The Linux Manuals (man pages) document is an important part of Linux documents. Linux Manuals are organized as several sections. Each section has a group of commands for a specific area in Linux usage, administration or development.
setenforce – modify the mode SELinux is running in Synopsis setenforce [Enforcing|Permissive|1|0] Description Use Enforcing or 1 to put SELinux in enforcing mode. Use Permissive or 0 to put SELinux in permissive mode. If SELinux is disabled and you want to enable it, or SELinux is enabled and you want to disable it, please see…
setcap – set file capabilities Synopsis setcap [-q] [-n <rootuid>] [-v] {capabilities|-|-r} filename [ … capabilitiesN fileN ] Description In the absence of the -v (verify) option setcap sets the capabilities of each specified filename to the capabilities specified. The optional -n <rootuid> argument can be used to set the file capability for use only…
setarch – change reported architecture in new program environment and/or set personality flags Synopsis setarch [arch] [options] [program [argument…]] setarch –list|-h|-V arch [options] [program [argument…]] Description setarch modifies execution domains and process personality flags. The execution domains currently only affects the output of uname -m. For example, on an AMD64 system, running setarch i386 program…
sestatus – SELinux status tool Synopsis sestatus [-v] [-b] This tool is used to get the status of a system running SELinux. Description This manual page describes the sestatus program. This tool is used to get the status of a system running SELinux. It displays data about whether SELinux is enabled or disabled, location of…
services_selinux – Security Enhanced Linux Policy for the services processes Description Security-Enhanced Linux secures the services processes via flexible mandatory access control. Nsswitch Domain File Contexts SELinux requires files to have an extended attribute to define the file type. You can see the context of a file using the -Z option to lsP Policy governs…
services_munin_plugin_selinux – Security Enhanced Linux Policy for the services_munin_plugin processes Description Security-Enhanced Linux secures the services_munin_plugin processes via flexible mandatory access control. The services_munin_plugin processes execute with the services_munin_plugin_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
service – run a System V init script Synopsis service SCRIPT COMMAND [OPTIONS] service –status-all service –help | -h | –version Description service runs a System V init script or systemd unit in as predictable an environment as possible, removing most environment variables and with the current working directory set to /. The SCRIPT parameter…
ser2net – Serial to network proxy Synopsis ser2net [-c configfile] [-C configline] [-p controlport] [-n] [-d] [-b] [-v] [-P pidfile] Description The ser2net daemon allows telnet and tcp sessions to be established with a unit’s serial ports. The program comes up normally as a daemon, opens the TCP ports specified in the configuration file, and…
sepolicy – SELinux Policy Inspection tool Synopsis sepolicy [-h] [-P policy_path ] {booleans,communicate,generate,interface,manpage,network,transition} OPTIONS Arguments: booleans Query SELinux policy to see description of booleans sepolicy-boolean(8) communicate Query SELinux policy to see if domains can communicate with each other sepolicy-communicate(8) generate Generate SELinux Policy module template gui Launch Graphical User Interface for SELinux Policy, requires policycoreutils-gui…
sepolicy-transition – Examine the SELinux Policy and generate a process transition report Synopsis sepolicy transition [-h] -s SOURCE sepolicy transition [-h] -s SOURCE -t TARGET Description sepolicy transition will show all domains that a give SELinux source domain can transition to, including the entrypoint. If a target domain is given, sepolicy transition will examine policy…
sepolicy-network – Examine the SELinux Policy and generate a network report Synopsis sepolicy network [-h] (-l | -a application [application …] | -p PORT [PORT …] | -t TYPE [TYPE …] | -d DOMAIN [DOMAIN …]) Description Use sepolicy network to examine SELinux Policy and generate network reports. Options -a, –application Generate a report listing…
sepolicy-manpage – Generate a man page based on the installed SELinux Policy Synopsis sepolicy manpage [-w] [-h] [-p PATH ] [-r ROOTDIR ] [-a | -d ] Description Use sepolicy manpage to generate manpages based on SELinux Policy. Options -a, –all Generate Man Pages for All Domains -d, –domain Generate a Man Page for the…
sepolicy-interface – Print interface information based on the installed SELinux Policy Synopsis sepolicy interface [-h] [-c] [-v] [-a | -u | -l | -i INTERFACE [INTERFACE … ]] Description Use sepolicy interface to print interfaces information based on SELinux Policy. Options -a, –list_admin List all domains with admin interface -c, –compile Test compile of interfaces…
sepolicy-gui – Graphical User Interface for SELinux policy. Synopsis Common options sepolicy gui [-h ] [ -d DOMAIN ] Description Use sepolicy gui to run a the graphical user interface, which allows you to explore how SELinux confines different process domains. Options -h, –help Display help message -d, –domain Initialize gui to the selected domain….
sepolicy-generate – Generate an initial SELinux policy module template. Synopsis Common options sepolicy generate [-h ] [-p PATH] Confined Applications sepolicy generate –application [-n NAME] [-u USER ]command [-w WRITE_PATH ] sepolicy generate –cgi [-n NAME] command [-w WRITE_PATH ] sepolicy generate –dbus [-n NAME] command [-w WRITE_PATH ] sepolicy generate –inetd [-n NAME] command…
sepolicy-communicate – Generate a report showing if two SELinux Policy Domains can communicate Synopsis sepolicy communicate [-h] -s SOURCE -t TARGET [-c TCLASS] [-S SOURCEACCESS] [-T TARGETACCESS] Description Use sepolicy communicate to examine SELinux Policy to if a source SELinux Domain can communicate with a target SELinux Domain. The default command looks to see if…
sepolicy-booleans – Query SELinux Policy to see description of booleans Synopsis sepolicy booleans [-h] [ -a | -b booleanname … ] Description sepolicy booleans will show all booleans and their descriptions, or you can choose individual booleans to display Options -h, –help Display help message -a, –all Display all boolean descriptions -b, –boolean boolean to…
sepolicy-generate – Generate an initial SELinux policy module template. Synopsis Common options sepolicy generate [-h ] [-p PATH] Confined Applications sepolicy generate –application [-n NAME] [-u USER ]command [-w WRITE_PATH ] sepolicy generate –cgi [-n NAME] command [-w WRITE_PATH ] sepolicy generate –dbus [-n NAME] command [-w WRITE_PATH ] sepolicy generate –inetd [-n NAME] command…
sepgsql_trusted_proc_selinux – Security Enhanced Linux Policy for the sepgsql_trusted_proc processes Description Security-Enhanced Linux secures the sepgsql_trusted_proc processes via flexible mandatory access control. The sepgsql_trusted_proc processes execute with the sepgsql_trusted_proc_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
sepgsql_ranged_proc_selinux – Security Enhanced Linux Policy for the sepgsql_ranged_proc processes Description Security-Enhanced Linux secures the sepgsql_ranged_proc processes via flexible mandatory access control. The sepgsql_ranged_proc processes execute with the sepgsql_ranged_proc_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…