Layer: admin

Module:Description:
dmesg

Policy for dmesg.

rpm

Policy for the RPM package manager.

usermanage

Policy for managing user accounts.



Layer: kernel

Module:Description:
bootloader

Policy for the kernel modules, kernel image, and bootloader.

corenetwork

Policy controlling access to network objects

devices

Device nodes and interfaces for many basic system devices.

filesystem

Policy for filesystems.

kernel

Policy for kernel threads, proc filesystem, and unlabeled processes and objects.

selinux

Policy for kernel security interface, in particular, selinuxfs.

storage

Policy controlling access to storage devices

terminal

Policy for terminals.



Layer: services

Module:Description:
mta

Policy common to all email tranfer agents.

remotelogin

Policy for rshd, rlogind, and telnetd.

sendmail

Policy for sendmail.



Layer: system

Module:Description:
authlogin

Common policy for authentication and user login.

clock

Policy for reading and setting the hardware clock.

corecommands

Core policy for shells, and generic programs in /bin, /sbin, /usr/bin, and /usr/sbin.

domain

Core policy for domains.

files

Basic filesystem types and interfaces.

getty

Policy for getty.

hostname

Policy for changing the system host name.

hotplug

Policy for hotplug system, for supporting the connection and disconnection of devices at runtime.

init

System initialization programs (init and init scripts).

iptables

Policy for iptables.

libraries

Policy for system libraries.

locallogin

Policy for local logins.

logging

Policy for the kernel message logger and system logging daemon.

lvm

Policy for logical volume management programs.

miscfiles

Miscelaneous files.

modutils

Policy for kernel module utilities

mount

Policy for mount.

selinuxutil

Policy for SELinux policy and userland applications.

sysnetwork

Policy for network configuration: ifconfig and dhcp client.

udev

Policy for udev.

userdomain

Policy for user domains