Layer: system

Policy for user executable applications.

Common policy for authentication and user login.

Policy for reading and setting the hardware clock.

Collection of tools for managing UNIX services

Tools for filesystem management, such as mkfs and fsck.

Policy for getty.

Policy for changing the system host name.

Policy for hotplug system, for supporting the connection and disconnection of devices at runtime.

System initialization programs (init and init scripts).

TCP/IP encryption

Policy for iptables.

Establish connections to iSCSI devices

Policy for system libraries.

Policy for local logins.

Policy for the kernel message logger and system logging daemon.

Policy for logical volume management programs.

Miscelaneous files.

Policy for kernel module utilities

Policy for mount.

NetLabel/CIPSO labeled networking management

PCMCIA card management services

RAID array management tools

Policy for SELinux policy and userland applications.

SELinux MLS/MCS label translation service.

Policy for network configuration: ifconfig and dhcp client.

policy for tzdata

Policy for udev.

The unconfined domain.

Policy for user domains

Virtual machine emulator and virtualizer

Xen hypervisor