[selinux-policy: 629/3172] update for release
Daniel J Walsh
dwalsh at fedoraproject.org
Thu Oct 7 19:59:01 UTC 2010
commit e376adf26ea51c918e4f619e03749e09857a48a1
Author: Chris PeBenito <cpebenito at tresys.com>
Date: Wed Sep 7 14:45:49 2005 +0000
update for release
www/api-docs/admin_acct.html | 1 +
www/api-docs/admin_consoletype.html | 1 +
www/api-docs/admin_dmesg.html | 1 +
www/api-docs/admin_firstboot.html | 44 +
www/api-docs/admin_logrotate.html | 43 +
www/api-docs/admin_netutils.html | 1 +
www/api-docs/admin_quota.html | 1 +
www/api-docs/admin_rpm.html | 1 +
www/api-docs/admin_su.html | 37 +
www/api-docs/admin_sudo.html | 37 +
www/api-docs/admin_tmpreaper.html | 1 +
www/api-docs/admin_updfstab.html | 1 +
www/api-docs/admin_usermanage.html | 1 +
www/api-docs/apps_gpg.html | 38 +
www/api-docs/apps_loadkeys.html | 1 +
www/api-docs/global_booleans.html | 24 +
www/api-docs/global_tunables.html | 24 +
www/api-docs/index.html | 64 ++
www/api-docs/interfaces.html | 1491 +++++++++++++++++++++++++++++++-
www/api-docs/kernel_bootloader.html | 44 +
www/api-docs/kernel_corenetwork.html | 295 +++++++
www/api-docs/kernel_devices.html | 43 +
www/api-docs/kernel_filesystem.html | 1 +
www/api-docs/kernel_kernel.html | 44 +
www/api-docs/kernel_selinux.html | 44 +
www/api-docs/kernel_storage.html | 1 +
www/api-docs/kernel_terminal.html | 44 +
www/api-docs/services.html | 64 ++
www/api-docs/services_bind.html | 67 ++
www/api-docs/services_comsat.html | 150 ++++
www/api-docs/services_cron.html | 319 +++++++-
www/api-docs/services_dbus.html | 402 +++++++++
www/api-docs/services_dhcp.html | 197 +++++
www/api-docs/services_dictd.html | 197 +++++
www/api-docs/services_gpm.html | 25 +
www/api-docs/services_hal.html | 150 ++++
www/api-docs/services_howl.html | 27 +
www/api-docs/services_inetd.html | 25 +
www/api-docs/services_inn.html | 492 +++++++++++
www/api-docs/services_kerberos.html | 25 +
www/api-docs/services_ldap.html | 25 +
www/api-docs/services_mta.html | 256 ++++++-
www/api-docs/services_mysql.html | 25 +
www/api-docs/services_nis.html | 25 +
www/api-docs/services_nscd.html | 25 +
www/api-docs/services_ntp.html | 238 +++++
www/api-docs/services_privoxy.html | 27 +
www/api-docs/services_remotelogin.html | 25 +
www/api-docs/services_rshd.html | 25 +
www/api-docs/services_rsync.html | 27 +
www/api-docs/services_sendmail.html | 25 +
www/api-docs/services_squid.html | 323 +++++++
www/api-docs/services_ssh.html | 61 ++
www/api-docs/services_tcpd.html | 27 +
www/api-docs/system_authlogin.html | 37 +
www/api-docs/system_clock.html | 1 +
www/api-docs/system_corecommands.html | 84 ++
www/api-docs/system_domain.html | 1 +
www/api-docs/system_files.html | 179 ++++-
www/api-docs/system_fstools.html | 1 +
www/api-docs/system_getty.html | 1 +
www/api-docs/system_hostname.html | 1 +
www/api-docs/system_hotplug.html | 1 +
www/api-docs/system_init.html | 51 +-
www/api-docs/system_ipsec.html | 1 +
www/api-docs/system_iptables.html | 1 +
www/api-docs/system_libraries.html | 1 +
www/api-docs/system_locallogin.html | 1 +
www/api-docs/system_logging.html | 1 +
www/api-docs/system_lvm.html | 1 +
www/api-docs/system_miscfiles.html | 1 +
www/api-docs/system_modutils.html | 1 +
www/api-docs/system_mount.html | 1 +
www/api-docs/system_pcmcia.html | 1 +
www/api-docs/system_raid.html | 1 +
www/api-docs/system_selinuxutil.html | 1 +
www/api-docs/system_sysnetwork.html | 179 ++++
www/api-docs/system_udev.html | 1 +
www/api-docs/system_unconfined.html | 1 +
www/api-docs/system_userdomain.html | 274 +++++--
www/api-docs/templates.html | 287 ++++++-
www/html/status.html | 40 +-
82 files changed, 6638 insertions(+), 115 deletions(-)
---
diff --git a/www/api-docs/admin_acct.html b/www/api-docs/admin_acct.html
index f74113d..4766979 100644
--- a/www/api-docs/admin_acct.html
+++ b/www/api-docs/admin_acct.html
@@ -277,6 +277,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/admin_consoletype.html b/www/api-docs/admin_consoletype.html
index ef60f2d..209af26 100644
--- a/www/api-docs/admin_consoletype.html
+++ b/www/api-docs/admin_consoletype.html
@@ -195,6 +195,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/admin_dmesg.html b/www/api-docs/admin_dmesg.html
index c8eb76b..9edc343 100644
--- a/www/api-docs/admin_dmesg.html
+++ b/www/api-docs/admin_dmesg.html
@@ -193,6 +193,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/admin_firstboot.html b/www/api-docs/admin_firstboot.html
index 6e5b668..f9ec048 100644
--- a/www/api-docs/admin_firstboot.html
+++ b/www/api-docs/admin_firstboot.html
@@ -149,6 +149,49 @@ No
</div>
</div>
+<a name="link_firstboot_dontaudit_use_fd"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>firstboot_dontaudit_use_fd</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Do not audit attempts to inherit a
+file descriptor from firstboot.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+Domain to not audit.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
<a name="link_firstboot_run"></a>
<div id="interface">
@@ -317,6 +360,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/admin_logrotate.html b/www/api-docs/admin_logrotate.html
index b0f9b85..08da1cb 100644
--- a/www/api-docs/admin_logrotate.html
+++ b/www/api-docs/admin_logrotate.html
@@ -230,6 +230,48 @@ No
</div>
</div>
+<a name="link_logrotate_read_tmp_files"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>logrotate_read_tmp_files</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Read a logrotate temporary files.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+The type of the process to not audit.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
<a name="link_logrotate_run"></a>
<div id="interface">
@@ -314,6 +356,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/admin_netutils.html b/www/api-docs/admin_netutils.html
index 28de26b..f26a591 100644
--- a/www/api-docs/admin_netutils.html
+++ b/www/api-docs/admin_netutils.html
@@ -598,6 +598,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/admin_quota.html b/www/api-docs/admin_quota.html
index db3a1a2..4775045 100644
--- a/www/api-docs/admin_quota.html
+++ b/www/api-docs/admin_quota.html
@@ -315,6 +315,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/admin_rpm.html b/www/api-docs/admin_rpm.html
index 8320490..a0bae7c 100644
--- a/www/api-docs/admin_rpm.html
+++ b/www/api-docs/admin_rpm.html
@@ -523,6 +523,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/admin_su.html b/www/api-docs/admin_su.html
index 3666cdf..30884d8 100644
--- a/www/api-docs/admin_su.html
+++ b/www/api-docs/admin_su.html
@@ -119,6 +119,22 @@
userdomain_prefix
+
+ ,
+
+
+
+ user_domain
+
+
+
+ ,
+
+
+
+ user_role
+
+
)<br>
</div>
<div id="description">
@@ -158,6 +174,26 @@ is the prefix for user_t).
No
</td></tr>
+<tr><td>
+user_domain
+</td><td>
+
+The type of the user domain.
+
+</td><td>
+No
+</td></tr>
+
+<tr><td>
+user_role
+</td><td>
+
+The role associated with the user domain.
+
+</td><td>
+No
+</td></tr>
+
</table>
</div>
</div>
@@ -166,6 +202,7 @@ No
<a href=#top>Return</a>
+
</div>
</body>
</html>
diff --git a/www/api-docs/admin_sudo.html b/www/api-docs/admin_sudo.html
index b0eff4b..be26665 100644
--- a/www/api-docs/admin_sudo.html
+++ b/www/api-docs/admin_sudo.html
@@ -119,6 +119,22 @@
userdomain_prefix
+
+ ,
+
+
+
+ user_domain
+
+
+
+ ,
+
+
+
+ user_role
+
+
)<br>
</div>
<div id="description">
@@ -158,6 +174,26 @@ is the prefix for user_t).
No
</td></tr>
+<tr><td>
+user_domain
+</td><td>
+
+The type of the user domain.
+
+</td><td>
+No
+</td></tr>
+
+<tr><td>
+user_role
+</td><td>
+
+The role associated with the user domain.
+
+</td><td>
+No
+</td></tr>
+
</table>
</div>
</div>
@@ -166,6 +202,7 @@ No
<a href=#top>Return</a>
+
</div>
</body>
</html>
diff --git a/www/api-docs/admin_tmpreaper.html b/www/api-docs/admin_tmpreaper.html
index 5009cd5..2be113d 100644
--- a/www/api-docs/admin_tmpreaper.html
+++ b/www/api-docs/admin_tmpreaper.html
@@ -151,6 +151,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/admin_updfstab.html b/www/api-docs/admin_updfstab.html
index fb5556e..3012cac 100644
--- a/www/api-docs/admin_updfstab.html
+++ b/www/api-docs/admin_updfstab.html
@@ -151,6 +151,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/admin_usermanage.html b/www/api-docs/admin_usermanage.html
index 8f12442..f856d86 100644
--- a/www/api-docs/admin_usermanage.html
+++ b/www/api-docs/admin_usermanage.html
@@ -635,6 +635,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/apps_gpg.html b/www/api-docs/apps_gpg.html
index 8ae7d90..4fc6416 100644
--- a/www/api-docs/apps_gpg.html
+++ b/www/api-docs/apps_gpg.html
@@ -86,6 +86,22 @@
userdomain_prefix
+
+ ,
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
)<br>
</div>
<div id="description">
@@ -126,6 +142,27 @@ is the prefix for user_t).
No
</td></tr>
+<tr><td>
+userdomain_prefix
+</td><td>
+
+The prefix of the user domain (e.g., user
+is the prefix for user_t).
+
+</td><td>
+No
+</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+The type of the process performing this action.
+
+</td><td>
+No
+</td></tr>
+
</table>
</div>
</div>
@@ -134,6 +171,7 @@ No
<a href=#top>Return</a>
+
</div>
</body>
</html>
diff --git a/www/api-docs/apps_loadkeys.html b/www/api-docs/apps_loadkeys.html
index 37de9b0..fde47c4 100644
--- a/www/api-docs/apps_loadkeys.html
+++ b/www/api-docs/apps_loadkeys.html
@@ -238,6 +238,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/global_booleans.html b/www/api-docs/global_booleans.html
index 40075d2..d747b17 100644
--- a/www/api-docs/global_booleans.html
+++ b/www/api-docs/global_booleans.html
@@ -103,18 +103,36 @@
- <a href='services_bind.html'>
bind</a><br/>
+ - <a href='services_comsat.html'>
+ comsat</a><br/>
+
- <a href='services_cron.html'>
cron</a><br/>
+ - <a href='services_dbus.html'>
+ dbus</a><br/>
+
+ - <a href='services_dhcp.html'>
+ dhcp</a><br/>
+
+ - <a href='services_dictd.html'>
+ dictd</a><br/>
+
- <a href='services_gpm.html'>
gpm</a><br/>
+ - <a href='services_hal.html'>
+ hal</a><br/>
+
- <a href='services_howl.html'>
howl</a><br/>
- <a href='services_inetd.html'>
inetd</a><br/>
+ - <a href='services_inn.html'>
+ inn</a><br/>
+
- <a href='services_kerberos.html'>
kerberos</a><br/>
@@ -133,6 +151,9 @@
- <a href='services_nscd.html'>
nscd</a><br/>
+ - <a href='services_ntp.html'>
+ ntp</a><br/>
+
- <a href='services_privoxy.html'>
privoxy</a><br/>
@@ -148,6 +169,9 @@
- <a href='services_sendmail.html'>
sendmail</a><br/>
+ - <a href='services_squid.html'>
+ squid</a><br/>
+
- <a href='services_ssh.html'>
ssh</a><br/>
diff --git a/www/api-docs/global_tunables.html b/www/api-docs/global_tunables.html
index c60ff47..91c3047 100644
--- a/www/api-docs/global_tunables.html
+++ b/www/api-docs/global_tunables.html
@@ -103,18 +103,36 @@
- <a href='services_bind.html'>
bind</a><br/>
+ - <a href='services_comsat.html'>
+ comsat</a><br/>
+
- <a href='services_cron.html'>
cron</a><br/>
+ - <a href='services_dbus.html'>
+ dbus</a><br/>
+
+ - <a href='services_dhcp.html'>
+ dhcp</a><br/>
+
+ - <a href='services_dictd.html'>
+ dictd</a><br/>
+
- <a href='services_gpm.html'>
gpm</a><br/>
+ - <a href='services_hal.html'>
+ hal</a><br/>
+
- <a href='services_howl.html'>
howl</a><br/>
- <a href='services_inetd.html'>
inetd</a><br/>
+ - <a href='services_inn.html'>
+ inn</a><br/>
+
- <a href='services_kerberos.html'>
kerberos</a><br/>
@@ -133,6 +151,9 @@
- <a href='services_nscd.html'>
nscd</a><br/>
+ - <a href='services_ntp.html'>
+ ntp</a><br/>
+
- <a href='services_privoxy.html'>
privoxy</a><br/>
@@ -148,6 +169,9 @@
- <a href='services_sendmail.html'>
sendmail</a><br/>
+ - <a href='services_squid.html'>
+ squid</a><br/>
+
- <a href='services_ssh.html'>
ssh</a><br/>
diff --git a/www/api-docs/index.html b/www/api-docs/index.html
index 07cb0df..a09f563 100644
--- a/www/api-docs/index.html
+++ b/www/api-docs/index.html
@@ -103,18 +103,36 @@
- <a href='services_bind.html'>
bind</a><br/>
+ - <a href='services_comsat.html'>
+ comsat</a><br/>
+
- <a href='services_cron.html'>
cron</a><br/>
+ - <a href='services_dbus.html'>
+ dbus</a><br/>
+
+ - <a href='services_dhcp.html'>
+ dhcp</a><br/>
+
+ - <a href='services_dictd.html'>
+ dictd</a><br/>
+
- <a href='services_gpm.html'>
gpm</a><br/>
+ - <a href='services_hal.html'>
+ hal</a><br/>
+
- <a href='services_howl.html'>
howl</a><br/>
- <a href='services_inetd.html'>
inetd</a><br/>
+ - <a href='services_inn.html'>
+ inn</a><br/>
+
- <a href='services_kerberos.html'>
kerberos</a><br/>
@@ -133,6 +151,9 @@
- <a href='services_nscd.html'>
nscd</a><br/>
+ - <a href='services_ntp.html'>
+ ntp</a><br/>
+
- <a href='services_privoxy.html'>
privoxy</a><br/>
@@ -148,6 +169,9 @@
- <a href='services_sendmail.html'>
sendmail</a><br/>
+ - <a href='services_squid.html'>
+ squid</a><br/>
+
- <a href='services_ssh.html'>
ssh</a><br/>
@@ -655,16 +679,41 @@ connection and disconnection of devices at runtime.
<td><p>Berkeley internet name domain DNS server.</p></td>
<tr><td>
+ <a href='services_comsat.html'>
+ comsat</a></td>
+ <td><p>Comsat, a biff server.</p></td>
+
+ <tr><td>
<a href='services_cron.html'>
cron</a></td>
<td><p>Periodic execution of scheduled commands.</p></td>
<tr><td>
+ <a href='services_dbus.html'>
+ dbus</a></td>
+ <td><p>Desktop messaging bus</p></td>
+
+ <tr><td>
+ <a href='services_dhcp.html'>
+ dhcp</a></td>
+ <td><p>Dynamic host configuration protocol (DHCP) server</p></td>
+
+ <tr><td>
+ <a href='services_dictd.html'>
+ dictd</a></td>
+ <td><p>Dictionary daemon</p></td>
+
+ <tr><td>
<a href='services_gpm.html'>
gpm</a></td>
<td><p>General Purpose Mouse driver</p></td>
<tr><td>
+ <a href='services_hal.html'>
+ hal</a></td>
+ <td><p>Hardware abstraction layer</p></td>
+
+ <tr><td>
<a href='services_howl.html'>
howl</a></td>
<td><p>Port of Apple Rendezvous multicast DNS</p></td>
@@ -675,6 +724,11 @@ connection and disconnection of devices at runtime.
<td><p>Internet services daemon.</p></td>
<tr><td>
+ <a href='services_inn.html'>
+ inn</a></td>
+ <td><p>Internet News NNTP server</p></td>
+
+ <tr><td>
<a href='services_kerberos.html'>
kerberos</a></td>
<td><p>MIT Kerberos admin and KDC</p></td>
@@ -705,6 +759,11 @@ connection and disconnection of devices at runtime.
<td><p>Name service cache daemon</p></td>
<tr><td>
+ <a href='services_ntp.html'>
+ ntp</a></td>
+ <td><p>Network time protocol daemon</p></td>
+
+ <tr><td>
<a href='services_privoxy.html'>
privoxy</a></td>
<td><p>Privacy enhancing web proxy.</p></td>
@@ -730,6 +789,11 @@ connection and disconnection of devices at runtime.
<td><p>Policy for sendmail.</p></td>
<tr><td>
+ <a href='services_squid.html'>
+ squid</a></td>
+ <td><p>Squid caching http proxy server</p></td>
+
+ <tr><td>
<a href='services_ssh.html'>
ssh</a></td>
<td><p>Secure shell client and server policy.</p></td>
diff --git a/www/api-docs/interfaces.html b/www/api-docs/interfaces.html
index 4f8d87c..f906606 100644
--- a/www/api-docs/interfaces.html
+++ b/www/api-docs/interfaces.html
@@ -103,18 +103,36 @@
- <a href='services_bind.html'>
bind</a><br/>
+ - <a href='services_comsat.html'>
+ comsat</a><br/>
+
- <a href='services_cron.html'>
cron</a><br/>
+ - <a href='services_dbus.html'>
+ dbus</a><br/>
+
+ - <a href='services_dhcp.html'>
+ dhcp</a><br/>
+
+ - <a href='services_dictd.html'>
+ dictd</a><br/>
+
- <a href='services_gpm.html'>
gpm</a><br/>
+ - <a href='services_hal.html'>
+ hal</a><br/>
+
- <a href='services_howl.html'>
howl</a><br/>
- <a href='services_inetd.html'>
inetd</a><br/>
+ - <a href='services_inn.html'>
+ inn</a><br/>
+
- <a href='services_kerberos.html'>
kerberos</a><br/>
@@ -133,6 +151,9 @@
- <a href='services_nscd.html'>
nscd</a><br/>
+ - <a href='services_ntp.html'>
+ ntp</a><br/>
+
- <a href='services_privoxy.html'>
privoxy</a><br/>
@@ -148,6 +169,9 @@
- <a href='services_sendmail.html'>
sendmail</a><br/>
+ - <a href='services_squid.html'>
+ squid</a><br/>
+
- <a href='services_ssh.html'>
ssh</a><br/>
@@ -1287,6 +1311,32 @@ Read BIND named configuration files.
</div>
<div id="interfacesmall">
+Module: <a href='services_bind.html#link_bind_read_dnssec_keys'>
+bind</a><p/>
+Layer: <a href='services.html'>
+services</a><p/>
+<div id="codeblock">
+
+<b>bind_read_dnssec_keys</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Read DNSSEC keys.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
Module: <a href='services_bind.html#link_bind_run_ndc'>
bind</a><p/>
Layer: <a href='services.html'>
@@ -1566,6 +1616,33 @@ Execute bootloader in the bootloader domain.
</div>
<div id="interfacesmall">
+Module: <a href='kernel_bootloader.html#link_bootloader_dontaudit_getattr_boot_dir'>
+bootloader</a><p/>
+Layer: <a href='kernel.html'>
+kernel</a><p/>
+<div id="codeblock">
+
+<b>bootloader_dontaudit_getattr_boot_dir</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Do not audit attempts to get attributes
+of the /boot directory.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
Module: <a href='kernel_bootloader.html#link_bootloader_dontaudit_search_boot'>
bootloader</a><p/>
Layer: <a href='kernel.html'>
@@ -2601,6 +2678,41 @@ Read symbolic links in sbin directories.
</div>
<div id="interfacesmall">
+Module: <a href='system_corecommands.html#link_corecmd_sbin_domtrans'>
+corecommands</a><p/>
+Layer: <a href='system.html'>
+system</a><p/>
+<div id="codeblock">
+
+<b>corecmd_sbin_domtrans</b>(
+
+
+
+
+ domain
+
+
+
+ ,
+
+
+
+ target_domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Execute a file in a sbin directory
+in the specified domain.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
Module: <a href='system_corecommands.html#link_corecmd_search_bin'>
corecommands</a><p/>
Layer: <a href='system.html'>
@@ -5245,6 +5357,32 @@ Bind TCP sockets to the nmbd port.
</div>
<div id="interfacesmall">
+Module: <a href='kernel_corenetwork.html#link_corenet_tcp_bind_ntp_port'>
+corenetwork</a><p/>
+Layer: <a href='kernel.html'>
+kernel</a><p/>
+<div id="codeblock">
+
+<b>corenet_tcp_bind_ntp_port</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Bind TCP sockets to the ntp port.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
Module: <a href='kernel_corenetwork.html#link_corenet_tcp_bind_pop_port'>
corenetwork</a><p/>
Layer: <a href='kernel.html'>
@@ -6441,6 +6579,32 @@ Make a TCP connection to the nmbd port.
</div>
<div id="interfacesmall">
+Module: <a href='kernel_corenetwork.html#link_corenet_tcp_connect_ntp_port'>
+corenetwork</a><p/>
+Layer: <a href='kernel.html'>
+kernel</a><p/>
+<div id="codeblock">
+
+<b>corenet_tcp_connect_ntp_port</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Make a TCP connection to the ntp port.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
Module: <a href='kernel_corenetwork.html#link_corenet_tcp_connect_pop_port'>
corenetwork</a><p/>
Layer: <a href='kernel.html'>
@@ -8105,6 +8269,32 @@ Send and receive TCP traffic on the nmbd port.
</div>
<div id="interfacesmall">
+Module: <a href='kernel_corenetwork.html#link_corenet_tcp_sendrecv_ntp_port'>
+corenetwork</a><p/>
+Layer: <a href='kernel.html'>
+kernel</a><p/>
+<div id="codeblock">
+
+<b>corenet_tcp_sendrecv_ntp_port</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Send and receive TCP traffic on the ntp port.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
Module: <a href='kernel_corenetwork.html#link_corenet_tcp_sendrecv_pop_port'>
corenetwork</a><p/>
Layer: <a href='kernel.html'>
@@ -9587,6 +9777,32 @@ Bind UDP sockets to the nmbd port.
</div>
<div id="interfacesmall">
+Module: <a href='kernel_corenetwork.html#link_corenet_udp_bind_ntp_port'>
+corenetwork</a><p/>
+Layer: <a href='kernel.html'>
+kernel</a><p/>
+<div id="codeblock">
+
+<b>corenet_udp_bind_ntp_port</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Bind UDP sockets to the ntp port.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
Module: <a href='kernel_corenetwork.html#link_corenet_udp_bind_pop_port'>
corenetwork</a><p/>
Layer: <a href='kernel.html'>
@@ -11329,6 +11545,32 @@ Receive UDP traffic on the nmbd port.
</div>
<div id="interfacesmall">
+Module: <a href='kernel_corenetwork.html#link_corenet_udp_receive_ntp_port'>
+corenetwork</a><p/>
+Layer: <a href='kernel.html'>
+kernel</a><p/>
+<div id="codeblock">
+
+<b>corenet_udp_receive_ntp_port</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Receive UDP traffic on the ntp port.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
Module: <a href='kernel_corenetwork.html#link_corenet_udp_receive_pop_port'>
corenetwork</a><p/>
Layer: <a href='kernel.html'>
@@ -13071,6 +13313,32 @@ Send UDP traffic on the nmbd port.
</div>
<div id="interfacesmall">
+Module: <a href='kernel_corenetwork.html#link_corenet_udp_send_ntp_port'>
+corenetwork</a><p/>
+Layer: <a href='kernel.html'>
+kernel</a><p/>
+<div id="codeblock">
+
+<b>corenet_udp_send_ntp_port</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Send UDP traffic on the ntp port.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
Module: <a href='kernel_corenetwork.html#link_corenet_udp_send_pop_port'>
corenetwork</a><p/>
Layer: <a href='kernel.html'>
@@ -14813,6 +15081,32 @@ Send and receive UDP traffic on the nmbd port.
</div>
<div id="interfacesmall">
+Module: <a href='kernel_corenetwork.html#link_corenet_udp_sendrecv_ntp_port'>
+corenetwork</a><p/>
+Layer: <a href='kernel.html'>
+kernel</a><p/>
+<div id="codeblock">
+
+<b>corenet_udp_sendrecv_ntp_port</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Send and receive UDP traffic on the ntp port.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
Module: <a href='kernel_corenetwork.html#link_corenet_udp_sendrecv_pop_port'>
corenetwork</a><p/>
Layer: <a href='kernel.html'>
@@ -15482,7 +15776,33 @@ services</a><p/>
<div id="description">
<p>
-Read a cron daemon unnamed pipe
+Read a cron daemon unnamed pipe.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
+Module: <a href='services_cron.html#link_cron_read_system_job_tmp_files'>
+cron</a><p/>
+Layer: <a href='services.html'>
+services</a><p/>
+<div id="codeblock">
+
+<b>cron_read_system_job_tmp_files</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Read temporary files from the system cron jobs.
</p>
</div>
@@ -15515,6 +15835,32 @@ Read and write the cron daemon log files.
</div>
<div id="interfacesmall">
+Module: <a href='services_cron.html#link_cron_rw_pipe'>
+cron</a><p/>
+Layer: <a href='services.html'>
+services</a><p/>
+<div id="codeblock">
+
+<b>cron_rw_pipe</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Read and write a cron daemon unnamed pipe.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
Module: <a href='services_cron.html#link_cron_search_spool'>
cron</a><p/>
Layer: <a href='services.html'>
@@ -15541,6 +15887,32 @@ Search the directory containing user cron tables.
</div>
<div id="interfacesmall">
+Module: <a href='services_cron.html#link_cron_sigchld'>
+cron</a><p/>
+Layer: <a href='services.html'>
+services</a><p/>
+<div id="codeblock">
+
+<b>cron_sigchld</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Send a SIGCHLD signal to the cron daemon.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
Module: <a href='services_cron.html#link_cron_system_entry'>
cron</a><p/>
Layer: <a href='services.html'>
@@ -15576,6 +15948,139 @@ from the system cron jobs.
</div>
<div id="interfacesmall">
+Module: <a href='services_cron.html#link_cron_use_fd'>
+cron</a><p/>
+Layer: <a href='services.html'>
+services</a><p/>
+<div id="codeblock">
+
+<b>cron_use_fd</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Inherit and use a file descriptor
+from the cron daemon.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
+Module: <a href='services_cron.html#link_cron_use_system_job_fd'>
+cron</a><p/>
+Layer: <a href='services.html'>
+services</a><p/>
+<div id="codeblock">
+
+<b>cron_use_system_job_fd</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Inherit and use a file descriptor
+from system cron jobs.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
+Module: <a href='services_cron.html#link_cron_write_system_job_pipe'>
+cron</a><p/>
+Layer: <a href='services.html'>
+services</a><p/>
+<div id="codeblock">
+
+<b>cron_write_system_job_pipe</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Wrate a system cron job unnamed pipe.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
+Module: <a href='services_dbus.html#link_dbus_connect_system_bus'>
+dbus</a><p/>
+Layer: <a href='services.html'>
+services</a><p/>
+<div id="codeblock">
+
+<b>dbus_connect_system_bus</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Connect to the the system DBUS
+for service (acquire_svc).
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
+Module: <a href='services_dbus.html#link_dbus_send_system_bus_msg'>
+dbus</a><p/>
+Layer: <a href='services.html'>
+services</a><p/>
+<div id="codeblock">
+
+<b>dbus_send_system_bus_msg</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Send a message on the system DBUS.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
Module: <a href='kernel_devices.html#link_dev_create_dev_node'>
devices</a><p/>
Layer: <a href='kernel.html'>
@@ -17714,6 +18219,32 @@ Read and write the the power management device.
</div>
<div id="interfacesmall">
+Module: <a href='kernel_devices.html#link_dev_rw_printer'>
+devices</a><p/>
+Layer: <a href='kernel.html'>
+kernel</a><p/>
+<div id="codeblock">
+
+<b>dev_rw_printer</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Read and write the printer device.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
Module: <a href='kernel_devices.html#link_dev_rw_realtime_clock'>
devices</a><p/>
Layer: <a href='kernel.html'>
@@ -18549,6 +19080,60 @@ Write and execute raw memory devices (e.g. /dev/mem).
</div>
<div id="interfacesmall">
+Module: <a href='services_dhcp.html#link_dhcpd_setattr_state_files'>
+dhcp</a><p/>
+Layer: <a href='services.html'>
+services</a><p/>
+<div id="codeblock">
+
+<b>dhcpd_setattr_state_files</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Set the attributes of the DCHP
+server state files.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
+Module: <a href='services_dictd.html#link_dictd_use'>
+dictd</a><p/>
+Layer: <a href='services.html'>
+services</a><p/>
+<div id="codeblock">
+
+<b>dictd_use</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Use dictionary services by connecting
+over TCP.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
Module: <a href='admin_dmesg.html#link_dmesg_domtrans'>
dmesg</a><p/>
Layer: <a href='admin.html'>
@@ -20083,6 +20668,33 @@ of the /var/run directory.
</div>
<div id="interfacesmall">
+Module: <a href='system_files.html#link_files_dontaudit_getattr_tmp_dir'>
+files</a><p/>
+Layer: <a href='system.html'>
+system</a><p/>
+<div id="codeblock">
+
+<b>files_dontaudit_getattr_tmp_dir</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Do not audit attempts to get the
+attributes of the tmp directory (/tmp).
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
Module: <a href='system_files.html#link_files_dontaudit_ioctl_all_pids'>
files</a><p/>
Layer: <a href='system.html'>
@@ -20260,7 +20872,8 @@ system</a><p/>
<div id="description">
<p>
-Do not audit attempts to search home directories root.
+Do not audit attempts to search
+home directories root (/home).
</p>
</div>
@@ -20607,6 +21220,34 @@ Summary is missing!
</div>
<div id="interfacesmall">
+Module: <a href='system_files.html#link_files_getattr_home_dir'>
+files</a><p/>
+Layer: <a href='system.html'>
+system</a><p/>
+<div id="codeblock">
+
+<b>files_getattr_home_dir</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Do not audit attempts to get the
+attributes of the home directories root
+(/home).
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
Module: <a href='system_files.html#link_files_getattr_usr_files'>
files</a><p/>
Layer: <a href='system.html'>
@@ -20920,6 +21561,33 @@ Summary is missing!
</div>
<div id="interfacesmall">
+Module: <a href='system_files.html#link_files_list_usr'>
+files</a><p/>
+Layer: <a href='system.html'>
+system</a><p/>
+<div id="codeblock">
+
+<b>files_list_usr</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+List the contents of generic
+directories in /usr.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
Module: <a href='system_files.html#link_files_list_var_lib'>
files</a><p/>
Layer: <a href='system.html'>
@@ -22363,6 +23031,33 @@ Summary is missing!
</div>
<div id="interfacesmall">
+Module: <a href='system_files.html#link_files_rw_etc_runtime_files'>
+files</a><p/>
+Layer: <a href='system.html'>
+system</a><p/>
+<div id="codeblock">
+
+<b>files_rw_etc_runtime_files</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Read and write files in /etc that are dynamically
+created on boot, such as mtab.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
Module: <a href='system_files.html#link_files_rw_generic_pids'>
files</a><p/>
Layer: <a href='system.html'>
@@ -22514,7 +23209,7 @@ system</a><p/>
<div id="description">
<p>
-Search home directories root.
+Search home directories root (/home).
</p>
</div>
@@ -22964,6 +23659,33 @@ Execute firstboot in the firstboot domain.
</div>
<div id="interfacesmall">
+Module: <a href='admin_firstboot.html#link_firstboot_dontaudit_use_fd'>
+firstboot</a><p/>
+Layer: <a href='admin.html'>
+admin</a><p/>
+<div id="codeblock">
+
+<b>firstboot_dontaudit_use_fd</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Do not audit attempts to inherit a
+file descriptor from firstboot.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
Module: <a href='admin_firstboot.html#link_firstboot_run'>
firstboot</a><p/>
Layer: <a href='admin.html'>
@@ -27382,7 +28104,7 @@ system</a><p/>
- ?
+ domain
)<br>
@@ -27390,7 +28112,33 @@ system</a><p/>
<div id="description">
<p>
-Summary is missing!
+Send init a SIGCHLD signal.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
+Module: <a href='system_init.html#link_init_signull'>
+init</a><p/>
+Layer: <a href='system.html'>
+system</a><p/>
+<div id="codeblock">
+
+<b>init_signull</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Send init a null signal.
</p>
</div>
@@ -27588,6 +28336,216 @@ Summary is missing!
</div>
<div id="interfacesmall">
+Module: <a href='services_inn.html#link_inn_exec'>
+inn</a><p/>
+Layer: <a href='services.html'>
+services</a><p/>
+<div id="codeblock">
+
+<b>inn_exec</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Allow the specified domain to execute innd
+in the caller domain.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
+Module: <a href='services_inn.html#link_inn_exec_config'>
+inn</a><p/>
+Layer: <a href='services.html'>
+services</a><p/>
+<div id="codeblock">
+
+<b>inn_exec_config</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Allow the specified domain to execute
+inn configuration files in /etc.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
+Module: <a href='services_inn.html#link_inn_manage_log'>
+inn</a><p/>
+Layer: <a href='services.html'>
+services</a><p/>
+<div id="codeblock">
+
+<b>inn_manage_log</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Create, read, write, and delete the innd log.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
+Module: <a href='services_inn.html#link_inn_manage_pid'>
+inn</a><p/>
+Layer: <a href='services.html'>
+services</a><p/>
+<div id="codeblock">
+
+<b>inn_manage_pid</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Create, read, write, and delete the innd pid files.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
+Module: <a href='services_inn.html#link_inn_read_config'>
+inn</a><p/>
+Layer: <a href='services.html'>
+services</a><p/>
+<div id="codeblock">
+
+<b>inn_read_config</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Read innd configuration files.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
+Module: <a href='services_inn.html#link_inn_read_news_lib'>
+inn</a><p/>
+Layer: <a href='services.html'>
+services</a><p/>
+<div id="codeblock">
+
+<b>inn_read_news_lib</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Read innd news library files.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
+Module: <a href='services_inn.html#link_inn_read_news_spool'>
+inn</a><p/>
+Layer: <a href='services.html'>
+services</a><p/>
+<div id="codeblock">
+
+<b>inn_read_news_spool</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Read innd news library files.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
+Module: <a href='services_inn.html#link_inn_sendto_unix_dgram_socket'>
+inn</a><p/>
+Layer: <a href='services.html'>
+services</a><p/>
+<div id="codeblock">
+
+<b>inn_sendto_unix_dgram_socket</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Send to a innd unix dgram socket.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
Module: <a href='system_ipsec.html#link_ipsec_domtrans'>
ipsec</a><p/>
Layer: <a href='system.html'>
@@ -28103,6 +29061,33 @@ read system state information in proc.
</div>
<div id="interfacesmall">
+Module: <a href='kernel_kernel.html#link_kernel_dontaudit_search_network_state'>
+kernel</a><p/>
+Layer: <a href='kernel.html'>
+kernel</a><p/>
+<div id="codeblock">
+
+<b>kernel_dontaudit_search_network_state</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Do not audit attempts to search the network
+state directory.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
Module: <a href='kernel_kernel.html#link_kernel_dontaudit_search_network_sysctl_dir'>
kernel</a><p/>
Layer: <a href='kernel.html'>
@@ -30681,6 +31666,32 @@ Execute logrotate in the caller domain.
</div>
<div id="interfacesmall">
+Module: <a href='admin_logrotate.html#link_logrotate_read_tmp_files'>
+logrotate</a><p/>
+Layer: <a href='admin.html'>
+admin</a><p/>
+<div id="codeblock">
+
+<b>logrotate_read_tmp_files</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Read a logrotate temporary files.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
Module: <a href='admin_logrotate.html#link_logrotate_run'>
logrotate</a><p/>
Layer: <a href='admin.html'>
@@ -31462,6 +32473,32 @@ Use file descriptors for mount.
</div>
<div id="interfacesmall">
+Module: <a href='services_mta.html#link_mta_append_spool'>
+mta</a><p/>
+Layer: <a href='services.html'>
+services</a><p/>
+<div id="codeblock">
+
+<b>mta_append_spool</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Create, read, and write the mail spool.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
Module: <a href='services_mta.html#link_mta_dontaudit_read_spool_symlink'>
mta</a><p/>
Layer: <a href='services.html'>
@@ -31567,6 +32604,88 @@ Summary is missing!
</div>
<div id="interfacesmall">
+Module: <a href='services_mta.html#link_mta_mailserver_delivery'>
+mta</a><p/>
+Layer: <a href='services.html'>
+services</a><p/>
+<div id="codeblock">
+
+<b>mta_mailserver_delivery</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Make a type a mailserver type used
+for delivering mail to local users.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
+Module: <a href='services_mta.html#link_mta_mailserver_sender'>
+mta</a><p/>
+Layer: <a href='services.html'>
+services</a><p/>
+<div id="codeblock">
+
+<b>mta_mailserver_sender</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Make a type a mailserver type used
+for sending mail.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
+Module: <a href='services_mta.html#link_mta_mailserver_user_agent'>
+mta</a><p/>
+Layer: <a href='services.html'>
+services</a><p/>
+<div id="codeblock">
+
+<b>mta_mailserver_user_agent</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Make a type a mailserver type used
+for sending mail on behalf of local
+users to the local mail spool.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
Module: <a href='services_mta.html#link_mta_manage_queue'>
mta</a><p/>
Layer: <a href='services.html'>
@@ -32436,6 +33555,58 @@ a unix stream socket.
</div>
<div id="interfacesmall">
+Module: <a href='services_ntp.html#link_ntp_domtrans'>
+ntp</a><p/>
+Layer: <a href='services.html'>
+services</a><p/>
+<div id="codeblock">
+
+<b>ntp_domtrans</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Execute ntp server in the ntpd domain.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
+Module: <a href='services_ntp.html#link_ntp_domtrans_ntpdate'>
+ntp</a><p/>
+Layer: <a href='services.html'>
+services</a><p/>
+<div id="codeblock">
+
+<b>ntp_domtrans_ntpdate</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Execute ntp server in the ntpd domain.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
Module: <a href='system_pcmcia.html#link_pcmcia_domtrans_cardctl'>
pcmcia</a><p/>
Layer: <a href='system.html'>
@@ -33191,6 +34362,33 @@ Allows caller to compute possible contexts for a user.
</div>
<div id="interfacesmall">
+Module: <a href='kernel_selinux.html#link_selinux_dontaudit_getattr_dir'>
+selinux</a><p/>
+Layer: <a href='kernel.html'>
+kernel</a><p/>
+<div id="codeblock">
+
+<b>selinux_dontaudit_getattr_dir</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Do not audit attempts to get the
+attributes of the selinuxfs directory.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
Module: <a href='kernel_selinux.html#link_selinux_dontaudit_search_fs'>
selinux</a><p/>
Layer: <a href='kernel.html'>
@@ -34436,6 +35634,111 @@ Summary is missing!
</div>
<div id="interfacesmall">
+Module: <a href='services_squid.html#link_squid_domtrans'>
+squid</a><p/>
+Layer: <a href='services.html'>
+services</a><p/>
+<div id="codeblock">
+
+<b>squid_domtrans</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Execute squid in the squid domain.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
+Module: <a href='services_squid.html#link_squid_manage_logs'>
+squid</a><p/>
+Layer: <a href='services.html'>
+services</a><p/>
+<div id="codeblock">
+
+<b>squid_manage_logs</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Create, read, write, and delete
+squid logs.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
+Module: <a href='services_squid.html#link_squid_read_config'>
+squid</a><p/>
+Layer: <a href='services.html'>
+services</a><p/>
+<div id="codeblock">
+
+<b>squid_read_config</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Read squid configuration file.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
+Module: <a href='services_squid.html#link_squid_use'>
+squid</a><p/>
+Layer: <a href='services.html'>
+services</a><p/>
+<div id="codeblock">
+
+<b>squid_use</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Use squid services by connecting over TCP.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
Module: <a href='services_ssh.html#link_ssh_dontaudit_read_server_keys'>
ssh</a><p/>
Layer: <a href='services.html'>
@@ -35311,6 +36614,52 @@ the network config files.
</div>
<div id="interfacesmall">
+Module: <a href='system_sysnetwork.html#link_sysnet_create_dhcp_state'>
+sysnetwork</a><p/>
+Layer: <a href='system.html'>
+system</a><p/>
+<div id="codeblock">
+
+<b>sysnet_create_dhcp_state</b>(
+
+
+
+
+ domain
+
+
+
+ ,
+
+
+
+ file_type
+
+
+
+ ,
+
+
+
+ [
+
+ object_class
+
+ ]
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Create DHCP state data.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
Module: <a href='system_sysnetwork.html#link_sysnet_domtrans_dhcpc'>
sysnetwork</a><p/>
Layer: <a href='system.html'>
@@ -35441,6 +36790,32 @@ Allow network init to read network config files.
</div>
<div id="interfacesmall">
+Module: <a href='system_sysnetwork.html#link_sysnet_read_dhcp_config'>
+sysnetwork</a><p/>
+Layer: <a href='system.html'>
+system</a><p/>
+<div id="codeblock">
+
+<b>sysnet_read_dhcp_config</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Read the DHCP configuration files.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
Module: <a href='system_sysnetwork.html#link_sysnet_read_dhcpc_pid'>
sysnetwork</a><p/>
Layer: <a href='system.html'>
@@ -35563,6 +36938,32 @@ Read and write dhcp configuration files.
</div>
<div id="interfacesmall">
+Module: <a href='system_sysnetwork.html#link_sysnet_search_dhcp_state'>
+sysnetwork</a><p/>
+Layer: <a href='system.html'>
+system</a><p/>
+<div id="codeblock">
+
+<b>sysnet_search_dhcp_state</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Search the DHCP state data directory.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
Module: <a href='system_sysnetwork.html#link_sysnet_sigchld_dhcpc'>
sysnetwork</a><p/>
Layer: <a href='system.html'>
@@ -35757,6 +37158,33 @@ device nodes.
</div>
<div id="interfacesmall">
+Module: <a href='kernel_terminal.html#link_term_dontaudit_getattr_pty_dir'>
+terminal</a><p/>
+Layer: <a href='kernel.html'>
+kernel</a><p/>
+<div id="codeblock">
+
+<b>term_dontaudit_getattr_pty_dir</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Do not audit attempts to get the
+attributes of the /dev/pts directory.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
Module: <a href='kernel_terminal.html#link_term_dontaudit_getattr_unallocated_ttys'>
terminal</a><p/>
Layer: <a href='kernel.html'>
@@ -37178,6 +38606,33 @@ with automatic file type transition.
</div>
<div id="interfacesmall">
+Module: <a href='system_userdomain.html#link_userdom_dontaudit_list_sysadm_home_dir'>
+userdomain</a><p/>
+Layer: <a href='system.html'>
+system</a><p/>
+<div id="codeblock">
+
+<b>userdom_dontaudit_list_sysadm_home_dir</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Do not audit attempts to list the sysadm
+users home directory.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
Module: <a href='system_userdomain.html#link_userdom_dontaudit_search_all_users_home'>
userdomain</a><p/>
Layer: <a href='system.html'>
@@ -37735,6 +39190,32 @@ Execute a shell in the sysadm domain.
</div>
<div id="interfacesmall">
+Module: <a href='system_userdomain.html#link_userdom_sigcld_all_users'>
+userdomain</a><p/>
+Layer: <a href='system.html'>
+system</a><p/>
+<div id="codeblock">
+
+<b>userdom_sigcld_all_users</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Send a SIGCHLD signal to all user domains.
+</p>
+</div>
+
+</div>
+
+<div id="interfacesmall">
Module: <a href='system_userdomain.html#link_userdom_signal_all_users'>
userdomain</a><p/>
Layer: <a href='system.html'>
diff --git a/www/api-docs/kernel_bootloader.html b/www/api-docs/kernel_bootloader.html
index d9fd853..ec96c97 100644
--- a/www/api-docs/kernel_bootloader.html
+++ b/www/api-docs/kernel_bootloader.html
@@ -384,6 +384,49 @@ No
</div>
</div>
+<a name="link_bootloader_dontaudit_getattr_boot_dir"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>bootloader_dontaudit_getattr_boot_dir</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Do not audit attempts to get attributes
+of the /boot directory.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+Domain to not audit.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
<a name="link_bootloader_dontaudit_search_boot"></a>
<div id="interface">
@@ -976,6 +1019,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/kernel_corenetwork.html b/www/api-docs/kernel_corenetwork.html
index 5f60547..48cbc30 100644
--- a/www/api-docs/kernel_corenetwork.html
+++ b/www/api-docs/kernel_corenetwork.html
@@ -4123,6 +4123,48 @@ No
</div>
</div>
+<a name="link_corenet_tcp_bind_ntp_port"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>corenet_tcp_bind_ntp_port</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Bind TCP sockets to the ntp port.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+The type of the process performing this action.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
<a name="link_corenet_tcp_bind_pop_port"></a>
<div id="interface">
@@ -6055,6 +6097,48 @@ No
</div>
</div>
+<a name="link_corenet_tcp_connect_ntp_port"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>corenet_tcp_connect_ntp_port</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Make a TCP connection to the ntp port.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+The type of the process performing this action.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
<a name="link_corenet_tcp_connect_pop_port"></a>
<div id="interface">
@@ -8743,6 +8827,48 @@ No
</div>
</div>
+<a name="link_corenet_tcp_sendrecv_ntp_port"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>corenet_tcp_sendrecv_ntp_port</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Send and receive TCP traffic on the ntp port.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+The type of the process performing this action.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
<a name="link_corenet_tcp_sendrecv_pop_port"></a>
<div id="interface">
@@ -11137,6 +11263,48 @@ No
</div>
</div>
+<a name="link_corenet_udp_bind_ntp_port"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>corenet_udp_bind_ntp_port</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Bind UDP sockets to the ntp port.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+The type of the process performing this action.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
<a name="link_corenet_udp_bind_pop_port"></a>
<div id="interface">
@@ -13951,6 +14119,48 @@ No
</div>
</div>
+<a name="link_corenet_udp_receive_ntp_port"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>corenet_udp_receive_ntp_port</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Receive UDP traffic on the ntp port.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+The type of the process performing this action.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
<a name="link_corenet_udp_receive_pop_port"></a>
<div id="interface">
@@ -16765,6 +16975,48 @@ No
</div>
</div>
+<a name="link_corenet_udp_send_ntp_port"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>corenet_udp_send_ntp_port</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Send UDP traffic on the ntp port.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+The type of the process performing this action.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
<a name="link_corenet_udp_send_pop_port"></a>
<div id="interface">
@@ -19579,6 +19831,48 @@ No
</div>
</div>
+<a name="link_corenet_udp_sendrecv_ntp_port"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>corenet_udp_sendrecv_ntp_port</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Send and receive UDP traffic on the ntp port.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+The type of the process performing this action.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
<a name="link_corenet_udp_sendrecv_pop_port"></a>
<div id="interface">
@@ -20634,6 +20928,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/kernel_devices.html b/www/api-docs/kernel_devices.html
index 77945a0..2a5eab5 100644
--- a/www/api-docs/kernel_devices.html
+++ b/www/api-docs/kernel_devices.html
@@ -3567,6 +3567,48 @@ No
</div>
</div>
+<a name="link_dev_rw_printer"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>dev_rw_printer</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Read and write the printer device.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+Domain allowed access.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
<a name="link_dev_rw_realtime_clock"></a>
<div id="interface">
@@ -4919,6 +4961,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/kernel_filesystem.html b/www/api-docs/kernel_filesystem.html
index 14435a5..97f8b7d 100644
--- a/www/api-docs/kernel_filesystem.html
+++ b/www/api-docs/kernel_filesystem.html
@@ -4637,6 +4637,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/kernel_kernel.html b/www/api-docs/kernel_kernel.html
index e831885..3128cb7 100644
--- a/www/api-docs/kernel_kernel.html
+++ b/www/api-docs/kernel_kernel.html
@@ -391,6 +391,49 @@ No
</div>
</div>
+<a name="link_kernel_dontaudit_search_network_state"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>kernel_dontaudit_search_network_state</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Do not audit attempts to search the network
+state directory.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+The process type reading the state.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
<a name="link_kernel_dontaudit_search_network_sysctl_dir"></a>
<div id="interface">
@@ -2942,6 +2985,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/kernel_selinux.html b/www/api-docs/kernel_selinux.html
index 73b0e1e..ee56efe 100644
--- a/www/api-docs/kernel_selinux.html
+++ b/www/api-docs/kernel_selinux.html
@@ -272,6 +272,49 @@ No
</div>
</div>
+<a name="link_selinux_dontaudit_getattr_dir"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>selinux_dontaudit_getattr_dir</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Do not audit attempts to get the
+attributes of the selinuxfs directory.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+Domain to not audit.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
<a name="link_selinux_dontaudit_search_fs"></a>
<div id="interface">
@@ -717,6 +760,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/kernel_storage.html b/www/api-docs/kernel_storage.html
index a7ac52f..dc0507f 100644
--- a/www/api-docs/kernel_storage.html
+++ b/www/api-docs/kernel_storage.html
@@ -1398,6 +1398,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/kernel_terminal.html b/www/api-docs/kernel_terminal.html
index 4fd469c..5c8ad61 100644
--- a/www/api-docs/kernel_terminal.html
+++ b/www/api-docs/kernel_terminal.html
@@ -239,6 +239,49 @@ No
</div>
</div>
+<a name="link_term_dontaudit_getattr_pty_dir"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>term_dontaudit_getattr_pty_dir</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Do not audit attempts to get the
+attributes of the /dev/pts directory.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+The type of the process to not audit.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
<a name="link_term_dontaudit_getattr_unallocated_ttys"></a>
<div id="interface">
@@ -1804,6 +1847,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/services.html b/www/api-docs/services.html
index b87ed07..354fdaf 100644
--- a/www/api-docs/services.html
+++ b/www/api-docs/services.html
@@ -34,18 +34,36 @@
- <a href='services_bind.html'>
bind</a><br/>
+ - <a href='services_comsat.html'>
+ comsat</a><br/>
+
- <a href='services_cron.html'>
cron</a><br/>
+ - <a href='services_dbus.html'>
+ dbus</a><br/>
+
+ - <a href='services_dhcp.html'>
+ dhcp</a><br/>
+
+ - <a href='services_dictd.html'>
+ dictd</a><br/>
+
- <a href='services_gpm.html'>
gpm</a><br/>
+ - <a href='services_hal.html'>
+ hal</a><br/>
+
- <a href='services_howl.html'>
howl</a><br/>
- <a href='services_inetd.html'>
inetd</a><br/>
+ - <a href='services_inn.html'>
+ inn</a><br/>
+
- <a href='services_kerberos.html'>
kerberos</a><br/>
@@ -64,6 +82,9 @@
- <a href='services_nscd.html'>
nscd</a><br/>
+ - <a href='services_ntp.html'>
+ ntp</a><br/>
+
- <a href='services_privoxy.html'>
privoxy</a><br/>
@@ -79,6 +100,9 @@
- <a href='services_sendmail.html'>
sendmail</a><br/>
+ - <a href='services_squid.html'>
+ squid</a><br/>
+
- <a href='services_ssh.html'>
ssh</a><br/>
@@ -134,16 +158,41 @@
<td><p>Berkeley internet name domain DNS server.</p></td>
<tr><td>
+ <a href='services_comsat.html'>
+ comsat</a></td>
+ <td><p>Comsat, a biff server.</p></td>
+
+ <tr><td>
<a href='services_cron.html'>
cron</a></td>
<td><p>Periodic execution of scheduled commands.</p></td>
<tr><td>
+ <a href='services_dbus.html'>
+ dbus</a></td>
+ <td><p>Desktop messaging bus</p></td>
+
+ <tr><td>
+ <a href='services_dhcp.html'>
+ dhcp</a></td>
+ <td><p>Dynamic host configuration protocol (DHCP) server</p></td>
+
+ <tr><td>
+ <a href='services_dictd.html'>
+ dictd</a></td>
+ <td><p>Dictionary daemon</p></td>
+
+ <tr><td>
<a href='services_gpm.html'>
gpm</a></td>
<td><p>General Purpose Mouse driver</p></td>
<tr><td>
+ <a href='services_hal.html'>
+ hal</a></td>
+ <td><p>Hardware abstraction layer</p></td>
+
+ <tr><td>
<a href='services_howl.html'>
howl</a></td>
<td><p>Port of Apple Rendezvous multicast DNS</p></td>
@@ -154,6 +203,11 @@
<td><p>Internet services daemon.</p></td>
<tr><td>
+ <a href='services_inn.html'>
+ inn</a></td>
+ <td><p>Internet News NNTP server</p></td>
+
+ <tr><td>
<a href='services_kerberos.html'>
kerberos</a></td>
<td><p>MIT Kerberos admin and KDC</p></td>
@@ -184,6 +238,11 @@
<td><p>Name service cache daemon</p></td>
<tr><td>
+ <a href='services_ntp.html'>
+ ntp</a></td>
+ <td><p>Network time protocol daemon</p></td>
+
+ <tr><td>
<a href='services_privoxy.html'>
privoxy</a></td>
<td><p>Privacy enhancing web proxy.</p></td>
@@ -209,6 +268,11 @@
<td><p>Policy for sendmail.</p></td>
<tr><td>
+ <a href='services_squid.html'>
+ squid</a></td>
+ <td><p>Squid caching http proxy server</p></td>
+
+ <tr><td>
<a href='services_ssh.html'>
ssh</a></td>
<td><p>Secure shell client and server policy.</p></td>
diff --git a/www/api-docs/services_bind.html b/www/api-docs/services_bind.html
index 53c345d..14c1ef8 100644
--- a/www/api-docs/services_bind.html
+++ b/www/api-docs/services_bind.html
@@ -34,18 +34,36 @@
- <a href='services_bind.html'>
bind</a><br/>
+ - <a href='services_comsat.html'>
+ comsat</a><br/>
+
- <a href='services_cron.html'>
cron</a><br/>
+ - <a href='services_dbus.html'>
+ dbus</a><br/>
+
+ - <a href='services_dhcp.html'>
+ dhcp</a><br/>
+
+ - <a href='services_dictd.html'>
+ dictd</a><br/>
+
- <a href='services_gpm.html'>
gpm</a><br/>
+ - <a href='services_hal.html'>
+ hal</a><br/>
+
- <a href='services_howl.html'>
howl</a><br/>
- <a href='services_inetd.html'>
inetd</a><br/>
+ - <a href='services_inn.html'>
+ inn</a><br/>
+
- <a href='services_kerberos.html'>
kerberos</a><br/>
@@ -64,6 +82,9 @@
- <a href='services_nscd.html'>
nscd</a><br/>
+ - <a href='services_ntp.html'>
+ ntp</a><br/>
+
- <a href='services_privoxy.html'>
privoxy</a><br/>
@@ -79,6 +100,9 @@
- <a href='services_sendmail.html'>
sendmail</a><br/>
+ - <a href='services_squid.html'>
+ squid</a><br/>
+
- <a href='services_ssh.html'>
ssh</a><br/>
@@ -203,6 +227,48 @@ No
</div>
</div>
+<a name="link_bind_read_dnssec_keys"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>bind_read_dnssec_keys</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Read DNSSEC keys.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+Domain allowed access.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
<a name="link_bind_run_ndc"></a>
<div id="interface">
@@ -372,6 +438,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/services_comsat.html b/www/api-docs/services_comsat.html
new file mode 100644
index 0000000..0d8cbf1
--- /dev/null
+++ b/www/api-docs/services_comsat.html
@@ -0,0 +1,150 @@
+<html>
+<head>
+<title>
+ Security Enhanced Linux Reference Policy
+ </title>
+<style type="text/css" media="all">@import "style.css";</style>
+</head>
+<body>
+<div id="Header">Security Enhanced Linux Reference Policy</div>
+<div id='Menu'>
+
+ <a href="admin.html">+
+ admin</a></br/>
+ <div id='subitem'>
+
+ </div>
+
+ <a href="apps.html">+
+ apps</a></br/>
+ <div id='subitem'>
+
+ </div>
+
+ <a href="kernel.html">+
+ kernel</a></br/>
+ <div id='subitem'>
+
+ </div>
+
+ <a href="services.html">+
+ services</a></br/>
+ <div id='subitem'>
+
+ - <a href='services_bind.html'>
+ bind</a><br/>
+
+ - <a href='services_comsat.html'>
+ comsat</a><br/>
+
+ - <a href='services_cron.html'>
+ cron</a><br/>
+
+ - <a href='services_dbus.html'>
+ dbus</a><br/>
+
+ - <a href='services_dhcp.html'>
+ dhcp</a><br/>
+
+ - <a href='services_dictd.html'>
+ dictd</a><br/>
+
+ - <a href='services_gpm.html'>
+ gpm</a><br/>
+
+ - <a href='services_hal.html'>
+ hal</a><br/>
+
+ - <a href='services_howl.html'>
+ howl</a><br/>
+
+ - <a href='services_inetd.html'>
+ inetd</a><br/>
+
+ - <a href='services_inn.html'>
+ inn</a><br/>
+
+ - <a href='services_kerberos.html'>
+ kerberos</a><br/>
+
+ - <a href='services_ldap.html'>
+ ldap</a><br/>
+
+ - <a href='services_mta.html'>
+ mta</a><br/>
+
+ - <a href='services_mysql.html'>
+ mysql</a><br/>
+
+ - <a href='services_nis.html'>
+ nis</a><br/>
+
+ - <a href='services_nscd.html'>
+ nscd</a><br/>
+
+ - <a href='services_ntp.html'>
+ ntp</a><br/>
+
+ - <a href='services_privoxy.html'>
+ privoxy</a><br/>
+
+ - <a href='services_remotelogin.html'>
+ remotelogin</a><br/>
+
+ - <a href='services_rshd.html'>
+ rshd</a><br/>
+
+ - <a href='services_rsync.html'>
+ rsync</a><br/>
+
+ - <a href='services_sendmail.html'>
+ sendmail</a><br/>
+
+ - <a href='services_squid.html'>
+ squid</a><br/>
+
+ - <a href='services_ssh.html'>
+ ssh</a><br/>
+
+ - <a href='services_tcpd.html'>
+ tcpd</a><br/>
+
+ </div>
+
+ <a href="system.html">+
+ system</a></br/>
+ <div id='subitem'>
+
+ </div>
+
+ <br/><p/>
+ <a href="global_booleans.html">* Global Booleans </a>
+ <br/><p/>
+ <a href="global_tunables.html">* Global Tunables </a>
+ <p/><br/><p/>
+ <a href="index.html">* Layer Index</a>
+ <br/><p/>
+ <a href="interfaces.html">* Interface Index</a>
+ <br/><p/>
+ <a href="templates.html">* Template Index</a>
+</div>
+
+<div id="Content">
+<a name="top":></a>
+<h1>Layer: services</h1><p/>
+<h2>Module: comsat</h2><p/>
+
+<h3>Description:</h3>
+
+<p><p>Comsat, a biff server.</p></p>
+
+
+
+
+
+<h3>No interfaces or templates.</h3>
+
+
+</div>
+</body>
+</html>
diff --git a/www/api-docs/services_cron.html b/www/api-docs/services_cron.html
index e0e66a0..120e8a5 100644
--- a/www/api-docs/services_cron.html
+++ b/www/api-docs/services_cron.html
@@ -34,18 +34,36 @@
- <a href='services_bind.html'>
bind</a><br/>
+ - <a href='services_comsat.html'>
+ comsat</a><br/>
+
- <a href='services_cron.html'>
cron</a><br/>
+ - <a href='services_dbus.html'>
+ dbus</a><br/>
+
+ - <a href='services_dhcp.html'>
+ dhcp</a><br/>
+
+ - <a href='services_dictd.html'>
+ dictd</a><br/>
+
- <a href='services_gpm.html'>
gpm</a><br/>
+ - <a href='services_hal.html'>
+ hal</a><br/>
+
- <a href='services_howl.html'>
howl</a><br/>
- <a href='services_inetd.html'>
inetd</a><br/>
+ - <a href='services_inn.html'>
+ inn</a><br/>
+
- <a href='services_kerberos.html'>
kerberos</a><br/>
@@ -64,6 +82,9 @@
- <a href='services_nscd.html'>
nscd</a><br/>
+ - <a href='services_ntp.html'>
+ ntp</a><br/>
+
- <a href='services_privoxy.html'>
privoxy</a><br/>
@@ -79,6 +100,9 @@
- <a href='services_sendmail.html'>
sendmail</a><br/>
+ - <a href='services_squid.html'>
+ squid</a><br/>
+
- <a href='services_ssh.html'>
ssh</a><br/>
@@ -142,7 +166,7 @@
<h5>Summary</h5>
<p>
-Read a cron daemon unnamed pipe
+Read a cron daemon unnamed pipe.
</p>
@@ -154,7 +178,49 @@ Read a cron daemon unnamed pipe
domain
</td><td>
-The type of the process to performing this action.
+Domain allowed access.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
+<a name="link_cron_read_system_job_tmp_files"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>cron_read_system_job_tmp_files</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Read temporary files from the system cron jobs.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+Domain allowed access.
</td><td>
No
@@ -206,6 +272,48 @@ No
</div>
</div>
+<a name="link_cron_rw_pipe"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>cron_rw_pipe</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Read and write a cron daemon unnamed pipe.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+Domain allowed access.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
<a name="link_cron_search_spool"></a>
<div id="interface">
@@ -248,6 +356,48 @@ No
</div>
</div>
+<a name="link_cron_sigchld"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>cron_sigchld</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Send a SIGCHLD signal to the cron daemon.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+Domain allowed access.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
<a name="link_cron_system_entry"></a>
<div id="interface">
@@ -309,6 +459,134 @@ No
</div>
</div>
+<a name="link_cron_use_fd"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>cron_use_fd</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Inherit and use a file descriptor
+from the cron daemon.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+Domain allowed access.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
+<a name="link_cron_use_system_job_fd"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>cron_use_system_job_fd</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Inherit and use a file descriptor
+from system cron jobs.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+Domain allowed access.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
+<a name="link_cron_write_system_job_pipe"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>cron_write_system_job_pipe</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Wrate a system cron job unnamed pipe.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+Domain allowed access.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
<a href=#top>Return</a>
@@ -381,6 +659,22 @@ No
userdomain_prefix
+
+ ,
+
+
+
+ user_domain
+
+
+
+ ,
+
+
+
+ user_role
+
+
)<br>
</div>
<div id="description">
@@ -420,6 +714,26 @@ is the prefix for user_t).
No
</td></tr>
+<tr><td>
+user_domain
+</td><td>
+
+The type of the user domain.
+
+</td><td>
+No
+</td></tr>
+
+<tr><td>
+user_role
+</td><td>
+
+The role associated with the user domain.
+
+</td><td>
+No
+</td></tr>
+
</table>
</div>
</div>
@@ -428,6 +742,7 @@ No
<a href=#top>Return</a>
+
</div>
</body>
</html>
diff --git a/www/api-docs/services_dbus.html b/www/api-docs/services_dbus.html
new file mode 100644
index 0000000..57f903d
--- /dev/null
+++ b/www/api-docs/services_dbus.html
@@ -0,0 +1,402 @@
+<html>
+<head>
+<title>
+ Security Enhanced Linux Reference Policy
+ </title>
+<style type="text/css" media="all">@import "style.css";</style>
+</head>
+<body>
+<div id="Header">Security Enhanced Linux Reference Policy</div>
+<div id='Menu'>
+
+ <a href="admin.html">+
+ admin</a></br/>
+ <div id='subitem'>
+
+ </div>
+
+ <a href="apps.html">+
+ apps</a></br/>
+ <div id='subitem'>
+
+ </div>
+
+ <a href="kernel.html">+
+ kernel</a></br/>
+ <div id='subitem'>
+
+ </div>
+
+ <a href="services.html">+
+ services</a></br/>
+ <div id='subitem'>
+
+ - <a href='services_bind.html'>
+ bind</a><br/>
+
+ - <a href='services_comsat.html'>
+ comsat</a><br/>
+
+ - <a href='services_cron.html'>
+ cron</a><br/>
+
+ - <a href='services_dbus.html'>
+ dbus</a><br/>
+
+ - <a href='services_dhcp.html'>
+ dhcp</a><br/>
+
+ - <a href='services_dictd.html'>
+ dictd</a><br/>
+
+ - <a href='services_gpm.html'>
+ gpm</a><br/>
+
+ - <a href='services_hal.html'>
+ hal</a><br/>
+
+ - <a href='services_howl.html'>
+ howl</a><br/>
+
+ - <a href='services_inetd.html'>
+ inetd</a><br/>
+
+ - <a href='services_inn.html'>
+ inn</a><br/>
+
+ - <a href='services_kerberos.html'>
+ kerberos</a><br/>
+
+ - <a href='services_ldap.html'>
+ ldap</a><br/>
+
+ - <a href='services_mta.html'>
+ mta</a><br/>
+
+ - <a href='services_mysql.html'>
+ mysql</a><br/>
+
+ - <a href='services_nis.html'>
+ nis</a><br/>
+
+ - <a href='services_nscd.html'>
+ nscd</a><br/>
+
+ - <a href='services_ntp.html'>
+ ntp</a><br/>
+
+ - <a href='services_privoxy.html'>
+ privoxy</a><br/>
+
+ - <a href='services_remotelogin.html'>
+ remotelogin</a><br/>
+
+ - <a href='services_rshd.html'>
+ rshd</a><br/>
+
+ - <a href='services_rsync.html'>
+ rsync</a><br/>
+
+ - <a href='services_sendmail.html'>
+ sendmail</a><br/>
+
+ - <a href='services_squid.html'>
+ squid</a><br/>
+
+ - <a href='services_ssh.html'>
+ ssh</a><br/>
+
+ - <a href='services_tcpd.html'>
+ tcpd</a><br/>
+
+ </div>
+
+ <a href="system.html">+
+ system</a></br/>
+ <div id='subitem'>
+
+ </div>
+
+ <br/><p/>
+ <a href="global_booleans.html">* Global Booleans </a>
+ <br/><p/>
+ <a href="global_tunables.html">* Global Tunables </a>
+ <p/><br/><p/>
+ <a href="index.html">* Layer Index</a>
+ <br/><p/>
+ <a href="interfaces.html">* Interface Index</a>
+ <br/><p/>
+ <a href="templates.html">* Template Index</a>
+</div>
+
+<div id="Content">
+<a name="top":></a>
+<h1>Layer: services</h1><p/>
+<h2>Module: dbus</h2><p/>
+
+<a href=#interfaces>Interfaces</a>
+<a href=#templates>Templates</a>
+
+<h3>Description:</h3>
+
+<p><p>Desktop messaging bus</p></p>
+
+
+
+<a name="interfaces"></a>
+<h3>Interfaces: </h3>
+
+<a name="link_dbus_connect_system_bus"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>dbus_connect_system_bus</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Connect to the the system DBUS
+for service (acquire_svc).
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+Domain allowed access.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
+<a name="link_dbus_send_system_bus_msg"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>dbus_send_system_bus_msg</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Send a message on the system DBUS.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+Domain allowed access.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
+
+<a href=#top>Return</a>
+
+
+<a name="templates"></a>
+<h3>Templates: </h3>
+
+<a name="link_dbus_per_userdomain_template"></a>
+<div id="template">
+
+
+<div id="codeblock">
+
+<b>dbus_per_userdomain_template</b>(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ user_domain
+
+
+
+ ,
+
+
+
+ user_role
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+The per user domain template for the dbus module.
+</p>
+
+
+<h5>Description</h5>
+<p>
+</p><p>
+This template creates a derived domain which is
+used for the user dbus.
+</p><p>
+</p><p>
+This template is invoked automatically for each user, and
+generally does not need to be invoked directly
+by policy writers.
+</p><p>
+</p>
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+userdomain_prefix
+</td><td>
+
+The prefix of the user domain (e.g., user
+is the prefix for user_t).
+
+</td><td>
+No
+</td></tr>
+
+<tr><td>
+user_domain
+</td><td>
+
+The type of the user domain.
+
+</td><td>
+No
+</td></tr>
+
+<tr><td>
+user_role
+</td><td>
+
+The role associated with the user domain.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
+<a name="link_dbus_system_bus_client_template"></a>
+<div id="template">
+
+
+<div id="codeblock">
+
+<b>dbus_system_bus_client_template</b>(
+
+
+
+
+ domain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Template for creating connections to
+the system DBUS.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain_prefix
+</td><td>
+
+The prefix of the domain (e.g., user
+is the prefix for user_t).
+
+</td><td>
+No
+</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+The type of the domain.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
+
+<a href=#top>Return</a>
+
+
+
+</div>
+</body>
+</html>
diff --git a/www/api-docs/services_dhcp.html b/www/api-docs/services_dhcp.html
new file mode 100644
index 0000000..46fd88c
--- /dev/null
+++ b/www/api-docs/services_dhcp.html
@@ -0,0 +1,197 @@
+<html>
+<head>
+<title>
+ Security Enhanced Linux Reference Policy
+ </title>
+<style type="text/css" media="all">@import "style.css";</style>
+</head>
+<body>
+<div id="Header">Security Enhanced Linux Reference Policy</div>
+<div id='Menu'>
+
+ <a href="admin.html">+
+ admin</a></br/>
+ <div id='subitem'>
+
+ </div>
+
+ <a href="apps.html">+
+ apps</a></br/>
+ <div id='subitem'>
+
+ </div>
+
+ <a href="kernel.html">+
+ kernel</a></br/>
+ <div id='subitem'>
+
+ </div>
+
+ <a href="services.html">+
+ services</a></br/>
+ <div id='subitem'>
+
+ - <a href='services_bind.html'>
+ bind</a><br/>
+
+ - <a href='services_comsat.html'>
+ comsat</a><br/>
+
+ - <a href='services_cron.html'>
+ cron</a><br/>
+
+ - <a href='services_dbus.html'>
+ dbus</a><br/>
+
+ - <a href='services_dhcp.html'>
+ dhcp</a><br/>
+
+ - <a href='services_dictd.html'>
+ dictd</a><br/>
+
+ - <a href='services_gpm.html'>
+ gpm</a><br/>
+
+ - <a href='services_hal.html'>
+ hal</a><br/>
+
+ - <a href='services_howl.html'>
+ howl</a><br/>
+
+ - <a href='services_inetd.html'>
+ inetd</a><br/>
+
+ - <a href='services_inn.html'>
+ inn</a><br/>
+
+ - <a href='services_kerberos.html'>
+ kerberos</a><br/>
+
+ - <a href='services_ldap.html'>
+ ldap</a><br/>
+
+ - <a href='services_mta.html'>
+ mta</a><br/>
+
+ - <a href='services_mysql.html'>
+ mysql</a><br/>
+
+ - <a href='services_nis.html'>
+ nis</a><br/>
+
+ - <a href='services_nscd.html'>
+ nscd</a><br/>
+
+ - <a href='services_ntp.html'>
+ ntp</a><br/>
+
+ - <a href='services_privoxy.html'>
+ privoxy</a><br/>
+
+ - <a href='services_remotelogin.html'>
+ remotelogin</a><br/>
+
+ - <a href='services_rshd.html'>
+ rshd</a><br/>
+
+ - <a href='services_rsync.html'>
+ rsync</a><br/>
+
+ - <a href='services_sendmail.html'>
+ sendmail</a><br/>
+
+ - <a href='services_squid.html'>
+ squid</a><br/>
+
+ - <a href='services_ssh.html'>
+ ssh</a><br/>
+
+ - <a href='services_tcpd.html'>
+ tcpd</a><br/>
+
+ </div>
+
+ <a href="system.html">+
+ system</a></br/>
+ <div id='subitem'>
+
+ </div>
+
+ <br/><p/>
+ <a href="global_booleans.html">* Global Booleans </a>
+ <br/><p/>
+ <a href="global_tunables.html">* Global Tunables </a>
+ <p/><br/><p/>
+ <a href="index.html">* Layer Index</a>
+ <br/><p/>
+ <a href="interfaces.html">* Interface Index</a>
+ <br/><p/>
+ <a href="templates.html">* Template Index</a>
+</div>
+
+<div id="Content">
+<a name="top":></a>
+<h1>Layer: services</h1><p/>
+<h2>Module: dhcp</h2><p/>
+
+<h3>Description:</h3>
+
+<p><p>Dynamic host configuration protocol (DHCP) server</p></p>
+
+
+
+<a name="interfaces"></a>
+<h3>Interfaces: </h3>
+
+<a name="link_dhcpd_setattr_state_files"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>dhcpd_setattr_state_files</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Set the attributes of the DCHP
+server state files.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+Domain allowed access.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
+
+<a href=#top>Return</a>
+
+
+
+
+</div>
+</body>
+</html>
diff --git a/www/api-docs/services_dictd.html b/www/api-docs/services_dictd.html
new file mode 100644
index 0000000..e03fa34
--- /dev/null
+++ b/www/api-docs/services_dictd.html
@@ -0,0 +1,197 @@
+<html>
+<head>
+<title>
+ Security Enhanced Linux Reference Policy
+ </title>
+<style type="text/css" media="all">@import "style.css";</style>
+</head>
+<body>
+<div id="Header">Security Enhanced Linux Reference Policy</div>
+<div id='Menu'>
+
+ <a href="admin.html">+
+ admin</a></br/>
+ <div id='subitem'>
+
+ </div>
+
+ <a href="apps.html">+
+ apps</a></br/>
+ <div id='subitem'>
+
+ </div>
+
+ <a href="kernel.html">+
+ kernel</a></br/>
+ <div id='subitem'>
+
+ </div>
+
+ <a href="services.html">+
+ services</a></br/>
+ <div id='subitem'>
+
+ - <a href='services_bind.html'>
+ bind</a><br/>
+
+ - <a href='services_comsat.html'>
+ comsat</a><br/>
+
+ - <a href='services_cron.html'>
+ cron</a><br/>
+
+ - <a href='services_dbus.html'>
+ dbus</a><br/>
+
+ - <a href='services_dhcp.html'>
+ dhcp</a><br/>
+
+ - <a href='services_dictd.html'>
+ dictd</a><br/>
+
+ - <a href='services_gpm.html'>
+ gpm</a><br/>
+
+ - <a href='services_hal.html'>
+ hal</a><br/>
+
+ - <a href='services_howl.html'>
+ howl</a><br/>
+
+ - <a href='services_inetd.html'>
+ inetd</a><br/>
+
+ - <a href='services_inn.html'>
+ inn</a><br/>
+
+ - <a href='services_kerberos.html'>
+ kerberos</a><br/>
+
+ - <a href='services_ldap.html'>
+ ldap</a><br/>
+
+ - <a href='services_mta.html'>
+ mta</a><br/>
+
+ - <a href='services_mysql.html'>
+ mysql</a><br/>
+
+ - <a href='services_nis.html'>
+ nis</a><br/>
+
+ - <a href='services_nscd.html'>
+ nscd</a><br/>
+
+ - <a href='services_ntp.html'>
+ ntp</a><br/>
+
+ - <a href='services_privoxy.html'>
+ privoxy</a><br/>
+
+ - <a href='services_remotelogin.html'>
+ remotelogin</a><br/>
+
+ - <a href='services_rshd.html'>
+ rshd</a><br/>
+
+ - <a href='services_rsync.html'>
+ rsync</a><br/>
+
+ - <a href='services_sendmail.html'>
+ sendmail</a><br/>
+
+ - <a href='services_squid.html'>
+ squid</a><br/>
+
+ - <a href='services_ssh.html'>
+ ssh</a><br/>
+
+ - <a href='services_tcpd.html'>
+ tcpd</a><br/>
+
+ </div>
+
+ <a href="system.html">+
+ system</a></br/>
+ <div id='subitem'>
+
+ </div>
+
+ <br/><p/>
+ <a href="global_booleans.html">* Global Booleans </a>
+ <br/><p/>
+ <a href="global_tunables.html">* Global Tunables </a>
+ <p/><br/><p/>
+ <a href="index.html">* Layer Index</a>
+ <br/><p/>
+ <a href="interfaces.html">* Interface Index</a>
+ <br/><p/>
+ <a href="templates.html">* Template Index</a>
+</div>
+
+<div id="Content">
+<a name="top":></a>
+<h1>Layer: services</h1><p/>
+<h2>Module: dictd</h2><p/>
+
+<h3>Description:</h3>
+
+<p><p>Dictionary daemon</p></p>
+
+
+
+<a name="interfaces"></a>
+<h3>Interfaces: </h3>
+
+<a name="link_dictd_use"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>dictd_use</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Use dictionary services by connecting
+over TCP.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+Domain allowed access.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
+
+<a href=#top>Return</a>
+
+
+
+
+</div>
+</body>
+</html>
diff --git a/www/api-docs/services_gpm.html b/www/api-docs/services_gpm.html
index f4d94b8..9ca6796 100644
--- a/www/api-docs/services_gpm.html
+++ b/www/api-docs/services_gpm.html
@@ -34,18 +34,36 @@
- <a href='services_bind.html'>
bind</a><br/>
+ - <a href='services_comsat.html'>
+ comsat</a><br/>
+
- <a href='services_cron.html'>
cron</a><br/>
+ - <a href='services_dbus.html'>
+ dbus</a><br/>
+
+ - <a href='services_dhcp.html'>
+ dhcp</a><br/>
+
+ - <a href='services_dictd.html'>
+ dictd</a><br/>
+
- <a href='services_gpm.html'>
gpm</a><br/>
+ - <a href='services_hal.html'>
+ hal</a><br/>
+
- <a href='services_howl.html'>
howl</a><br/>
- <a href='services_inetd.html'>
inetd</a><br/>
+ - <a href='services_inn.html'>
+ inn</a><br/>
+
- <a href='services_kerberos.html'>
kerberos</a><br/>
@@ -64,6 +82,9 @@
- <a href='services_nscd.html'>
nscd</a><br/>
+ - <a href='services_ntp.html'>
+ ntp</a><br/>
+
- <a href='services_privoxy.html'>
privoxy</a><br/>
@@ -79,6 +100,9 @@
- <a href='services_sendmail.html'>
sendmail</a><br/>
+ - <a href='services_squid.html'>
+ squid</a><br/>
+
- <a href='services_ssh.html'>
ssh</a><br/>
@@ -254,6 +278,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/services_hal.html b/www/api-docs/services_hal.html
new file mode 100644
index 0000000..e237349
--- /dev/null
+++ b/www/api-docs/services_hal.html
@@ -0,0 +1,150 @@
+<html>
+<head>
+<title>
+ Security Enhanced Linux Reference Policy
+ </title>
+<style type="text/css" media="all">@import "style.css";</style>
+</head>
+<body>
+<div id="Header">Security Enhanced Linux Reference Policy</div>
+<div id='Menu'>
+
+ <a href="admin.html">+
+ admin</a></br/>
+ <div id='subitem'>
+
+ </div>
+
+ <a href="apps.html">+
+ apps</a></br/>
+ <div id='subitem'>
+
+ </div>
+
+ <a href="kernel.html">+
+ kernel</a></br/>
+ <div id='subitem'>
+
+ </div>
+
+ <a href="services.html">+
+ services</a></br/>
+ <div id='subitem'>
+
+ - <a href='services_bind.html'>
+ bind</a><br/>
+
+ - <a href='services_comsat.html'>
+ comsat</a><br/>
+
+ - <a href='services_cron.html'>
+ cron</a><br/>
+
+ - <a href='services_dbus.html'>
+ dbus</a><br/>
+
+ - <a href='services_dhcp.html'>
+ dhcp</a><br/>
+
+ - <a href='services_dictd.html'>
+ dictd</a><br/>
+
+ - <a href='services_gpm.html'>
+ gpm</a><br/>
+
+ - <a href='services_hal.html'>
+ hal</a><br/>
+
+ - <a href='services_howl.html'>
+ howl</a><br/>
+
+ - <a href='services_inetd.html'>
+ inetd</a><br/>
+
+ - <a href='services_inn.html'>
+ inn</a><br/>
+
+ - <a href='services_kerberos.html'>
+ kerberos</a><br/>
+
+ - <a href='services_ldap.html'>
+ ldap</a><br/>
+
+ - <a href='services_mta.html'>
+ mta</a><br/>
+
+ - <a href='services_mysql.html'>
+ mysql</a><br/>
+
+ - <a href='services_nis.html'>
+ nis</a><br/>
+
+ - <a href='services_nscd.html'>
+ nscd</a><br/>
+
+ - <a href='services_ntp.html'>
+ ntp</a><br/>
+
+ - <a href='services_privoxy.html'>
+ privoxy</a><br/>
+
+ - <a href='services_remotelogin.html'>
+ remotelogin</a><br/>
+
+ - <a href='services_rshd.html'>
+ rshd</a><br/>
+
+ - <a href='services_rsync.html'>
+ rsync</a><br/>
+
+ - <a href='services_sendmail.html'>
+ sendmail</a><br/>
+
+ - <a href='services_squid.html'>
+ squid</a><br/>
+
+ - <a href='services_ssh.html'>
+ ssh</a><br/>
+
+ - <a href='services_tcpd.html'>
+ tcpd</a><br/>
+
+ </div>
+
+ <a href="system.html">+
+ system</a></br/>
+ <div id='subitem'>
+
+ </div>
+
+ <br/><p/>
+ <a href="global_booleans.html">* Global Booleans </a>
+ <br/><p/>
+ <a href="global_tunables.html">* Global Tunables </a>
+ <p/><br/><p/>
+ <a href="index.html">* Layer Index</a>
+ <br/><p/>
+ <a href="interfaces.html">* Interface Index</a>
+ <br/><p/>
+ <a href="templates.html">* Template Index</a>
+</div>
+
+<div id="Content">
+<a name="top":></a>
+<h1>Layer: services</h1><p/>
+<h2>Module: hal</h2><p/>
+
+<h3>Description:</h3>
+
+<p><p>Hardware abstraction layer</p></p>
+
+
+
+
+
+<h3>No interfaces or templates.</h3>
+
+
+</div>
+</body>
+</html>
diff --git a/www/api-docs/services_howl.html b/www/api-docs/services_howl.html
index bc827ce..a4403bc 100644
--- a/www/api-docs/services_howl.html
+++ b/www/api-docs/services_howl.html
@@ -34,18 +34,36 @@
- <a href='services_bind.html'>
bind</a><br/>
+ - <a href='services_comsat.html'>
+ comsat</a><br/>
+
- <a href='services_cron.html'>
cron</a><br/>
+ - <a href='services_dbus.html'>
+ dbus</a><br/>
+
+ - <a href='services_dhcp.html'>
+ dhcp</a><br/>
+
+ - <a href='services_dictd.html'>
+ dictd</a><br/>
+
- <a href='services_gpm.html'>
gpm</a><br/>
+ - <a href='services_hal.html'>
+ hal</a><br/>
+
- <a href='services_howl.html'>
howl</a><br/>
- <a href='services_inetd.html'>
inetd</a><br/>
+ - <a href='services_inn.html'>
+ inn</a><br/>
+
- <a href='services_kerberos.html'>
kerberos</a><br/>
@@ -64,6 +82,9 @@
- <a href='services_nscd.html'>
nscd</a><br/>
+ - <a href='services_ntp.html'>
+ ntp</a><br/>
+
- <a href='services_privoxy.html'>
privoxy</a><br/>
@@ -79,6 +100,9 @@
- <a href='services_sendmail.html'>
sendmail</a><br/>
+ - <a href='services_squid.html'>
+ squid</a><br/>
+
- <a href='services_ssh.html'>
ssh</a><br/>
@@ -118,6 +142,9 @@
+<h3>No interfaces or templates.</h3>
+
+
</div>
</body>
</html>
diff --git a/www/api-docs/services_inetd.html b/www/api-docs/services_inetd.html
index dc5d765..94ce0a6 100644
--- a/www/api-docs/services_inetd.html
+++ b/www/api-docs/services_inetd.html
@@ -34,18 +34,36 @@
- <a href='services_bind.html'>
bind</a><br/>
+ - <a href='services_comsat.html'>
+ comsat</a><br/>
+
- <a href='services_cron.html'>
cron</a><br/>
+ - <a href='services_dbus.html'>
+ dbus</a><br/>
+
+ - <a href='services_dhcp.html'>
+ dhcp</a><br/>
+
+ - <a href='services_dictd.html'>
+ dictd</a><br/>
+
- <a href='services_gpm.html'>
gpm</a><br/>
+ - <a href='services_hal.html'>
+ hal</a><br/>
+
- <a href='services_howl.html'>
howl</a><br/>
- <a href='services_inetd.html'>
inetd</a><br/>
+ - <a href='services_inn.html'>
+ inn</a><br/>
+
- <a href='services_kerberos.html'>
kerberos</a><br/>
@@ -64,6 +82,9 @@
- <a href='services_nscd.html'>
nscd</a><br/>
+ - <a href='services_ntp.html'>
+ ntp</a><br/>
+
- <a href='services_privoxy.html'>
privoxy</a><br/>
@@ -79,6 +100,9 @@
- <a href='services_sendmail.html'>
sendmail</a><br/>
+ - <a href='services_squid.html'>
+ squid</a><br/>
+
- <a href='services_ssh.html'>
ssh</a><br/>
@@ -499,6 +523,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/services_inn.html b/www/api-docs/services_inn.html
new file mode 100644
index 0000000..5d50711
--- /dev/null
+++ b/www/api-docs/services_inn.html
@@ -0,0 +1,492 @@
+<html>
+<head>
+<title>
+ Security Enhanced Linux Reference Policy
+ </title>
+<style type="text/css" media="all">@import "style.css";</style>
+</head>
+<body>
+<div id="Header">Security Enhanced Linux Reference Policy</div>
+<div id='Menu'>
+
+ <a href="admin.html">+
+ admin</a></br/>
+ <div id='subitem'>
+
+ </div>
+
+ <a href="apps.html">+
+ apps</a></br/>
+ <div id='subitem'>
+
+ </div>
+
+ <a href="kernel.html">+
+ kernel</a></br/>
+ <div id='subitem'>
+
+ </div>
+
+ <a href="services.html">+
+ services</a></br/>
+ <div id='subitem'>
+
+ - <a href='services_bind.html'>
+ bind</a><br/>
+
+ - <a href='services_comsat.html'>
+ comsat</a><br/>
+
+ - <a href='services_cron.html'>
+ cron</a><br/>
+
+ - <a href='services_dbus.html'>
+ dbus</a><br/>
+
+ - <a href='services_dhcp.html'>
+ dhcp</a><br/>
+
+ - <a href='services_dictd.html'>
+ dictd</a><br/>
+
+ - <a href='services_gpm.html'>
+ gpm</a><br/>
+
+ - <a href='services_hal.html'>
+ hal</a><br/>
+
+ - <a href='services_howl.html'>
+ howl</a><br/>
+
+ - <a href='services_inetd.html'>
+ inetd</a><br/>
+
+ - <a href='services_inn.html'>
+ inn</a><br/>
+
+ - <a href='services_kerberos.html'>
+ kerberos</a><br/>
+
+ - <a href='services_ldap.html'>
+ ldap</a><br/>
+
+ - <a href='services_mta.html'>
+ mta</a><br/>
+
+ - <a href='services_mysql.html'>
+ mysql</a><br/>
+
+ - <a href='services_nis.html'>
+ nis</a><br/>
+
+ - <a href='services_nscd.html'>
+ nscd</a><br/>
+
+ - <a href='services_ntp.html'>
+ ntp</a><br/>
+
+ - <a href='services_privoxy.html'>
+ privoxy</a><br/>
+
+ - <a href='services_remotelogin.html'>
+ remotelogin</a><br/>
+
+ - <a href='services_rshd.html'>
+ rshd</a><br/>
+
+ - <a href='services_rsync.html'>
+ rsync</a><br/>
+
+ - <a href='services_sendmail.html'>
+ sendmail</a><br/>
+
+ - <a href='services_squid.html'>
+ squid</a><br/>
+
+ - <a href='services_ssh.html'>
+ ssh</a><br/>
+
+ - <a href='services_tcpd.html'>
+ tcpd</a><br/>
+
+ </div>
+
+ <a href="system.html">+
+ system</a></br/>
+ <div id='subitem'>
+
+ </div>
+
+ <br/><p/>
+ <a href="global_booleans.html">* Global Booleans </a>
+ <br/><p/>
+ <a href="global_tunables.html">* Global Tunables </a>
+ <p/><br/><p/>
+ <a href="index.html">* Layer Index</a>
+ <br/><p/>
+ <a href="interfaces.html">* Interface Index</a>
+ <br/><p/>
+ <a href="templates.html">* Template Index</a>
+</div>
+
+<div id="Content">
+<a name="top":></a>
+<h1>Layer: services</h1><p/>
+<h2>Module: inn</h2><p/>
+
+<h3>Description:</h3>
+
+<p><p>Internet News NNTP server</p></p>
+
+
+
+<a name="interfaces"></a>
+<h3>Interfaces: </h3>
+
+<a name="link_inn_exec"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>inn_exec</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Allow the specified domain to execute innd
+in the caller domain.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+Domain allowed access.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
+<a name="link_inn_exec_config"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>inn_exec_config</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Allow the specified domain to execute
+inn configuration files in /etc.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+Domain allowed access.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
+<a name="link_inn_manage_log"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>inn_manage_log</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Create, read, write, and delete the innd log.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+Domain allowed access.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
+<a name="link_inn_manage_pid"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>inn_manage_pid</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Create, read, write, and delete the innd pid files.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+Domain allowed access.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
+<a name="link_inn_read_config"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>inn_read_config</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Read innd configuration files.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+Domain allowed access.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
+<a name="link_inn_read_news_lib"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>inn_read_news_lib</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Read innd news library files.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+Domain allowed access.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
+<a name="link_inn_read_news_spool"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>inn_read_news_spool</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Read innd news library files.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+Domain allowed access.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
+<a name="link_inn_sendto_unix_dgram_socket"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>inn_sendto_unix_dgram_socket</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Send to a innd unix dgram socket.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+Domain allowed access.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
+
+<a href=#top>Return</a>
+
+
+
+
+</div>
+</body>
+</html>
diff --git a/www/api-docs/services_kerberos.html b/www/api-docs/services_kerberos.html
index 0bc7c12..aed8b53 100644
--- a/www/api-docs/services_kerberos.html
+++ b/www/api-docs/services_kerberos.html
@@ -34,18 +34,36 @@
- <a href='services_bind.html'>
bind</a><br/>
+ - <a href='services_comsat.html'>
+ comsat</a><br/>
+
- <a href='services_cron.html'>
cron</a><br/>
+ - <a href='services_dbus.html'>
+ dbus</a><br/>
+
+ - <a href='services_dhcp.html'>
+ dhcp</a><br/>
+
+ - <a href='services_dictd.html'>
+ dictd</a><br/>
+
- <a href='services_gpm.html'>
gpm</a><br/>
+ - <a href='services_hal.html'>
+ hal</a><br/>
+
- <a href='services_howl.html'>
howl</a><br/>
- <a href='services_inetd.html'>
inetd</a><br/>
+ - <a href='services_inn.html'>
+ inn</a><br/>
+
- <a href='services_kerberos.html'>
kerberos</a><br/>
@@ -64,6 +82,9 @@
- <a href='services_nscd.html'>
nscd</a><br/>
+ - <a href='services_ntp.html'>
+ ntp</a><br/>
+
- <a href='services_privoxy.html'>
privoxy</a><br/>
@@ -79,6 +100,9 @@
- <a href='services_sendmail.html'>
sendmail</a><br/>
+ - <a href='services_squid.html'>
+ squid</a><br/>
+
- <a href='services_ssh.html'>
ssh</a><br/>
@@ -270,6 +294,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/services_ldap.html b/www/api-docs/services_ldap.html
index e33a18e..792e332 100644
--- a/www/api-docs/services_ldap.html
+++ b/www/api-docs/services_ldap.html
@@ -34,18 +34,36 @@
- <a href='services_bind.html'>
bind</a><br/>
+ - <a href='services_comsat.html'>
+ comsat</a><br/>
+
- <a href='services_cron.html'>
cron</a><br/>
+ - <a href='services_dbus.html'>
+ dbus</a><br/>
+
+ - <a href='services_dhcp.html'>
+ dhcp</a><br/>
+
+ - <a href='services_dictd.html'>
+ dictd</a><br/>
+
- <a href='services_gpm.html'>
gpm</a><br/>
+ - <a href='services_hal.html'>
+ hal</a><br/>
+
- <a href='services_howl.html'>
howl</a><br/>
- <a href='services_inetd.html'>
inetd</a><br/>
+ - <a href='services_inn.html'>
+ inn</a><br/>
+
- <a href='services_kerberos.html'>
kerberos</a><br/>
@@ -64,6 +82,9 @@
- <a href='services_nscd.html'>
nscd</a><br/>
+ - <a href='services_ntp.html'>
+ ntp</a><br/>
+
- <a href='services_privoxy.html'>
privoxy</a><br/>
@@ -79,6 +100,9 @@
- <a href='services_sendmail.html'>
sendmail</a><br/>
+ - <a href='services_squid.html'>
+ squid</a><br/>
+
- <a href='services_ssh.html'>
ssh</a><br/>
@@ -209,6 +233,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/services_mta.html b/www/api-docs/services_mta.html
index 8ba217a..afe0c8f 100644
--- a/www/api-docs/services_mta.html
+++ b/www/api-docs/services_mta.html
@@ -34,18 +34,36 @@
- <a href='services_bind.html'>
bind</a><br/>
+ - <a href='services_comsat.html'>
+ comsat</a><br/>
+
- <a href='services_cron.html'>
cron</a><br/>
+ - <a href='services_dbus.html'>
+ dbus</a><br/>
+
+ - <a href='services_dhcp.html'>
+ dhcp</a><br/>
+
+ - <a href='services_dictd.html'>
+ dictd</a><br/>
+
- <a href='services_gpm.html'>
gpm</a><br/>
+ - <a href='services_hal.html'>
+ hal</a><br/>
+
- <a href='services_howl.html'>
howl</a><br/>
- <a href='services_inetd.html'>
inetd</a><br/>
+ - <a href='services_inn.html'>
+ inn</a><br/>
+
- <a href='services_kerberos.html'>
kerberos</a><br/>
@@ -64,6 +82,9 @@
- <a href='services_nscd.html'>
nscd</a><br/>
+ - <a href='services_ntp.html'>
+ ntp</a><br/>
+
- <a href='services_privoxy.html'>
privoxy</a><br/>
@@ -79,6 +100,9 @@
- <a href='services_sendmail.html'>
sendmail</a><br/>
+ - <a href='services_squid.html'>
+ squid</a><br/>
+
- <a href='services_ssh.html'>
ssh</a><br/>
@@ -122,6 +146,48 @@
<a name="interfaces"></a>
<h3>Interfaces: </h3>
+<a name="link_mta_append_spool"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>mta_append_spool</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Create, read, and write the mail spool.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+Domain allowed access.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
<a name="link_mta_dontaudit_read_spool_symlink"></a>
<div id="interface">
@@ -291,6 +357,136 @@ No
</div>
</div>
+<a name="link_mta_mailserver_delivery"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>mta_mailserver_delivery</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Make a type a mailserver type used
+for delivering mail to local users.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+Mail server domain type used for delivering mail.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
+<a name="link_mta_mailserver_sender"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>mta_mailserver_sender</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Make a type a mailserver type used
+for sending mail.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+Mail server domain type used for sending mail.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
+<a name="link_mta_mailserver_user_agent"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>mta_mailserver_user_agent</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Make a type a mailserver type used
+for sending mail on behalf of local
+users to the local mail spool.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+Mail server domain type used for sending local mail.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
<a name="link_mta_manage_queue"></a>
<div id="interface">
@@ -638,7 +834,23 @@ No
- ?
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ user_domain
+
+
+
+ ,
+
+
+
+ user_role
)<br>
@@ -647,19 +859,54 @@ No
<h5>Summary</h5>
<p>
-Summary is missing!
+The per user domain template for the mta module.
</p>
+<h5>Description</h5>
+<p>
+</p><p>
+This template creates a derived domain which is
+a email transfer agent, which sends mail on
+behalf of the user.
+</p><p>
+</p><p>
+This template is invoked automatically for each user, and
+generally does not need to be invoked directly
+by policy writers.
+</p><p>
+</p>
+
<h5>Parameters</h5>
<table border="1" cellspacing="0" cellpadding="3" width="80%">
<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
<tr><td>
-?
+userdomain_prefix
</td><td>
-Parameter descriptions are missing!
+The prefix of the user domain (e.g., user
+is the prefix for user_t).
+
+</td><td>
+No
+</td></tr>
+
+<tr><td>
+user_domain
+</td><td>
+
+The type of the user domain.
+
+</td><td>
+No
+</td></tr>
+
+<tr><td>
+user_role
+</td><td>
+
+The role associated with the user domain.
</td><td>
No
@@ -673,6 +920,7 @@ No
<a href=#top>Return</a>
+
</div>
</body>
</html>
diff --git a/www/api-docs/services_mysql.html b/www/api-docs/services_mysql.html
index 8cc11fb..68825c1 100644
--- a/www/api-docs/services_mysql.html
+++ b/www/api-docs/services_mysql.html
@@ -34,18 +34,36 @@
- <a href='services_bind.html'>
bind</a><br/>
+ - <a href='services_comsat.html'>
+ comsat</a><br/>
+
- <a href='services_cron.html'>
cron</a><br/>
+ - <a href='services_dbus.html'>
+ dbus</a><br/>
+
+ - <a href='services_dhcp.html'>
+ dhcp</a><br/>
+
+ - <a href='services_dictd.html'>
+ dictd</a><br/>
+
- <a href='services_gpm.html'>
gpm</a><br/>
+ - <a href='services_hal.html'>
+ hal</a><br/>
+
- <a href='services_howl.html'>
howl</a><br/>
- <a href='services_inetd.html'>
inetd</a><br/>
+ - <a href='services_inn.html'>
+ inn</a><br/>
+
- <a href='services_kerberos.html'>
kerberos</a><br/>
@@ -64,6 +82,9 @@
- <a href='services_nscd.html'>
nscd</a><br/>
+ - <a href='services_ntp.html'>
+ ntp</a><br/>
+
- <a href='services_privoxy.html'>
privoxy</a><br/>
@@ -79,6 +100,9 @@
- <a href='services_sendmail.html'>
sendmail</a><br/>
+ - <a href='services_squid.html'>
+ squid</a><br/>
+
- <a href='services_ssh.html'>
ssh</a><br/>
@@ -419,6 +443,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/services_nis.html b/www/api-docs/services_nis.html
index 945476b..168cae8 100644
--- a/www/api-docs/services_nis.html
+++ b/www/api-docs/services_nis.html
@@ -34,18 +34,36 @@
- <a href='services_bind.html'>
bind</a><br/>
+ - <a href='services_comsat.html'>
+ comsat</a><br/>
+
- <a href='services_cron.html'>
cron</a><br/>
+ - <a href='services_dbus.html'>
+ dbus</a><br/>
+
+ - <a href='services_dhcp.html'>
+ dhcp</a><br/>
+
+ - <a href='services_dictd.html'>
+ dictd</a><br/>
+
- <a href='services_gpm.html'>
gpm</a><br/>
+ - <a href='services_hal.html'>
+ hal</a><br/>
+
- <a href='services_howl.html'>
howl</a><br/>
- <a href='services_inetd.html'>
inetd</a><br/>
+ - <a href='services_inn.html'>
+ inn</a><br/>
+
- <a href='services_kerberos.html'>
kerberos</a><br/>
@@ -64,6 +82,9 @@
- <a href='services_nscd.html'>
nscd</a><br/>
+ - <a href='services_ntp.html'>
+ ntp</a><br/>
+
- <a href='services_privoxy.html'>
privoxy</a><br/>
@@ -79,6 +100,9 @@
- <a href='services_sendmail.html'>
sendmail</a><br/>
+ - <a href='services_squid.html'>
+ squid</a><br/>
+
- <a href='services_ssh.html'>
ssh</a><br/>
@@ -250,6 +274,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/services_nscd.html b/www/api-docs/services_nscd.html
index 443f019..219f083 100644
--- a/www/api-docs/services_nscd.html
+++ b/www/api-docs/services_nscd.html
@@ -34,18 +34,36 @@
- <a href='services_bind.html'>
bind</a><br/>
+ - <a href='services_comsat.html'>
+ comsat</a><br/>
+
- <a href='services_cron.html'>
cron</a><br/>
+ - <a href='services_dbus.html'>
+ dbus</a><br/>
+
+ - <a href='services_dhcp.html'>
+ dhcp</a><br/>
+
+ - <a href='services_dictd.html'>
+ dictd</a><br/>
+
- <a href='services_gpm.html'>
gpm</a><br/>
+ - <a href='services_hal.html'>
+ hal</a><br/>
+
- <a href='services_howl.html'>
howl</a><br/>
- <a href='services_inetd.html'>
inetd</a><br/>
+ - <a href='services_inn.html'>
+ inn</a><br/>
+
- <a href='services_kerberos.html'>
kerberos</a><br/>
@@ -64,6 +82,9 @@
- <a href='services_nscd.html'>
nscd</a><br/>
+ - <a href='services_ntp.html'>
+ ntp</a><br/>
+
- <a href='services_privoxy.html'>
privoxy</a><br/>
@@ -79,6 +100,9 @@
- <a href='services_sendmail.html'>
sendmail</a><br/>
+ - <a href='services_squid.html'>
+ squid</a><br/>
+
- <a href='services_ssh.html'>
ssh</a><br/>
@@ -336,6 +360,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/services_ntp.html b/www/api-docs/services_ntp.html
new file mode 100644
index 0000000..a9f1603
--- /dev/null
+++ b/www/api-docs/services_ntp.html
@@ -0,0 +1,238 @@
+<html>
+<head>
+<title>
+ Security Enhanced Linux Reference Policy
+ </title>
+<style type="text/css" media="all">@import "style.css";</style>
+</head>
+<body>
+<div id="Header">Security Enhanced Linux Reference Policy</div>
+<div id='Menu'>
+
+ <a href="admin.html">+
+ admin</a></br/>
+ <div id='subitem'>
+
+ </div>
+
+ <a href="apps.html">+
+ apps</a></br/>
+ <div id='subitem'>
+
+ </div>
+
+ <a href="kernel.html">+
+ kernel</a></br/>
+ <div id='subitem'>
+
+ </div>
+
+ <a href="services.html">+
+ services</a></br/>
+ <div id='subitem'>
+
+ - <a href='services_bind.html'>
+ bind</a><br/>
+
+ - <a href='services_comsat.html'>
+ comsat</a><br/>
+
+ - <a href='services_cron.html'>
+ cron</a><br/>
+
+ - <a href='services_dbus.html'>
+ dbus</a><br/>
+
+ - <a href='services_dhcp.html'>
+ dhcp</a><br/>
+
+ - <a href='services_dictd.html'>
+ dictd</a><br/>
+
+ - <a href='services_gpm.html'>
+ gpm</a><br/>
+
+ - <a href='services_hal.html'>
+ hal</a><br/>
+
+ - <a href='services_howl.html'>
+ howl</a><br/>
+
+ - <a href='services_inetd.html'>
+ inetd</a><br/>
+
+ - <a href='services_inn.html'>
+ inn</a><br/>
+
+ - <a href='services_kerberos.html'>
+ kerberos</a><br/>
+
+ - <a href='services_ldap.html'>
+ ldap</a><br/>
+
+ - <a href='services_mta.html'>
+ mta</a><br/>
+
+ - <a href='services_mysql.html'>
+ mysql</a><br/>
+
+ - <a href='services_nis.html'>
+ nis</a><br/>
+
+ - <a href='services_nscd.html'>
+ nscd</a><br/>
+
+ - <a href='services_ntp.html'>
+ ntp</a><br/>
+
+ - <a href='services_privoxy.html'>
+ privoxy</a><br/>
+
+ - <a href='services_remotelogin.html'>
+ remotelogin</a><br/>
+
+ - <a href='services_rshd.html'>
+ rshd</a><br/>
+
+ - <a href='services_rsync.html'>
+ rsync</a><br/>
+
+ - <a href='services_sendmail.html'>
+ sendmail</a><br/>
+
+ - <a href='services_squid.html'>
+ squid</a><br/>
+
+ - <a href='services_ssh.html'>
+ ssh</a><br/>
+
+ - <a href='services_tcpd.html'>
+ tcpd</a><br/>
+
+ </div>
+
+ <a href="system.html">+
+ system</a></br/>
+ <div id='subitem'>
+
+ </div>
+
+ <br/><p/>
+ <a href="global_booleans.html">* Global Booleans </a>
+ <br/><p/>
+ <a href="global_tunables.html">* Global Tunables </a>
+ <p/><br/><p/>
+ <a href="index.html">* Layer Index</a>
+ <br/><p/>
+ <a href="interfaces.html">* Interface Index</a>
+ <br/><p/>
+ <a href="templates.html">* Template Index</a>
+</div>
+
+<div id="Content">
+<a name="top":></a>
+<h1>Layer: services</h1><p/>
+<h2>Module: ntp</h2><p/>
+
+<h3>Description:</h3>
+
+<p><p>Network time protocol daemon</p></p>
+
+
+
+<a name="interfaces"></a>
+<h3>Interfaces: </h3>
+
+<a name="link_ntp_domtrans"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>ntp_domtrans</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Execute ntp server in the ntpd domain.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+The type of the process performing this action.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
+<a name="link_ntp_domtrans_ntpdate"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>ntp_domtrans_ntpdate</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Execute ntp server in the ntpd domain.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+The type of the process performing this action.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
+
+<a href=#top>Return</a>
+
+
+
+
+</div>
+</body>
+</html>
diff --git a/www/api-docs/services_privoxy.html b/www/api-docs/services_privoxy.html
index 672dbc9..d8f3197 100644
--- a/www/api-docs/services_privoxy.html
+++ b/www/api-docs/services_privoxy.html
@@ -34,18 +34,36 @@
- <a href='services_bind.html'>
bind</a><br/>
+ - <a href='services_comsat.html'>
+ comsat</a><br/>
+
- <a href='services_cron.html'>
cron</a><br/>
+ - <a href='services_dbus.html'>
+ dbus</a><br/>
+
+ - <a href='services_dhcp.html'>
+ dhcp</a><br/>
+
+ - <a href='services_dictd.html'>
+ dictd</a><br/>
+
- <a href='services_gpm.html'>
gpm</a><br/>
+ - <a href='services_hal.html'>
+ hal</a><br/>
+
- <a href='services_howl.html'>
howl</a><br/>
- <a href='services_inetd.html'>
inetd</a><br/>
+ - <a href='services_inn.html'>
+ inn</a><br/>
+
- <a href='services_kerberos.html'>
kerberos</a><br/>
@@ -64,6 +82,9 @@
- <a href='services_nscd.html'>
nscd</a><br/>
+ - <a href='services_ntp.html'>
+ ntp</a><br/>
+
- <a href='services_privoxy.html'>
privoxy</a><br/>
@@ -79,6 +100,9 @@
- <a href='services_sendmail.html'>
sendmail</a><br/>
+ - <a href='services_squid.html'>
+ squid</a><br/>
+
- <a href='services_ssh.html'>
ssh</a><br/>
@@ -118,6 +142,9 @@
+<h3>No interfaces or templates.</h3>
+
+
</div>
</body>
</html>
diff --git a/www/api-docs/services_remotelogin.html b/www/api-docs/services_remotelogin.html
index c20291d..87c952a 100644
--- a/www/api-docs/services_remotelogin.html
+++ b/www/api-docs/services_remotelogin.html
@@ -34,18 +34,36 @@
- <a href='services_bind.html'>
bind</a><br/>
+ - <a href='services_comsat.html'>
+ comsat</a><br/>
+
- <a href='services_cron.html'>
cron</a><br/>
+ - <a href='services_dbus.html'>
+ dbus</a><br/>
+
+ - <a href='services_dhcp.html'>
+ dhcp</a><br/>
+
+ - <a href='services_dictd.html'>
+ dictd</a><br/>
+
- <a href='services_gpm.html'>
gpm</a><br/>
+ - <a href='services_hal.html'>
+ hal</a><br/>
+
- <a href='services_howl.html'>
howl</a><br/>
- <a href='services_inetd.html'>
inetd</a><br/>
+ - <a href='services_inn.html'>
+ inn</a><br/>
+
- <a href='services_kerberos.html'>
kerberos</a><br/>
@@ -64,6 +82,9 @@
- <a href='services_nscd.html'>
nscd</a><br/>
+ - <a href='services_ntp.html'>
+ ntp</a><br/>
+
- <a href='services_privoxy.html'>
privoxy</a><br/>
@@ -79,6 +100,9 @@
- <a href='services_sendmail.html'>
sendmail</a><br/>
+ - <a href='services_squid.html'>
+ squid</a><br/>
+
- <a href='services_ssh.html'>
ssh</a><br/>
@@ -166,6 +190,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/services_rshd.html b/www/api-docs/services_rshd.html
index 2d3e2b0..455202c 100644
--- a/www/api-docs/services_rshd.html
+++ b/www/api-docs/services_rshd.html
@@ -34,18 +34,36 @@
- <a href='services_bind.html'>
bind</a><br/>
+ - <a href='services_comsat.html'>
+ comsat</a><br/>
+
- <a href='services_cron.html'>
cron</a><br/>
+ - <a href='services_dbus.html'>
+ dbus</a><br/>
+
+ - <a href='services_dhcp.html'>
+ dhcp</a><br/>
+
+ - <a href='services_dictd.html'>
+ dictd</a><br/>
+
- <a href='services_gpm.html'>
gpm</a><br/>
+ - <a href='services_hal.html'>
+ hal</a><br/>
+
- <a href='services_howl.html'>
howl</a><br/>
- <a href='services_inetd.html'>
inetd</a><br/>
+ - <a href='services_inn.html'>
+ inn</a><br/>
+
- <a href='services_kerberos.html'>
kerberos</a><br/>
@@ -64,6 +82,9 @@
- <a href='services_nscd.html'>
nscd</a><br/>
+ - <a href='services_ntp.html'>
+ ntp</a><br/>
+
- <a href='services_privoxy.html'>
privoxy</a><br/>
@@ -79,6 +100,9 @@
- <a href='services_sendmail.html'>
sendmail</a><br/>
+ - <a href='services_squid.html'>
+ squid</a><br/>
+
- <a href='services_ssh.html'>
ssh</a><br/>
@@ -166,6 +190,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/services_rsync.html b/www/api-docs/services_rsync.html
index 6494964..03f24ea 100644
--- a/www/api-docs/services_rsync.html
+++ b/www/api-docs/services_rsync.html
@@ -34,18 +34,36 @@
- <a href='services_bind.html'>
bind</a><br/>
+ - <a href='services_comsat.html'>
+ comsat</a><br/>
+
- <a href='services_cron.html'>
cron</a><br/>
+ - <a href='services_dbus.html'>
+ dbus</a><br/>
+
+ - <a href='services_dhcp.html'>
+ dhcp</a><br/>
+
+ - <a href='services_dictd.html'>
+ dictd</a><br/>
+
- <a href='services_gpm.html'>
gpm</a><br/>
+ - <a href='services_hal.html'>
+ hal</a><br/>
+
- <a href='services_howl.html'>
howl</a><br/>
- <a href='services_inetd.html'>
inetd</a><br/>
+ - <a href='services_inn.html'>
+ inn</a><br/>
+
- <a href='services_kerberos.html'>
kerberos</a><br/>
@@ -64,6 +82,9 @@
- <a href='services_nscd.html'>
nscd</a><br/>
+ - <a href='services_ntp.html'>
+ ntp</a><br/>
+
- <a href='services_privoxy.html'>
privoxy</a><br/>
@@ -79,6 +100,9 @@
- <a href='services_sendmail.html'>
sendmail</a><br/>
+ - <a href='services_squid.html'>
+ squid</a><br/>
+
- <a href='services_ssh.html'>
ssh</a><br/>
@@ -118,6 +142,9 @@
+<h3>No interfaces or templates.</h3>
+
+
</div>
</body>
</html>
diff --git a/www/api-docs/services_sendmail.html b/www/api-docs/services_sendmail.html
index 1dc8347..3837424 100644
--- a/www/api-docs/services_sendmail.html
+++ b/www/api-docs/services_sendmail.html
@@ -34,18 +34,36 @@
- <a href='services_bind.html'>
bind</a><br/>
+ - <a href='services_comsat.html'>
+ comsat</a><br/>
+
- <a href='services_cron.html'>
cron</a><br/>
+ - <a href='services_dbus.html'>
+ dbus</a><br/>
+
+ - <a href='services_dhcp.html'>
+ dhcp</a><br/>
+
+ - <a href='services_dictd.html'>
+ dictd</a><br/>
+
- <a href='services_gpm.html'>
gpm</a><br/>
+ - <a href='services_hal.html'>
+ hal</a><br/>
+
- <a href='services_howl.html'>
howl</a><br/>
- <a href='services_inetd.html'>
inetd</a><br/>
+ - <a href='services_inn.html'>
+ inn</a><br/>
+
- <a href='services_kerberos.html'>
kerberos</a><br/>
@@ -64,6 +82,9 @@
- <a href='services_nscd.html'>
nscd</a><br/>
+ - <a href='services_ntp.html'>
+ ntp</a><br/>
+
- <a href='services_privoxy.html'>
privoxy</a><br/>
@@ -79,6 +100,9 @@
- <a href='services_sendmail.html'>
sendmail</a><br/>
+ - <a href='services_squid.html'>
+ squid</a><br/>
+
- <a href='services_ssh.html'>
ssh</a><br/>
@@ -166,6 +190,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/services_squid.html b/www/api-docs/services_squid.html
new file mode 100644
index 0000000..9df9e4e
--- /dev/null
+++ b/www/api-docs/services_squid.html
@@ -0,0 +1,323 @@
+<html>
+<head>
+<title>
+ Security Enhanced Linux Reference Policy
+ </title>
+<style type="text/css" media="all">@import "style.css";</style>
+</head>
+<body>
+<div id="Header">Security Enhanced Linux Reference Policy</div>
+<div id='Menu'>
+
+ <a href="admin.html">+
+ admin</a></br/>
+ <div id='subitem'>
+
+ </div>
+
+ <a href="apps.html">+
+ apps</a></br/>
+ <div id='subitem'>
+
+ </div>
+
+ <a href="kernel.html">+
+ kernel</a></br/>
+ <div id='subitem'>
+
+ </div>
+
+ <a href="services.html">+
+ services</a></br/>
+ <div id='subitem'>
+
+ - <a href='services_bind.html'>
+ bind</a><br/>
+
+ - <a href='services_comsat.html'>
+ comsat</a><br/>
+
+ - <a href='services_cron.html'>
+ cron</a><br/>
+
+ - <a href='services_dbus.html'>
+ dbus</a><br/>
+
+ - <a href='services_dhcp.html'>
+ dhcp</a><br/>
+
+ - <a href='services_dictd.html'>
+ dictd</a><br/>
+
+ - <a href='services_gpm.html'>
+ gpm</a><br/>
+
+ - <a href='services_hal.html'>
+ hal</a><br/>
+
+ - <a href='services_howl.html'>
+ howl</a><br/>
+
+ - <a href='services_inetd.html'>
+ inetd</a><br/>
+
+ - <a href='services_inn.html'>
+ inn</a><br/>
+
+ - <a href='services_kerberos.html'>
+ kerberos</a><br/>
+
+ - <a href='services_ldap.html'>
+ ldap</a><br/>
+
+ - <a href='services_mta.html'>
+ mta</a><br/>
+
+ - <a href='services_mysql.html'>
+ mysql</a><br/>
+
+ - <a href='services_nis.html'>
+ nis</a><br/>
+
+ - <a href='services_nscd.html'>
+ nscd</a><br/>
+
+ - <a href='services_ntp.html'>
+ ntp</a><br/>
+
+ - <a href='services_privoxy.html'>
+ privoxy</a><br/>
+
+ - <a href='services_remotelogin.html'>
+ remotelogin</a><br/>
+
+ - <a href='services_rshd.html'>
+ rshd</a><br/>
+
+ - <a href='services_rsync.html'>
+ rsync</a><br/>
+
+ - <a href='services_sendmail.html'>
+ sendmail</a><br/>
+
+ - <a href='services_squid.html'>
+ squid</a><br/>
+
+ - <a href='services_ssh.html'>
+ ssh</a><br/>
+
+ - <a href='services_tcpd.html'>
+ tcpd</a><br/>
+
+ </div>
+
+ <a href="system.html">+
+ system</a></br/>
+ <div id='subitem'>
+
+ </div>
+
+ <br/><p/>
+ <a href="global_booleans.html">* Global Booleans </a>
+ <br/><p/>
+ <a href="global_tunables.html">* Global Tunables </a>
+ <p/><br/><p/>
+ <a href="index.html">* Layer Index</a>
+ <br/><p/>
+ <a href="interfaces.html">* Interface Index</a>
+ <br/><p/>
+ <a href="templates.html">* Template Index</a>
+</div>
+
+<div id="Content">
+<a name="top":></a>
+<h1>Layer: services</h1><p/>
+<h2>Module: squid</h2><p/>
+
+<h3>Description:</h3>
+
+<p><p>Squid caching http proxy server</p></p>
+
+
+
+<a name="interfaces"></a>
+<h3>Interfaces: </h3>
+
+<a name="link_squid_domtrans"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>squid_domtrans</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Execute squid in the squid domain.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+The type of the process performing this action.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
+<a name="link_squid_manage_logs"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>squid_manage_logs</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Create, read, write, and delete
+squid logs.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+Domain allowed access.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
+<a name="link_squid_read_config"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>squid_read_config</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Read squid configuration file.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+Domain allowed access.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
+<a name="link_squid_use"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>squid_use</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Use squid services by connecting over TCP.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+Domain allowed access.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
+
+<a href=#top>Return</a>
+
+
+
+
+</div>
+</body>
+</html>
diff --git a/www/api-docs/services_ssh.html b/www/api-docs/services_ssh.html
index c7c7515..00c5536 100644
--- a/www/api-docs/services_ssh.html
+++ b/www/api-docs/services_ssh.html
@@ -34,18 +34,36 @@
- <a href='services_bind.html'>
bind</a><br/>
+ - <a href='services_comsat.html'>
+ comsat</a><br/>
+
- <a href='services_cron.html'>
cron</a><br/>
+ - <a href='services_dbus.html'>
+ dbus</a><br/>
+
+ - <a href='services_dhcp.html'>
+ dhcp</a><br/>
+
+ - <a href='services_dictd.html'>
+ dictd</a><br/>
+
- <a href='services_gpm.html'>
gpm</a><br/>
+ - <a href='services_hal.html'>
+ hal</a><br/>
+
- <a href='services_howl.html'>
howl</a><br/>
- <a href='services_inetd.html'>
inetd</a><br/>
+ - <a href='services_inn.html'>
+ inn</a><br/>
+
- <a href='services_kerberos.html'>
kerberos</a><br/>
@@ -64,6 +82,9 @@
- <a href='services_nscd.html'>
nscd</a><br/>
+ - <a href='services_ntp.html'>
+ ntp</a><br/>
+
- <a href='services_privoxy.html'>
privoxy</a><br/>
@@ -79,6 +100,9 @@
- <a href='services_sendmail.html'>
sendmail</a><br/>
+ - <a href='services_squid.html'>
+ squid</a><br/>
+
- <a href='services_ssh.html'>
ssh</a><br/>
@@ -183,6 +207,22 @@ No
userdomain_prefix
+
+ ,
+
+
+
+ user_domain
+
+
+
+ ,
+
+
+
+ user_role
+
+
)<br>
</div>
<div id="description">
@@ -222,6 +262,26 @@ is the prefix for user_t).
No
</td></tr>
+<tr><td>
+user_domain
+</td><td>
+
+The type of the user domain.
+
+</td><td>
+No
+</td></tr>
+
+<tr><td>
+user_role
+</td><td>
+
+The role associated with the user domain.
+
+</td><td>
+No
+</td></tr>
+
</table>
</div>
</div>
@@ -284,6 +344,7 @@ No
<a href=#top>Return</a>
+
</div>
</body>
</html>
diff --git a/www/api-docs/services_tcpd.html b/www/api-docs/services_tcpd.html
index 9a42120..60aab6c 100644
--- a/www/api-docs/services_tcpd.html
+++ b/www/api-docs/services_tcpd.html
@@ -34,18 +34,36 @@
- <a href='services_bind.html'>
bind</a><br/>
+ - <a href='services_comsat.html'>
+ comsat</a><br/>
+
- <a href='services_cron.html'>
cron</a><br/>
+ - <a href='services_dbus.html'>
+ dbus</a><br/>
+
+ - <a href='services_dhcp.html'>
+ dhcp</a><br/>
+
+ - <a href='services_dictd.html'>
+ dictd</a><br/>
+
- <a href='services_gpm.html'>
gpm</a><br/>
+ - <a href='services_hal.html'>
+ hal</a><br/>
+
- <a href='services_howl.html'>
howl</a><br/>
- <a href='services_inetd.html'>
inetd</a><br/>
+ - <a href='services_inn.html'>
+ inn</a><br/>
+
- <a href='services_kerberos.html'>
kerberos</a><br/>
@@ -64,6 +82,9 @@
- <a href='services_nscd.html'>
nscd</a><br/>
+ - <a href='services_ntp.html'>
+ ntp</a><br/>
+
- <a href='services_privoxy.html'>
privoxy</a><br/>
@@ -79,6 +100,9 @@
- <a href='services_sendmail.html'>
sendmail</a><br/>
+ - <a href='services_squid.html'>
+ squid</a><br/>
+
- <a href='services_ssh.html'>
ssh</a><br/>
@@ -118,6 +142,9 @@
+<h3>No interfaces or templates.</h3>
+
+
</div>
</body>
</html>
diff --git a/www/api-docs/system_authlogin.html b/www/api-docs/system_authlogin.html
index 0b3dd82..67dd979 100644
--- a/www/api-docs/system_authlogin.html
+++ b/www/api-docs/system_authlogin.html
@@ -1695,6 +1695,22 @@ No
userdomain_prefix
+
+ ,
+
+
+
+ user_domain
+
+
+
+ ,
+
+
+
+ user_role
+
+
)<br>
</div>
<div id="description">
@@ -1735,6 +1751,26 @@ is the prefix for user_t).
No
</td></tr>
+<tr><td>
+user_domain
+</td><td>
+
+The type of the user domain.
+
+</td><td>
+No
+</td></tr>
+
+<tr><td>
+user_role
+</td><td>
+
+The role associated with the user domain.
+
+</td><td>
+No
+</td></tr>
+
</table>
</div>
</div>
@@ -1743,6 +1779,7 @@ No
<a href=#top>Return</a>
+
</div>
</body>
</html>
diff --git a/www/api-docs/system_clock.html b/www/api-docs/system_clock.html
index 45a5b99..27e4604 100644
--- a/www/api-docs/system_clock.html
+++ b/www/api-docs/system_clock.html
@@ -353,6 +353,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/system_corecommands.html b/www/api-docs/system_corecommands.html
index 0aa14c1..ff33bb5 100644
--- a/www/api-docs/system_corecommands.html
+++ b/www/api-docs/system_corecommands.html
@@ -142,6 +142,8 @@ in /bin, /sbin, /usr/bin, and /usr/sbin.
</p></p>
+<p>This module is required to be included in all policies.</p>
+
<a name="interfaces"></a>
<h3>Interfaces: </h3>
@@ -983,6 +985,87 @@ No
</div>
</div>
+<a name="link_corecmd_sbin_domtrans"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>corecmd_sbin_domtrans</b>(
+
+
+
+
+ domain
+
+
+
+ ,
+
+
+
+ target_domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Execute a file in a sbin directory
+in the specified domain.
+</p>
+
+
+<h5>Description</h5>
+<p>
+</p><p>
+Execute a file in a sbin directory
+in the specified domain. This allows
+the specified domain to execute any file
+on these filesystems in the specified
+domain. This is not suggested.
+</p><p>
+</p><p>
+No interprocess communication (signals, pipes,
+etc.) is provided by this interface since
+the domains are not owned by this module.
+</p><p>
+</p><p>
+This interface was added to handle
+the ssh-agent policy.
+</p><p>
+</p>
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+The type of the process performing this action.
+
+</td><td>
+No
+</td></tr>
+
+<tr><td>
+target_domain
+</td><td>
+
+The type of the new process.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
<a name="link_corecmd_search_bin"></a>
<div id="interface">
@@ -1262,6 +1345,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/system_domain.html b/www/api-docs/system_domain.html
index 25380ee..fc62e90 100644
--- a/www/api-docs/system_domain.html
+++ b/www/api-docs/system_domain.html
@@ -1711,6 +1711,7 @@ No
<a href=#top>Return</a>
+
</div>
</body>
</html>
diff --git a/www/api-docs/system_files.html b/www/api-docs/system_files.html
index 7273fb6..55c6027 100644
--- a/www/api-docs/system_files.html
+++ b/www/api-docs/system_files.html
@@ -1112,6 +1112,49 @@ No
</div>
</div>
+<a name="link_files_dontaudit_getattr_tmp_dir"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>files_dontaudit_getattr_tmp_dir</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Do not audit attempts to get the
+attributes of the tmp directory (/tmp).
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+The type of the process performing this action.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
<a name="link_files_dontaudit_ioctl_all_pids"></a>
<div id="interface">
@@ -1386,7 +1429,8 @@ No
<h5>Summary</h5>
<p>
-Do not audit attempts to search home directories root.
+Do not audit attempts to search
+home directories root (/home).
</p>
@@ -1956,6 +2000,50 @@ No
</div>
</div>
+<a name="link_files_getattr_home_dir"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>files_getattr_home_dir</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Do not audit attempts to get the
+attributes of the home directories root
+(/home).
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+The type of the process performing this action.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
<a name="link_files_getattr_usr_files"></a>
<div id="interface">
@@ -2461,6 +2549,49 @@ No
</div>
</div>
+<a name="link_files_list_usr"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>files_list_usr</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+List the contents of generic
+directories in /usr.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+Domain allowed access.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
<a name="link_files_list_var_lib"></a>
<div id="interface">
@@ -4790,6 +4921,49 @@ No
</div>
</div>
+<a name="link_files_rw_etc_runtime_files"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>files_rw_etc_runtime_files</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Read and write files in /etc that are dynamically
+created on boot, such as mtab.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+Domain allowed access.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
<a name="link_files_rw_generic_pids"></a>
<div id="interface">
@@ -5022,7 +5196,7 @@ No
<h5>Summary</h5>
<p>
-Search home directories root.
+Search home directories root (/home).
</p>
@@ -5722,6 +5896,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/system_fstools.html b/www/api-docs/system_fstools.html
index b38385f..89b7e2d 100644
--- a/www/api-docs/system_fstools.html
+++ b/www/api-docs/system_fstools.html
@@ -397,6 +397,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/system_getty.html b/www/api-docs/system_getty.html
index a426f19..e1ff804 100644
--- a/www/api-docs/system_getty.html
+++ b/www/api-docs/system_getty.html
@@ -316,6 +316,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/system_hostname.html b/www/api-docs/system_hostname.html
index c0d4a1f..e08d8ae 100644
--- a/www/api-docs/system_hostname.html
+++ b/www/api-docs/system_hostname.html
@@ -311,6 +311,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/system_hotplug.html b/www/api-docs/system_hotplug.html
index edc3348..19b6540 100644
--- a/www/api-docs/system_hotplug.html
+++ b/www/api-docs/system_hotplug.html
@@ -487,6 +487,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/system_init.html b/www/api-docs/system_init.html
index 6c999a5..8aa8466 100644
--- a/www/api-docs/system_init.html
+++ b/www/api-docs/system_init.html
@@ -1245,7 +1245,7 @@ No
- ?
+ domain
)<br>
@@ -1254,7 +1254,7 @@ No
<h5>Summary</h5>
<p>
-Summary is missing!
+Send init a SIGCHLD signal.
</p>
@@ -1263,10 +1263,52 @@ Summary is missing!
<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
<tr><td>
-?
+domain
</td><td>
-Parameter descriptions are missing!
+Domain allowed access.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
+<a name="link_init_signull"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>init_signull</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Send init a null signal.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+Domain allowed access.
</td><td>
No
@@ -1605,6 +1647,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/system_ipsec.html b/www/api-docs/system_ipsec.html
index cd7a440..c2e783e 100644
--- a/www/api-docs/system_ipsec.html
+++ b/www/api-docs/system_ipsec.html
@@ -400,6 +400,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/system_iptables.html b/www/api-docs/system_iptables.html
index 7d64643..122ef72 100644
--- a/www/api-docs/system_iptables.html
+++ b/www/api-docs/system_iptables.html
@@ -311,6 +311,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/system_libraries.html b/www/api-docs/system_libraries.html
index 75d8029..83150d7 100644
--- a/www/api-docs/system_libraries.html
+++ b/www/api-docs/system_libraries.html
@@ -693,6 +693,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/system_locallogin.html b/www/api-docs/system_locallogin.html
index 97b095a..b2dac52 100644
--- a/www/api-docs/system_locallogin.html
+++ b/www/api-docs/system_locallogin.html
@@ -274,6 +274,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/system_logging.html b/www/api-docs/system_logging.html
index fbc9875..7fc073b 100644
--- a/www/api-docs/system_logging.html
+++ b/www/api-docs/system_logging.html
@@ -738,6 +738,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/system_lvm.html b/www/api-docs/system_lvm.html
index 421dac9..e04dfe3 100644
--- a/www/api-docs/system_lvm.html
+++ b/www/api-docs/system_lvm.html
@@ -310,6 +310,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/system_miscfiles.html b/www/api-docs/system_miscfiles.html
index a671d49..58b2b0b 100644
--- a/www/api-docs/system_miscfiles.html
+++ b/www/api-docs/system_miscfiles.html
@@ -443,6 +443,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/system_modutils.html b/www/api-docs/system_modutils.html
index 5d61c09..549a2eb 100644
--- a/www/api-docs/system_modutils.html
+++ b/www/api-docs/system_modutils.html
@@ -722,6 +722,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/system_mount.html b/www/api-docs/system_mount.html
index e9cafd9..68abe9c 100644
--- a/www/api-docs/system_mount.html
+++ b/www/api-docs/system_mount.html
@@ -355,6 +355,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/system_pcmcia.html b/www/api-docs/system_pcmcia.html
index 1634927..296a0d9 100644
--- a/www/api-docs/system_pcmcia.html
+++ b/www/api-docs/system_pcmcia.html
@@ -439,6 +439,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/system_raid.html b/www/api-docs/system_raid.html
index 6da77a0..cceeaa7 100644
--- a/www/api-docs/system_raid.html
+++ b/www/api-docs/system_raid.html
@@ -242,6 +242,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/system_selinuxutil.html b/www/api-docs/system_selinuxutil.html
index 74bff53..c7abf6e 100644
--- a/www/api-docs/system_selinuxutil.html
+++ b/www/api-docs/system_selinuxutil.html
@@ -1766,6 +1766,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/system_sysnetwork.html b/www/api-docs/system_sysnetwork.html
index 4159358..0f26fb4 100644
--- a/www/api-docs/system_sysnetwork.html
+++ b/www/api-docs/system_sysnetwork.html
@@ -186,6 +186,100 @@ No
</div>
</div>
+<a name="link_sysnet_create_dhcp_state"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>sysnet_create_dhcp_state</b>(
+
+
+
+
+ domain
+
+
+
+ ,
+
+
+
+ file_type
+
+
+
+ ,
+
+
+
+ [
+
+ object_class
+
+ ]
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Create DHCP state data.
+</p>
+
+
+<h5>Description</h5>
+<p>
+</p><p>
+Create DHCP state data.
+</p><p>
+</p><p>
+This is added for DHCP server, as
+the server and client put their state
+files in the same directory.
+</p><p>
+</p>
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+Domain allowed access.
+
+</td><td>
+No
+</td></tr>
+
+<tr><td>
+file_type
+</td><td>
+
+The type of the object to be created
+
+</td><td>
+No
+</td></tr>
+
+<tr><td>
+object_class
+</td><td>
+
+The object class. If not specified, file is used.
+
+</td><td>
+yes
+</td></tr>
+
+</table>
+</div>
+</div>
+
<a name="link_sysnet_domtrans_dhcpc"></a>
<div id="interface">
@@ -396,6 +490,48 @@ No
</div>
</div>
+<a name="link_sysnet_read_dhcp_config"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>sysnet_read_dhcp_config</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Read the DHCP configuration files.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+Domain allowed access.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
<a name="link_sysnet_read_dhcpc_pid"></a>
<div id="interface">
@@ -602,6 +738,48 @@ No
</div>
</div>
+<a name="link_sysnet_search_dhcp_state"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>sysnet_search_dhcp_state</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Search the DHCP state data directory.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+Domain allowed access.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
<a name="link_sysnet_sigchld_dhcpc"></a>
<div id="interface">
@@ -775,6 +953,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/system_udev.html b/www/api-docs/system_udev.html
index 51ca4ed..05fe388 100644
--- a/www/api-docs/system_udev.html
+++ b/www/api-docs/system_udev.html
@@ -317,6 +317,7 @@ No
+
</div>
</body>
</html>
diff --git a/www/api-docs/system_unconfined.html b/www/api-docs/system_unconfined.html
index 629b3e2..d3bdf9e 100644
--- a/www/api-docs/system_unconfined.html
+++ b/www/api-docs/system_unconfined.html
@@ -584,6 +584,7 @@ No
<a href=#top>Return</a>
+
</div>
</body>
</html>
diff --git a/www/api-docs/system_userdomain.html b/www/api-docs/system_userdomain.html
index 726460b..e378a8f 100644
--- a/www/api-docs/system_userdomain.html
+++ b/www/api-docs/system_userdomain.html
@@ -255,6 +255,49 @@ No
</div>
</div>
+<a name="link_userdom_dontaudit_list_sysadm_home_dir"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>userdom_dontaudit_list_sysadm_home_dir</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Do not audit attempts to list the sysadm
+users home directory.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+Domain to not audit.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
<a name="link_userdom_dontaudit_search_all_users_home"></a>
<div id="interface">
@@ -1148,6 +1191,48 @@ No
</div>
</div>
+<a name="link_userdom_sigcld_all_users"></a>
+<div id="interface">
+
+
+<div id="codeblock">
+
+<b>userdom_sigcld_all_users</b>(
+
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Send a SIGCHLD signal to all user domains.
+</p>
+
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
+<tr><td>
+domain
+</td><td>
+
+Domain allowed access.
+
+</td><td>
+No
+</td></tr>
+
+</table>
+</div>
+</div>
+
<a name="link_userdom_signal_all_users"></a>
<div id="interface">
@@ -1850,7 +1935,7 @@ No
- domain
+ userdomain_prefix
@@ -1858,7 +1943,7 @@ No
- userdomain_prefix
+ domain
)<br>
@@ -1887,21 +1972,21 @@ be called from a per-userdomain template.
<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
<tr><td>
-domain
+userdomain_prefix
</td><td>
-The type of the process performing this action.
+The prefix of the user domain (e.g., user
+is the prefix for user_t).
</td><td>
No
</td></tr>
<tr><td>
-userdomain_prefix
+domain
</td><td>
-The prefix of the user domain (e.g., user
-is the prefix for user_t).
+The type of the process performing this action.
</td><td>
No
@@ -1922,7 +2007,7 @@ No
- domain
+ userdomain_prefix
@@ -1930,7 +2015,7 @@ No
- userdomain_prefix
+ domain
)<br>
@@ -1961,21 +2046,21 @@ be called from a per-userdomain template.
<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
<tr><td>
-domain
+userdomain_prefix
</td><td>
-The type of the process performing this action.
+The prefix of the user domain (e.g., user
+is the prefix for user_t).
</td><td>
No
</td></tr>
<tr><td>
-userdomain_prefix
+domain
</td><td>
-The prefix of the user domain (e.g., user
-is the prefix for user_t).
+The type of the process performing this action.
</td><td>
No
@@ -1996,7 +2081,7 @@ No
- domain
+ userdomain_prefix
@@ -2004,7 +2089,7 @@ No
- userdomain_prefix
+ domain
)<br>
@@ -2035,21 +2120,21 @@ be called from a per-userdomain template.
<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
<tr><td>
-domain
+userdomain_prefix
</td><td>
-The type of the process performing this action.
+The prefix of the user domain (e.g., user
+is the prefix for user_t).
</td><td>
No
</td></tr>
<tr><td>
-userdomain_prefix
+domain
</td><td>
-The prefix of the user domain (e.g., user
-is the prefix for user_t).
+The type of the process performing this action.
</td><td>
No
@@ -2070,7 +2155,7 @@ No
- domain
+ userdomain_prefix
@@ -2078,7 +2163,7 @@ No
- userdomain_prefix
+ domain
)<br>
@@ -2109,21 +2194,21 @@ be called from a per-userdomain template.
<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
<tr><td>
-domain
+userdomain_prefix
</td><td>
-The type of the process performing this action.
+The prefix of the user domain (e.g., user
+is the prefix for user_t).
</td><td>
No
</td></tr>
<tr><td>
-userdomain_prefix
+domain
</td><td>
-The prefix of the user domain (e.g., user
-is the prefix for user_t).
+The type of the process performing this action.
</td><td>
No
@@ -2144,7 +2229,7 @@ No
- domain
+ userdomain_prefix
@@ -2152,7 +2237,7 @@ No
- userdomain_prefix
+ domain
)<br>
@@ -2183,21 +2268,21 @@ be called from a per-userdomain template.
<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
<tr><td>
-domain
+userdomain_prefix
</td><td>
-The type of the process performing this action.
+The prefix of the user domain (e.g., user
+is the prefix for user_t).
</td><td>
No
</td></tr>
<tr><td>
-userdomain_prefix
+domain
</td><td>
-The prefix of the user domain (e.g., user
-is the prefix for user_t).
+The type of the process performing this action.
</td><td>
No
@@ -2218,7 +2303,7 @@ No
- domain
+ userdomain_prefix
@@ -2226,7 +2311,7 @@ No
- userdomain_prefix
+ domain
)<br>
@@ -2257,21 +2342,21 @@ be called from a per-userdomain template.
<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
<tr><td>
-domain
+userdomain_prefix
</td><td>
-The type of the process performing this action.
+The prefix of the user domain (e.g., user
+is the prefix for user_t).
</td><td>
No
</td></tr>
<tr><td>
-userdomain_prefix
+domain
</td><td>
-The prefix of the user domain (e.g., user
-is the prefix for user_t).
+The type of the process performing this action.
</td><td>
No
@@ -2292,7 +2377,7 @@ No
- domain
+ userdomain_prefix
@@ -2300,7 +2385,7 @@ No
- userdomain_prefix
+ domain
)<br>
@@ -2331,21 +2416,21 @@ be called from a per-userdomain template.
<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
<tr><td>
-domain
+userdomain_prefix
</td><td>
-The type of the process performing this action.
+The prefix of the user domain (e.g., user
+is the prefix for user_t).
</td><td>
No
</td></tr>
<tr><td>
-userdomain_prefix
+domain
</td><td>
-The prefix of the user domain (e.g., user
-is the prefix for user_t).
+The type of the process performing this action.
</td><td>
No
@@ -2366,7 +2451,7 @@ No
- domain
+ userdomain_prefix
@@ -2374,7 +2459,7 @@ No
- userdomain_prefix
+ domain
)<br>
@@ -2405,6 +2490,17 @@ be called from a per-userdomain template.
<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
<tr><td>
+userdomain_prefix
+</td><td>
+
+The prefix of the user domain (e.g., user
+is the prefix for user_t).
+
+</td><td>
+No
+</td></tr>
+
+<tr><td>
domain
</td><td>
@@ -2414,6 +2510,57 @@ The type of the process performing this action.
No
</td></tr>
+</table>
+</div>
+</div>
+
+<a name="link_userdom_read_user_home_files"></a>
+<div id="template">
+
+
+<div id="codeblock">
+
+<b>userdom_read_user_home_files</b>(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )<br>
+</div>
+<div id="description">
+
+<h5>Summary</h5>
+<p>
+Read user home files.
+</p>
+
+
+<h5>Description</h5>
+<p>
+</p><p>
+Read user home files.
+</p><p>
+</p><p>
+This is a templated interface, and should only
+be called from a per-userdomain template.
+</p><p>
+</p>
+
+<h5>Parameters</h5>
+<table border="1" cellspacing="0" cellpadding="3" width="80%">
+<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
+
<tr><td>
userdomain_prefix
</td><td>
@@ -2425,6 +2572,16 @@ is the prefix for user_t).
No
</td></tr>
+<tr><td>
+domain
+</td><td>
+
+The type of the process performing this action.
+
+</td><td>
+No
+</td></tr>
+
</table>
</div>
</div>
@@ -2440,7 +2597,7 @@ No
- domain
+ userdomain_prefix
@@ -2448,7 +2605,7 @@ No
- userdomain_prefix
+ domain
)<br>
@@ -2477,21 +2634,21 @@ be called from a per-userdomain template.
<tr><th >Parameter:</td><th >Description:</td><th >Optional:</td></tr>
<tr><td>
-domain
+userdomain_prefix
</td><td>
-The type of the process performing this action.
+The prefix of the user domain (e.g., user
+is the prefix for user_t).
</td><td>
No
</td></tr>
<tr><td>
-userdomain_prefix
+domain
</td><td>
-The prefix of the user domain (e.g., user
-is the prefix for user_t).
+The type of the process performing this action.
</td><td>
No
@@ -2505,6 +2662,7 @@ No
<a href=#top>Return</a>
+
</div>
</body>
</html>
diff --git a/www/api-docs/templates.html b/www/api-docs/templates.html
index f339629..c9bfe5e 100644
--- a/www/api-docs/templates.html
+++ b/www/api-docs/templates.html
@@ -103,18 +103,36 @@
- <a href='services_bind.html'>
bind</a><br/>
+ - <a href='services_comsat.html'>
+ comsat</a><br/>
+
- <a href='services_cron.html'>
cron</a><br/>
+ - <a href='services_dbus.html'>
+ dbus</a><br/>
+
+ - <a href='services_dhcp.html'>
+ dhcp</a><br/>
+
+ - <a href='services_dictd.html'>
+ dictd</a><br/>
+
- <a href='services_gpm.html'>
gpm</a><br/>
+ - <a href='services_hal.html'>
+ hal</a><br/>
+
- <a href='services_howl.html'>
howl</a><br/>
- <a href='services_inetd.html'>
inetd</a><br/>
+ - <a href='services_inn.html'>
+ inn</a><br/>
+
- <a href='services_kerberos.html'>
kerberos</a><br/>
@@ -133,6 +151,9 @@
- <a href='services_nscd.html'>
nscd</a><br/>
+ - <a href='services_ntp.html'>
+ ntp</a><br/>
+
- <a href='services_privoxy.html'>
privoxy</a><br/>
@@ -148,6 +169,9 @@
- <a href='services_sendmail.html'>
sendmail</a><br/>
+ - <a href='services_squid.html'>
+ squid</a><br/>
+
- <a href='services_ssh.html'>
ssh</a><br/>
@@ -332,6 +356,22 @@ system</a><p/>
userdomain_prefix
+
+ ,
+
+
+
+ user_domain
+
+
+
+ ,
+
+
+
+ user_role
+
+
)<br>
</div>
@@ -411,6 +451,22 @@ services</a><p/>
userdomain_prefix
+
+ ,
+
+
+
+ user_domain
+
+
+
+ ,
+
+
+
+ user_role
+
+
)<br>
</div>
@@ -423,6 +479,83 @@ The per user domain template for the cron module.
</div>
<div id="templatesmall">
+Module: <a href='services_dbus.html#link_dbus_per_userdomain_template'>
+dbus</a><p/>
+Layer: <a href='services.html'>
+services</a><p/>
+<div id="codeblock">
+
+<b>dbus_per_userdomain_template</b>(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ user_domain
+
+
+
+ ,
+
+
+
+ user_role
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+The per user domain template for the dbus module.
+</p>
+</div>
+
+</div>
+
+<div id="templatesmall">
+Module: <a href='services_dbus.html#link_dbus_system_bus_client_template'>
+dbus</a><p/>
+Layer: <a href='services.html'>
+services</a><p/>
+<div id="codeblock">
+
+<b>dbus_system_bus_client_template</b>(
+
+
+
+
+ domain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Template for creating connections to
+the system DBUS.
+</p>
+</div>
+
+</div>
+
+<div id="templatesmall">
Module: <a href='system_domain.html#link_domain_auto_trans'>
domain</a><p/>
Layer: <a href='system.html'>
@@ -489,6 +622,22 @@ apps</a><p/>
userdomain_prefix
+
+ ,
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
)<br>
</div>
@@ -512,7 +661,23 @@ services</a><p/>
- ?
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ user_domain
+
+
+
+ ,
+
+
+
+ user_role
)<br>
@@ -520,7 +685,7 @@ services</a><p/>
<div id="description">
<p>
-Summary is missing!
+The per user domain template for the mta module.
</p>
</div>
@@ -541,6 +706,22 @@ services</a><p/>
userdomain_prefix
+
+ ,
+
+
+
+ user_domain
+
+
+
+ ,
+
+
+
+ user_role
+
+
)<br>
</div>
@@ -593,6 +774,22 @@ admin</a><p/>
userdomain_prefix
+
+ ,
+
+
+
+ user_domain
+
+
+
+ ,
+
+
+
+ user_role
+
+
)<br>
</div>
@@ -619,6 +816,22 @@ admin</a><p/>
userdomain_prefix
+
+ ,
+
+
+
+ user_domain
+
+
+
+ ,
+
+
+
+ user_role
+
+
)<br>
</div>
@@ -694,7 +907,7 @@ system</a><p/>
- domain
+ userdomain_prefix
@@ -702,7 +915,7 @@ system</a><p/>
- userdomain_prefix
+ domain
)<br>
@@ -728,7 +941,7 @@ system</a><p/>
- domain
+ userdomain_prefix
@@ -736,7 +949,7 @@ system</a><p/>
- userdomain_prefix
+ domain
)<br>
@@ -763,7 +976,7 @@ system</a><p/>
- domain
+ userdomain_prefix
@@ -771,7 +984,7 @@ system</a><p/>
- userdomain_prefix
+ domain
)<br>
@@ -798,7 +1011,7 @@ system</a><p/>
- domain
+ userdomain_prefix
@@ -806,7 +1019,7 @@ system</a><p/>
- userdomain_prefix
+ domain
)<br>
@@ -833,7 +1046,7 @@ system</a><p/>
- domain
+ userdomain_prefix
@@ -841,7 +1054,7 @@ system</a><p/>
- userdomain_prefix
+ domain
)<br>
@@ -868,7 +1081,7 @@ system</a><p/>
- domain
+ userdomain_prefix
@@ -876,7 +1089,7 @@ system</a><p/>
- userdomain_prefix
+ domain
)<br>
@@ -903,7 +1116,7 @@ system</a><p/>
- domain
+ userdomain_prefix
@@ -911,7 +1124,7 @@ system</a><p/>
- userdomain_prefix
+ domain
)<br>
@@ -938,7 +1151,7 @@ system</a><p/>
- domain
+ userdomain_prefix
@@ -946,7 +1159,7 @@ system</a><p/>
- userdomain_prefix
+ domain
)<br>
@@ -962,6 +1175,40 @@ temporary symbolic links.
</div>
<div id="templatesmall">
+Module: <a href='system_userdomain.html#link_userdom_read_user_home_files'>
+userdomain</a><p/>
+Layer: <a href='system.html'>
+system</a><p/>
+<div id="codeblock">
+
+<b>userdom_read_user_home_files</b>(
+
+
+
+
+ userdomain_prefix
+
+
+
+ ,
+
+
+
+ domain
+
+
+ )<br>
+</div>
+
+<div id="description">
+<p>
+Read user home files.
+</p>
+</div>
+
+</div>
+
+<div id="templatesmall">
Module: <a href='system_userdomain.html#link_userdom_use_user_terminals'>
userdomain</a><p/>
Layer: <a href='system.html'>
@@ -973,7 +1220,7 @@ system</a><p/>
- domain
+ userdomain_prefix
@@ -981,7 +1228,7 @@ system</a><p/>
- userdomain_prefix
+ domain
)<br>
diff --git a/www/html/status.html b/www/html/status.html
index 96c7d56..fe99763 100644
--- a/www/html/status.html
+++ b/www/html/status.html
@@ -1,10 +1,10 @@
<h1>Status</h1>
-<strong>Current Version: 20050826</strong>
+<strong>Current Version: 20050907</strong>
<p>
See <a href="index.php?page=download">download</a> for download
information. Details of this release are part of the <a href="html/Changelog.txt">changelog</a>.
- This release focused on loadable module infrastructure, and adding
- more policies. Currently both strict and targeted policies can be
+ This release focused on addition of policies from the NSA example
+ policy. Currently both strict and targeted policies can be
built. MLS policies can be built, but the policy has not been tested
on running systems.
</p>
@@ -36,14 +36,16 @@
</tr>
<tr>
<td>Documentation Infrastructure</td>
- <td>Interfaces complete</td>
- <td>Tools to create webpages from the module interface documentation
- is complete. Adding tunables to the webpages is planned.</td>
+ <td>Interfaces, templates, Booleans, and tunables complete</td>
+ <td>Tools to create webpages from the module interface and
+ template documentation is complete. Global Booleans and
+ tunables are supported. Booleans and tunables local to
+ policies are planned.</td>
</tr>
<tr>
<td>Policy Documentation</td>
<td>Ongoing</td>
- <td>Most kernel layer modules are documented.</td>
+ <td>Most modules are documented.</td>
</tr>
<tr>
<td>Unused Modules</td>
@@ -55,7 +57,8 @@
<td>Minor improvements</td>
<td>MLS infrastructure added to support easy conversion between
MLS and non-MLS policy. Policy is compilable, but
- untested.</td>
+ untested. Need further investigations to ensure
+ the levels in the policy are correct.</td>
</tr>
<tr>
<td>Network Infrastructure</td>
@@ -77,30 +80,32 @@
<td>Labeling</td>
<td>Minor improvements</td>
<td>All labeling moved to modules, consistent with Reference
- Policy structure.</td>
+ Policy structure. Levels can be added to the labels
+ without changes to the policy.</td>
</tr>
<tr>
<td>Tunables</td>
<td>Minor improvements</td>
- <td>Tunables are documented, and in the future will be included
- in the webpage policy documentation.</td>
+ <td>Tunables are documented and included in the webpage policy
+ documentation.</td>
</tr>
<tr>
<td>Users</td>
<td>Unchanged</td>
- <td>Assignment of users to roles</td>
+ <td>Assignment of users to roles.</td>
</tr>
<tr>
<td>Constraints</td>
<td>Unchanged</td>
- <td>Plan to split up into relevant modules. There are ordering
- problems with source policies.</td>
+ <td>Plan to split up into relevant modules when loadable modules
+ support this. There are ordering problems with source
+ policies.</td>
</tr>
<tr>
<td>Flask</td>
<td>Unchanged</td>
<td>Headers for the policy, describing object classes, and
- their permissions. No planned changes</td>
+ their permissions. No planned changes.</td>
</tr>
<tr>
<td>Genhomedircon</td>
@@ -168,21 +173,17 @@ is a listing of modules which need to be converted:
<li>automount</li>
<li>bluetooth</li>
<li>cdrecord</li>
-<li>comsat</li>
<li>cyrus</li>
-<li>dictd</li>
<li>dovecot</li>
<li>fetchmail</li>
<li>fingerd</li>
<li>ftpd</li>
<li>games</li>
-<li>inn</li>
<li>irqbalance</li>
<li>ktalkd</li>
<li>kudzu</li>
<li>lockdev</li>
<li>mrtg</li>
-<li>ntpd</li>
<li>portmap</li>
<li>postfix</li>
<li>prelink</li>
@@ -196,7 +197,6 @@ is a listing of modules which need to be converted:
<li>slrnpull</li>
<li>snmp</li>
<li>spamassassin</li>
-<li>squid</li>
<li>stunnel</li>
<li>sysstat</li>
<li>telnet</li>
More information about the scm-commits
mailing list