mirror of
https://github.com/SELinuxProject/selinux
synced 2025-03-02 08:20:24 +00:00
f40d4f3dda
Drop unnecessary declarations. Add missing error messages. More strict command line argument parsing. Check closing file for incomplete write. Rework resource cleanup, so that all files and allocated memory are released in all branches, useful to minimize reports while debugging libsepol under valgrind(8) or sanitizers. Set close-on-exec flag in case of any sibling thread. Signed-off-by: Christian Göttsche <cgzones@googlemail.com> Acked-by: James Carter <jwcart2@gmail.com>
55 lines
1.7 KiB
Groff
55 lines
1.7 KiB
Groff
.TH SEMODULE_PACKAGE "8" "Nov 2005" "Security Enhanced Linux" NSA
|
|
.SH NAME
|
|
semodule_package \- Create a SELinux policy module package.
|
|
|
|
.SH SYNOPSIS
|
|
.B semodule_package \-o <output file> \-m <module> [\-f <file contexts>]
|
|
.br
|
|
.SH DESCRIPTION
|
|
.PP
|
|
semodule_package is the tool used to create a SELinux policy module
|
|
package from a binary policy module and optionally other data such as file
|
|
contexts. semodule_package packages binary policy modules created by
|
|
checkmodule. The policy package created by semodule_package can then
|
|
be installed via semodule.
|
|
|
|
.SH EXAMPLE
|
|
.nf
|
|
# Build a policy package for a base module.
|
|
$ semodule_package \-o base.pp \-m base.mod \-f file_contexts
|
|
# Build a policy package for a httpd module.
|
|
$ semodule_package \-o httpd.pp \-m httpd.mod \-f httpd.fc
|
|
# Build a policy package for local TE rules and no file contexts.
|
|
$ semodule_package \-o local.pp \-m local.mod
|
|
.fi
|
|
|
|
.SH "OPTIONS"
|
|
.TP
|
|
.B \-o \-\-outfile <output file>
|
|
Policy module package file generated by this tool.
|
|
.TP
|
|
.B \-s \-\-seuser <seuser file>
|
|
seuser file to be included in the package.
|
|
.TP
|
|
.B \-u \-\-user_extra <user extra file>
|
|
user_extra file to be included in the package.
|
|
.TP
|
|
.B \-m \-\-module <Module file>
|
|
Policy module file to be included in the package.
|
|
.TP
|
|
.B \-f \-\-fc <File context file>
|
|
File contexts file for the module (optional).
|
|
.TP
|
|
.B \-n \-\-nc <netfilter context file>
|
|
netfilter context file to be included in the package.
|
|
.TP
|
|
.B \-h \-\-help
|
|
Show help message.
|
|
|
|
.SH SEE ALSO
|
|
.B checkmodule(8), semodule(8), semodule_unpackage(8)
|
|
.SH AUTHORS
|
|
.nf
|
|
This manual page was written by Dan Walsh <dwalsh@redhat.com>.
|
|
The program was written by Karl MacMillan <kmacmillan@tresys.com>
|