tomoyo-setprofile(8) [debian man page]

TOMOYO-SETPROFILE(8)					  System Administration Utilities				      TOMOYO-SETPROFILE(8)

NAME

       tomoyo-setprofile - profile assignment utility for TOMOYO Linux

SYNOPSIS

       tomoyo-setprofile [option] number <domain> [<domain> ...]

DESCRIPTION

       This program assigns the specified profile number to the specified domain.

       Before this program can be invoked, you must register it in /sys/kernel/security/tomoyo/manager. After initializing policy, this is usually
       as simple as rebooting the system.

OPTIONS

       -r  Apply the specified profile number to all domains whose domain name starts with the specified string.

       number
	   The profile number must be an integer between 0 and 255.

       <domain>
	   The string must be quoted or escaped to avoid misinterpretation by the shell. It only matches an exact string unless the "-r" option is
	   specified.

EXAMPLES

       Assign profile 0 to all domains
	     tomoyo-setprofile -r 0 '<kernel>'

       Assign profile 1 to sshd and httpd domains
	     tomoyo-setprofile 1 '<kernel> /usr/sbin/sshd' '<kernel> /usr/sbin/httpd'

BUGS

       If you find any bugs, send an email to <tomoyo-users-en@lists.sourceforge.jp>.

AUTHORS

       Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
	   Main author.

       Jamie Nguyen <jamie@tomoyolinux.co.uk>
	   Documentation and website.

SEE ALSO

       tomoyo-pstree(8)

       See <http://tomoyo.sourceforge.jp> for more information.

tomoyo-tools 2.5.0						    2012-04-14						      TOMOYO-SETPROFILE(8)

TOMOYO-INIT(8)						  System Administration Utilities					    TOMOYO-INIT(8)

NAME

       tomoyo-init - load TOMOYO Linux policy automatically

SYNOPSIS

       tomoyo-init

DESCRIPTION

       When /sbin/init starts, the kernel automatically calls this program. Policy files that have been saved to disk are subsequently loaded into
       kernel memory.

       This program copies the following files:

	 /etc/tomoyo/exception_policy.conf => /sys/kernel/security/tomoyo/exception_policy

	 /etc/tomoyo/domain_policy.conf => /sys/kernel/security/tomoyo/domain_policy

	 /etc/tomoyo/profile.conf => /sys/kernel/security/tomoyo/profile

	 /etc/tomoyo/manager.conf => /sys/kernel/security/tomoyo/manager

	 /etc/tomoyo/stat.conf => /sys/kernel/security/tomoyo/stat

       If /etc/tomoyo/tomoyo-post-init exists and is executable, then it will also be executed. This allows additional control over what happens
       at startup.

       You will not usually need to invoke this program manually.

EXAMPLES

       Contents of "/etc/tomoyo/tomoyo-post-init" allowing non-root "demo" user to edit policy
	     #!/bin/bash
	     echo manage_by_non_root > /sys/kernel/security/tomoyo/manager
	     chown -R demo /sys/kernel/security/tomoyo

BUGS

       If you find any bugs, send an email to <tomoyo-users-en@lists.sourceforge.jp>.

AUTHORS

       Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
	   Main author.

       Jamie Nguyen <jamie@tomoyolinux.co.uk>
	   Documentation and website.

SEE ALSO

       tomoyo-loadpolicy(8)

       See <http://tomoyo.sourceforge.jp> for more information.

tomoyo-tools 2.5.0						    2012-04-14							    TOMOYO-INIT(8)