- SELF
- self
- FALSE
- TRUE
- false
- true
- ALLOW
- ALLOWXPERM
- AUDITALLOW
- AUDITALLOWXPERM
- AUDITDENY
- DONTAUDIT
- DONTAUDITXPERM
- NEVERALLOW
- NEVERALLOWXPERM
- allow
- allowxperm
- auditallow
- auditallowxperm
- auditdeny
- dontaudit
- dontauditxperm
- neverallow
- neverallowxperm
- ATTRIBUTE
- ATTRIBUTE_ROLE
- BOOL
- CATEGORY
- COMMON
- DOMINANCE
- ELSE
- EXPANDATTRIBUTE
- IF
- MODULE
- OPTIONAL
- PERMISSIVE
- REQUIRE
- ROLE
- ROLEATTRIBUTE
- SENSITIVITY
- TUNABLE
- TYPE
- TYPEALIAS
- TYPEATTRIBUTE
- TYPEBOUNDS
- USER
- attribute
- attribute_role
- bool
- category
- common
- dominance
- else
- expandattribute
- if
- module
- optional
- permissive
- require
- role
- roleattribute
- sensitivity
- tunable
- type
- typealias
- typeattribute
- typebounds
- user
- DEVICETREECON
- FSCON
- FS_USE_TASK
- FS_USE_TRANS
- FS_USE_XATTR
- GENFSCON
- IBENDPORTCON
- IBPKEYCON
- IOMEMCON
- IOPORTCON
- NETIFCON
- NODECON
- PCIDEVICECON
- PIRQCON
- PORTCON
- SID
- devicetreecon
- fs_use_task
- fs_use_trans
- fs_use_xattr
- fscon
- genfscon
- ibendportcon
- ibpkeycon
- iomemcon
- ioportcon
- netifcon
- nodecon
- pcidevicecon
- pirqcon
- portcon
- sid
- CLASS
- class
- LEVEL
- level
- POLICYCAP
- policycap
- TYPE_CHANGE
- TYPE_MEMBER
- TYPE_TRANSITION
- type_change
- type_member
- type_transition
- ROLE_TRANSITION
- role_transition
- RANGE_TRANSITION
- range_transition
- DEFAULT_ROLE
- DEFAULT_TYPE
- DEFAULT_USER
- default_role
- default_type
- default_user
- DEFAULT_RANGE
- default_range
- CONSTRAIN
- MLSCONSTRAIN
- MLSVALIDATETRANS
- VALIDATETRANS
- constrain
- mlsconstrain
- mlsvalidatetrans
- validatetrans
- ALIAS
- CLONE
- INHERITS
- ROLES
- TYPES
- alias
- clone
- inherits
- roles
- types
- RANGE
- range
- SOURCE
- TARGET
- source
- target
- SAMEUSER
- sameuser
- GLBLUB
- HIGH
- LOW
- LOW-HIGH
- glblub
- high
- low
- low-high
- AND
- EQ
- NOT
- OR
- XOR
- and
- eq
- not
- or
- xor
- DOM
- DOMBY
- EQ
- INCOMP
- dom
- domby
- eq
- incomp
- H1
- H2
- L1
- L2
- R1
- R2
- R3
- T1
- T2
- T3
- U1
- U2
- U3
- h1
- h2
- l1
- l2
- r1
- r2
- r3
- t1
- t2
- t3
- u1
- u2
- u3
- always_check_network
- always_use_network
- cgroup_seclabel
- extended_socket_class
- network_peer_controls
- nnp_nosuid_transition
- open_perms
- redhat1
- accept
- acceptfrom
- access
- acquire_svc
- add
- add_child
- add_color
- add_glyph
- add_name
- admin
- append
- associate
- association
- attach_queue
- audit_access
- audit_control
- audit_read
- audit_write
- bell
- bind
- blend
- block_suspend
- call
- check_context
- chfn
- chown
- chsh
- compute_av
- compute_create
- compute_member
- compute_relabel
- compute_user
- connect
- connectto
- contains
- copy
- create
- create_files_as
- crontab
- dac_override
- dac_read_search
- dccp_recv
- dccp_send
- debug
- delete
- destroy
- disable
- drop
- dyntransition
- egress
- enable
- enforce_dest
- enqueue
- entrypoint
- execheap
- execmem
- execmod
- execstack
- execute
- execute_no_trans
- expand
- export
- force_cursor
- fork
- forward_in
- forward_out
- fowner
- freeze
- fsetid
- get_property
- get_value
- getattr
- getcap
- getfocus
- getgrp
- gethost
- getopt
- getpgid
- getpwd
- getrlimit
- getsched
- getserv
- getsession
- getstat
- grab
- halt
- hide
- hide_cursor
- impersonate
- implement
- import
- ingress
- insert
- install
- install_module
- ioctl
- ipc_info
- ipc_lock
- ipc_owner
- kill
- lease
- link
- linux_immutable
- list_child
- list_property
- listen
- load_module
- load_policy
- lock
- mac_admin
- mac_override
- manage
- manage_subnet
- map
- map_create
- map_read
- map_write
- mknod
- mmap_zero
- module_load
- module_request
- mount
- mounton
- name_bind
- name_connect
- net_admin
- net_bind_service
- net_broadcast
- net_raw
- newconn
- next_value
- nlmsg_read
- nlmsg_readpriv
- nlmsg_relay
- nlmsg_tty_audit
- nlmsg_write
- nnp_transition
- noatsecure
- node_bind
- nosuid_transition
- open
- override
- passwd
- paste
- paste_after_confirm
- polmatch
- prog_load
- prog_run
- ptrace
- query
- quotaget
- quotamod
- quotaon
- rawip_recv
- rawip_send
- read
- read_policy
- reboot
- receive
- record
- recv
- recv_msg
- recvfrom
- relabelfrom
- relabelto
- reload
- remount
- remove
- remove_child
- remove_color
- remove_glyph
- remove_name
- rename
- reparent
- rlimitinh
- rmdir
- rootok
- saver_getattr
- saver_hide
- saver_setattr
- saver_show
- search
- select
- send
- send_msg
- sendto
- set_context_mgr
- set_property
- set_value
- setattr
- setbool
- setcap
- setcheckreqprot
- setcontext
- setcurrent
- setenforce
- setexec
- setfcap
- setfocus
- setfscreate
- setgid
- setkeycreate
- setopt
- setpcap
- setpgid
- setrlimit
- setsched
- setsecparam
- setsockcreate
- setuid
- share
- shmemgrp
- shmemhost
- shmempwd
- shmemserv
- show
- show_cursor
- shutdown
- sigchld
- siginh
- sigkill
- signal
- signull
- sigstop
- start
- status
- stop
- swapon
- sys_admin
- sys_boot
- sys_chroot
- sys_module
- sys_nice
- sys_pacct
- sys_ptrace
- sys_rawio
- sys_resource
- sys_time
- sys_tty_config
- syslog
- syslog_console
- syslog_mod
- syslog_read
- tcp_recv
- tcp_send
- transfer
- transition
- udp_recv
- udp_send
- uninstall
- unix_read
- unix_write
- unlink
- unmount
- unused_perm
- update
- use
- use_as_override
- validate_trans
- view
- wake_alarm
- watch
- watch_mount
- watch_reads
- watch_sb
- watch_with_perm
- write
- add_auth
- clear_uid
- closeDecryptSession
- consumeRights
- decrypt
- duplicate
- exist
- finalizeDecryptUnit
- find
- gen_unique_id
- get
- get_state
- grant
- initializeDecryptUnit
- is_empty
- list
- openDecryptSession
- password
- pread
- reset
- set
- setPlaybackStatus
- sign
- unlock
- user_changed
- verify
rule_mount_fstypes##AppArmor Security Profile
- gen_bool
- gen_cats
- gen_context
- gen_levels
- gen_require
- gen_sens
- gen_tunable
- gen_user
- ifndef
- interface
- mcs_allcats
- mcs_systemhigh
- mcs_systemlow
- mls_systemhigh
- mls_systemlow
- optional_policy
- policy_module
- template
- tunable_policy
builtins##GNU M4m4_builtins##GNU M4
- m4_patsubst
- m4_regexp
- patsubst
- regexp