$ ,* X8 Y8 m8 8 8 8 ? 8 ; 9 & ?9 9 f9 9 9 9 7 9 /: 3: <: P: c: u: : : : : : : : : ; ; ,; E; / N; ~; ; ; ; G ; E ; $ =< ) b< M < 5 < ) = l := ) = = 2 = L "> K o> > " > > ? ! 7? ' Y? D ? B ? @ A @ @ 4 @ & 'A , NA % {A 2 A A K A 5 =B T sB < B L C ( RC , {C P C . C J (D % sD ( D 4 D D ] E C qE ( E E $ F F % F - F L (G x uG G ( G #H i * hi ) i & i + i , j * =j , hj , j + j - j * k * Gk * rk * k ) k * k % l / Cl - sl ) l & l / l - "m / Pm & m 0 m # m - m - *n * Xn ) n % n + n - n + -o $ Yo ( ~o * o * o $ o 0 "p - Sp * p # p + p / p 3 ,q . `q & q 4 q + q . r * Fr + qr + r + r , r + "s / Ns + ~s ) s - s * t * -t - Xt / t ) t , t +
u / 9u 0 iu * u ) u . u - v + Lv , xv . v - v ) w * ,w ) Ww ) w , w , w x x 1 -x : _x 9 x N x #y 5y W By y 2 y J y < "z _z yz z " z + z & { /{ + C{ # o{ { ! { % { { | ! 2| T| u| F |
| |
|
} (} ;} E}
X} f} y} ; } " } } } } }
~
~ '~ 3~ 4 O~ ~ ~ ~ 6 ~ " + 4 R o y
< # 9 C M Q V
e
s ʀ Ԁ % G 6 ~ ́ * < L
V a h
y 2 ڂ 8 8 J у ރ 3 & L s " ( ܄
< W d {
Ѕ ޅ , < : M 7 ߆ - , ڇ F & N : u ' < ȉ G M ( _ $ Ί 0 ۊ 5 6 B y q ; | X Ռ , g * ' . 3 4 J 2 4 E - C T ' ) 9 " V , y Ɛ . : N c { * đ ' ߑ ' / ] @
r U 3 ͓ ٓ . * ; X L i Δ Ҕ % ڔ 4 < Q 0 ֕ ޕ _ N , f 4 # Ȗ , ( ( B k " ܗ
) D _ } " Ę # 7 ( ` d g l $ r ř ͙ # ߙ M I ^ 1 G ڜ & " G I 8 ʝ Ν ם 0 B T
\ g & ٞ & ; G O ޟ o m U " à 6 b O H С 7 * > d X c ! / A . q = 5 ޤ 0 i E S T + ? : ) z / 8 ԧ b
! p c 8 _ / P d 7 E 2 } n 2 b R 1 4 Q 4 n o W * k * < Į 8 9 : d t ٯ x &
Ȱ K Ӱ " B S C W M A $ K ' p ! } V e { _ * 1 / ' a < Ʒ 3 - = H . 2 C 8 , O e 1 ( 6 + ( b + % ( ݺ . . 5 . d % : + ) ? i . & ּ 9 7 . V + % ͽ ' ' ) C m ! % % վ 1 . - \ , z % Ϳ ) 3 . S & 9 1 > 1 p ' 4 6 ? V * , 6 0 % . V 5 0 8 ) % . O = ~ ? G C D ' I 6 7 1 9 i A = 9 # ; ] C ? > @ \ H D , + % X ~ :
& 2 < U % i * $ , 6 ? 6 v ) ' - - ! N - p 1 / 2 3 2 S . 0 . . 1 D . v 0 0 3 1 ; . m 4 / . % 0 , V . . . - " > a , / . . . = 0 l . 0 0 1 . $ ` 0 2 1 , < , i 1 0 - ) ' - Q 0 - 1 4 . E - t 1 - 3 . 6 0 e 0 . 0 . ' . V / , - , 0 = . n / - / / + . [ 0 - - - - E , s - / - 0 , , ] # 2 0 2 " E 3 h 0 0 - , M / z . 0 .
! 9 $ [ & - - 0 $ - U - . 2 6 1 J " | 7 . 1 - 8 . f . / / . $ 2 S . , 0 - - A 0 o 3 , / . 1 ' ` 3 - , 1 0 I . z / 1 0 , < & i , , / / J % Y / ; A c - j
( : 6 X q D 3 ) 2 ] / 7 2 % + 0 Q 3 ' ) 0 " 9 & \ " 8 ! 6 X ' s Z 2 o
Q ) m @ ,
5 ! @ & b d >
& * : e y ( 9 I
U c i m q v ! $ ( 8 B J Q f y J !
? / = o
% M # j , % % K 2 h & . ) G q C / T s , * $ * B Q 9 O @ + J 7 ' ? F g K % & 8 _ { = 2 5 O a g ; , @ ) m 1 5 6 1 G < y > ? = 5 ? s L / - ' 0 0 P - & ) " 7 T c ! ( 5 " / A 8 q m . E [ n u
"
)
&
1 # $ U z b (
4 " " W = z C 1
G
O
]
n d
1
4 % # Z ' ~ / 8 ) 9 ) V & # ) ) ) ? ' i ! ' 1 $ ; V . 2 #
* 5 ! J M j i d } ` k ? 0 C H b & i g & 1 , : < A ( / E \ 3 o n $ = u r ' 9 . k z x $ a B 1 h B W : # % { e e S G @ 6 I P F H ~ ( r ( V % 3 l - C H \ S ! u @ g 5 5 6 F ` j 7 0 t t { Q X & * $ 3 y N d ! l G 8 a d Y p ] v R { X Y
r J y J h 4 j N ' -
F v ) . U T D = ~ ; I b y U , | < E [ O X , * z O 0 # o ; c W + Q f
2 s Z q p T _ f ; ? i ] P v R ^ I +
| x E w p x D A ? w q / h } m ^ L ` J - S k } u > R m 9 T e @ * q M m 2 B ^ Z 8 ) _ ! c D Q V \ K N 4 f 7 > o s [ ) _ a g G ~ = b 2 M Z w t > | 5 " C L 1 Y P O n # L
" A c ' 4 n / < . ] 7 [ V + " 9 K s U W : l % K z 6 8 %s changed labels.
%s is already in %s %s is not a valid context
%s is not in %s %s must be a directory %s! Could not get current context for %s, not relabeling tty.
%s! Could not get new context for %s, not relabeling tty.
%s! Could not set new context for %s
%s: Can't load policy and enforcing mode requested: %s
%s: Can't load policy: %s
%s: Policy is already loaded and initial load requested
******************** IMPORTANT ***********************
... 600-1024 Applications Login Users Root Users Select: TCP Ports UDP Ports Add Add %s Add Booleans Dialog Add File Context Add Network Port Add SELinux Login Mapping Add SELinux Network Ports Add SELinux User Add SELinux User Mapping Add User Addr %s is defined in policy, cannot be deleted Addr %s is not defined Admin Admin User Role All Allow SELinux webadm user to manage unprivileged users home directories Allow SELinux webadm user to read unprivileged users home directories Allow Samba to share nfs directories Allow Spam Assassin daemon network access Allow X-Windows server to map a memory region as both executable and writable Allow all daemons the ability to use unallocated ttys Allow all daemons to write corefiles to / Allow cdrecord to read various content. nfs, samba, removable devices, user temp and untrusted content files Allow clients to write to X shared memory Allow daemons to run with NIS Allow evolution and thunderbird to read user files Allow gadmin SELinux user account to execute files in home directory or /tmp Allow guest SELinux user account to execute files in home directory or /tmp Allow java executable stack Allow mount to mount any directory Allow mount to mount any file Allow mplayer executable stack Allow normal user to execute ping Allow pppd to be run for a regular user Allow privileged utilities like hotplug and insmod to run unconfined Allow programs to read files in non-standard locations (default_t) Allow rc scripts to run unconfined, including any daemon started by an rc script that does not have a domain transition explicitly defined Allow regular users direct mouse access (only allow the X server) Allow rpm to run unconfined Allow sasl authentication server to read /etc/shadow Allow spamd to access home directories Allow squid daemon to connect to the network Allow ssh logins as sysadm_r:sysadm_t Allow ssh to run from inetd instead of as a daemon Allow ssh to run ssh-keysign Allow staff SELinux user account to execute files in home directory or /tmp Allow staff Web Browsers to write to home directories Allow staff_r users to search the sysadm home dir and read files (such as ~/.bashrc) Allow stunnel daemon to run as standalone, outside of xinetd Allow sysadm SELinux user account to execute files in home directory or /tmp Allow sysadm_t to directly start daemons Allow the mozilla browser to read user files Allow unconfined SELinux user account to execute files in home directory or /tmp Allow unlabeled packets to flow on the network Allow user SELinux user account to execute files in home directory or /tmp Allow user to connect to mysql socket Allow user to connect to postgres socket Allow user to r/w noextattrfile (FAT, CDROM, FLOPPY) Allow user to stat ttyfiles Allow user_r to reach sysadm_r via su, sudo, or userhelper. Otherwise, only staff_r can do so Allow users to control network interfaces (also needs USERCTL=true) Allow users to execute the mount command Allow users to run TCP servers (bind to ports and accept connection from the same domain and outside users) disabling this forces FTP passive mode and may change other protocols Allow users to run the dmesg command Allow users to rw usb devices Allow xdm logins as sysadm_r:sysadm_t Allow xen to read/write physical disk devices Allow xguest SELinux user account to execute files in home directory or /tmp Allow xinetd to run unconfined, including any services it starts that do not have a domain transition explicitly defined Application Are you sure you want to delete %s '%s'? Bad format %s: Record %s Boolean Boolean %s is defined in policy, cannot be deleted Boolean %s is not defined Boolean Name CVS Can not combine +/- with other types of categories Can not have multiple sensitivities Can not modify sensitivity levels using '+' on %s Cannot find your entry in the shadow passwd file.
Cannot read policy store. Change process mode to enforcing Change process mode to permissive. Changing the policy type will cause a relabel of the entire file system on the next boot. Relabeling takes a long time depending on the size of the file system. Do you wish to continue? Changing to SELinux disabled requires a reboot. It is not recommended. If you later decide to turn SELinux back on, the system will be required to relabel. If you just want to see if SELinux is causing a problem on your system, you can go to permissive mode which will only log errors and not enforce SELinux policy. Permissive mode does not require a reboot Do you wish to continue? Changing to SELinux enabled will cause a relabel of the entire file system on the next boot. Relabeling takes a long time depending on the size of the file system. Do you wish to continue? Compatibility Configue SELinux Context Copyright (c)2006 Red Hat, Inc.
Copyright (c) 2006 Dan Walsh Could not add SELinux user %s Could not add addr %s Could not add file context for %s Could not add interface %s Could not add login mapping for %s Could not add port %s/%s Could not add prefix %s for %s Could not add role %s for %s Could not check if SELinux user %s is defined Could not check if addr %s is defined Could not check if boolean %s is defined Could not check if file context for %s is defined Could not check if interface %s is defined Could not check if login mapping for %s is defined Could not check if port %s/%s is defined Could not close descriptors.
Could not commit semanage transaction Could not create SELinux user for %s Could not create a key for %s Could not create a key for %s/%s Could not create addr for %s Could not create context for %s Could not create context for %s/%s Could not create file context for %s Could not create interface for %s Could not create key for %s Could not create login mapping for %s Could not create port for %s/%s Could not create semanage handle Could not delete SELinux user %s Could not delete addr %s Could not delete boolean %s Could not delete file context for %s Could not delete interface %s Could not delete login mapping for %s Could not delete port %s/%s Could not delete the file context %s Could not delete the port %s Could not determine enforcing mode.
Could not establish semanage connection Could not extract key for %s Could not list SELinux modules Could not list SELinux users Could not list addrs Could not list booleans Could not list file contexts Could not list interfaces Could not list local file contexts Could not list login mappings Could not list ports Could not list roles for user %s Could not list the file contexts Could not list the ports Could not modify SELinux user %s Could not modify addr %s Could not modify boolean %s Could not modify file context for %s Could not modify interface %s Could not modify login mapping for %s Could not modify port %s/%s Could not open file %s
Could not query addr %s Could not query file context %s Could not query file context for %s Could not query interface %s Could not query port %s/%s Could not query seuser for %s Could not query user for %s Could not remove permissive domain %s (remove failed) Could not set MLS level for %s Could not set MLS range for %s Could not set SELinux user for %s Could not set active value of boolean %s Could not set addr context for %s Could not set exec context to %s.
Could not set file context for %s Could not set interface context for %s Could not set mask for %s Could not set message context for %s Could not set mls fields in addr context for %s Could not set mls fields in file context for %s Could not set mls fields in interface context for %s Could not set mls fields in port context for %s/%s Could not set name for %s Could not set permissive domain %s (module installation failed) Could not set port context for %s/%s Could not set role in addr context for %s Could not set role in file context for %s Could not set role in interface context for %s Could not set role in port context for %s/%s Could not set type in addr context for %s Could not set type in file context for %s Could not set type in interface context for %s Could not set type in port context for %s/%s Could not set user in addr context for %s Could not set user in file context for %s Could not set user in interface context for %s Could not set user in port context for %s/%s Could not start semanage transaction Could not test MLS enabled status Couldn't get default type.
Create/Manipulate temporary files in /tmp Cron Current Enforcing Mode Customized DBUS System Daemon Databases Delete %s Delete File Context Delete Network Port Delete SELinux User Mapping Delete User Description Disable Audit Disable SELinux protection for Cluster Server Disable SELinux protection for Evolution Disable SELinux protection for Hal daemon Disable SELinux protection for NIS Password Daemon Disable SELinux protection for NIS Transfer Daemon Disable SELinux protection for NetworkManager Disable SELinux protection for Thunderbird Disable SELinux protection for acct daemon Disable SELinux protection for amanda Disable SELinux protection for amavis Disable SELinux protection for apmd daemon Disable SELinux protection for arpwatch daemon Disable SELinux protection for auditd daemon Disable SELinux protection for automount daemon Disable SELinux protection for avahi Disable SELinux protection for bluetooth daemon Disable SELinux protection for canna daemon Disable SELinux protection for cardmgr daemon Disable SELinux protection for ciped daemon Disable SELinux protection for clamd daemon Disable SELinux protection for clamscan Disable SELinux protection for clvmd Disable SELinux protection for comsat daemon Disable SELinux protection for courier daemon Disable SELinux protection for cpucontrol daemon Disable SELinux protection for cpuspeed daemon Disable SELinux protection for crond daemon Disable SELinux protection for cups hplip daemon Disable SELinux protection for cupsd back end server Disable SELinux protection for cupsd daemon Disable SELinux protection for cupsd_lpd Disable SELinux protection for cvs daemon Disable SELinux protection for cyrus daemon Disable SELinux protection for dbskkd daemon Disable SELinux protection for dbusd daemon Disable SELinux protection for dccd Disable SELinux protection for dccifd Disable SELinux protection for dccm Disable SELinux protection for ddt daemon Disable SELinux protection for devfsd daemon Disable SELinux protection for dhcpc daemon Disable SELinux protection for dhcpd daemon Disable SELinux protection for dictd daemon Disable SELinux protection for distccd daemon Disable SELinux protection for dmesg daemon Disable SELinux protection for dnsmasq daemon Disable SELinux protection for dovecot daemon Disable SELinux protection for entropyd daemon Disable SELinux protection for fetchmail Disable SELinux protection for fingerd daemon Disable SELinux protection for freshclam daemon Disable SELinux protection for fsdaemon daemon Disable SELinux protection for games Disable SELinux protection for gpm daemon Disable SELinux protection for gss daemon Disable SELinux protection for hostname daemon Disable SELinux protection for hotplug daemon Disable SELinux protection for howl daemon Disable SELinux protection for http suexec Disable SELinux protection for httpd rotatelogs Disable SELinux protection for hwclock daemon Disable SELinux protection for i18n daemon Disable SELinux protection for imazesrv daemon Disable SELinux protection for inetd child daemons Disable SELinux protection for inetd daemon Disable SELinux protection for innd daemon Disable SELinux protection for iptables daemon Disable SELinux protection for ircd daemon Disable SELinux protection for irqbalance daemon Disable SELinux protection for iscsi daemon Disable SELinux protection for jabberd daemon Disable SELinux protection for kadmind daemon Disable SELinux protection for klogd daemon Disable SELinux protection for krb5kdc daemon Disable SELinux protection for ktalk daemons Disable SELinux protection for kudzu daemon Disable SELinux protection for locate daemon Disable SELinux protection for lpd daemon Disable SELinux protection for lrrd daemon Disable SELinux protection for lvm daemon Disable SELinux protection for mailman Disable SELinux protection for mdadm daemon Disable SELinux protection for monopd daemon Disable SELinux protection for mrtg daemon Disable SELinux protection for mysqld daemon Disable SELinux protection for nagios daemon Disable SELinux protection for named daemon Disable SELinux protection for nessusd daemon Disable SELinux protection for nfsd daemon Disable SELinux protection for nmbd daemon Disable SELinux protection for nrpe daemon Disable SELinux protection for nscd daemon Disable SELinux protection for nsd daemon Disable SELinux protection for ntpd daemon Disable SELinux protection for oddjob Disable SELinux protection for oddjob_mkhomedir Disable SELinux protection for openvpn daemon Disable SELinux protection for pam daemon Disable SELinux protection for pegasus Disable SELinux protection for perdition daemon Disable SELinux protection for portmap daemon Disable SELinux protection for portslave daemon Disable SELinux protection for postfix Disable SELinux protection for postgresql daemon Disable SELinux protection for pptp Disable SELinux protection for prelink daemon Disable SELinux protection for privoxy daemon Disable SELinux protection for ptal daemon Disable SELinux protection for pxe daemon Disable SELinux protection for pyzord Disable SELinux protection for quota daemon Disable SELinux protection for radiusd daemon Disable SELinux protection for radvd daemon Disable SELinux protection for rdisc Disable SELinux protection for readahead Disable SELinux protection for restorecond Disable SELinux protection for rhgb daemon Disable SELinux protection for ricci Disable SELinux protection for ricci_modclusterd Disable SELinux protection for rlogind daemon Disable SELinux protection for rpcd daemon Disable SELinux protection for rshd Disable SELinux protection for rsync daemon Disable SELinux protection for saslauthd daemon Disable SELinux protection for scannerdaemon daemon Disable SELinux protection for sendmail daemon Disable SELinux protection for setrans Disable SELinux protection for setroubleshoot daemon Disable SELinux protection for slapd daemon Disable SELinux protection for slrnpull daemon Disable SELinux protection for smbd daemon Disable SELinux protection for snmpd daemon Disable SELinux protection for snort daemon Disable SELinux protection for sound daemon Disable SELinux protection for soundd daemon Disable SELinux protection for spamd daemon Disable SELinux protection for speedmgmt daemon Disable SELinux protection for squid daemon Disable SELinux protection for ssh daemon Disable SELinux protection for stunnel daemon Disable SELinux protection for swat daemon Disable SELinux protection for sxid daemon Disable SELinux protection for syslogd daemon Disable SELinux protection for system cron jobs Disable SELinux protection for tcp daemon Disable SELinux protection for telnet daemon Disable SELinux protection for tftpd daemon Disable SELinux protection for the web browsers Disable SELinux protection for transproxy daemon Disable SELinux protection for udev daemon Disable SELinux protection for uml daemon Disable SELinux protection for updfstab daemon Disable SELinux protection for uptimed daemon Disable SELinux protection for uucpd daemon Disable SELinux protection for vmware daemon Disable SELinux protection for watchdog daemon Disable SELinux protection for winbind daemon Disable SELinux protection for xdm daemon Disable SELinux protection for xen control Disable SELinux protection for xen daemon Disable SELinux protection for xfs daemon Disable SELinux protection for ypbind daemon Disable SELinux protection for ypserv daemon Disabled Disabled
Permissive
Enforcing
Do not allow any processes to load kernel modules Do not allow any processes to modify kernel SELinux policy Do not allow transition to sysadm_t, sudo and su effected Do not audit things that we know to be broken but which are not security risks Edit Network Port Enable Audit Enable/Disable additional audit rules, that are normally not reported in the log files. Enforcing Enter complete path for executable to be confined. Enter complete path to init script used to start the confined application. Enter unique name for the confined application or user role. Error allocating memory.
Error allocating shell's argv0.
Error changing uid, aborting.
Error connecting to audit system.
Error dropping SETUID capability, aborting
Error dropping capabilities, aborting
Error freeing caps
Error initializing capabilities, aborting.
Error resetting KEEPCAPS, aborting
Error sending audit message.
Error setting KEEPCAPS, aborting
Error setting capabilities, aborting
Error! Could not open %s.
Error! Shell is not valid.
Error: multiple levels specified
Error: multiple roles specified
Error: multiple types specified
Error: you are not allowed to change levels on a non secure terminal
Executable Existing User Roles Existing_User Failed to close tty properly
File
Specification File
Type File Contexts file File Labeling File Specification File Type File context for %s is defined in policy, cannot be deleted File context for %s is not defined Filter GPL Games Generate new policy module Group View HTTPD Service Init script Interacts with the terminal Interface %s is defined in policy, cannot be deleted Interface %s is not defined Interface file Internet Services Daemon (inetd) Internet Services Daemon are daemons started by xinetd Invalid file specification Kerberos Labeling Linux Group %s does not exist Linux User %s does not exist List View Load Policy Module Load policy module Lockdown... Login
Name Login '%s' is required Login Name Login mapping for %s is defined in policy, cannot be deleted Login mapping for %s is not defined MCS Level MCS Range MLS MLS/ MLS/
MCS Range MLS/MCS
Level MLS/MCS Range Memory Protection Minimal Terminal User Role Minimal X Windows User Role Modify %s Modify File Context Modify SELinux User Mapping Modify User Modify an existing login user record. Module %s.pp already loaded in current policy.
Do you want to continue? Module Name Mount NFS NIS Name Name Service Network Configuration Network Port No context in file %s
Node Address is required Node Netmask is required Not yet implemented Options Error %s Out of memory!
Password: Permissive Polgen Policy Directory Policy Module Port Port %s/%s already defined Port %s/%s is defined in policy, cannot be deleted Port %s/%s is not defined Port Number Port is required Port number "%s" is not valid. 0 < PORT_NUMBER < 65536 Ports must be numbers or ranges of numbers from 1 to %d Prefix Printing Process Domain Proto Protocol Protocol udp or tcp is required Red Hat 2007 Relabel on next reboot. Remove loadable policy module Requires at least one category Requires prefix or roles Requires prefix, roles, level or range Requires setype Requires setype or serange Requires setype, serange or seuser Requires seuser or serange Revert boolean setting to system default Role Root Admin User Role Run booleans lockdown wizard SASL authentication server SELinux
User SELinux Administration SELinux Interface SELinux Policy Generation Tool SELinux Port
Type SELinux Port Type SELinux Roles SELinux Service Protection SELinux Type SELinux Type is required SELinux User SELinux boolean SELinux fcontext SELinux policy is not managed or store cannot be accessed. SELinux user %s is defined in policy, cannot be deleted SELinux user %s is not defined SELinux user '%s' is required SSH Samba Select Management Object Select Ports Select Root Administrator User Role, if this user will be used to administer the machine while running as root. This user will not be able to login to the system directly. Select directory to generate policy files in Select directory(s) that the confined application owns and writes into Select executable file to be confined. Select file(s) that confined application creates or writes Select if you wish to relabel then entire file system on next reboot. Relabeling can take a very long time, depending on the size of the system. If you are changing policy types or going from disabled to enforcing, a relabel is required. Select init script file to be confined. Select the domains that you would like this user administer. Select the user roles that will transiton to this applications domains. Selinux
File Type Semanage transaction already in progress Semanage transaction not in progress Sends audit messages Sends email Setup Script Sorry, -l may be used with SELinux MLS support.
Sorry, newrole may be used only on a SELinux kernel.
Sorry, run_init may be used only on a SELinux kernel.
Spam Protection Squid Standard Init Daemon Standard Init Daemon are daemons started on boot via init scripts. Usually requires a script in /etc/rc.d/init.d Status System Default Enforcing Mode System Default Policy Type: This user can login to a machine via X or terminal. By default this user will have no setuid, no networking, no sudo, no su This user will login to a machine only via a terminal or remote login. By default this user will have no setuid, no networking, no su, no sudo. To make this policy package active, execute: Toggle between Customized and All Booleans Toggle between Customized and All Ports Toggle between all and customized file context Transition staff SELinux user to Web Browser Domain Transition sysadm SELinux user to Web Browser Domain Transition user SELinux user to Web Browser Domain Transition xguest SELinux user to Web Browser Domain Type %s_t already defined in current policy.
Do you want to continue? Type Enforcement file Type is required USAGE: run_init