sepolicy: clarify manual page of sepolicy interface

Expand the description to make it more clear what "interfaces" mean
here. They're different from network interfaces used by SELinux
command `semanage interface`.

Add a note that the information comes from on-disk file which has been
installed and it doesn't necessarily match the policy loaded to the
kernel.

Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
Acked-by: Petr Lautrbach <lautrbach@redhat.com>
This commit is contained in:
Topi Miettinen 2023-06-04 14:57:27 +03:00 committed by James Carter
parent d596efb4ea
commit 6360af7a98
1 changed files with 5 additions and 1 deletions

View File

@ -8,7 +8,11 @@ sepolicy-interface \- Print interface information based on the installed SELinux
.B sepolicy interface [\-h] [\-c] [\-v] [\-f FILE] [\-a | \-u | \-l | \-i INTERFACE [INTERFACE ... ]]
.SH "DESCRIPTION"
Use \fBsepolicy interface\fP to print interface information based on SELinux Policy.
Use sepolicy interface to print information of interface macros
between domains in SELinux policy modules, as used in Reference
Policy. The information is based on installed on-disk representation
of the SELinux Policy and it may be different from the policy which is
currently loaded.
.SH "OPTIONS"
.TP