   - abrt
   - accountsd
   - acct
   - afs
   - afterburn
   - aide
   - aisexec
   - ajaxterm
   - alsa
   - amanda
   - amavis
   - amtu
   - anaconda
   - antivirus
   - apache
   - apcupsd
   - apm
   - apt
   - arpwatch
   - asterisk
   - authconfig
   - automount
   - avahi
   - awstats
   - backup
   - bacula
   - bind
   - bird
   - bitlbee
   - blkmapd
   - blueman
   - bluetooth
   - boinc
   - boltd
   - boothd
   - bootupd
   - brctl
   - brltty
   - bugzilla
   - bumblebee
   - cachefilesd
   - calamaris
   - callweaver
   - canna
   - ccs
   - cdrecord
   - certmaster
   - certmonger
   - certwatch
   - cfengine
   - cgroup
   - chrome
   - chronyd
   - cifsutils
   - cinder
   - cipe
   - clamav
   - clockspeed
   - clogd
   - cloudform
   - cmirrord
   - cobbler
   - collectd
   - colord
   - comsat
   - condor
   - conman
   - conntrackd
   - consolekit
   - coreos_installer
   - corosync
   - couchdb
   - courier
   - cpucontrol
   - cpufreqselector
   - cpuplug
   - cron
   - ctdb
   - cups
   - cvs
   - cyphesis
   - cyrus
   - daemontools
   - dante
   - dbadm
   - dbskk
   - dbus
   - dcc
   - ddclient
   - denyhosts
   - devicekit
   - dhcp
   - dictd
   - dirmngr
   - dirsrv
   - dirsrv-admin
   - distcc
   - dkim
   - dmidecode
   - dnsmasq
   - dnssec
   - dovecot
   - dpkg
   - drbd
   - dspam
   - entropyd
   - evolution
   - exim
   - fail2ban
   - fcoe
   - fdo
   - fedoratp
   - fetchmail
   - finger
   - firewalld
   - firewallgui
   - firstboot
   - fprintd
   - freeipmi
   - freqset
   - ftp
   - fwupd
   - games
   - gatekeeper
   - gdomap
   - geoclue
   - git
   - gitosis
   - glance
   - glusterd
   - gnome
   - gnome_remote_desktop
   - gnomeclock
   - gpg
   - gpm
   - gpsd
   - gssproxy
   - hadoop
   - hddtemp
   - health-checker
   - hostapd
   - howl
   - hsqldb
   - hwloc
   - hypervkvp
   - ibacm
   - ica
   - icecast
   - ifplugd
   - iiosensorproxy
   - imaze
   - inetd
   - inn
   - insights_client
   - insights_core
   - iodine
   - iotop
   - ipmievd
   - irc
   - ircd
   - irqbalance
   - iscsi
   - isns
   - jabber
   - java
   - jetty
   - jockey
   - journalctl
   - kafs
   - kanidm_unixd
   - kdump
   - kdumpgui
   - keepalived
   - kerberos
   - kerneloops
   - keyboardd
   - keystone
   - keyutils
   - kismet
   - kiwi
   - kmscon
   - kpatch
   - ksmtuned
   - ktalk
   - ktls
   - l2tp
   - ldap
   - libalternatives
   - lightsquid
   - likewise
   - linuxptp
   - lircd
   - livecd
   - lldpad
   - loadkeys
   - lockdev
   - logrotate
   - logwatch
   - lpd
   - lsm
   - lttng-tools
   - mailman
   - mailscanner
   - man2html
   - mandb
   - mcelog
   - mediawiki
   - memcached
   - milter
   - minidlna
   - minissdpd
   - mip6d
   - mirrormanager
   - mock
   - modemmanager
   - mojomojo
   - mon_statd
   - mongodb
   - mono
   - monop
   - motion
   - mozilla
   - mpd
   - mplayer
   - mptcpd
   - mrtg
   - mta
   - munin
   - mysql
   - mythtv
   - naemon
   - nagios
   - namespace
   - ncftool
   - nessus
   - networkmanager
   - ninfod
   - nis
   - nova
   - nscd
   - nsd
   - nslcd
   - ntop
   - ntp
   - numad
   - nut
   - nvme_stas
   - nx
   - oav
   - obex
   - oddjob
   - oident
   - opafm
   - openca
   - opendnssec
   - openfortivpn
   - openhpid
   - openshift
   - openshift-origin
   - opensm
   - openvpn
   - openvswitch
   - openwsman
   - oracleasm
   - osad
   - pacemaker
   - packagekit
   - pads
   - passenger
   - pcm
   - pcmcia
   - pcscd
   - pdns
   - pegasus
   - perdition
   - pesign
   - pingd
   - piranha
   - pkcs
   - pkcs11proxyd
   - pki
   - plymouthd
   - podsleuth
   - policykit
   - polipo
   - portage
   - portmap
   - portreserve
   - portslave
   - postfix
   - postfixpolicyd
   - postgrey
   - powerprofiles
   - ppp
   - prelink
   - prelude
   - privoxy
   - procmail
   - prosody
   - psad
   - ptchown
   - pulseaudio
   - puppet
   - pwauth
   - pxe
   - pyzor
   - qatlib
   - qemu
   - qgs
   - qmail
   - qpid
   - quantum
   - quota
   - rabbitmq
   - radius
   - radvd
   - raid
   - rasdaemon
   - razor
   - rdisc
   - readahead
   - realmd
   - rebootmgr
   - redis
   - remotelogin
   - resmgr
   - rgmanager
   - rhcd
   - rhcs
   - rhgb
   - rhnsd
   - rhsmcertd
   - ricci
   - rkhunter
   - rkt
   - rlogin
   - rngd
   - rolekit
   - roundup
   - rpc
   - rpcbind
   - rpm
   - rrdcached
   - rshd
   - rshim
   - rssh
   - rsync
   - rtas
   - rtkit
   - rtorrent
   - rwho
   - salt
   - samba
   - sambagui
   - samhain
   - sandbox
   - sandboxX
   - sanlock
   - sap
   - sasl
   - sbd
   - sblim
   - screen
   - sectoolm
   - sendmail
   - sensord
   - setroubleshoot
   - sge
   - shorewall
   - shutdown
   - slocate
   - slpd
   - slrnpull
   - smartmon
   - smokeping
   - smoltclient
   - smsd
   - smstools
   - snapper
   - snmp
   - snort
   - sosreport
   - soundserver
   - spamassassin
   - speech-dispatcher
   - squid
   - sslh
   - sssd
   - stalld
   - stapserver
   - stratisd
   - stunnel
   - svnserve
   - swift
   - switcheroo
   - sxid
   - sysstat
   - tangd
   - targetd
   - tcpd
   - tcsd
   - telepathy
   - telnet
   - tftp
   - tgtd
   - thin
   - thumb
   - thunderbird
   - tlp
   - tmpreaper
   - tomcat
   - tor
   - transproxy
   - tripwire
   - tuned
   - tvtime
   - tzdata
   - ucspitcp
   - ulogd
   - uml
   - updfstab
   - uptime
   - usbmodules
   - usbmuxd
   - userhelper
   - usernetctl
   - uucp
   - uuidd
   - uwimap
   - varnishd
   - vbetool
   - vdagent
   - vhostmd
   - virt
   - virt_supplementary
   - vlock
   - vmtools
   - vmware
   - vnstatd
   - vpn
   - w3c
   - watchdog
   - wdmd
   - webadm
   - webalizer
   - wicked
   - wine
   - wireguard
   - wireshark
   - wm
   - xen
   - xfs
   - xscreensaver
   - zabbix
   - zarafa
   - zebra
   - zoneminder
   - zosremote

* Global Booleans

* Global Tunables

* Boolean Index

* Tunable Index

* Interface Index

* Template Index

Layer: contrib

Module: sap

Tunables Interfaces

Description:

SAP policy

Tunables:

sap_service_transition_to_unconfined_user

Default value

false

Description

allow unconfined_service_t transition to the unconfined user domain

Return

Interfaces:

sap_exec(
	
		domain
		
	)

Summary

Execute sap in the caller domain.

Parameters

Parameter:	Description:
domain	Domain allowed access.

sap_read_lnk_files(
	
		domain
		
	)

Summary

Read SAP lnk_files.

Parameters

Parameter:	Description:
domain	Domain allowed access.

sap_unconfined_domtrans(
	
		domain
		
	)

Summary

Execute sap in sap unconfined domain.

Parameters

Parameter:	Description:
domain	Domain allowed to transition.

Return