Section 8: administration and privileged commands
send-nntp, send-ihave – send Usenet articles to remote site Synopsis send-nntp [ -d ] sitename:hostname | sitename [ sitename:hostname | sitename .. ] send-ihave [ -d ] sitename:hostname | sitename [ sitename:hostname | sitename .. ] Description The send-* utilities are scripts that process the batch files written by innd(8) to send Usenet articles to…
semodule_unpackage – Extract policy module and file context file from an SELinux policy module unpackage. Synopsis semodule_unpackage <module> [<file contexts>] Description semodule_unpackage is the tool used to extract the SELinux policy module and file context file from an SELinux Policy Package. Example # Extract the httpd module file from httpd policy package. $ semodule_unpackage httpd.pp…
semodule_package – Create a SELinux policy module package. Synopsis semodule_package -o <output file> -m <module> [-f <file contexts>] Description semodule_package is the tool used to create a SELinux policy module package from a binary policy module and optionally other data such as file contexts. semodule_package packages binary policy modules created by checkmodule. The policy package…
semodule_link – Link SELinux policy module packages together Synopsis semodule_link [-Vv] [-o outfile] basemodpkg modpkg1 [modpkg2]… Description semodule_link is a developer tool for manually linking together a set of SELinux policy module packages into a single policy module package. This tool is not necessary for normal operation of SELinux. In normal operation, such linking is…
semodule_expand – Expand a SELinux policy module package. Synopsis semodule_expand [-V ] [ -a ] [ -c [version]] basemodpkg outputfile Description semodule_expand is a developer tool for manually expanding a base policy module package into a kernel binary policy file. This tool is not necessary for normal operation of SELinux. In normal operation, such expanding…
semodule_deps – show the dependencies between SELinux policy packages. Synopsis semodule_deps [-v -g -b] basemodpkg modpkg1 [modpkg2 … ] Description semodule_deps is a developer tool for showing the dependencies between policy packages. For each module it prints a list of modules that must be present for a module’s requirements to be satisfied. It only deals…
semodule – Manage SELinux policy modules. Synopsis semodule [options]… MODE [MODES]… Description semodule is the tool used to manage SELinux policy modules, including installing, upgrading, listing and removing modules. semodule may also be used to force a rebuild of policy from the module store and/or to force a reload of policy without performing any other…
semanage_selinux – Security Enhanced Linux Policy for the semanage processes Description Security-Enhanced Linux secures the semanage processes via flexible mandatory access control. The semanage processes execute with the semanage_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
semanage – SELinux Policy Management tool Synopsis semanage {import,export,login,user,port,interface,module,node,fcontext,boolean,permissive,dontaudit} … positional arguments: import Import local customizations export Output local customizations login Manage login mappings between linux users and SELinux confined users user Manage SELinux confined users (Roles and levels for an SELinux user) port Manage network port type definitions interface Manage network interface type definitions…
semanage-user – SELinux Policy Management SELinux User mapping tool Synopsis semanage user [-h] [-n] [-N] [-S STORE] [ –add ( -L LEVEL -R ROLES -r RANGE -s SEUSER selinux_name) | –delete selinux_name | –deleteall | –extract | –list [-C] | –modify ( -L LEVEL -R ROLES -r RANGE -s SEUSER selinux_name ) ] Description semanage…
semanage-port – SELinux Policy Management port mapping tool Synopsis semanage port [-h] [-n] [-N] [-S STORE] [ –add -t TYPE -p PROTOCOL -r RANGE port_name | port_range | –delete -p PROTOCOL port_name | port_range | –deleteall | –extract | –list [-C] | –modify -t TYPE -p PROTOCOL -r RANGE port_name | port_range ] Description semanage…
semanage-permissive – SELinux Policy Management permissive mapping tool Synopsis semanage permissive [-h] (-a | -d | -l) [-n] [-N] [-S STORE] [type] Description semanage is used to configure certain elements of SELinux policy without requiring modification to or recompilation from policy sources. semanage permissive adds or removes a SELinux Policy permissive module. Options -h, –help…
semanage-node – SELinux Policy Management node mapping tool Synopsis semanage node [-h] [-n] [-N] [-S STORE] [ –add -M NETMASK -p PROTOCOL -t TYPE -r RANGE node | –delete -M NETMASK -p PROTOCOL node | –deleteall | –extract | –list [-C] | –modify -M NETMASK -p PROTOCOL -t TYPE -r RANGE node ] Description semanage…
semanage-module – SELinux Policy Management module mapping tool Synopsis semanage module [-h] [-n] [-N] [-S STORE] (-a | -r | -e | -d | –extract | –list [-C] | –deleteall) [module_name] Description semanage is used to configure certain elements of SELinux policy without requiring modification to or recompilation from policy sources. semanage module installs, removes,…
semanage-login – SELinux Policy Management linux user to SELinux User mapping tool Synopsis semanage login [-h] [-n] [-N] [-S STORE] [ –add -s SEUSER -r RANGE LOGIN | –delete LOGIN | –deleteall | –extract | –list [-C] | –modify -s SEUSER -r RANGE LOGIN ] Description semanage is used to configure certain elements of SELinux…
semanage-interface – SELinux Policy Management network interface tool Synopsis semanage interface [-h] [-n] [-N] [-S STORE] [ –add -t TYPE -r RANGE interface | –delete interface | –deleteall | –extract | –list [-C] | –modify -t TYPE -r RANGE interface ] Description semanage is used to configure certain elements of SELinux policy without requiring modification…
semanage-import – SELinux Policy Management import tool Synopsis semanage import [-h] [-N] [-S STORE] [-f INPUT_FILE] Description semanage is used to configure certain elements of SELinux policy without requiring modification to or recompilation from policy sources. semanage import and export can be used to extract the SELinux modifications from one machine and apply them to…
semanage-fcontext – SELinux Policy Management file context tool Synopsis semanage fcontext [-h] [-n] [-N] [-S STORE] [ –add ( -t TYPE -f FTYPE -r RANGE -s SEUSER | -e EQUAL ) FILE_SPEC ) | –delete ( -t TYPE -f FTYPE | -e EQUAL ) FILE_SPEC ) | –deleteall | –extract | –list [-C] | –modify…
semanage-export – SELinux Policy Management import tool Synopsis semanage export [-h] [-S STORE] [-f OUTPUT_FILE] Description semanage is used to configure certain elements of SELinux policy without requiring modification to or recompilation from policy sources. semanage import and export can be used to extract the SELinux modifications from one machine and apply them to another….
semanage-dontaudit – SELinux Policy Management dontaudit tool Synopsis semanage dontaudit [-h] [-S STORE] [-N] {on,off} Description semanage is used to configure certain elements of SELinux policy without requiring modification to or recompilation from policy sources. semanage dontaudit toggles whether or not dontaudit rules will be in the policy. Policy writers use dontaudit rules to cause…