RichardHaines SECILC 8 18 February 2015 secilc SELinux CIL Compiler secilc invoke the SELinux Common Intermediate Language (CIL) Compiler secilc OPTION file DESCRIPTION secilc invokes the CIL compiler with the specified arguments to build a kernel binary policy. A file_contexts file will also be built as described in the FILE FORMAT section of file_contexts5. OPTIONS Write binary policy to file (default: policy.version) Write file contexts to file (default: file_contexts) Specify target architecture. May be selinux or xen (default: selinux) Build an mls policy. Must be true or false. This will override the (mls boolean) statement if present in the policy. Build a binary policy with a given version (default: depends on the systems SELinux policy version, see sestatus8) How to handle unknown classes or permissions. May be deny, allow, or reject (default: deny). This will override the (handleunknown action) statement if present in the policy. Do not add dontaudit rules to the binary policy. Treat tunables as booleans. Allow names containing dots (qualified names). Blocks, blockinherits, blockabstracts, and in-statements will not be allowed. Allow some statements to be re-declared. Do not check neverallow rules. Expand and remove auto-generated attributes Expand type attributes with fewer than <SIZE> members. Optimize final policy (remove redundant rules). Increment verbosity level. Display usage information. SEE ALSO file_contexts 5 sestatus 8 HTML documentation describing the CIL language statements is available starting with docs/html/index.html. PDF documentation describing the CIL language statements is available at: docs/pdf/CIL_Reference_Guide.pdf. There is a CIL Design Wiki at: that describes the goals and features of the CIL language.