Section 8: administration and privileged commands
sepolicy-network – Examine the SELinux Policy and generate a network report Synopsis sepolicy network [-h] (-l | -a application [application …] | -p PORT [PORT …] | -t TYPE [TYPE …] | -d DOMAIN [DOMAIN …]) Description Use sepolicy network to examine SELinux Policy and generate network reports. Options -a, –application Generate a report listing…
sepolicy-manpage – Generate a man page based on the installed SELinux Policy Synopsis sepolicy manpage [-w] [-h] [-p PATH ] [-r ROOTDIR ] [-a | -d ] Description Use sepolicy manpage to generate manpages based on SELinux Policy. Options -a, –all Generate Man Pages for All Domains -d, –domain Generate a Man Page for the…
sepolicy-interface – Print interface information based on the installed SELinux Policy Synopsis sepolicy interface [-h] [-c] [-v] [-a | -u | -l | -i INTERFACE [INTERFACE … ]] Description Use sepolicy interface to print interfaces information based on SELinux Policy. Options -a, –list_admin List all domains with admin interface -c, –compile Test compile of interfaces…
sepolicy-gui – Graphical User Interface for SELinux policy. Synopsis Common options sepolicy gui [-h ] [ -d DOMAIN ] Description Use sepolicy gui to run a the graphical user interface, which allows you to explore how SELinux confines different process domains. Options -h, –help Display help message -d, –domain Initialize gui to the selected domain….
sepolicy-generate – Generate an initial SELinux policy module template. Synopsis Common options sepolicy generate [-h ] [-p PATH] Confined Applications sepolicy generate –application [-n NAME] [-u USER ]command [-w WRITE_PATH ] sepolicy generate –cgi [-n NAME] command [-w WRITE_PATH ] sepolicy generate –dbus [-n NAME] command [-w WRITE_PATH ] sepolicy generate –inetd [-n NAME] command…
sepolicy-communicate – Generate a report showing if two SELinux Policy Domains can communicate Synopsis sepolicy communicate [-h] -s SOURCE -t TARGET [-c TCLASS] [-S SOURCEACCESS] [-T TARGETACCESS] Description Use sepolicy communicate to examine SELinux Policy to if a source SELinux Domain can communicate with a target SELinux Domain. The default command looks to see if…
sepolicy-booleans – Query SELinux Policy to see description of booleans Synopsis sepolicy booleans [-h] [ -a | -b booleanname … ] Description sepolicy booleans will show all booleans and their descriptions, or you can choose individual booleans to display Options -h, –help Display help message -a, –all Display all boolean descriptions -b, –boolean boolean to…
sepolicy-generate – Generate an initial SELinux policy module template. Synopsis Common options sepolicy generate [-h ] [-p PATH] Confined Applications sepolicy generate –application [-n NAME] [-u USER ]command [-w WRITE_PATH ] sepolicy generate –cgi [-n NAME] command [-w WRITE_PATH ] sepolicy generate –dbus [-n NAME] command [-w WRITE_PATH ] sepolicy generate –inetd [-n NAME] command…
sepgsql_trusted_proc_selinux – Security Enhanced Linux Policy for the sepgsql_trusted_proc processes Description Security-Enhanced Linux secures the sepgsql_trusted_proc processes via flexible mandatory access control. The sepgsql_trusted_proc processes execute with the sepgsql_trusted_proc_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
sepgsql_ranged_proc_selinux – Security Enhanced Linux Policy for the sepgsql_ranged_proc processes Description Security-Enhanced Linux secures the sepgsql_ranged_proc processes via flexible mandatory access control. The sepgsql_ranged_proc processes execute with the sepgsql_ranged_proc_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
sensors-detect – detect hardware monitoring chips Synopsis sensors-detect [ –auto ] Description sensors-detect is an interactive program that will walk you through the process of scanning your system for various hardware monitoring chips, or sensors, supported by libsensors(3), or more generally by the lm_sensors tool suite. sensors-detect will look for the following devices, in order:…
sensors-conf-convert – sensors configuration conversion Synopsis sensors-conf-convert < /etc/sensors.conf > /etc/sensors3.conf Description The purpose of the sensors-conf-convert tool is to convert sensors.conf from the lm_sensors version 2 format to the lm_sensors version 3 format. The old configuration file is read from the standard input and the new one is written to the standard output. See…
sensord_selinux – Security Enhanced Linux Policy for the sensord processes Description Security-Enhanced Linux secures the sensord processes via flexible mandatory access control. The sensord processes execute with the sensord_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
sensord – Sensor information logging daemon. Synopsis sensord [ options ] [ chips ] Description Sensord is a daemon that can be used to periodically log sensor readings from hardware health-monitoring chips to syslog(3) or a round-robin database (RRD) and to alert when a sensor alarm is signalled; for example, if a fan fails, a…
sendmail_selinux – Security Enhanced Linux Policy for the sendmail processes Description Security-Enhanced Linux secures the sendmail processes via flexible mandatory access control. The sendmail processes execute with the sendmail_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
sendmail – an electronic mail transport agent Synopsis sendmail [flags] [address …] newaliases mailq [-v] hoststat purgestat smtpd Description Sendmail sends a message to one or more recipients, routing the message over whatever networks are necessary. Sendmail does internetwork forwarding as necessary to deliver the message to the correct place. Sendmail is not intended as…
sendmail – a mail enqueuer for smtpd(8) Synopsis sendmail [-tv] [-F name] [-f from] to … Description The sendmail utility is a local enqueuer for the smtpd(8) daemon, compatible with mailwrapper(8). The message is read on standard input (stdin) until sendmail encounters an end-of-file. The sendmail enqueuer is not intended to be used directly to…
sendinpaths – Send Usenet Path: statistics via e-mail Synopsis sendinpaths [-cdhn] [-k keep-days] [-r report-days] [address [address …]] Description sendinpaths checks pathlog/path for ninpaths dump files, finds dump files generated in the past report-days days, makes sure they are valid by running ninpaths on each one and making sure the exit status is zero, and…
sendfax – send group 3 fax files (G3 files) with a class 2 faxmodem Synopsis sendfax [-p] [-x<debuglevel>] [-v] [-l<modemlines>] [-m<initstring>] [-d<polldirectory>] [-C<modemclass>] [-S] [-n] [-r] [-D<dialprefix>] phone-number [g3file(s)] Description Send the named g3 fax files to the fax machine at "phone number". The g3 files can be created with pbm2g3(1) or GNU’s GhostScript with…
send-uucp – Send Usenet articles via UUCP Synopsis send-uucp [site …] Description The send-uucp program processes batch files written by innd(8) to send Usenet articles to UUCP sites. It reads a configuration file to control how it behaves with various sites. Normally, it is run periodically out of cron to put together batches and send…