Create a set of derived types for apache web content.

The per role template for the apache module.

Read user web content.

Read httpd user scripts executables.

Run unix_chkpwd to check a password for a user domain.

Common template to create a domain for authentication.

The per role template for the authlogin module.

The per role template for the cdrecord module.

Allow the specified role the clockspeed_cli domain.

Template for creating courier server processes.

The administrative functions template for the cron module.

The per role template for the cron module.

connectto a message on user/application specific DBUS.

The per role template for the dbus module.

Send a message on user/application specific DBUS.

Template for creating connections to the system DBUS.

Template for creating connections to a user DBUS.

Create a set of derived types for djbdns components that are directly supervised by daemontools.

The administrative functions template for the ethereal module.

Run tethereal in the tethereal domain.

Run ethereal in ethereal domain.

The per role template for the ethereal module.

Create objects in users evolution home folders.

The per role template for the evolution module.

Connect to user evolution unix stream socket.

The per role template for the ftp module.

The per role template for the games module.

The per role template for the gift module.

Run gconfd in the role-specific gconfd domain.

The per role template for the gnome gconf module.

manage gnome homedir content (.config)

The per role template for the gnome module.

read gnome homedir content (.config)

gconf connection template.

Transition to a user gpg domain.

The per role template for the gpg module.

Send generic signals to user gpg processes.

The per role template for the irc module.

Run java in javaplugin domain.

The per role template for the java module.

Create a derived type for kerberos keytab

The per role template for the lockdev module.

Transition to a user lpr domain.

The per role template for the lpd module.

The administrative functions template for the lpd module.

The template to define a mailmain domain.

Create a set of derived types for various mail filter applications using the milter interface.

Run mozilla in user mozilla domain.

The per role template for the mozilla module.

Read mozilla per user homedir

read/write mozilla per user tcp_socket

write mozilla per user homedir

Run mplayer in mplayer domain.

The per role template for the mplayer module.

Read mplayer per user homedir

Provide extra permissions for admin users mail domain.

Basic mail transfer agent domain template.

The per role template for the mta module.

Create a set of derived types for apache web content.

Create a set of derived types for apache web content.

Creates types and rules for a basic postfix process domain.

The per role template for the postfix module.

Creates a postfix server process domain.

Creates a process domain for programs that are ran by users.

The per role template for the pyzor module.

Creates types and rules for a basic qemu process domain.

The per role template for the qemu module.

Template for qmail parent/sub-domain pairs

The per role template for qmail

Template to create types and rules common to all razor domains.

Create, read, write, and delete razor files in a user home subdirectory.

The per role template for the razor module.

Creates types and rules for a basic cluster init daemon domain.

The template to define a rpc domain.

The per role template for the rssh module.

The per role template for the samba module.

The per role template for the screen module.

Execute spamassassin client in the user spamassassin client domain.

Execute spamassassin in the user spamassassin domain.

Read spamassassin per user homedir

The per role template for the spamassassin module.

Read spamassassin per user homedir

Basic SSH client template.

The per role template for the ssh module.

The template to define a ssh server.

The per role template for the su module.

Restricted su domain template.

The per role template for the sudo module.

Run thunderbird in user thunderbird domain.

The per role template for the thunderbird module.

The per role template for the tvtime module.

The per role template for the uml module.

The template for creating an administrative user.

The template containing the most basic rules common to all users.

The template allowing the user basic network permissions

The template for allowing the user to change passwords.

The template containing rules common to unprivileged users and administrative users.

Create a user pty.

Do not audit attempts to append users temporary files.

Do not audit attempts to execute user home files.

Do not audit attempts to list user home subdirectories.

Do not audit attempts to list user temporary directories.

Do not audit attempts to list user temporary untrusted directories.

Do not audit attempts to list user untrusted directories.

Do not audit attempts to create, read, write, and delete directories in a user home subdirectory.

Do not audit attempts to manage users temporary directories.

Do not audit attempts to manage users temporary files.

Do not audit attempts to read user home files.

Do not audit attempts to read users temporary files.

Do not audit attempts to read users temporary untrusted files.

Do not audit attempts to read users untrusted files.

Do not audit attempts to set the attributes of user home files.

Do not audit attempts to read and write a user domain tty and pty.

Do not audit attempts to write user home files.

The template allowing the user to execute generic programs, such as those found in /bin, /sbin, /usr/bin, and /usr/sbin.

The template for allowing the user to execute files in their home directory.

The template for execute access to the user temporary files.

Execute user home files.

List user home directories.

List user temporary directories.

List users temporary untrusted directories.

List users untrusted directories.

The template for creating a login user.

The template for creating a home directory that the user has full access.

The template for full access to the temporary directories.

The template for creating a tmpfs type that the user has full access.

Create, read, write, and delete directories in a user home subdirectory.

Create, read, write, and delete files in a user home subdirectory.

Create, read, write, and delete named pipes in a user home subdirectory.

Create, read, write, and delete named sockets in a user home subdirectory.

Create, read, write, and delete symbolic links in a user home subdirectory.

Create, read, write, and delete user temporary directories.

Create, read, write, and delete user temporary files.

Create, read, write, and delete user temporary named pipes.

Create, read, write, and delete user temporary named sockets.

Create, read, write, and delete user temporary symbolic links.

Manage user untrusted files.

The template for polyinstantiating a user home directory.

The template for a polyinstantiated temporary directory.

The template for creating a unprivileged user.

Read user home files.

Read user home subdirectory symbolic links.

Read user temporary files.

Read user temporary symbolic links.

Read user temporary untrusted files.

Read user temporary untrusted symbolic links.

The template for creating a tmpfs type that the user has full access.

Read user untrusted files.

Read user untrusted symbolic links.

The template for creating a unprivileged login user.

The template for creating a home directory that the user has read-only access.

Change to the auditadm user role.

Change from the auditadm user role.

Change from the generic user role.

Change from the secadm user role.

Change from the staff user role.

Change from the sysadm user role.

Change to the generic user role.

Change to the secadm user role.

Change to the staff user role.

Change to the sysadm user role.

The template for allowing the user to change roles.

Read and write user temporary files.

Read user tmpfs files.

Search user home directories.

Allow user to run as a secadm

Set the attributes of a user pty.

Set the attributes of a user domain tty.

Create objects in the temporary directory with an automatic type transition to the user temporary type.

Manage and create all files in /tmp on behalf of the user

The template for creating a unprivileged user.

The template for creating a set of types for untrusted content.

Read and write a user domain tty and pty.

Read and write a user domain tty.

Make the specified type usable in a user home directory.

Create objects in a user home directory with an automatic type transition to a specified private type.

Create objects in a user home directory with an automatic type transition to the user home file type.

Do a domain transition to the specified domain when executing a program in the user home directory.

Create objects in a user temporary directory with an automatic type transition to a specified private type.

Write to user temporary named sockets.

The template for creating a user xwindows client.

The per role template for the userhelper module.

Allow domain to send sigchld to userhelper.

Allow domain to use userhelper file descriptor.

Creates types and rules for a basic qemu process domain.

The per role template for the vmware module.

Template to create types and rules common to all X server domains.

Transition to a user Xauthority domain.

The per role template for the xserver module.

Read a user Iceauthority domain.

Read a user Xauthority domain.

Template for creating sessions on a prefix X server, with read-only access to the X server shared memory segments.

Template for creating sessions on a prefix X server, with read and write access to the X server shared memory segments.

Read user fonts, user font configuration, and manage the user font cache.

Template for creating full client sessions on a user X server.

Transition to a user Xauthority domain.