RichardHainesSECILC818 February 2015secilcSELinux CIL Compilersecilcinvoke the SELinux Common Intermediate Language (CIL) CompilersecilcOPTIONfileDESCRIPTIONsecilc invokes the CIL compiler with the specified arguments to build a kernel binary policy. A file_contexts file will also be built as described in the FILE FORMAT section of file_contexts5.OPTIONSWrite binary policy to file (default: policy.version)Write file contexts to file (default: file_contexts)Specify target architecture. May be selinux or xen (default: selinux)Build an mls policy. Must be true or false. This will override the (mls boolean) statement if present in the policy.Build a binary policy with a given version (default: depends on the systems SELinux policy version, see sestatus8)How to handle unknown classes or permissions. May be deny, allow, or reject (default: deny). This will override the (handleunknown action) statement if present in the policy.Do not add dontaudit rules to the binary policy.Treat tunables as booleans.Allow names containing dots (qualified names). Blocks, blockinherits, blockabstracts, and in-statements will not be allowed.Allow some statements to be re-declared.Do not check neverallow rules.Expand and remove auto-generated attributesExpand type attributes with fewer than <SIZE> members.Optimize final policy (remove redundant rules).Increment verbosity level.Display usage information.SEE ALSOfile_contexts5sestatus8HTML documentation describing the CIL language statements is available starting with docs/html/index.html.PDF documentation describing the CIL language statements is available at: docs/pdf/CIL_Reference_Guide.pdf.There is a CIL Design Wiki at: that describes the goals and features of the CIL language.