Section 5: file formats
flatpak-flatpakref – Reference to a remote for an application or runtime Description Flatpak uses flatpakref files to share information about a remote for a single application. The flatpakref file contains enough information to add the remote and install the application. Use the flatpak install –from command to do so. flatpakref files may also contain additional…
firewalld.zones – firewalld zones Description What is a zone? A network zone defines the level of trust for network connections. This is a one to many relation, which means that a connection can only be part of one zone, but a zone can be used for many network connections. The zone defines the firewall features…
firewalld.zone – firewalld zone configuration files Synopsis /etc/firewalld/zones/zone.xml /usr/lib/firewalld/zones/zone.xml Description A firewalld zone configuration file contains the information for a zone. These are the zone description, services, ports, protcols, icmp-blocks, masquerade, forward-ports and rich language rules in an XML file format. The file name has to be zone_name.xml where length of zone_name is currently limited…
firewalld.service – firewalld service configuration files Synopsis /etc/firewalld/services/service.xml /usr/lib/firewalld/services/service.xml Description A firewalld service configuration file provides the information of a service entry for firewalld. The most important configuration options are ports, modules and destination addresses. This example configuration file shows the structure of a service configuration file: <?xml version="1.0" encoding="utf-8"?> <service> <short>My Service</short> <description>description</description> <port…
firewalld.richlanguage – Rich Language Documentation Description With the rich language more complex firewall rules can be created in an easy to understand way. The language uses keywords with values and is an abstract representation of ip*tables rules. The rich language extends the current zone elements (service, port, icmp-block, icmp-type, masquerade, forward-port and source-port) with additional…
firewalld.zones – firewalld zones Description What is a zone? A network zone defines the level of trust for network connections. This is a one to many relation, which means that a connection can only be part of one zone, but a zone can be used for many network connections. The zone defines the firewall features…
firewalld.lockdown-whitelist – firewalld lockdown whitelist configuration file Synopsis /etc/firewalld/lockdown-whitelists.xml Description The firewalld lockdown-whitelist configuration file contains the selinux contexts, commands, users and user ids that are white-listed when firewalld lockdown feature is enabled (see firewalld.conf(5) and firewall-cmd(1)). This example configuration file shows the structure of an lockdown-whitelist file: <?xml version="1.0" encoding="utf-8"?> <whitelist> <selinux context="selinuxcontext"/> <command…
firewalld.ipset – firewalld ipset configuration files Synopsis /etc/firewalld/ipsets/ipset.xml /usr/lib/firewalld/ipsets/ipset.xml Description A firewalld ipset configuration file provides the information of an ip set for firewalld. The most important configuration options are type, option and entry. This example configuration file shows the structure of an ipset configuration file: <?xml version="1.0" encoding="utf-8"?> <ipset type="hash:ip"> <short>My Ipset</short> <description>description</description> <entry>1.2.3.4</entry>…
firewalld.icmptype – firewalld icmptype configuration files Synopsis /etc/firewalld/icmptypes/icmptype.xml /usr/lib/firewalld/icmptypes/icmptype.xml Description A firewalld icmptype configuration file provides the information for an Internet Control Message Protocol (ICMP) type for firewalld. This example configuration file shows the structure of an icmptype configuration file: <?xml version="1.0" encoding="utf-8"?> <icmptype> <short>My Icmptype</short> <description>description</description> <destination ipv4="yes" ipv6="yes"/> </icmptype> Options The config can…
firewalld.helper – firewalld helper configuration files Synopsis /etc/firewalld/helpers/helper.xml /usr/lib/firewalld/helpers/helper.xml Description A firewalld helper configuration file provides the information of a helper entry for firewalld. The most important configuration options are ports, family and module. This example configuration file shows the structure of a helper configuration file: <?xml version="1.0" encoding="utf-8"?> <helper module="nf_conntrack_module" [family="ipv4|ipv6"]> <short>short</short> <description>description</description> <port…
firewalld.direct – firewalld direct configuration file Synopsis /etc/firewalld/direct.xml Description Direct configuration gives a more direct access to the firewall. It requires user to know basic ip(6)tables/ebtables concepts, i.e. table (filter/mangle/nat/…), chain (INPUT/OUTPUT/FORWARD/…), commands (-A/-D/-I/…), parameters (-p/-s/-d/-j/…) and targets (ACCEPT/DROP/REJECT/…). Direct configuration should be used only as a last resort when it’s not possible to use…
firewalld.dbus – firewalld D-Bus interface description Object Paths This is the basic firewalld object path structure. The used interfaces are explained below in the section called “INTERFACES”. /org/fedoraproject/FirewallD1 Interfaces org.fedoraproject.FirewallD1 org.fedoraproject.FirewallD1.direct org.fedoraproject.FirewallD1.ipset org.fedoraproject.FirewallD1.policies org.fedoraproject.FirewallD1.zone org.freedesktop.DBus.Introspectable org.freedesktop.DBus.Properties /org/fedoraproject/FirewallD1/config Interfaces org.fedoraproject.FirewallD1.config org.fedoraproject.FirewallD1.config.direct org.fedoraproject.FirewallD1.config.policies org.freedesktop.DBus.Introspectable org.freedesktop.DBus.Properties /org/fedoraproject/FirewallD1/config/zone/i Interfaces org.fedoraproject.FirewallD1.config.zone org.freedesktop.DBus.Introspectable org.freedesktop.DBus.Properties /org/fedoraproject/FirewallD1/config/service/i Interfaces: org.fedoraproject.FirewallD1.config.service org.freedesktop.DBus.Introspectable org.freedesktop.DBus.Properties /org/fedoraproject/FirewallD1/config/ipset/i Interfaces…
firewalld.conf – firewalld configuration file Synopsis /etc/firewalld/firewalld.conf Description firewalld.conf is loaded by firewalld during the initialization process. The file contains the basic configuration options for firewalld. Options These are the options that can be set in the config file: DefaultZone This sets the default zone for connections or interfaces if the zone is not selected…
firehol.conf – Configuration file for firehol(1) Description firehol.conf is the configuration file for firehol(1), which creates an iptables firewall from the simple rules in this file. This file is parsed as a bash(1) script, so it’s no problem to use variables or complex bashisms. Commands interface <real interface> <name> [optional rule parameters] The interface command…
system-auth-ac, password-auth-ac, smartcard-auth-ac, fingerprint-auth-ac, postlogin-ac – Common configuration files for PAMified services written by authconfig(8) Synopsis /etc/pam.d/system-auth-ac Description The purpose of this configuration file is to provide common configuration file for all applications and service daemons calling PAM library. The system-auth configuration file is included from all individual service configuration files with the help of…
filesystems – Linux filesystem types: ext, ext2, ext3, ext4, hpfs, iso9660, JFS, minix, msdos, ncpfs nfs, ntfs, proc, Reiserfs, smb, sysv, umsdos, vfat, XFS, xiafs Description When, as is customary, the proc filesystem is mounted on /proc, you can find in the file /proc/filesystems which filesystems your kernel currently supports; see proc(5) for more details….
selabel_file – userspace SELinux labeling interface and configuration file format for the file contexts backend Synopsis #include <selinux/label.h> int selabel_lookup(struct selabel_handle *hnd, char **context, const char *path, int mode); int selabel_lookup_raw(struct selabel_handle *hnd, char **context, const char *path, int mode); Description The file contexts backend maps from pathname/mode combinations into security contexts. It is used…
selabel_file – userspace SELinux labeling interface and configuration file format for the file contexts backend Synopsis #include <selinux/label.h> int selabel_lookup(struct selabel_handle *hnd, char **context, const char *path, int mode); int selabel_lookup_raw(struct selabel_handle *hnd, char **context, const char *path, int mode); Description The file contexts backend maps from pathname/mode combinations into security contexts. It is used…
selabel_file – userspace SELinux labeling interface and configuration file format for the file contexts backend Synopsis #include <selinux/label.h> int selabel_lookup(struct selabel_handle *hnd, char **context, const char *path, int mode); int selabel_lookup_raw(struct selabel_handle *hnd, char **context, const char *path, int mode); Description The file contexts backend maps from pathname/mode combinations into security contexts. It is used…
selabel_file – userspace SELinux labeling interface and configuration file format for the file contexts backend Synopsis #include <selinux/label.h> int selabel_lookup(struct selabel_handle *hnd, char **context, const char *path, int mode); int selabel_lookup_raw(struct selabel_handle *hnd, char **context, const char *path, int mode); Description The file contexts backend maps from pathname/mode combinations into security contexts. It is used…