mirror of
https://github.com/SELinuxProject/selinux
synced 2024-12-24 23:12:05 +00:00
3a9b4505bf
- Add "customized" method to permissiveRecords which is than used for "semanage permissive --extract" and "semanage export" - Enable "semanage permissive --deleteall" (already implemented) - Add "permissive" to the list of modules exported using "semanage export" - Update "semanage permissive" man page Signed-off-by: Vit Mojzis <vmojzis@redhat.com>
52 lines
1.4 KiB
Groff
52 lines
1.4 KiB
Groff
.TH "semanage-permissive" "8" "20130617" "" ""
|
|
.SH "NAME"
|
|
.B semanage\-permissive \- SELinux Policy Management permissive mapping tool
|
|
.SH "SYNOPSIS"
|
|
.B semanage permissive [\-h] [\-n] [\-N] [\-S STORE] (\-\-add TYPE | \-\-delete TYPE | \-\-deleteall | \-\-extract | \-\-list)
|
|
|
|
.SH "DESCRIPTION"
|
|
semanage is used to configure certain elements of SELinux policy without requiring modification to or recompilation from policy sources. semanage permissive adds or removes a SELinux Policy permissive module.
|
|
|
|
.SH "OPTIONS"
|
|
.TP
|
|
.I \-h, \-\-help
|
|
show this help message and exit
|
|
.TP
|
|
.I \-a, \-\-add
|
|
Add a record of the specified object type
|
|
.TP
|
|
.I \-d, \-\-delete
|
|
Delete a record of the specified object type
|
|
.TP
|
|
.I \-D, \-\-deleteall
|
|
Remove all local customizations of permissive domains
|
|
.TP
|
|
.I \-l, \-\-list
|
|
List records of the specified object type
|
|
.TP
|
|
.I \-E, \-\-extract
|
|
Extract customizable commands, for use within a transaction
|
|
.TP
|
|
.I \-n, \-\-noheading
|
|
Do not print heading when listing the specified object type
|
|
.TP
|
|
.I \-N, \-\-noreload
|
|
Do not reload the policy after commit
|
|
.TP
|
|
.I \-S STORE, \-\-store STORE
|
|
Select an alternate SELinux Policy Store to manage
|
|
|
|
.SH EXAMPLE
|
|
.nf
|
|
List all permissive modules
|
|
# semanage permissive \-l
|
|
Make httpd_t (Web Server) a permissive domain
|
|
# semanage permissive \-a httpd_t
|
|
|
|
.SH "SEE ALSO"
|
|
.BR selinux (8),
|
|
.BR semanage (8)
|
|
|
|
.SH "AUTHOR"
|
|
This man page was written by Daniel Walsh <dwalsh@redhat.com>
|