groups:
- selinux
- selinux-booleans
name: selinux
packages:
- libselinux
- policycoreutils
- policycoreutils-python-utils
- selinux
- setroubleshoot
- setroubleshoot-plugins
- setroubleshoot-server
rules:
- coreos_enable_selinux_kernel_argument
- directory_owner_etc_selinux
- directory_groupowner_etc_selinux
- directory_permissions_etc_selinux
- grub2_enable_selinux
- file_groupowner_etc_sestatus_conf
- file_owner_etc_sestatus_conf
- file_permissions_etc_sestatus_conf
- package_libselinux_installed
- package_mcstrans_removed
- package_policycoreutils-python-utils_installed
- package_policycoreutils_installed
- package_setroubleshoot-plugins_removed
- package_setroubleshoot-server_removed
- package_setroubleshoot_removed
- sebool_abrt_anon_write
- sebool_abrt_handle_event
- sebool_abrt_upload_watch_anon_write
- sebool_antivirus_can_scan_system
- sebool_antivirus_use_jit
- sebool_auditadm_exec_content
- sebool_authlogin_nsswitch_use_ldap
- sebool_authlogin_radius
- sebool_authlogin_yubikey
- sebool_awstats_purge_apache_log_files
- sebool_boinc_execmem
- sebool_cdrecord_read_content
- sebool_cluster_can_network_connect
- sebool_cluster_manage_all_files
- sebool_cluster_use_execmem
- sebool_cobbler_anon_write
- sebool_cobbler_can_network_connect
- sebool_cobbler_use_cifs
- sebool_cobbler_use_nfs
- sebool_collectd_tcp_network_connect
- sebool_condor_tcp_network_connect
- sebool_conman_can_network
- sebool_container_connect_any
- sebool_cron_can_relabel
- sebool_cron_system_cronjob_use_shares
- sebool_cron_userdomain_transition
- sebool_cups_execmem
- sebool_cvs_read_shadow
- sebool_daemons_dump_core
- sebool_daemons_enable_cluster_mode
- sebool_daemons_use_tcp_wrapper
- sebool_daemons_use_tty
- sebool_dbadm_exec_content
- sebool_dbadm_manage_user_files
- sebool_dbadm_read_user_files
- sebool_deny_execmem
- sebool_deny_ptrace
- sebool_dhcpc_exec_iptables
- sebool_dhcpd_use_ldap
- sebool_domain_fd_use
- sebool_domain_kernel_load_modules
- sebool_entropyd_use_audio
- sebool_exim_can_connect_db
- sebool_exim_manage_user_files
- sebool_exim_read_user_files
- sebool_fcron_crond
- sebool_fenced_can_network_connect
- sebool_fenced_can_ssh
- sebool_fips_mode
- sebool_ftpd_anon_write
- sebool_ftpd_connect_all_unreserved
- sebool_ftpd_connect_db
- sebool_ftpd_full_access
- sebool_ftpd_use_cifs
- sebool_ftpd_use_fusefs
- sebool_ftpd_use_nfs
- sebool_ftpd_use_passive_mode
- sebool_git_cgi_enable_homedirs
- sebool_git_cgi_use_cifs
- sebool_git_cgi_use_nfs
- sebool_git_session_bind_all_unreserved_ports
- sebool_git_session_users
- sebool_git_system_enable_homedirs
- sebool_git_system_use_cifs
- sebool_git_system_use_nfs
- sebool_gitosis_can_sendmail
- sebool_glance_api_can_network
- sebool_glance_use_execmem
- sebool_glance_use_fusefs
- sebool_global_ssp
- sebool_gluster_anon_write
- sebool_gluster_export_all_ro
- sebool_gluster_export_all_rw
- sebool_gpg_web_anon_write
- sebool_gssd_read_tmp
- sebool_guest_exec_content
- sebool_haproxy_connect_any
- sebool_httpd_anon_write
- sebool_httpd_builtin_scripting
- sebool_httpd_can_check_spam
- sebool_httpd_can_connect_ftp
- sebool_httpd_can_connect_ldap
- sebool_httpd_can_connect_mythtv
- sebool_httpd_can_connect_zabbix
- sebool_httpd_can_network_connect
- sebool_httpd_can_network_connect_cobbler
- sebool_httpd_can_network_connect_db
- sebool_httpd_can_network_memcache
- sebool_httpd_can_network_relay
- sebool_httpd_can_sendmail
- sebool_httpd_dbus_avahi
- sebool_httpd_dbus_sssd
- sebool_httpd_dontaudit_search_dirs
- sebool_httpd_enable_cgi
- sebool_httpd_enable_ftp_server
- sebool_httpd_enable_homedirs
- sebool_httpd_execmem
- sebool_httpd_graceful_shutdown
- sebool_httpd_manage_ipa
- sebool_httpd_mod_auth_ntlm_winbind
- sebool_httpd_mod_auth_pam
- sebool_httpd_read_user_content
- sebool_httpd_run_ipa
- sebool_httpd_run_preupgrade
- sebool_httpd_run_stickshift
- sebool_httpd_serve_cobbler_files
- sebool_httpd_setrlimit
- sebool_httpd_ssi_exec
- sebool_httpd_sys_script_anon_write
- sebool_httpd_tmp_exec
- sebool_httpd_tty_comm
- sebool_httpd_unified
- sebool_httpd_use_cifs
- sebool_httpd_use_fusefs
- sebool_httpd_use_gpg
- sebool_httpd_use_nfs
- sebool_httpd_use_openstack
- sebool_httpd_use_sasl
- sebool_httpd_verify_dns
- sebool_icecast_use_any_tcp_ports
- sebool_irc_use_any_tcp_ports
- sebool_irssi_use_full_network
- sebool_kdumpgui_run_bootloader
- sebool_kerberos_enabled
- sebool_ksmtuned_use_cifs
- sebool_ksmtuned_use_nfs
- sebool_logadm_exec_content
- sebool_logging_syslogd_can_sendmail
- sebool_logging_syslogd_run_nagios_plugins
- sebool_logging_syslogd_use_tty
- sebool_login_console_enabled
- sebool_logrotate_use_nfs
- sebool_logwatch_can_network_connect_mail
- sebool_lsmd_plugin_connect_any
- sebool_mailman_use_fusefs
- sebool_mcelog_client
- sebool_mcelog_exec_scripts
- sebool_mcelog_foreground
- sebool_mcelog_server
- sebool_minidlna_read_generic_user_content
- sebool_mmap_low_allowed
- sebool_mock_enable_homedirs
- sebool_mount_anyfile
- sebool_mozilla_plugin_bind_unreserved_ports
- sebool_mozilla_plugin_can_network_connect
- sebool_mozilla_plugin_use_bluejeans
- sebool_mozilla_plugin_use_gps
- sebool_mozilla_plugin_use_spice
- sebool_mozilla_read_content
- sebool_mpd_enable_homedirs
- sebool_mpd_use_cifs
- sebool_mpd_use_nfs
- sebool_mplayer_execstack
- sebool_mysql_connect_any
- sebool_nagios_run_pnp4nagios
- sebool_nagios_run_sudo
- sebool_named_tcp_bind_http_port
- sebool_named_write_master_zones
- sebool_neutron_can_network
- sebool_nfs_export_all_ro
- sebool_nfs_export_all_rw
- sebool_nfsd_anon_write
- sebool_nis_enabled
- sebool_nscd_use_shm
- sebool_openshift_use_nfs
- sebool_openvpn_can_network_connect
- sebool_openvpn_enable_homedirs
- sebool_openvpn_run_unconfined
- sebool_pcp_bind_all_unreserved_ports
- sebool_pcp_read_generic_logs
- sebool_piranha_lvs_can_network_connect
- sebool_polipo_connect_all_unreserved
- sebool_polipo_session_bind_all_unreserved_ports
- sebool_polipo_session_users
- sebool_polipo_use_cifs
- sebool_polipo_use_nfs
- sebool_polyinstantiation_enabled
- sebool_postfix_local_write_mail_spool
- sebool_postgresql_can_rsync
- sebool_postgresql_selinux_transmit_client_label
- sebool_postgresql_selinux_unconfined_dbadm
- sebool_postgresql_selinux_users_ddl
- sebool_pppd_can_insmod
- sebool_pppd_for_user
- sebool_privoxy_connect_any
- sebool_prosody_bind_http_port
- sebool_puppetagent_manage_all_files
- sebool_puppetmaster_use_db
- sebool_racoon_read_shadow
- sebool_rsync_anon_write
- sebool_rsync_client
- sebool_rsync_export_all_ro
- sebool_rsync_full_access
- sebool_samba_create_home_dirs
- sebool_samba_domain_controller
- sebool_samba_enable_home_dirs
- sebool_samba_export_all_ro
- sebool_samba_export_all_rw
- sebool_samba_load_libgfapi
- sebool_samba_portmapper
- sebool_samba_run_unconfined
- sebool_samba_share_fusefs
- sebool_samba_share_nfs
- sebool_sanlock_use_fusefs
- sebool_sanlock_use_nfs
- sebool_sanlock_use_samba
- sebool_saslauthd_read_shadow
- sebool_secadm_exec_content
- sebool_secure_mode
- sebool_secure_mode_insmod
- sebool_secure_mode_policyload
- sebool_selinuxuser_direct_dri_enabled
- sebool_selinuxuser_execheap
- sebool_selinuxuser_execmod
- sebool_selinuxuser_execstack
- sebool_selinuxuser_mysql_connect_enabled
- sebool_selinuxuser_ping
- sebool_selinuxuser_postgresql_connect_enabled
- sebool_selinuxuser_rw_noexattrfile
- sebool_selinuxuser_share_music
- sebool_selinuxuser_tcp_server
- sebool_selinuxuser_udp_server
- sebool_selinuxuser_use_ssh_chroot
- sebool_sge_domain_can_network_connect
- sebool_sge_use_nfs
- sebool_smartmon_3ware
- sebool_smbd_anon_write
- sebool_spamassassin_can_network
- sebool_spamd_enable_home_dirs
- sebool_squid_connect_any
- sebool_squid_use_tproxy
- sebool_ssh_chroot_rw_homedirs
- sebool_ssh_keysign
- sebool_ssh_sysadm_login
- sebool_staff_exec_content
- sebool_staff_use_svirt
- sebool_swift_can_network
- sebool_sysadm_exec_content
- sebool_telepathy_connect_all_ports
- sebool_telepathy_tcp_connect_generic_network_ports
- sebool_tftp_anon_write
- sebool_tftp_home_dir
- sebool_tmpreaper_use_nfs
- sebool_tmpreaper_use_samba
- sebool_tor_bind_all_unreserved_ports
- sebool_tor_can_network_relay
- sebool_unconfined_chrome_sandbox_transition
- sebool_unconfined_login
- sebool_unconfined_mozilla_plugin_transition
- sebool_unprivuser_use_svirt
- sebool_use_ecryptfs_home_dirs
- sebool_use_fusefs_home_dirs
- sebool_use_lpd_server
- sebool_use_nfs_home_dirs
- sebool_use_samba_home_dirs
- sebool_user_exec_content
- sebool_varnishd_connect_any
- sebool_virt_read_qemu_ga_data
- sebool_virt_rw_qemu_ga_data
- sebool_virt_sandbox_use_all_caps
- sebool_virt_sandbox_use_audit
- sebool_virt_sandbox_use_mknod
- sebool_virt_sandbox_use_netlink
- sebool_virt_sandbox_use_sys_admin
- sebool_virt_transition_userdomain
- sebool_virt_use_comm
- sebool_virt_use_execmem
- sebool_virt_use_fusefs
- sebool_virt_use_nfs
- sebool_virt_use_rawip
- sebool_virt_use_samba
- sebool_virt_use_sanlock
- sebool_virt_use_usb
- sebool_virt_use_xserver
- sebool_webadm_manage_user_files
- sebool_webadm_read_user_files
- sebool_wine_mmap_zero_ignore
- sebool_xdm_bind_vnc_tcp_port
- sebool_xdm_exec_bootloader
- sebool_xdm_sysadm_login
- sebool_xdm_write_home
- sebool_xen_use_nfs
- sebool_xend_run_blktap
- sebool_xend_run_qemu
- sebool_xguest_connect_network
- sebool_xguest_exec_content
- sebool_xguest_mount_media
- sebool_xguest_use_bluetooth
- sebool_xserver_clients_write_xshm
- sebool_xserver_execmem
- sebool_xserver_object_manager
- sebool_zabbix_can_network
- sebool_zarafa_setrlimit
- sebool_zebra_write_config
- sebool_zoneminder_anon_write
- sebool_zoneminder_run_sudo
- selinux_all_devicefiles_labeled
- selinux_confine_to_least_privilege
- selinux_confinement_of_daemons
- selinux_context_elevation_for_sudo
- selinux_not_disabled
- selinux_policytype
- selinux_state
- selinux_user_login_roles
templates:
- sebool
