Login or Register to Ask a Question and Join Our Community

Linux and UNIX Man Pages

Linux & Unix Commands - Search Man Pages

tomoyo-editpolicy(8) [debian man page]

TOMOYO-EDITPOLICY(8)					  System Administration Utilities				      TOMOYO-EDITPOLICY(8)

NAME

       tomoyo-editpolicy - policy editor for TOMOYO Linux

SYNOPSIS

       tomoyo-editpolicy [options]

       tomoyo-editpolicy [options] [directory]

       tomoyo-editpolicy [options] [remote_ip:remote_port]

DESCRIPTION

       This program is the primary tool for policy management. It provides an ncurses interface for editing either policy saved to disk, or policy
       currently loaded into kernel memory.

       If no directory or remote address is specified, the policy loaded in kernel memory will be edited.

       Before this program can be invoked, you must register it in /sys/kernel/security/tomoyo/manager. After initializing policy, this is usually
       as simple as rebooting the system.

OPTIONS

       e   Set initial screen to be the Exception Policy Editor.

       d   Set initial screen to be the Domain Transition Editor [default].

       p   Set initial screen to be the Profile Editor.

       m   Set initial screen to be the Manager Editor.

       s   Set initial screen to be the Statistics.

       n   Set initial screen to be the Namespace Selector.

       readonly
	   Start the policy editor in browse-only mode. No editing is allowed.

       refresh=integer
	   Refresh the screen automatically at the interval specified in seconds.

       directory
	   Edit policy stored in the directory/policy/current/ directory, instead of the policy loaded in kernel memory. This must be the full
	   path to the directory.

       remote_ip:remote_port
	   Edit policy on a remote system via an agent waiting at port remote_port on IP address remote_ip.

       <namespace>
	   Set initial namespace to be the <namespace> namespace [default="<kernel>"].

EXAMPLES

       Start the policy editor
	     tomoyo-editpolicy

       Edit policy stored in the "/etc/tomoyo/192.168.1.1/policy/current" directory
	     tomoyo-editpolicy /etc/tomoyo/192.168.1.1/

       Edit policy via an agent connecting to 192.168.1.1 at port 10000
	     tomoyo-editpolicy 192.168.1.1:10000

       A usage guide with screenshots is available at <http://tomoyo.sourceforge.jp/2.5/tool-editpolicy.html>.

BUGS

       If you find any bugs, send an email to <tomoyo-users-en@lists.sourceforge.jp>.

AUTHORS

       Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
	   Main author.

       Jamie Nguyen <jamie@tomoyolinux.co.uk>
	   Documentation and website.

       Yoshihiro Kusuno <yocto@users.sourceforge.jp>
	   Line coloring feature.

SEE ALSO

       tomoyo-loadpolicy(8), tomoyo-editpolicy-agent(8)

       See <http://tomoyo.sourceforge.jp> for more information.

tomoyo-tools 2.5.0						    2012-04-14						      TOMOYO-EDITPOLICY(8)

Check Out this Related Man Page

TOMOYO-LOADPOLICY(8)					  System Administration Utilities				      TOMOYO-LOADPOLICY(8)

NAME

       tomoyo-loadpolicy - load TOMOYO Linux manually

SYNOPSIS

       tomoyo-loadpolicy [option]

       tomoyo-loadpolicy [option] [remote_ip:remote_port]

DESCRIPTION

       This program reads TOMOYO Linux policy from standard input and loads it into the kernel.

OPTIONS

       -e  Append to /sys/kernel/security/tomoyo/exception_policy.

       -ef Overwrite /sys/kernel/security/tomoyo/exception_policy.

       -d  Append to /sys/kernel/security/tomoyo/domain_policy.

       -df Overwrite /sys/kernel/security/tomoyo/domain_policy.

       -m  Append to /sys/kernel/security/tomoyo/manager.

       -p  Append to /sys/kernel/security/tomoyo/profile.

       -s  Append to /sys/kernel/security/tomoyo/stat.

       remote_ip:remote_port
	   Write to policy on a remote system via an agent waiting at port remote_port on IP address remote_ip.

EXAMPLES

       Append a line to exception policy
	     echo "acl_group 0 file read proc:/meminfo" | tomoyo-loadpolicy -e

       Remove a line from exception policy
	     echo "delete acl_group 0 file read proc:/meminfo" | tomoyo-loadpolicy -e

       Append a line to domain policy
	     ( echo "<kernel>"; echo "file execute /sbin/init" ) | tomoyo-loadpolicy -d

       Replace currently loaded domain policy
	     tomoyo-loadpolicy -df < /etc/tomoyo/domain_policy.conf

       Append to policy remotely
	     tomoyo-loadpolicy -d 192.168.1.1:10000 < /etc/tomoyo/192.168.1.1/domain_policy.conf

       Remove a line from "/sys/kernel/security/tomoyo/manager"
	     echo "delete /usr/sbin/tomoyo-queryd" | tomoyo-loadpolicy -m

BUGS

       If you find any bugs, send an email to <tomoyo-users-en@lists.sourceforge.jp>.

AUTHORS

       Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
	   Main author.

       Jamie Nguyen <jamie@tomoyolinux.co.uk>
	   Documentation and website.

SEE ALSO

       tomoyo-savepolicy(8), tomoyo-editpolicy(8), tomoyo-editpolicy-agent(8), tomoyo-init(8)

       See <http://tomoyo.sourceforge.jp> for more information.

tomoyo-tools 2.5.0						    2012-04-14						      TOMOYO-LOADPOLICY(8)
Man Page