semanage-permissive(8) [centos man page]

semanage-permissive(8)													    semanage-permissive(8)

NAME

       semanage permissive - SELinux Policy Management permissive mapping tool

SYNOPSIS

       semanage permissive [-h] (-a | -d | -l) [-n] [-N] [-S STORE] [type]

DESCRIPTION

       semanage  is  used  to configure certain elements of SELinux policy without requiring modification to or recompilation from policy sources.
       semanage permissive adds or removes a SELinux Policy permissive module.

OPTIONS

       -h, --help
	      show this help message and exit

       -a, --add
	      Add a record of the specified object type

       -d, --delete
	      Delete a record of the specified object type

       -l, --list
	      List records of the specified object type

       -n, --noheading
	      Do not print heading when listing the specified object type

       -N, --noreload
	      Do not reload the policy after commit

       -S STORE, --store STORE
	      Select an alternate SELinux Policy Store to manage

EXAMPLE

       List all permissive modules
       # semanage permissive -l
       Make httpd_t (Web Server) a permissive domain
       # semanage permissive -a httpd_t

SEE ALSO

       selinux (8), semanage (8)

AUTHOR

       This man page was written by Daniel Walsh <dwalsh@redhat.com>

								     20130617						    semanage-permissive(8)

semanage-boolean(8)													       semanage-boolean(8)

NAME

       semanage boolean- SELinux Policy Management boolean tool

SYNOPSIS

       semanage boolean [-h] [-n] [-N] [-s STORE] [ --extract | --deleteall | --list [-C] | --modify ( --on | --off ) boolean ]

DESCRIPTION

       semanage  is  used  to configure certain elements of SELinux policy without requiring modification to or recompilation from policy sources.
       semanage boolean command controls the settings of booleans in SELinux policy.  booleans are if-then-else rules written in  SELinux  Policy.
       They can be used to customize the way that SELinux Policy rules effect a confined domain.

OPTIONS

       -h, --help
	      show this help message and exit

       -n, --noheading
	      Do not print heading when listing the specified object type

       -N, --noreload
	      Do not reload policy after commit

       -S STORE, --store STORE
	      Select an alternate SELinux Policy Store to manage

       -C, --locallist
	      List local customizations

       -m, --modify
	      Modify a record of the specified object type

       -l, --list
	      List records of the specified object type

       -E, --extract
	      Extract customizable commands, for use within a transaction

       -D, --deleteall
	      Remove all local customizations

       -1, --on
	      Enable the boolean

       -0, --off
	      Disable the boolean

EXAMPLE

       Turn on the apache can send mail boolan
       # semanage boolean -m --on httpd_can_sendmail

       List customized booleans
       # semanage boolean -l -C

SEE ALSO

       selinux (8), semanage (8) setsebool (8) getsebool (8)

AUTHOR

       This man page was written by Daniel Walsh <dwalsh@redhat.com>

								     20130617						       semanage-boolean(8)