mirror of
https://github.com/SELinuxProject/selinux
synced 2025-01-17 19:00:48 +00:00
666a7dfdc8
Example session:
$ ./dispol --help
Usage:
./dismod [OPTIONS] binary_pol_file
Options:
-h, --help print this help message
-a, --actions ACTIONS run non-interactively
Actions:
1 display unconditional AVTAB
2 display conditional AVTAB (entirely)
3 display conditional AVTAB (only ENABLED rules)
4 display conditional AVTAB (only DISABLED rules)
5 display conditional bools
6 display conditional expressions
8 display role transitions
c display policy capabilities
b display booleans
C display classes
r display roles
t display types
a display type attributes
p display the list of permissive types
u display unknown handling setting
F display filename_trans rules
$ ./dispol --actions 1 /etc/selinux/targeted/policy/policy.33 | head
Reading policy...
libsepol.policydb_index_others: security: 8 users, 15 roles, 5408 types, 358 bools
libsepol.policydb_index_others: security: 1 sens, 1024 cats
libsepol.policydb_index_others: security: 134 classes, 86750 rules, 8818 cond rules
binary policy file loaded
allow abrt_dump_oops_t sssd_var_lib_t : sock_file { write getattr append open };
type_transition authconfig_t entropyd_initrc_exec_t : process initrc_t;
type_transition glusterd_t syslogd_initrc_exec_t : process initrc_t;xxxx
Signed-off-by: Masatake YAMATO <yamato@redhat.com>
Acked-by: James Carter <jwcart2@gmail.com>
|
||
|---|---|---|
| .. | ||
| ru | ||
| test | ||
| .gitignore | ||
| checkmodule.8 | ||
| checkmodule.c | ||
| checkpolicy.8 | ||
| checkpolicy.c | ||
| checkpolicy.h | ||
| LICENSE | ||
| Makefile | ||
| module_compiler.c | ||
| module_compiler.h | ||
| parse_util.c | ||
| parse_util.h | ||
| policy_define.c | ||
| policy_define.h | ||
| policy_parse.y | ||
| policy_scan.l | ||
| queue.c | ||
| queue.h | ||
| VERSION | ||