MINI SHELL

unlimitedUtils _("Admin") _("Allow privileged utilities like hotplug and insmod to run unconfined.")
unlimitedRC _("Admin") _("Allow rc scripts to run unconfined, including any daemon started by an rc script that does not have a domain transition explicitly defined.")
unlimitedRPM _("Admin") _("Allow rpm to run unconfined.")
staff_read_sysadm_file _("Admin") _("Allow staff_r users to search the sysadm home dir and read files (such as ~/.bashrc)")
direct_sysadm_daemon _("Admin") _("Allow sysadm_t to directly start daemons")
unlimitedInetd _("Admin") _("Allow xinetd to run unconfined, including any services it starts that do not have a domain transition explicitly defined.")
secure_mode  _("Admin") _("Do not allow transition to sysadm_t, sudo and su effected")
allow_execmem _("Compatibility") _("Allow applications to execute anonymous or writable private file mappings")
allow_execstack _("Compatibility") _("Allow executables to run with executable stack (/selinux/checkreqprot implies this)")
allow_mplayer_execstack _("Compatibility") _("Allow mplayer to run with executable stack (/selinux/checkreqprot implies this)
allow_ptrace _("Compatibility") _("Allow sysadm_t to debug or ptrace applications)
allow_execmod _("Compatibility") _("Allow the use of shared libraries with Text Relocation")
hide_broken_symptoms _("Compatibility") _("Do not audit things that we know to be broken but which are not security risks")
read_default_t _("Content Locations") _("Allow programs to read files in non-standard locations (default_t)")
cron_can_relabel _("Cron") _("Allow system cron jobs to relabel filesystem for restoring file contexts.")
crond_disable_trans _("Cron") _("Disable SELinux protection for crond daemon")
cupsd_config_disable_trans _("Printing") _("Disable SELinux protection for cupsd backend server")
cupsd_disable_trans _("Printing") _("Disable SELinux protection for cupsd daemon")
cupsd_lpd_disable_trans _("Printing") _("Disable SELinux protection for cupsd_lpd")
hplip_disable_trans _("Printing") _("Disable SELinux protection for cups hplip daemon")
ftpd_is_daemon _("FTP") _("Allow ftpd to run directly without inetd")
ftp_home_dir _("FTP") _("Allow ftp to read/write files in the user home directories")
ftpd_disable_trans _("FTP") _("Disable SELinux protection for ftpd daemon")
disable_games_trans _("Games") _("Disable SELinux protection for games")
httpd_enable_cgi _("HTTPD Service") _("Allow HTTPD cgi support")
httpd_can_network_connect _("HTTPD Service") _("Allow HTTPD scripts and modules to connect to the network.")
httpd_enable_homedirs _("HTTPD Service") _("Allow HTTPD to read home directories")
httpd_ssi_exec _("HTTPD Service") _("Allow HTTPD to run SSI executables in the same domain as system CGI scripts.")
httpd_builtin_scripting _("HTTPD Service") _("Allow HTTPD to support built-in scripting")
httpd_disable_trans _("HTTPD Service") _("Disable SELinux protection for httpd daemon")
httpd_suexec_disable_trans _("HTTPD Service") _("Disable SELinux protection for http suexec")
httpd_unified _("HTTPD Service") _("Unify HTTPD handling of all content files.")
httpd_tty_comm _("HTTPD Service") _("Unify HTTPD to communicate with the terminal.  Needed for handling certificates.")
allow_kerberos _("Kerberos") _("Allow daemons to use kerberos files")
kadmind_disable_trans _("Kerberos") _("Disable SELinux protection for kadmind daemon")
krb5kdc_disable_trans _("Kerberos") _("Disable SELinux protection for krb5kdc daemon")
named_write_master_zones _("Name Service") _("Allow named to overwrite master zone files")
named_disable_trans _("Name Service") _("Disable SELinux protection for named daemon")
nscd_disable_trans _("Name Service") _("Disable SELinux protection for nscd daemon")
nfs_export_all_ro _("NFS") _("Allow the reading on any NFS file system")
nfs_export_all_rw _("NFS") _("Allow the read/write/create on any NFS file system")
use_nfs_home_dirs _("NFS") _("Support NFS home directories")
allow_ypbind _("NIS") _("Allow daemons to run with NIS")
ypbind_disable_trans _("NIS") _("Disable SELinux protection for ypbind daemon")
samba_enable_home_dirs _("Samba") _("Allow Samba to share users home directories")
use_samba_home_dirs _("Samba") _("Allow users to login with CIFS home directories")
nmbd_disable_trans _("Samba") _("Disable SELinux protection for nmbd daemon")
smbd_disable_trans _("Samba") _("Disable SELinux protection for smbd daemon")
winbind_disable_trans _("Samba") _("Disable SELinux protection for winbind daemon")
allow_saslauthd_read_shadow _("sasl authentication server") _("Allow sasl authentication server to read /etc/shadow")
acct_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for acct daemon")
apmd_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for apmd daemon")
arpwatch_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for arpwatch daemon")
auditd_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for auditd daemon")
automount_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for automount daemon")
bluetooth_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for bluetooth daemon")
canna_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for canna daemon")
cardmgr_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for cardmgr daemon")
ciped_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for ciped daemon")
clamd_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for clamd daemon")
comsat_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for comsat daemon")
courier_authdaemon_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for courier daemon")
courier_pcp_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for courier daemon")
courier_pop_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for courier daemon")
courier_sqwebmail_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for courier daemon")
courier_tcpd_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for courier daemon")
cpucontrol_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for cpucontrol daemon")
cpuspeed_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for cpuspeed daemon")
cvs_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for cvs daemon")
cyrus_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for cyrus daemon")
dbskkd_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for dbskkd daemon")
dbusd_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for dbusd daemon")
ddt_client_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for ddt daemon")
devfsd_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for devfsd daemon")
dhcpc_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for dhcpc daemon")
dhcpd_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for dhcpd daemon")
dictd_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for dictd daemon")
distccd_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for distccd daemon")
dmesg_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for dmesg daemon")
dnsmasq_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for dnsmasq daemon")
dovecot_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for dovecot daemon")
entropyd_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for entropyd daemon")
fingerd_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for fingerd daemon")
freshclam_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for freshclam daemon")
fsdaemon_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for fsdaemon daemon")
gpm_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for gpm daemon")
gssd_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for gss daemon")
hald_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for hal daemon")
hostname_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for hostname daemon")
hotplug_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for hotplug daemon")
howl_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for howl daemon")
hwclock_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for hwclock daemon")
i18n_input_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for i18n daemon")
imazesrv_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for imazesrv daemon")
inetd_child_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for inetd child daemons")
inetd_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for inetd daemon")
innd_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for innd daemon")
iptables_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for iptables daemon")
ircd_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for ircd daemon")
irqbalance_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for irqbalance daemon")
jabberd_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for jabberd daemon")
klogd_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for klogd daemon")
ktalkd_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for ktalk daemons")
kudzu_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for kudzu daemon")
locate_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for locate daemon")
lpd_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for lpd daemon")
lrrd_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for lrrd daemon")
lvm_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for lvm daemon")
mdadm_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for mdadm daemon")
monopd_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for monopd daemon")
mrtg_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for mrtg daemon")
mysqld_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for mysqld daemon")
nagios_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for nagios daemon")
nessusd_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for nessusd daemon")
NetworkManager_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for NetworkManager")
nfsd_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for nfsd daemon")
nrpe_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for nrpe daemon")
nsd_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for nsd daemon")
ntpd_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for ntpd daemon")
openvpn_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for openvpn daemon")
pam_console_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for pam daemon")
perdition_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for perdition daemon")
portmap_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for portmap daemon")
portslave_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for portslave daemon")
postgresql_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for postgresql daemon")
pppd_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for pppd daemon")
prelink_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for prelink daemon")
privoxy_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for privoxy daemon")
ptal_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for ptal daemon")
pxe_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for pxe daemon")
quota_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for quota daemon")
radiusd_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for radiusd daemon")
radvd_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for radvd daemon")
rhgb_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for rhgb daemon")
rlogind_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for rlogind daemon")
rpcd_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for rpcd daemon")
rsync_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for rsync daemon")
saslauthd_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for saslauthd daemon")
scannerdaemon_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for scannerdaemon daemon")
sendmail_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for sendmail daemon")
slapd_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for slapd daemon")
slrnpull_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for slrnpull daemon")
snmpd_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for snmpd daemon")
snort_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for snort daemon")
sound_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for sound daemon")
soundd_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for soundd daemon")
spamd_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for spamd daemon")
speedmgmt_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for speedmgmt daemon")
swat_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for swat daemon")
sxid_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for sxid daemon")
syslogd_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for syslogd daemon")
telnetd_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for telnet daemon")
tftpd_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for tftpd daemon")
transproxy_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for transproxy daemon")
udev_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for udev daemon")
uml_switch_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for uml daemon")
updfstab_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for updfstab daemon")
uptimed_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for uptimed daemon")
uucpd_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for uucpd daemon")
vmware_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for vmware daemon")
watchdog_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for watchdog daemon")
xdm_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for xdm daemon")
xfs_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for xfs daemon")
ypserv_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for ypserv daemon")
zebra_disable_trans _("SELinux Service Protection") _("Disable SELinux protection for zebra daemon")
spamassasin_can_network _("Spam Assassin") _("Allow Spam Assasin daemon network access")
squid_connect_any _("SQUID") _("Allow squid daemon to connect to the network")
squid_disable_trans _("SQUID") _("Disable SELinux protection for squid daemon")
ssh_sysadm_login _("SSH") _("Allow ssh logins as sysadm_r:sysadm_t")
run_ssh_inetd _("SSH") _("Allow ssh to run from inetd instead of as a daemon")
allow_ssh_keysign _("SSH") _("Allow ssh to run ssh-keysign")
ssh_keygen_disable_trans _("SSH") _("Disable SELinux protection for ssh daemon")
stunnel_is_daemon _("Universal SSL tunnel") _("Allow stunnel daemon to run as standalone, outside of xinetd")
stunnel_disable_trans _("Universal SSL tunnel") _("Disable SELinux protection for stunnel daemon")
user_ping _("User Privs") _("Allow normal user to execute ping")
user_direct_mouse _("User Privs") _("Allow regular users direct mouse access (only allow the X server)")
user_canbe_sysadm _("User Privs") _("Allow user_r to reach sysadm_r via su, sudo, or userhelper. Otherwise, only staff_r can do so.")
user_net_control _("User Privs") _("Allow users to control network interfaces (also needs USERCTL=true)")
user_can_mount _("User Privs") _("Allow users to execute the mount command")
user_tcp_server _("User Privs") _("Allow users to run TCP servers (bind to ports and accept connection from the same domain and outside users)  disabling this forces FTP passive mode and may change other protocols")
user_dmesg _("User Privs") _("Allow users to run the dmesg command")
user_rw_usb _("User Privs") _("Allow users to rw usb devices")
pppd_for_user _("User Privs") _("Allow users to start pppd connections")
allow_user_mysql_connect _("User Privs") _("Allow user to connect to mysql socket")
allow_user_postgresql_connect _("User Privs") _("Allow user to connect to postgres socket")
user_rw_noexattrfile _("User Privs") _("Allow user to r/w noextattrfile (FAT, CDROM, FLOPPY)")
user_ttyfile_stat _("User Privs") _("Allow user to stat ttyfiles")
mail_read_content _("Web Applications") _("Allow evolution and thunderbird to read user files")
read_untrusted_content _("Web Applications") _("Allow programs to read untrusted content without relabel")
mozilla_read_content _("Web Applications") _("Allow the mozilla browser to read user files")
write_untrusted_content _("Web Applications") _("Allow web applications to write untrusted content to disk (implies read)")
disable_mozilla_trans _("Web Applications") _("Disable SELinux protection for the mozilla browser")
allow_write_xshm _("XServer") _("Allow clients to write to X shared memory")
xdm_sysadm_login _("XServer") _("Allow xdm logins as sysadm_r:sysadm_t")