Security Enhanced Linux Reference Policy

### Master template index:

Module: apache

Layer: services

apache_content_template( prefix )

Create a set of derived types for httpd web content.

Module: cfengine

Layer: admin

cfengine_domain_template( domain_prefix )

The template to define a cfengine domain.

Module: condor

Layer: services

condor_domain_template( domain_prefix )

The template to define a condor domain.

Module: courier

Layer: services

courier_domain_template( domain_prefix )

The template to define a courier domain.

Module: cron

Layer: services

cron_common_crontab_template( domain_prefix )

The template to define a crontab domain.

Module: dbus

Layer: services

dbus_role_template( role_prefix , role , domain )

Role access for dbus.

Module: djbdns

Layer: services

djbdns_daemontools_domain_template( domain_prefix )

The template to define a djbdns domain.

Module: git

Layer: services

git_role( role , domain )

Role access for Git session.

Module: gnome

Layer: apps

gnome_role_template( role_prefix , user_role , user_domain )

The role template for gnome.

Module: hadoop

Layer: services

hadoop_domain_template( domain_prefix )

The template to define a hadoop domain.

Module: jabber

Layer: services

jabber_domain_template( domain_prefix )

The template to define a jabber domain.

Module: java

Layer: apps

java_role_template( role_prefix , user_role , user_domain )

The role template for the java module.

Module: kismet

Layer: admin

kismet_role( role , domain )

Role access for kismet.

Module: likewise

Layer: services

likewise_domain_template( userdomain_prefix )

The template to define a likewise domain.

Module: mailman

Layer: services

mailman_domain_template( domain_prefix )

The template to define a mailman domain.

Module: milter

Layer: services

milter_template( domain_prefix )

The template to define a milter domain.

Module: mono

Layer: apps

mono_role_template( role_prefix , user_role , user_domain )

The role template for the mono module.

Module: mta

Layer: services

mta_base_mail_template( domain_prefix )

The template to define a mail domain.

Module: munin

Layer: services

munin_plugin_template( domain_prefix )

The template to define a munin plugin domain.

Module: nagios

Layer: services

nagios_plugin_template( domain_prefix )

The template to define a nagios plugin domain.

Module: obex

Layer: services

obex_role_template( role_prefix , user_role , user_domain )

The role template for obex.

Module: polipo

Layer: services

polipo_role( role , domain )

Role access for Polipo session.

Module: postfix

Layer: services

postfix_domain_template( domain_prefix )

The template to define a postfix domain.

Module: postfix

Layer: services

postfix_server_domain_template( domain_prefix )

The template to define a postfix server domain.

Module: postfix

Layer: services

postfix_user_domain_template( domain_prefix )

The template to define a postfix user domain.

Module: qemu

Layer: apps

qemu_domain_template( domain_prefix )

The template to define a qemu domain.

Module: qemu

Layer: apps

qemu_role( role , domain )

Role access for qemu.

Module: qmail

Layer: services

qmail_child_domain_template( child_prefix , parent_domain )

Template for qmail parent/sub-domain pairs.

Module: razor

Layer: services

razor_common_domain_template( domain_prefix )

The template to define a razor domain.

Module: rhcs

Layer: services

rhcs_domain_template( domain_prefix )

The template to define a rhcs domain.

Module: rlogin

Layer: services

rlogin_read_home_content( domain )

Read rlogin user home content.

Module: rpc

Layer: services

rpc_domain_template( domain_prefix )

The template to define a rpc domain.

Module: samhain

Layer: admin

samhain_service_template( domain_prefix )

The template to define a samhain domain.

Module: screen

Layer: apps

screen_role_template( role_prefix , user_role , user_domain )

The role template for the screen module.

Module: ssh

Layer: services

ssh_basic_client_template( userdomain_prefix , user_domain , user_role )

Basic SSH client template.

Module: ssh

Layer: services

ssh_role_template( role_prefix , role , domain )

Role access for ssh

Module: ssh

Layer: services

ssh_server_template( userdomain_prefix )

The template to define a ssh server.

Module: su

Layer: admin

su_restricted_domain_template( userdomain_prefix , user_domain , user_role )

Restricted su domain template.

Module: su

Layer: admin

su_role_template( role_prefix , user_role , user_domain )

The role template for the su module.

Module: sudo

Layer: admin

sudo_role_template( role_prefix , user_role , user_domain )

The role template for the sudo module.

Module: systemd

Layer: system

systemd_role_template( prefix , role , userdomain , pty_type )

Template for systemd --user per-role domains.

Module: telepathy

Layer: apps

telepathy_domain_template( domain_prefix )

The template to define a telepathy domain.

Module: telepathy

Layer: apps

telepathy_role_template( role_prefix , user_role , user_domain )

The role template for the telepathy module.

Module: userdomain

Layer: system

userdom_admin_user_template( userdomain_prefix )

The template for creating an administrative user.

Module: userdomain

Layer: system

userdom_base_user_template( userdomain_prefix )

The template containing the most basic rules common to all users.

Module: userdomain

Layer: system

userdom_basic_networking_template( userdomain_prefix )

The template allowing the user basic network permissions

Module: userdomain

Layer: system

userdom_change_password_template( userdomain_prefix )

The template for allowing the user to change passwords.

Module: userdomain

Layer: system

userdom_common_user_template( userdomain_prefix )

The template containing rules common to unprivileged users and administrative users.

Module: userdomain

Layer: system

userdom_login_user_template( userdomain_prefix )

The template for creating a login user.

Module: userdomain

Layer: system

userdom_restricted_user_template( userdomain_prefix )

The template for creating a unprivileged login user.

Module: userdomain

Layer: system

userdom_restricted_xwindows_user_template( userdomain_prefix )

The template for creating a unprivileged xwindows login user.

Module: userdomain

Layer: system

userdom_security_admin_template( domain , role )

Allow user to run as a secadm

Module: userdomain

Layer: system

userdom_unpriv_user_template( userdomain_prefix )

The template for creating a unprivileged user roughly equivalent to a regular linux user.

Module: userdomain

Layer: system

userdom_user_content_access_template( prefix , domain )

Template for handling user content through standard tunables

Module: userdomain

Layer: system

userdom_xdg_user_template( domain )

Allow user to interact with xdg content types

Module: userhelper

Layer: apps

userhelper_role_template( userrole_prefix , user_role , user_domain )

The role template for the userhelper module.

Module: virt

Layer: services

virt_domain_template( domain_prefix )

The template to define a virt domain.

Module: virt

Layer: services

virt_lxc_domain_template( domain_prefix )

The template to define a virt lxc domain.

Module: wine

Layer: apps

wine_role_template( role_prefix , user_role , user_domain )

The role template for the wine module.

Module: wm

Layer: apps

wm_role_template( role_prefix , user_role , user_domain )

The role template for the wm module.

Module: xserver

Layer: services

xserver_common_x_domain_template( prefix , domain )

Interface to provide X object permissions on a given X server to an X client domain. Provides the minimal set required by a basic X client application.

Module: xserver

Layer: services

xserver_object_types_template( prefix )

Template for creating the set of types used in an X windows domain.

Module: xserver

Layer: services

xserver_user_x_domain_template( prefix , domain , tmpfs_type )

Interface to provide X object permissions on a given X server to an X client domain. Provides the minimal set required by a basic X client application.

Module: zarafa

Layer: services

zarafa_domain_template( domain_prefix )

The template to define a zarafa domain.