Core policy for shells, and generic programs in /bin, /sbin, /usr/bin, and /usr/sbin.

Policy controlling access to network objects

Device nodes and interfaces for many basic system devices.

Core policy for domains.

Basic filesystem types and interfaces.

Policy for filesystems.

Policy for kernel threads, proc filesystem, and unlabeled processes and objects.

Multicategory security policy

Multilevel security policy

Policy for kernel security interface, in particular, selinuxfs.

Policy controlling access to storage devices

Policy for terminals.

User-based access control policy

Policy for allowing confined domains to use unlabeled_t packets

Audit administrator role

Database administrator role

Least privledge terminal user

Log administrator role

Security administrator role

Administrator's unprivileged user

General system administration role

No Interfaces

Unconfiend user role

Generic unprivileged user

Web administrator role

Least priviledged X user

policy for accountsd

Berkeley process accounting

Ainit ALSA configuration tool

Automated backup program.

Abstract Machine Test Utility

Policy for the Anaconda installer.

APT advanced package tool.

System backup scripts

Policy for the kernel modules, kernel image, and bootloader.

Utilities for configuring the linux ethernet bridge

Digital Certificate Tracking

Determine of the console connected to the controlling terminal.

ddcprobe retrieves monitor and graphics card information

Policy for dmesg.

Decode DMI data for x86/ia64 bioses.

Policy for the Debian package manager.

Final system configuration run during the first boot after installation of Red Hat/Fedora systems.

Kismet is an 802.11 layer2 wireless network detector, sniffer, and intrusion detection system.

Hardware detection and configuration tools

Rotate and archive system logs

System log analyzer and reporter

policy for mcelog

Network traffic graphing

policy for ncftool

Network analysis utilities

No Interfaces

Portage Package Management System. The primary package management and distribution system for Gentoo.

Prelink ELF shared library mappings.

File system quota management

Readahead, read files into page cache for improved performance

Policy for the RPM package manager.

Sectool security audit tool

Shoreline Firewall high-level tool for configuring netfilter

policy for shutdown

The Fedora hardware profiler client

Run shells with substitute user and group

Execute a command with a substitute user

SUID/SGID program monitoring

Manage temporary directory sizes and file ages

Tripwire file integrity checker.

Time zone updater

Red Hat utility to change /etc/fstab.

List kernel modules of USB devices

Policy for managing user accounts.

run real-mode video BIOS code to alter hardware state

Virtual Private Networking client

GNAT Ada95 compiler

Tool for non-root processes to bind to reserved ports

AWStats is a free powerful and featureful tool that generates advanced web, streaming, ftp or mail server statistics, graphically.

Squid log analysis

Policy for cdrecord

policy for chrome

Command-line CPU frequency settings.

Ethereal packet capture tool.

Evolution email client

execmem domain

policy for firewallgui

Games

giFT peer to peer file sharing tool

Tools for managing and hosting git repositories.

GNU network object model environment (GNOME)

Policy for GNU Privacy Guard and related programs.

IRC client policy

Java virtual machine

system-config-kdump policy

policy for livecd

Load keyboard mappings.

device locking policy for lockdev

Mediawiki policy

Run .NET server and client applications on Linux.

Policy for Mozilla and related web browsers

Mplayer media player and encoder

policy for namespace

policy for nsplugin

Openoffice

Podsleuth is a tool to get information about an Apple (TM) iPod (TM)

helper function for grantpt(3), changes ownship and permissions of pseudotty

Pulseaudio network sound server.

QEMU machine emulator and virtualizer

Restricted (scp/sftp) only shell

system-config-samba policy

policy for sandbox

GNU terminal multiplexer

Filesystem namespacing/polyinstantiation application.

Update database for mlocate

Telepathy framework.

Thunderbird email client

tvtime - a high quality television application

Policy for UML

SELinux utility to run a shell with a new role

User network interface configuration helper

VMWare Workstation virtual machines

Web server log analysis

Wine Is Not an Emulator. Run Windows programs in Linux.

Wireshark packet capture tool.

X Window Managers

X Screensaver

Yum/Apt Mirroring

Policy for user executable applications.

Common policy for authentication and user login.

Policy for reading and setting the hardware clock.

Collection of tools for managing UNIX services

Tools for filesystem management, such as mkfs and fsck.

Policy for getty.

Policy for changing the system host name.

Policy for hotplug system, for supporting the connection and disconnection of devices at runtime.

System initialization programs (init and init scripts).

TCP/IP encryption

Policy for iptables.

Establish connections to iSCSI devices

Kernel crash dumping mechanism

Policy for system libraries.

Policy for local logins.

Policy for the kernel message logger and system logging daemon.

Policy for logical volume management programs.

Miscelaneous files.

Policy for kernel module utilities

Policy for mount.

NetLabel/CIPSO labeled networking management

PCMCIA card management services

RAID array management tools

Policy for SELinux policy and userland applications.

SELinux MLS/MCS label translation service.

policy for sosreport

Policy for network configuration: ifconfig and dhcp client.

Policy for udev.

The unconfined domain.

Policy for user domains

Xen hypervisor

ABRT - automated bug-reporting tool

Andrew Filesystem server

Automatic IPv6 Connectivity Client Utility.

Aide filesystem integrity checker

SELinux policy for Aisexec Cluster Engine

Daemon that interfaces mail transfer agents and content checkers, such as virus scanners.

SELinux policy for antivirus programs - amavis, clamd, freshclam and clamscan

Apache web server

APC UPS monitoring daemon

Advanced power management daemon

Ethernet activity monitor.

Asterisk IP telephony server

Generate entropy from audio input

Filesystem automounter service.

mDNS/DNS-SD daemon implementing Apple ZeroConf architecture

Cross platform network backup.

bcfg2-server daemon which serves configurations to clients based on the data in its repository

Berkeley internet name domain DNS server.

Bitlbee service

Bluetooth tools and system services.

policy for boinc

Bugzilla server

policy for cachefilesd

Canna - kana-kanji conversion server

Cluster Configuration System

Certmaster SSL certificate distribution service

Certificate status monitor and PKI enrollment client

policy for cfengine

policy for cgdcbxd

libcg is a library that abstracts the control group file system in Linux.

Chrony NTP background daemon

openstack-cinder

Encrypted tunnel daemon

ClamAV Virus Scanner

Clockspeed simple network time protocol client

clogd - clustered mirror log server

cloudform policy

policy for cmirrord

Cobbler installation server.

Statistics collection daemon for filling RRD files.

Comsat, a biff server.

policy for condor

Conman is a program for connecting to remote consoles being managed by conmand

Framework for facilitating multiple user sessions on desktops.

SELinux policy for Corosync Cluster Engine

Courier IMAP and POP3 email servers

Services for loading CPU microcode and CPU frequency scaling.

Periodic execution of scheduled commands.

policy for ctdbd

Common UNIX printing system

Concurrent versions system

Cyphesis WorldForge game server

Cyrus is an IMAP service intended to be run on sealed servers

Dante msproxy and socks4/5 proxy server

Dictionary server for the SKK Japanese input method system.

Desktop messaging bus

Distributed checksum clearinghouse spam filtering

Update dynamic IP address at DynDNS.org.

Deny Hosts.

Devicekit modular hardware abstraction layer

Dynamic host configuration protocol (DHCP) server

Dictionary daemon

policy for dirsrv

Administration Server for Directory Server, dirsrv-admin.

Distributed compiler daemon

small and secure DNS daemon

DomainKeys Identified Mail milter.

dnsmasq DNS forwarder and DHCP server

Dovecot POP and IMAP mail server

policy for drbd

policy for dspam

Exim mail transfer agent

Update firewall filtering to ban IP addresses with too many password failures.

policy for fcoemon

Remote-mail retrieval and forwarding utility

Finger user information service.

DBus fingerprint reader service

Remote-Console (out-of-band) and System Management Software (in-band) based on Intelligent Platform Management Interface specification

File transfer protocol service

OpenH.323 Voice-Over-IP Gatekeeper

GIT revision control system.

policy for glance

policy for glusterd

Gnome clock handler for setting the time.

General Purpose Mouse driver

gpsd monitor daemon

Hardware abstraction layer

hddtemp hard disk temperature tool running as a daemon

Port of Apple Rendezvous multicast DNS

policy for hypervkvp

IIIMF htt server

ShoutCast compatible streaming media server

Bring up/down ethernet interfaces based on cable detection.

iMaze game server

Internet services daemon.

Internet News NNTP server

policy for ipmievd

IRC server

IRQ balancing daemon

Internet Storage Name Service.

Jabber instant messaging server

keepalived - load-balancing and high-availability service

MIT Kerberos admin and KDC

Service for reporting kernel oopses to kerneloops.org

policy for keystone

Kernel Samepage Merging (KSM) Tuning Daemon

KDE Talk daemon

Layer 2 Tunneling Protocol daemons.

OpenLDAP directory server

Likewise Active Directory support for UNIX.

implementation of the Precision Time Protocol (PTP) according to IEEE standard 1588 for Linux.

Linux infared remote control daemon

Intel LLDP Agent.

Line printer daemon

libStorageMgmt plug-in daemon

Mailman is for managing electronic mail discussion and e-newsletter lists

policy for matahari

high-performance memory object caching system

Milter mail filters

Mobile IPv6 and NEMO Basic Support implementation

policy for mirrormanager

Provides a DBus interface to communicate with mobile broadband (GSM, CDMA, UMTS, ...) cards.

Monopoly daemon

policy for daemon for playing music

Policy common to all email tranfer agents.

Munin network-wide load graphing (formerly LRRD)

Policy for MySQL

Net Saint / NAGIOS - network monitoring server

Nessus network scanning daemon

Manager for dynamically switching between networks.

Policy for NIS (YP) servers and clients

openstack-nova

Name service cache daemon

Authoritative only name server

nslcd - local LDAP name service daemon.

Network Top

Network time protocol daemon

policy for numad

nut - Network UPS Tools

NX remote desktop

Open AntiVirus scannerdaemon and signature update

Oddjob provides a mechanism by which unprivileged applications can request that specified privileged operations be performed on their behalf.

SELinux policy for Oident daemon.

OpenCA - Open Certificate Authority

Service for handling smart card readers.

policy for openhpid

policy for openshift

full-featured SSL VPN solution

Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic.

WS-Management Server

policy for oracleasm

Client-side service written in Python that responds to pings and runs rhn_check when told to by osa-dispatcher.

policy for pacemaker

Passive Asset Detection System

Ruby on rails deployment for Apache and Nginx servers.

The pcp command summarizes the status of a Performance Co-Pilot (PCP) installation

PCSC smart card service

The Open Group Pegasus CIM/WBEM Server.

Perdition POP and IMAP proxy

Pingd of the Whatsup cluster node up/down detection utility

policy for piranha

policy for pkcsslotd

policy for plymouthd

Policy framework for controlling privileges for system-wide services.

RPC port mapping service.

Reserve well-known ports in the RPC port range.

Portslave terminal server software

Postfix email server

Postfix policy server

PostgreSQL relational database

Postfix grey-listing server

Point to Point Protocol daemon creates links in ppp networks

Prelude hybrid intrusion detection system

Privacy enhancing web proxy.

Procmail mail delivery agent

Intrusion Detection and Log Analysis with iptables

publicfile supplies files to the public through HTTP and FTP

Puppet client daemon

Server for the PXE network boot protocol

PyICQt is an ICQ transport for XMPP server.

Pyzor is a distributed, collaborative spam detection and filtering network.

Qmail Mail Server

policy for qpidd

Quantum is a virtual network service for Openstack

RADIUS authentication and accounting server.

IPv6 router advertisement daemon

A distributed, collaborative, spam detection and filtering network.

Network router discovery daemon

Advanced key-value store

Policy for rshd, rlogind, and telnetd.

Resource management daemon

SELinux policy for rgmanager

RHCS - Red Hat Cluster Suite

rhev polic module contains policies for rhev apps

Red Hat Graphical Boot

policy for rhnsd

Subscription Management Certificate Daemon policy

Ricci cluster management agent

Remote login daemon

Roundup Issue Tracking System policy

Remote Procedure Call Daemon for managment of network based process communication

Universal Addresses to RPC Program Number Mapper

Remote shell service.

Fast incremental file transfer for synchronization

Platform diagnostics report firmware events.

Realtime scheduling for user processes.

Who is logged in on other machines?

SMB and CIFS client/server programs for UNIX and name Service Switch daemon for resolving names from Windows NT servers.

policy for sanlock

SASL authentication server

Standards Based Linux Instrumentation for Manageability.

Policy for sendmail.

Sensor information logging daemon

SELinux troubleshooting service

Policy for gridengine MPI jobs

OpenSLP server daemon to dynamically register services.

Service for downloading news feeds the slrn newsreader.

Smart disk monitoring daemon policy

Smokeping network latency measurement.

Tools to send and receive short messages through GSM modems or mobile phones.

Simple network management protocol services

Snort network intrusion detection system

sound server for network audio server programs, nasd, yiff, etc

Filter used for removing unsolicited email.

Alcatel speedtouch USB ADSL modem

Squid caching http proxy server

Secure shell client and server policy.

System Security Services Daemon

Instrumentation System Server

SSL Tunneling Proxy

policy for svnserve

policy for swift

Policy for sysstat. Reports on various system states

Policy for TCP daemon.

Telnet daemon

Trivial file transfer protocol daemon

Linux Target Framework Daemon.

MIDI to WAV converter and player configured as a service

policy for tomcat

TOR, the onion router

HTTP transperant proxy

Dynamic adaptive system tuning daemon

ucspitcp policy

Iptables/netfilter userspace logging daemon.

Uptime daemon

USB multiplexing daemon for communicating with Apple iPod Touch and iPhone

Unix to Unix Copy

policy for uuidd

University of Washington IMAP toolkit POP3 and IMAP mail server

Varnishd http accelerator daemon

policy for vdagent

Virtual host metrics daemon

Libvirt virtualization API

W3C Markup Validator

Software watchdog.

policy for wdmd

X Windows Font Server

X print server

X Windows Server

Distributed infrastructure monitoring

Zarafa collaboration platform.

Zebra border gateway protocol network routing service

policy for z/OS Remote-services Audit dispatcher plugin