Security Enhanced Linux Reference Policy

### Master template index:

Module: apache

Layer: services

apache_content_template( prefix )

Create a set of derived types for apache web content.

Module: courier

Layer: services

courier_domain_template( prefix )

Template for creating courier server processes.

Module: cron

Layer: services

cron_common_crontab_template( userdomain_prefix )

The common rules for a crontab domain.

Module: dbus

Layer: services

dbus_role_template( role_prefix , role , domain )

Role access for dbus

Module: djbdns

Layer: services

djbdns_daemontools_domain_template( prefix )

Create a set of derived types for djbdns components that are directly supervised by daemontools.

Module: java

Layer: apps

java_domtrans( domain )

Run java in javaplugin domain.

Module: kerberos

Layer: services

kerberos_keytab_template( prefix , domain )

Create a derived type for kerberos keytab

Module: lpd

Layer: services

lpd_domtrans_lpr( domain )

Transition to a user lpr domain.

Module: mailman

Layer: services

mailman_domain_template( userdomain_prefix )

The template to define a mailmain domain.

Module: milter

Layer: services

milter_template( milter_name )

Create a set of derived types for various mail filter applications using the milter interface.

Module: mta

Layer: services

mta_base_mail_template( domain_prefix )

Basic mail transfer agent domain template.

Module: postfix

Layer: services

postfix_domain_template( prefix )

Creates types and rules for a basic postfix process domain.

Module: postfix

Layer: services

postfix_server_domain_template( prefix )

Creates a postfix server process domain.

Module: postfix

Layer: services

postfix_user_domain_template( prefix )

Creates a process domain for programs that are ran by users.

Module: qemu

Layer: apps

qemu_domain_template( prefix )

Creates types and rules for a basic qemu process domain.

Module: qmail

Layer: services

qmail_child_domain_template( child_prefix , parent_domain )

Template for qmail parent/sub-domain pairs

Module: razor

Layer: services

razor_common_domain_template( prefix )

Template to create types and rules common to all razor domains.

Module: rlogin

Layer: services

rlogin_read_home_content( userdomain_prefix , user_domain )

read rlogin homedir content (.config)

Module: rpc

Layer: services

rpc_domain_template( userdomain_prefix )

The template to define a rpc domain.

Module: screen

Layer: apps

screen_role_template( role_prefix , user_role , user_domain )

The role template for the screen module.

Module: ssh

Layer: services

ssh_basic_client_template( userdomain_prefix , user_domain , user_role )

Basic SSH client template.

Module: ssh

Layer: services

ssh_role_template( role_prefix , role , domain )

Role access for ssh

Module: ssh

Layer: services

ssh_server_template( userdomain_prefix )

The template to define a ssh server.

Module: su

Layer: admin

su_restricted_domain_template( userdomain_prefix , user_domain , user_role )

Restricted su domain template.

Module: su

Layer: admin

su_role_template( role_prefix , user_role , user_domain )

The role template for the su module.

Module: sudo

Layer: admin

sudo_role_template( role_prefix , user_role , user_domain )

The role template for the sudo module.

Module: userdomain

Layer: system

userdom_admin_user_template( userdomain_prefix )

The template for creating an administrative user.

Module: userdomain

Layer: system

userdom_base_user_template( userdomain_prefix )

The template containing the most basic rules common to all users.

Module: userdomain

Layer: system

userdom_basic_networking_template( userdomain_prefix )

The template allowing the user basic network permissions

Module: userdomain

Layer: system

userdom_change_password_template( userdomain_prefix )

The template for allowing the user to change passwords.

Module: userdomain

Layer: system

userdom_common_user_template( userdomain_prefix )

The template containing rules common to unprivileged users and administrative users.

Module: userdomain

Layer: system

userdom_login_user_template( userdomain_prefix )

The template for creating a login user.

Module: userdomain

Layer: system

userdom_restricted_user_template( userdomain_prefix )

The template for creating a unprivileged login user.

Module: userdomain

Layer: system

userdom_restricted_xwindows_user_template( userdomain_prefix )

The template for creating a unprivileged xwindows login user.

Module: userdomain

Layer: system

userdom_security_admin_template( domain , role )

Allow user to run as a secadm

Module: userdomain

Layer: system

userdom_unpriv_user_template( userdomain_prefix )

The template for creating a unprivileged user roughly equivalent to a regular linux user.

Module: userdomain

Layer: system

userdom_xwindows_client_template( userdomain_prefix )

The template for creating a user xwindows client. (Deprecated)

Module: userhelper

Layer: apps

userhelper_role_template( userrole_prefix , user_role , user_domain )

The role template for the userhelper module.

Module: wm

Layer: apps

wm_role_template( role_prefix , user_role , user_domain )

The role template for the wm module.

Module: xserver

Layer: services

xserver_common_x_domain_template( prefix , domain )

Interface to provide X object permissions on a given X server to an X client domain. Provides the minimal set required by a basic X client application.

Module: xserver

Layer: services

xserver_object_types_template( prefix )

Template for creating the set of types used in an X windows domain.

Module: xserver

Layer: services

xserver_user_x_domain_template( prefix , domain , tmpfs_type )

Interface to provide X object permissions on a given X server to an X client domain. Provides the minimal set required by a basic X client application.