Security Enhanced Linux Reference Policy

# Layer: services

Policy modules for system services, like cron, and network services, like sshd.

Module: | Description:
abrt | Automated bug-reporting tool.
accountsd | AccountsService and daemon for manipulating user account information via D-Bus.
acpi | Advanced power management.
afs | Andrew Filesystem server.
aiccu | Automatic IPv6 Connectivity Client Utility.
aisexec | Aisexec Cluster Engine.
amavis | High-performance interface between an email server and content checkers.
apache | Various web servers.
apcupsd | APC UPS monitoring daemon.
aptcacher | apt-cacher, cache for Debian APT repositories.
arpwatch | Ethernet activity monitor.
asterisk | Asterisk IP telephony server.
automount | Filesystem automounter service.
avahi | mDNS/DNS-SD daemon implementing Apple ZeroConf architecture.
bind | Berkeley Internet name domain DNS server.
bird | BIRD Internet Routing Daemon.
bitlbee | Tunnels instant messaging traffic to a virtual IRC channel.
bluetooth | Bluetooth tools and system services.
boinc | Platform for computing using volunteered resources.
bugzilla | Bugtracker.
cachefilesd | CacheFiles user-space management daemon.
callweaver | PBX software.
canna | Kana-kanji conversion server.
ccs | Cluster Configuration System.
certbot | SSL certificate requesting tool certbot AKA letsencrypt.
certmaster | Remote certificate distribution framework.
certmonger | Certificate status monitor and PKI enrollment client.
cgmanager | Control Group manager daemon.
cgroup | libcg is a library that abstracts the control group file system in Linux.
chronyd | Chrony NTP background daemon.
cipe | Encrypted tunnel daemon.
clamav | ClamAV Virus Scanner.
clockspeed | Clock speed measurement and manipulation.
clogd | Clustered Mirror Log Server.
cmirrord | Cluster mirror log daemon.
cobbler | Cobbler installation server.
collectd | Statistics collection daemon for filling RRD files.
colord | GNOME color manager.
comsat | Comsat, a biff server.
condor | High-Throughput Computing System.
consolesetup | console font and keymap setup program for debian
corosync | Corosync Cluster Engine.
couchdb | Document database server.
courier | Courier IMAP and POP3 email servers.
cpucontrol | Services for loading CPU microcode and CPU frequency scaling.
cron | Periodic execution of scheduled commands.
ctdb | Clustered Database based on Samba Trivial Database.
cups | Common UNIX printing system.
cvs | Concurrent versions system.
cyphesis | Cyphesis WorldForge game server.
cyrus | Cyrus is an IMAP service intended to be run on sealed servers.
dante | Dante msproxy and socks4/5 proxy server.
dbskk | Dictionary server for the SKK Japanese input method system.
dbus | Desktop messaging bus.
dcc | Distributed checksum clearinghouse spam filtering.
ddclient | Update dynamic IP address at DynDNS.org.
denyhosts | SSH dictionary attack mitigation.
devicekit | Devicekit modular hardware abstraction layer.
dhcp | Dynamic host configuration protocol server.
dictd | Dictionary daemon.
dirmngr | Server for managing and downloading certificate revocation lists.
distcc | Distributed compiler daemon.
djbdns | Small and secure DNS daemon.
dkim | DomainKeys Identified Mail milter.
dnsmasq | DNS forwarder and DHCP server.
dovecot | POP and IMAP mail server.
drbd | Mirrors a block device over the network to another machine.
dspam | Content-based spam filter designed for multi-user enterprise systems.
entropyd | Generate entropy from audio input.
exim | Mail transfer agent.
fail2ban | Update firewall filtering to ban IP addresses with too many password failures.
fcoe | Fibre Channel over Ethernet utilities.
fetchmail | Remote-mail retrieval and forwarding utility.
finger | Finger user information service.
firewalld | Service daemon with a D-BUS interface that provides a dynamic managed firewall.
fprintd | DBus fingerprint reader service.
ftp | File transfer protocol service.
gatekeeper | OpenH.323 Voice-Over-IP Gatekeeper.
gdomap | GNUstep distributed object mapper.
geoclue | Geoclue is a D-Bus service that provides location information.
git | GIT revision control system.
glance | OpenStack image registry and delivery service.
glusterfs | Cluster File System binary, daemon and command line.
gnomeclock | Gnome clock handler for setting the time.
gpm | General Purpose Mouse driver.
gpsd | gpsd monitor daemon.
gssproxy | policy for gssproxy - daemon to proxy GSSAPI context establishment and channel handling
hadoop | Software for reliable, scalable, distributed computing.
hddtemp | Hard disk temperature tool running as a daemon.
hostapd | IEEE 802.11 wireless LAN Host AP daemon.
howl | Port of Apple Rendezvous multicast DNS.
hypervkvp | HyperV key value pair (KVP).
i18n_input | IIIMF htt server.
icecast | ShoutCast compatible streaming media server.
ifplugd | Bring up/down ethernet interfaces based on cable detection.
imaze | iMaze game server.
inetd | Internet services daemon.
inn | Internet News NNTP server.
iodine | IP over DNS tunneling daemon.
ircd | IRC servers.
irqbalance | IRQ balancing daemon.
isns | Internet Storage Name Service.
jabber | Jabber instant messaging servers.
jockey | Jockey driver manager.
kerberos | MIT Kerberos admin and KDC.
kerneloops | Service for reporting kernel oopses to kerneloops.org.
keystone | Python implementation of the OpenStack identity service API.
knot | high-performance authoritative-only DNS server.
ksmtuned | Kernel Samepage Merging Tuning Daemon.
ktalk | KDE Talk daemon.
l2tp | Layer 2 Tunneling Protocol.
ldap | OpenLDAP directory server.
likewise | Likewise Active Directory support for UNIX.
lircd | Linux infared remote control daemon.
lldpad | Intel LLDP Agent.
lpd | Line printer daemon.
lsm | Storage array management library.
mailman | Manage electronic mail discussion and e-newsletter lists.
mailscanner | E-mail security and anti-spam package for e-mail gateway systems.
mediawiki | Open source wiki package written in PHP.
memcached | High-performance memory object caching system.
memlockd | memory lock daemon, keeps important files in RAM.
milter | Milter mail filters.
minidlna | MiniDLNA lightweight DLNA/UPnP media server
minissdpd | Daemon used by MiniUPnPc to speed up device discoveries.
modemmanager | Provides a DBus interface to communicate with mobile broadband (GSM, CDMA, UMTS, ...) cards.
mojomojo | MojoMojo Wiki.
mon | mon network monitoring daemon.
mongodb | Scalable, high-performance, open source NoSQL database.
monit | Monit - utility for monitoring services on a Unix system.
monop | Monopoly daemon.
mpd | Music Player Daemon.
mta | Common e-mail transfer agent policy.
munin | Munin network-wide load graphing.
mysql | Open source database.
nagios | Network monitoring server.
nessus | Network scanning daemon.
networkmanager | Manager for dynamically switching between networks.
nis | Policy for NIS (YP) servers and clients.
nscd | Name service cache daemon.
nsd | Authoritative only name server.
nslcd | Local LDAP name service daemon.
ntop | A network traffic probe similar to the UNIX top command.
ntp | Network time protocol daemon.
numad | Non-Uniform Memory Alignment Daemon.
nut | Network UPS Tools
nx | NX remote desktop.
oav | Open AntiVirus scannerdaemon and signature update.
obex | D-Bus service providing high-level OBEX client and server side functionality.
oddjob | D-BUS service which runs odd jobs on behalf of client applications.
oident | An ident daemon with IP masq/NAT support and the ability to specify responses.
openca | Open Certificate Authority.
openct | Service for handling smart card readers.
openhpi | Open source implementation of the Service Availability Forum Hardware Platform Interface.
openvpn | full-featured SSL VPN solution.
openvswitch | Multilayer virtual switch.
pacemaker | A scalable high-availability cluster resource manager.
pads | Passive Asset Detection System.
pcscd | PCSC smart card service.
pegasus | The Open Group Pegasus CIM/WBEM Server.
perdition | Perdition POP and IMAP proxy.
pingd | Pingd of the Whatsup cluster node up/down detection utility.
pkcs | Implementations of the Cryptoki specification.
plymouthd | Plymouth graphical boot.
policykit | Policy framework for controlling privileges for system-wide services.
polipo | Lightweight forwarding and caching proxy server.
portmap | RPC port mapping service.
portreserve | Reserve well-known ports in the RPC port range.
portslave | Portslave terminal server software.
postfix | Postfix email server.
postfixpolicyd | Postfix policy server.
postgresql | PostgreSQL relational database
postgrey | Postfix grey-listing server.
ppp | Point to Point Protocol daemon creates links in ppp networks.
prelude | Prelude hybrid intrusion detection system.
privoxy | Privacy enhancing web proxy.
procmail | Procmail mail delivery agent.
psad | Intrusion Detection and Log Analysis with iptables.
publicfile | publicfile supplies files to the public through HTTP and FTP.
pwauth | External plugin for mod_authnz_external authenticator.
pxe | Server for the PXE network boot protocol.
pyicqt | ICQ transport for XMPP server.
pyzor | Pyzor is a distributed, collaborative spam detection and filtering network.
qmail | Qmail Mail Server.
qpid | Apache QPID AMQP messaging server.
quantum | Virtual network service for Openstack.
rabbitmq | AMQP server written in Erlang.
radius | RADIUS authentication and accounting server.
radvd | IPv6 router advertisement daemon.
razor | A distributed, collaborative, spam detection and filtering network.
rdisc | Network router discovery daemon.
realmd | Dbus system service which manages discovery and enrollment in realms and domains like Active Directory or IPA.
redis | Advanced key-value store.
remotelogin | Rshd, rlogind, and telnetd.
resmgr | Resource management daemon.
rgmanager | Resource Group Manager.
rhcs | Red Hat Cluster Suite.
rhsmcertd | Subscription Management Certificate Daemon.
ricci | Ricci cluster management agent.
rlogin | Remote login daemon.
rngd | Check and feed random data from hardware device to kernel random device.
rpc | Remote Procedure Call Daemon.
rpcbind | Universal Addresses to RPC Program Number Mapper.
rshd | Remote shell service.
rsync | Fast incremental file transfer for synchronization.
rtkit | Realtime scheduling for user processes.
rwho | Who is logged in on other machines?
samba | SMB and CIFS client/server programs.
sanlock | shared storage lock manager.
sasl | SASL authentication server.
sendmail | Internetwork email routing facility.
sensord | Sensor information logging daemon.
setroubleshoot | SELinux troubleshooting service.
shibboleth | Shibboleth authentication daemon
slpd | OpenSLP server daemon to dynamically register services.
slrnpull | Service for downloading news feeds the slrn newsreader.
smartmon | Smart disk monitoring daemon.
smokeping | Smokeping network latency measurement.
smstools | Tools to send and receive short messages through GSM modems or mobile phones.
snmp | Simple network management protocol services.
snort | Snort network intrusion detection system.
soundserver | sound server for network audio server programs, nasd, yiff, etc
spamassassin | Filter used for removing unsolicited email.
squid | Squid caching http proxy server.
ssh | Secure shell client and server policy.
sssd | System Security Services Daemon.
stubby | DNS Privacy stub resolver.
stunnel | SSL Tunneling Proxy.
svnserve | Server for the svn repository access method.
sysstat | Reports on various system states.
systemtap | instrumentation system for Linux.
tcpd | TCP daemon.
tcsd | TSS Core Services daemon.
telnet | Telnet daemon.
tftp | Trivial file transfer protocol daemon.
tgtd | Linux Target Framework Daemon.
timidity | MIDI to WAV converter and player configured as a service.
tor | The onion router.
tpm2 | Trusted Platform Module 2.0
transproxy | Portable Transparent Proxy Solution.
tuned | Dynamic adaptive system tuning daemon.
ucspitcp | UNIX Client-Server Program Interface for TCP.
ulogd | Iptables/netfilter userspace logging daemon.
uptime | Daemon to record and keep track of system up times.
usbmuxd | USB multiplexing daemon for communicating with Apple iPod Touch and iPhone.
uucp | Unix to Unix Copy.
uuidd | UUID generation daemon.
uwimap | University of Washington IMAP toolkit POP3 and IMAP mail server.
varnishd | Varnishd http accelerator daemon.
vdagent | Spice agent for Linux.
vhostmd | Virtual host metrics daemon.
virt | Libvirt virtualization API.
vnstatd | Console network traffic monitor.
watchdog | Software watchdog.
wdmd | Watchdog multiplexing daemon.
wireguard | WireGuard VPN.
xfs | X Windows Font Server.
xserver | X Windows Server
zabbix | Distributed infrastructure monitoring.
zarafa | Zarafa collaboration platform.
zebra | Zebra border gateway protocol network routing service.
zosremote | z/OS Remote-services Audit dispatcher plugin.