mirror of
https://github.com/SELinuxProject/selinux
synced 2024-12-22 14:02:17 +00:00
97ec1f70eb
- Add missing options - Add more examples - Note special cases Signed-off-by: Vit Mojzis <vmojzis@redhat.com>
69 lines
2.1 KiB
Groff
69 lines
2.1 KiB
Groff
.TH "semanage-node" "8" "20130617" "" ""
|
|
.SH "NAME"
|
|
.B semanage\-node \- SELinux Policy Management node mapping tool
|
|
.SH "SYNOPSIS"
|
|
.B semanage node [\-h] [\-n] [\-N] [\-S STORE] [ \-\-add \-M NETMASK \-p PROTOCOL \-t TYPE \-r RANGE node | \-\-delete \-M NETMASK \-p PROTOCOL node | \-\-deleteall | \-\-extract | \-\-list [\-C] | \-\-modify \-M NETMASK \-p PROTOCOL \-t TYPE \-r RANGE node ]
|
|
|
|
.SH "DESCRIPTION"
|
|
semanage is used to configure certain elements of
|
|
SELinux policy without requiring modification to or recompilation
|
|
from policy sources.
|
|
.B semanage node
|
|
controls the IP address to node type definitions.
|
|
|
|
.SH "OPTIONS"
|
|
.TP
|
|
.I \-h, \-\-help
|
|
Show this help message and exit
|
|
.TP
|
|
.I \-n, \-\-noheading
|
|
Do not print heading when listing the specified object type
|
|
.TP
|
|
.I \-N, \-\-noreload
|
|
Do not reload policy after commit
|
|
.TP
|
|
.I \-S STORE, \-\-store STORE
|
|
Select an alternate SELinux Policy Store to manage
|
|
.TP
|
|
.I \-C, \-\-locallist
|
|
List local customizations
|
|
.TP
|
|
.I \-a, \-\-add
|
|
Add a record of the specified object type
|
|
.TP
|
|
.I \-d, \-\-delete
|
|
Delete a record of the specified object type
|
|
.TP
|
|
.I \-m, \-\-modify
|
|
Modify a record of the specified object type
|
|
.TP
|
|
.I \-l, \-\-list
|
|
List records of the specified object type
|
|
.TP
|
|
.I \-E, \-\-extract
|
|
Extract customizable commands, for use within a transaction
|
|
.TP
|
|
.I \-D, \-\-deleteall
|
|
Remove all local customizations
|
|
.TP
|
|
.I \-M NETMASK, \-\-netmask NETMASK
|
|
Network Mask, either in CIDR (/16) or address mask notation (255.255.0.0, ffff::)
|
|
.TP
|
|
.I \-t TYPE, \-\-type TYPE
|
|
SELinux type for the object
|
|
.TP
|
|
.I \-r RANGE, \-\-range RANGE
|
|
MLS/MCS Security Range (MLS/MCS Systems only) SELinux Range for SELinux login mapping defaults to the SELinux user record range. SELinux Range for SELinux user defaults to s0.
|
|
.TP
|
|
.I \-p PROTO, \-\-proto PROTO
|
|
Protocol for the specified port (tcp|udp) or internet protocol version for the specified node (ipv4|ipv6).
|
|
|
|
.SH "EXAMPLE"
|
|
.nf
|
|
Apply type node_t to ipv4 node 127.0.0.2
|
|
# semanage node \-a \-t node_t \-p ipv4 \-M 255.255.255.255 127.0.0.2
|
|
|
|
.SH "SEE ALSO"
|
|
.BR selinux (8),
|
|
.BR semanage (8)
|