Create and append mrtg logs. +

+ +

Module: mta

Layer: @@ -49224,18 +50674,18 @@ Delete from the mail spool.

-Module: +Module: mta

Layer: services

-mta_dontaudit_read_spool_symlink( +mta_dontaudit_getattr_spool_files( - domain + ? )
@@ -49243,21 +50693,20 @@ services

-Do not audit attempts to read a symlink -in the mail spool. +Summary is missing!

-Module: +Module: mta

Layer: services

-mta_dontaudit_rw_delivery_tcp_socket( +mta_dontaudit_read_spool_symlinks( @@ -49270,21 +50719,21 @@ services

-Do not audit attempts to read and write TCP -sockets of mail delivery domains. +Do not audit attempts to read a symlink +in the mail spool.

-Module: +Module: mta

Layer: services

-mta_dontaudit_rw_queue( +mta_dontaudit_rw_delivery_tcp_sockets( @@ -49297,26 +50746,26 @@ services

-Do not audit attempts to read and -write the mail queue. +Do not audit attempts to read and write TCP +sockets of mail delivery domains.

-Module: +Module: mta

Layer: services

-mta_exec( +mta_dontaudit_rw_queue( - ? + domain )
@@ -49324,20 +50773,21 @@ services

-Summary is missing! +Do not audit attempts to read and +write the mail queue.

-Module: +Module: mta

Layer: services

 
-mta_filetrans_etc_aliases(
+mta_etc_filetrans_aliases(
 	
@@ -49358,38 +50808,18 @@ to the mail address aliases type.

-Module: +Module: mta

Layer: services

-mta_filetrans_spool( - - - - - domain - - - - , - - - - private type - +mta_exec( - , - - - [ - - object - ] + ? )
@@ -49397,8 +50827,7 @@ services

-Create private objects in the -mail spool directory. +Summary is missing!

@@ -49721,13 +51150,13 @@ Summary is missing!

-Module: +Module: mta

Layer: services

 
-mta_rw_user_mail_stream_socket(
+mta_rw_user_mail_stream_sockets(
 	
@@ -49809,6 +51238,49 @@ sendmail daemon use.

+Module: +mta

+Layer: +services

+
+mta_spool_filetrans(
+	
+		
+		
+		
+		domain
+		
+	
+		
+			,
+		
+		
+		
+		private type
+		
+	
+		
+			,
+		
+		
+		
+		object
+		
+	
+	)

+

+ +

+Create private objects in the +mail spool directory. +

+ +

Module: mta

Layer: @@ -49820,12 +51292,8 @@ services

- [ - domain - ] - )

@@ -49865,13 +51333,13 @@ Connect to all mail servers over TCP.

-Module: +Module: mysql

Layer: services

 
-mysql_manage_db_dir(
+mysql_manage_db_dirs(
 	
@@ -49917,13 +51385,13 @@ Read MySQL configuration files.

-Module: +Module: mysql

Layer: services

 
-mysql_rw_db_dir(
+mysql_rw_db_dirs(
 	
@@ -49943,13 +51411,13 @@ Read and write to the MySQL database directory.

-Module: +Module: mysql

Layer: services

 
-mysql_rw_db_socket(
+mysql_rw_db_sockets(
 	
@@ -49970,13 +51438,13 @@ named socket.

-Module: +Module: mysql

Layer: services

 
-mysql_search_db_dir(
+mysql_search_db(
 	
@@ -50473,13 +51941,13 @@ NetworkManager over dbus.

-Module: +Module: networkmanager

Layer: services

 
-networkmanager_rw_packet_socket(
+networkmanager_rw_packet_sockets(
 	
@@ -50499,13 +51967,13 @@ Read and write NetworkManager packet sockets.

-Module: +Module: networkmanager

Layer: services

 
-networkmanager_rw_routing_socket(
+networkmanager_rw_routing_sockets(
 	
@@ -50526,13 +51994,13 @@ routing sockets.

-Module: +Module: networkmanager

Layer: services

 
-networkmanager_rw_udp_socket(
+networkmanager_rw_udp_sockets(
 	
@@ -50734,13 +52202,13 @@ Connect to ypbind over TCP.

-Module: +Module: nis

Layer: services

 
-nis_udp_sendto_ypbind(
+nis_udp_send_ypbind(
 	
@@ -50865,13 +52333,13 @@ Read NSCD pid file.

-Module: +Module: nscd

Layer: services

-nscd_unconfined( +nscd_shm_use( @@ -50884,20 +52352,21 @@ services

-Unconfined access to NSCD services. +Use NSCD services by mapping the database from +an inherited NSCD file descriptor.

-Module: +Module: nscd

Layer: services

-nscd_use_shared_mem( +nscd_socket_use( @@ -50910,21 +52379,21 @@ services

-Use NSCD services by mapping the database from -an inherited NSCD file descriptor. +Use NSCD services by connecting using +a unix stream socket.

-Module: +Module: nscd

Layer: services

-nscd_use_socket( +nscd_unconfined( @@ -50937,8 +52406,7 @@ services

-Use NSCD services by connecting using -a unix stream socket. +Unconfined access to NSCD services.

@@ -51008,12 +52476,8 @@ services

- [ - domain - ] - )

@@ -51106,13 +52570,13 @@ cardmgr pid files.

-Module: +Module: pcmcia

Layer: system

-pcmcia_manage_runtime_chr( +pcmcia_manage_pid_chr_files( @@ -51213,12 +52677,8 @@ system

- [ - domain - ] - )

@@ -51232,13 +52692,13 @@ PCMCIA stub interface. No access allowed.

-Module: +Module: pcmcia

Layer: system

 
-pcmcia_use_cardmgr_fd(
+pcmcia_use_cardmgr_fds(
 	
@@ -51258,13 +52718,13 @@ Inherit and use file descriptors from cardmgr.

-Module: -portmap

-Layer: -services

+Module: +portage

+Layer: +admin

-portmap_domtrans_helper( +portage_domtrans( @@ -51277,20 +52737,20 @@ services

-Execute portmap_helper in the helper domain. +Execute emerge in the portage domain.

-Module: -portmap

-Layer: -services

+Module: +portage

+Layer: +admin

-portmap_run_helper( +portage_run( @@ -51319,22 +52779,21 @@ services

-Execute portmap helper in the helper domain, and -allow the specified role the helper domain. -Communicate with portmap. +Execute emerge in the portage domain, and +allow the specified role the portage domain.

-Module: +Module: portmap

Layer: services

-portmap_tcp_connect( +portmap_domtrans_helper( @@ -51347,20 +52806,20 @@ services

-Connect to portmap over a TCP socket +Execute portmap_helper in the helper domain.

-Module: +Module: portmap

Layer: services

-portmap_udp_sendrecv( +portmap_run_helper( @@ -51368,109 +52827,20 @@ services

domain - )
-

- -

-Send and receive UDP network traffic from portmap. -

- -

-Module: -portmap

-Layer: -services

-
-portmap_udp_sendto(
-	
-		
-		
-		
-		domain
 		
-	
-	)

-

- -

-Send UDP network traffic to portmap. -

- -

-Module: -postfix

-Layer: -services

-
-postfix_domtrans_map(
-	
+			,
 		
-		domain
+		role
 		
-	)

-

- -

-Execute postfix_map in the postfix_map domain. -

- -

-Module: -postfix

-Layer: -services

-
-postfix_domtrans_master(
-	
-		
-		
-		
-		domain
 		
-	
-	)

-

- -

-Execute the master postfix program in the -postfix_master domain. -

- -

-Module: -postfix

-Layer: -services

- -postfix_domtrans_user_mail_handler( - + , - domain + terminal )
@@ -51478,21 +52848,22 @@ services

-Execute postfix user mail programs -in their respective domains. +Execute portmap helper in the helper domain, and +allow the specified role the helper domain. +Communicate with portmap.

-Module: -postfix

+Module: +portmap

Layer: services

-postfix_dontaudit_rw_local_tcp_socket( +portmap_tcp_connect( @@ -51505,22 +52876,20 @@ services

-Do not audit attempts to read and -write postfix local delivery -TCP sockets. +Connect to portmap over a TCP socket

-Module: -postfix

+Module: +portmap

Layer: services

-postfix_dontaudit_use_fd( +portmap_udp_chat( @@ -51533,22 +52902,20 @@ services

-Do not audit attempts to use -postfix master process file -file descriptors. +Send and receive UDP network traffic from portmap.

-Module: -postfix

+Module: +portmap

Layer: services

-postfix_exec_master( +portmap_udp_send( @@ -51561,21 +52928,20 @@ services

-Execute the master postfix program in the -caller domain. +Send UDP network traffic to portmap.

-Module: +Module: postfix

Layer: services

-postfix_filetrans_config( +postfix_config_filetrans( @@ -51596,12 +52962,8 @@ services

- [ - object - ] - )

@@ -51616,6 +52978,169 @@ the postfix configuration directories.

+Module: +postfix

+Layer: +services

+
+postfix_domtrans_map(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Execute postfix_map in the postfix_map domain. +

+ +

+Module: +postfix

+Layer: +services

+
+postfix_domtrans_master(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Execute the master postfix program in the +postfix_master domain. +

+ +

+Module: +postfix

+Layer: +services

+
+postfix_domtrans_user_mail_handler(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Execute postfix user mail programs +in their respective domains. +

+ +

+Module: +postfix

+Layer: +services

+
+postfix_dontaudit_rw_local_tcp_sockets(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Do not audit attempts to read and +write postfix local delivery +TCP sockets. +

+ +

+Module: +postfix

+Layer: +services

+
+postfix_dontaudit_use_fds(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Do not audit attempts to use +postfix master process file +file descriptors. +

+ +

+Module: +postfix

+Layer: +services

+
+postfix_exec_master(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Execute the master postfix program in the +caller domain. +

+ +

Module: postfix

Layer: @@ -51748,12 +53273,8 @@ services

- [ - domain - ] - )

@@ -51845,13 +53366,13 @@ Allow the specified domain to read postgresql's etc.

-Module: +Module: postgresql

Layer: services

 
-postgresql_search_db_dir(
+postgresql_search_db(
 	
@@ -51871,13 +53392,13 @@ Allow the specified domain to search postgresql's database directory.

-Module: +Module: postgresql

Layer: services

-postgresql_tcp_connect( +postgresql_stream_connect( @@ -51890,20 +53411,20 @@ services

-Allow the specified domain to connect to postgresql with a tcp socket. +Allow the specified domain to connect to postgresql with a unix socket.

-Module: +Module: postgresql

Layer: services

-postgresql_unix_connect( +postgresql_tcp_connect( @@ -51916,7 +53437,7 @@ services

-Allow the specified domain to connect to postgresql with a unix socket. +Allow the specified domain to connect to postgresql with a tcp socket.

@@ -51949,13 +53470,13 @@ Execute domain in the ppp domain.

-Module: +Module: ppp

Layer: services

 
-ppp_dontaudit_use_fd(
+ppp_dontaudit_use_fds(
 	
@@ -52080,13 +53601,13 @@ Send a generic signal to PPP.

-Module: +Module: ppp

Layer: services

 
-ppp_use_fd(
+ppp_use_fds(
 	
@@ -52724,13 +54245,13 @@ Allow domain to read and write to an NFS UDP socket.

-Module: +Module: rpc

Layer: services

 
-rpc_udp_sendto(
+rpc_udp_send(
 	
@@ -52750,13 +54271,13 @@ Send UDP network traffic to rpc and recieve UDP traffic from rpc.

-Module: +Module: rpc

Layer: services

-rpc_udp_sendto_nfs( +rpc_udp_send_nfs( @@ -52769,8 +54290,7 @@ services

-Allow NFS to send UDP network traffic -the specified domain and recieve from it. +Send UDP traffic to NFSd.

@@ -52829,6 +54349,32 @@ Execute rpm programs in the rpm domain.

+Module: +rpm

+Layer: +admin

+
+rpm_domtrans_script(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Execute rpm_script programs in the rpm_script domain. +

+ +

Module: rpm

Layer: @@ -52934,13 +54480,13 @@ Read the RPM package database.

-Module: +Module: rpm

Layer: admin

 
-rpm_read_pipe(
+rpm_read_pipes(
 	
@@ -53002,13 +54548,13 @@ Execute RPM programs in the RPM domain.

-Module: +Module: rpm

Layer: admin

 
-rpm_rw_pipe(
+rpm_rw_pipes(
 	
@@ -53028,39 +54574,13 @@ Read and write an unnamed RPM pipe.

-Module: +Module: rpm

Layer: admin

 
-rpm_script_domtrans(
-	
-		
-		
-		
-		domain
-		
-	
-	)

-

- -

-Execute rpm_script programs in the rpm_script domain. -

- -

-Module: -rpm

-Layer: -admin

-
-rpm_use_fd(
+rpm_use_fds(
 	
@@ -53080,13 +54600,13 @@ Inherit and use file descriptors from RPM.

-Module: +Module: rpm

Layer: admin

 
-rpm_use_script_fd(
+rpm_use_script_fds(
 	
@@ -53132,32 +54652,6 @@ Domain transition to rshd.

-Module: -samba

-Layer: -services

-
-samba_connect_winbind(
-	
-		
-		
-		
-		domain
-		
-	
-	)

-

- -

-Connect to winbind. -

- -

Module: samba

Layer: @@ -53480,13 +54974,13 @@ and write samba configuration files.

-Module: +Module: samba

Layer: services

 
-samba_rw_smbmount_tcp_socket(
+samba_rw_smbmount_tcp_sockets(
 	
@@ -53560,13 +55054,39 @@ samba /var directories.

-Module: +Module: +samba

+Layer: +services

+
+samba_stream_connect_winbind(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Connect to winbind. +

+ +

+Module: samba

Layer: services

 
-samba_write_smbmount_tcp_socket(
+samba_write_smbmount_tcp_sockets(
 	
@@ -54138,13 +55658,13 @@ Create, read, write, and delete sendmail logs.

-Module: +Module: sendmail

Layer: services

 
-sendmail_rw_tcp_socket(
+sendmail_rw_tcp_sockets(
 	
@@ -54164,6 +55684,32 @@ Read and write sendmail TCP sockets.

+Module: +sendmail

+Layer: +services

+
+sendmail_rw_unix_stream_sockets(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Read and write sendmail unix_stream_sockets. +

+ +

Module: sendmail

Layer: @@ -54175,12 +55721,8 @@ services

- [ - domain - ] - )

@@ -54194,13 +55736,13 @@ Sendmail stub interface. No access allowed.

-Module: +Module: selinuxutil

Layer: system

 
-seutil_create_binary_pol(
+seutil_create_bin_policy(
 	
@@ -54220,13 +55762,13 @@ Summary is missing!

-Module: +Module: selinuxutil

Layer: system

 
-seutil_domtrans_checkpol(
+seutil_domtrans_checkpolicy(
 	
@@ -54246,13 +55788,13 @@ Execute checkpolicy in the checkpolicy domain.

-Module: +Module: selinuxutil

Layer: system

 
-seutil_domtrans_loadpol(
+seutil_domtrans_loadpolicy(
 	
@@ -54350,6 +55892,32 @@ Execute run_init in the run_init domain.

+Module: +selinuxutil

+Layer: +system

+
+seutil_domtrans_semanage(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Execute a domain transition to run semanage. +

+ +

Module: selinuxutil

Layer: @@ -54457,13 +56025,13 @@ a signal to newrole.

-Module: +Module: selinuxutil

Layer: system

 
-seutil_exec_checkpol(
+seutil_exec_checkpolicy(
 	
@@ -54483,13 +56051,13 @@ Summary is missing!

-Module: +Module: selinuxutil

Layer: system

 
-seutil_exec_loadpol(
+seutil_exec_loadpolicy(
 	
@@ -54587,13 +56155,135 @@ Summary is missing!

-Module:

+Layer: +system

+
+seutil_get_semanage_read_lock(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Module:

+Layer: +system

+
+seutil_get_semanage_trans_lock(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Module:

+Layer: +system

+
+seutil_init_script_domtrans_runinit(
+	
+		
+		
+		
+		domain
+		
+	
+	)

+

+ +

+Module:

+Layer: +system

+
+seutil_init_script_run_runinit(
+	
+		
+		
+		
+		domain
+		
+	
+		
+			,
+		
+		
+		
+		role
+		
+	
+		
+			,
+		
+		
+		
+		terminal
+		
+	
+	)

+

+ +

+Module:

Layer: system

 
-seutil_manage_binary_pol(
+seutil_manage_bin_policy(
 	
@@ -54613,13 +56303,40 @@ Summary is missing!

+ +

Parameter:	Description:	Optional:
-domain -	- -The domain allowed access. -	No
domain	- + Domain allowed access. - +	No
Parameter:	Description:	Optional:
-domain +file_type	- -The type of the process performing this action. - + +The type of the file to be associated to usbfs. +	No
domain	- + Domain allowed access. - +	No
domain	- -Domain allowed to create the directory. - + +Domain allowed access. +	No
domain	- -Domain allowed access. - + +Domain allowed to create the directory. +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain to dontaudit access. - +	No
domain	- + Domain to dontaudit access. - +	No
domain	- + Domain to not audit. - +	No
domain	- + Domain to dontaudit access. - +	No
domain	- + Domain to dontaudit access. - +	No
domain	- + Domain to dontaudit. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain to not audit. - +	No
domain	- + Domain to not audit. - +	No
domain	- + Domain to not audit. - +	No
domain	- + Domain to dontaudit listing of device nodes. - +	No
domain	- + Domain to not audit. - +	No
domain	- + Domain to not audit. - +	No
domain	- + Domain allowed access. + +	+No +

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed to create the files. +	No
domain	- + Domain allowed access. - +	No
domain	- + The type of the process performing this action. - +	No
object_type	- + The object type that will be used on device nodes. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- + The process type reading hardware state information. - +	No
domain	- + Domain allowed access. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + Domain allowed to relabel. - +	No
domain	- + Domain allowed to relabel. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No

Parameter:	Description:	Optional:
+? +	+ +Parameter descriptions are missing! +	No
domain	- + The type of the process performing this action. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- + The process type to make an exception to the constraint. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
?	- + Parameter descriptions are missing! - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- + The process type to make an exception to the constraint. - +	No
domain	- + Domain allowed access. - +	No
?	- + Parameter descriptions are missing! - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + Domain allowed access. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The process type to make an exception to the constraint. - +	No
domain	- + Domain allowed access. - +	No
type	- + Type to be used as a domain type. - +	No
domain	- + The type of the process performing this action. - +	No
?	- + Parameter descriptions are missing! - +	No
domain	- -Domain target for user exemption. - -	-No -

Parameter:	Description:	Optional:
-? -	- -Parameter descriptions are missing! -	No
?	- + Parameter descriptions are missing! - +	No
?	- + Parameter descriptions are missing! - +	No
file_type	- + Type of the file to associate. - +	No
Parameter:	Description:	Optional:
-file_type +domain +	+ +Domain allowed access. +	+No +
+private_type +	+ +The type of the object to be created. + +	+No +
+object_class +	+ +The object class of the object being created. +	No
Parameter:	Description:	Optional:
-? +file_type	- -Parameter descriptions are missing! - + +Type to be used as a configuration file. +	No
Parameter:	Description:	Optional:
-? +domain	- -Parameter descriptions are missing! - + +Domain allowed access. +	No
?	- + Parameter descriptions are missing! - +	No
Parameter:	Description:	Optional:
-? +domain	- -Parameter descriptions are missing! - + +Domain allowed access. +	No
domain	- -The type of the process performing this action. - + +Domain allowed access. +	No
?	- + Parameter descriptions are missing! - +	No
Parameter:	Description:	Optional:
-domain +?	- -Domain to not audit. - + +Parameter descriptions are missing! +	No
Parameter:	Description:	Optional:
-domain +?	- -Domain to not audit. - + +Parameter descriptions are missing! +	No
domain	- -Domain to not audit. - + +Domain allowed access. +	No
domain	- -Domain to not audit. - + +Domain allowed access. +	No
domain	- -Domain to not audit. - + +Domain allowed access. +	No
domain	- -Domain to not audit. - + +Domain allowed access. +	No
Parameter:	Description:	Optional:
-domain +?	- -Domain to not audit. - + +Parameter descriptions are missing! +	No
domain	- + Domain to not audit. - +	No
domain	- + Domain to not audit. - +	No
domain	- + Domain to not audit. - +	No
domain	- + Domain to not audit. - +	No
domain	- + Domain to not audit. - +	No
domain	- + Domain to not audit. - +	No
domain	- + Domain to not audit. - +	No
domain	- + Domain to not audit. - +	No
domain	- -The type of the process performing this action. - + +Domain to not audit. +	No
domain	- -The type of the process performing this action. - + +Domain to not audit. +	No
domain	- + Domain to not audit. - +	No
domain	- + Domain to not audit. - +	No
domain	- + Domain to not audit. - +	No
domain	- -Domain not to audit. - + +Domain to not audit. +	No
domain	- + Domain to not audit. - +	No
domain	- + Domain to not audit. - +	No
Parameter:	Description:	Optional:
-? +domain	- -Parameter descriptions are missing! - + +Domain allowed access. +	No
Parameter:	Description:	Optional:
-? +domain	- -Parameter descriptions are missing! - + +Domain allowed access. +	No
Parameter:	Description:	Optional:
-? +domain	- -Parameter descriptions are missing! - + +Domain to not audit. +	No
Parameter:	Description:	Optional:
-? +domain	- -Parameter descriptions are missing! - + +Domain to not audit. +	No
domain	- + Domain to not audit. - +	No
domain	- -The type of the process performing this action. - + +Domain not to audit. +	No
domain	- + Domain to not audit. - +	No
domain	- + Domain to not audit. - +	No
?	- + Parameter descriptions are missing! - +	No
Parameter:	Description:	Optional:
-domain +?	- -Domain to not audit. - + +Parameter descriptions are missing! +	No
Parameter:	Description:	Optional:
-domain +?	- -The type of the process performing this action. - + +Parameter descriptions are missing! +	No
Parameter:	Description:	Optional:
-domain +?	- -Domain to not audit. - + +Parameter descriptions are missing! +	No
Parameter:	Description:	Optional:
-? +domain	- -Parameter descriptions are missing! - + +Domain allowed access. +	No
domain	- -The type of the process performing this action. - + +Domain to not audit. +	No
domain	- -The type of the process performing this action. - + +Domain allowed access. +	No
Parameter:	Description:	Optional:
-? +domain	- -Parameter descriptions are missing! - + +Domain to not audit. +	No
domain	- -The type of the process performing this action. - -	-No -
-home_type -	- -The private type. - + +Domain to not audit. +	No
-object -	- -The object class of the object being created. If -no class is specified, dir will be used. - -	-yes -

Parameter:	Description:	Optional:
+domain +	+ Domain allowed access. + +	+No +
+home_type +	+ +The private type. +	No
-file_type +object +	+ +The class of the object being created. + +	+No +

Parameter:	Description:	Optional:
+domain +	+ The type of the domain doing the getattr on the filesystem. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- + The type of the domain doing the getattr on the filesystem. - +	No
domain	- + The type of the domain doing the getattr on the filesystem. - +	No
domain	- + The type of the domain doing the getattr on the filesystem. - +	No
domain	- + The type of the domain doing the getattr on the filesystem. - +	No
domain	- + The type of the domain doing the getattr on the filesystem. - +	No
domain	- + The type of the domain doing the getattr on the filesystem. - +	No
domain	- + The type of the domain doing the getattr on the filesystem. - +	No
domain	- + The type of the domain doing the getattr on the filesystem. - +	No
domain	- + The type of the domain reading the symbolic links. - +	No
domain	- + The type of the domain doing the getattr on the filesystem. - +	No
domain	- + The type of the domain doing the getattr on the filesystem. - +	No
domain	- + Domain allowed access. - +	No
domain	- + The type of the domain doing the getattr on the filesystem. - +	No
domain	- + Domain allowed access. - +	No
domain	- + The type of the domain performing this action. - +	No
domain	- + Domain allowed access. + +	+No +

Parameter:	Description:	Optional:
+domain +	+ +The process type entered by kernel. + +	+No +
+entrypoint +	+ +The executable type for the entrypoint. +	No
domain	- + The process type to not audit. - +	No
domain	- + The process type not to audit. - +	No
domain	- + The process type not to audit. - +	No
domain	- + The process type not to audit. - +	No
domain	- + The process type not to audit. - +	No
domain	- + The process type not to audit. - +	No
domain	- + The process type not to audit. - +	No
domain	- + The process type not to audit. - +	No
domain	- + Domain to not audit. - +	No
domain	- + Domain allowed access. - +	No
domain	- + The process type not to audit. - +	No
domain	- + The domain to not audit. - +	No
domain	- + The process type not to audit. - +	No
domain	- + Domain to not audit. - +	No
domain	- + Domain to not audit. - +	No
domain	- + The process type reading the state. - +	No
domain	- + The process type not to audit. - +	No
domain	- + The process type not to audit. - +	No
domain	- + The type of process not to audit. - +	No
domain	- + Domain to not audit. - +	No
domain	+ - - +	No
domain	- + The process type getting the attibutes. - +	No
domain	- + Domain allowed access. - +	No
domain	- + The process type getting the attributes. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
Parameter:	Description:	Optional:
-dir_type +domain	- -Directory type to list. - + +Domain allowed access. +	No
domain	- + Domain allowed access. - +	No
domain	- -Domain allowed access. - + +The process type to allow to load kernel modules. +	No
domain	- -The process type to allow to load kernel modules. - -	-No -

Parameter:	Description:	Optional:
-domain -	- The type of the domain mounting the filesystem. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- -The process type to allow to read the device sysctls. - -	-No -

Parameter:	Description:	Optional:
-dir_type -	- -Directory type to list. -	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- + The process type reading the messages. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- + The process type reading the state. - +	No
domain	- + The process type reading the state. - +	No
domain	- + Domain allowed access. - +	No
domain	- + The process type allowed to read the ring buffer. - +	No
?	- + Parameter descriptions are missing! - +	No
domain	- + The process type reading software raid state. - +	No
domain	- + The process type to allow to read sysctl directories. - +	No
domain	- + The process type reading the system state information. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- + The process type relabeling the objects. - +	No
domain	- -The type of the domain remounting the filesystem. - + +The process type relabeling the objects. +	No
Parameter:	Description:	Optional:
-directory_type +domain	- -The type of the directory to use as a mountpoint. - + +The process type relabeling the objects. +	No
domain	- -Domain allowed access. - + +The process type relabeling the objects. +	No
domain	- -Domain allowed access. - + +The process type relabeling the objects. +	No
domain	- -Domain allowed access. - + +The type of the domain remounting the filesystem. +	No
Parameter:	Description:	Optional:
-domain +directory_type	- -Domain allowed access. - + +The type of the directory to use as a mountpoint. +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
Parameter:	Description:	Optional:
-? +domain	- -Parameter descriptions are missing! - + +Domain allowed access. +	No
domain	- -The process type reading software raid state. - + +Domain allowed access. +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
Parameter:	Description:	Optional:
-domain +?	- -Domain allowed access. - + +Parameter descriptions are missing! +	No
domain	- -Domain allowed access. - + +The process type reading software raid state. +	No
domain	- + Domain allowed access. - +	No
Parameter:	Description:	Optional:
-dir_type +domain	- -Directory type to search. - + +Domain allowed access. +	No
domain	- -The process type reading the state. - + +Domain allowed access. +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
Parameter:	Description:	Optional:
-socket -	- -The type of the named socket file. - -	-No -
-syslog_type +domain	- -The domain of the syslog daemon. - + +The process type reading the state. +	No

Parameter:	Description:	Optional:
domain	- -The type of the process with which to share state information. - + +Domain allowed access. +	No
domain	- -The type of the process sending the signal. - + +Domain allowed access. +	No
domain	- -Domain receiving the SIGCHLD. - + +The type of the process with which to share state information. +	No
domain	- -Domain receiving the SIGCHLD. - + +The type of the process sending the signal. +	No
domain	- + Domain allowed access. - +	No
domain	- + The type of the process sending the signal. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- -The type of the receiving domain. - + +Domain allowed access. +	No
domain	- + Domain allowed access. - +	No
domain	- -The type of the domain unmounting the filesystem. - -	-No -

Parameter:	Description:	Optional:
-lib_type -	- -The type of the lib directories. - -	-No -
-ld_type -	- -The type of the dynamic link/loader. - -	-No -
-cache_type -	- -The type of the dynamic link/loader cache. - -	-No -

Parameter:	Description:	Optional:
-lib_dir_type -	- -The type of the lib directories. - -	-No -
-shlib_type -	- -Shared library type. -	No
domain	- -Domain allowed access. - -	-No -

Parameter:	Description:	Optional:
-domain -	- -The process type entered by kernel. - -	-No -
-entrypoint -	- -The executable type for the entrypoint. -	No
domain	- + Domain allowed access. - +	No

Parameter:	Description:	Optional:
+domain +	+ +Domain to not audit. +	No
domain	- + The type of the process to not audit. - +	No
domain	- + The type of the process to not audit. - +	No
domain	- -The type of the process to not audit. - + +Domain to not audit. +	No
domain	- + The type of the process to not audit. - +	No
domain	- -The type of the process performing this action. - + +The type of the process to not audit. +	No
domain	- -The type of the process performing this action. - + +Domain to not audit. +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process performing this action. + +	+No +

Parameter:	Description:	Optional:
+prefix +	+ +The prefix of the domain (e.g., user +is the prefix for user_t). + +	+No +
+domain +	+ +Domain allowed access. + +	+No +
+tmpfs_type +	+ +The type of the domain SYSV tmpfs files. + +	+No +

Parameter:	Description:	Optional:
-domain +source_domain	+ +Domain to transition from. + +	+No +
+target_domain +	+ +Domain to transition to. +	No
domain	- -Domain allowed access. - + +The domain for which init scripts are an entrypoint. +	No
domain	- + Domain allowed access. + +	+No +
+file_type +	+ +The type of the object to be created + +	+No +
+object_class +	+ +The object class. +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- -Type to be used as a domain. - -	-No -
-entry_point -	- -Type of the program to be used as an entry point to this domain. - + +Domain allowed access. +	No
domain	- + Domain allowed access. - +	No
domain	+ +Type to be used as a domain. + +	+No +
+entry_point +	+ +Type of the program to be used as an entry point to this domain. +	No
domain	- + Domain allowed access. - +	No
Parameter:	Description:	Optional:
-? +domain	- -Parameter descriptions are missing! - + +Domain allowed access. +	No
?	- + Parameter descriptions are missing! - +	No
?	- + Parameter descriptions are missing! - +	No
domain	- + Domain allowed access. - +	No
?	- + Parameter descriptions are missing! - +	No
domain	- + Domain allowed access. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- + The type of the process performing this action. - +	No
domain	- -The type of the process performing this action. - + +Domain allowed access. +	No
domain	- -The type of the process performing this action. - + +Domain allowed access. +	No
domain	- -The type of the process performing this action. - + +Domain allowed access. +	No
role	- + The role to be allowed the iptables domain. - +	No
terminal	- + The type of the terminal allow the iptables domain to use. - +	No

Parameter:	Description:	Optional:
+domain +	+ +Domain allowed to transition. +	No
domain	- + The type of the process performing this action. - +	No
domain	- + Domain to not audit. - +	No
domain	- + Domain to not audit. - +	No
domain	- + The type of the process performing this action. - +	No
?	- + Parameter descriptions are missing! - +	No
?	- + Parameter descriptions are missing! - +	No
?	- + Parameter descriptions are missing! - +	No
Parameter:	Description:	Optional:
-? +? +	+ +Parameter descriptions are missing! + +	+No +

Parameter:	Description:	Optional:
domain	- + Domain allowed access. - -	-No -
-file_type -	- -The type of the object to be created - +	No
-object_class -	- -The object class. If not specified, file is used. - -	-yes -

Parameter:	Description:	Optional:
+domain +	+ +Domain to make unconfined. +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain to not audit. - +	No
domain	- + Domain allowed access. - +	No
domain	- + The type of the process performing this action. - +	No
role	- + The role to allow the unconfined domain. - +	No
terminal	- + The type of the terminal allow the unconfined domain to use. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- + Domain allowed access. - +	No
domain	- -Domain allowed access. - -	-No -

Parameter:	Description:	Optional:
-domain -	- -Domain to make unconfined. -	No
domain	- + Domain allowed access. - +	No
-object_class -	- -The class of the object to be created. -If not specified, file is used. - -	-yes -

Interfaces:

Summary

Parameters

Summary

Parameters

Layer: admin

Module: bootloader

Description:

Interfaces:

Summary

Parameters

Summary

Parameters

Summary

Parameters

Summary

Parameters

Summary

Parameters

Summary

Parameters

Layer: admin

Module: certwatch

Description:

Interfaces:

Summary

Parameters

Summary

Parameters

Summary

Parameters

Layer: admin

Module: mrtg

Description:

Interfaces:

Summary

Parameters

Layer: admin

Module: portage

Description:

Interfaces:

Summary

Parameters

Summary

Parameters

Templates:

Summary

Description

Parameters

Summary

Parameters

Summary

Parameters

Layer: apps

Module: java

Description:

Interfaces:

Summary

Parameters

Templates:

Layer: apps

Module: mono

Description:

Interfaces:

Summary

Parameters

Layer: apps

Module: tvtime

Description:

Templates:

Summary

Description

Parameters

Layer: apps

Module: uml

Description:

Interfaces:

Summary

Parameters

Summary

Parameter:	Description:	Optional:
-userdomain_prefix +domain +	+ +Domain allowed access. +	+No +
+private type +	+ +The type of the object to be created. + +	+No +
+object_class +	+ +The class of the object to be created. +If not specified, file is used. +	No