2020-10-17 10:41:23 +01:00
|
|
|
# semanage
|
|
|
|
|
|
|
|
|
|
> SELinux Policy Management tool.
|
2021-04-16 15:42:14 +01:00
|
|
|
> More information: <https://manned.org/semanage>.
|
2020-10-17 10:41:23 +01:00
|
|
|
|
|
|
|
|
- Output local customizations:
|
|
|
|
|
|
|
|
|
|
`semanage -S {{store}} -o {{path/to/output_file}}`
|
|
|
|
|
|
|
|
|
|
- Take a set of commands from a specified file and load them in a single transaction:
|
|
|
|
|
|
|
|
|
|
`semanage -S {{store}} -i {{path/to/input_file}}`
|
|
|
|
|
|
|
|
|
|
- Manage booleans. Booleans allow the administrator to modify the confinement of processes based on the current configuration:
|
|
|
|
|
|
|
|
|
|
`semanage boolean -S {{store}} {{--delete|--modify|--list|--noheading|--deleteall}} {{-on|-off}} -F {{boolean|boolean_file}}`
|
|
|
|
|
|
|
|
|
|
- Manage policy modules:
|
|
|
|
|
|
|
|
|
|
`semanage module -S {{store}} {{--add|--delete|--list|--modify}} {{--enable|--disable}} {{module_name}}`
|
|
|
|
|
|
|
|
|
|
- Disable/Enable dontaudit rules in policy:
|
|
|
|
|
|
|
|
|
|
`semanage dontaudit -S {{store}} {{on|off}}`
|
