semanage-module(8)semanage-module(8)NAME
semanage module- SELinux Policy Management module mapping tool
SYNOPSIS
semanage module [-h] [-n] [-N] [-S STORE] (-a | -r | -e | -d | --extract | --list [-C] | --deleteall) [module_name]
DESCRIPTION
semanage is used to configure certain elements of SELinux policy without requiring modification to or recompilation from policy sources.
semanage module installs, removes, disables SELinux Policy modules.
OPTIONS -h, --help
show this help message and exit
-n, --noheading
Do not print heading when listing the specified object type
-N, --noreload
Do not reload policy after commit
-S STORE, --store STORE
Select an alternate SELinux Policy Store to manage
-a, --add
Install specified module
-r, --remove
Remove specified module
-d --disable
Disable specified module
-e --enable
Enable specified module
-E, --extract
Extract customizable commands, for use within a transaction
-l, --list
List records of the specified object type
-C, --locallist
List local customizations
EXAMPLE
List all modules
# semanage module -l
Disable unconfined module
# semanage module --disable unconfined
Install custom apache policy module
# semanage module -a myapache
SEE ALSO
selinux (8), semanage (8) semodule (8)
AUTHOR
This man page was written by Daniel Walsh <dwalsh@redhat.com>
20130617 semanage-module(8)
Check Out this Related Man Page
semanage-permissive(8)semanage-permissive(8)NAME
semanage permissive - SELinux Policy Management permissive mapping tool
SYNOPSIS
semanage permissive [-h] (-a | -d | -l) [-n] [-N] [-S STORE] [type]
DESCRIPTION
semanage is used to configure certain elements of SELinux policy without requiring modification to or recompilation from policy sources.
semanage permissive adds or removes a SELinux Policy permissive module.
OPTIONS -h, --help
show this help message and exit
-a, --add
Add a record of the specified object type
-d, --delete
Delete a record of the specified object type
-l, --list
List records of the specified object type
-n, --noheading
Do not print heading when listing the specified object type
-N, --noreload
Do not reload the policy after commit
-S STORE, --store STORE
Select an alternate SELinux Policy Store to manage
EXAMPLE
List all permissive modules
# semanage permissive -l
Make httpd_t (Web Server) a permissive domain
# semanage permissive -a httpd_t
SEE ALSO
selinux (8), semanage (8)
AUTHOR
This man page was written by Daniel Walsh <dwalsh@redhat.com>
20130617 semanage-permissive(8)
I have a file has following records
policy glb id 1233 name Permit ping from "One" to "Second" "Address1" "Any" "ICMP-ANY" permit
policy id 999251
service "snmp-udp"
exit
policy glb id 1234 name Permit telnet from "One" to "Second" "Address2" "Any" "TCP-ANY" permit
policy id 1234... (3 Replies)
For the life of me, I cannot find semanage binary using a default install. I have the following packages installed. Any help is appreciated.
libsemanage-2.0.43-4.el6.i686
policycoreutils-2.0.82-32.el6.i686
current kernel: 2.6.32-44.1.el6.i686 (1 Reply)
How to implement hello world kernel module on ubuntu ?I want the hello.c and makefile file for the module and also steps for compilation and installation of the module.:wall: (1 Reply)
Hello,
I am wondering if it is possible to allow rescursion into rsyncd modules. For example, I have a module set up like the following:
path = /home/backup
write only = yes
read only = no
auth users = backup
secrets file =... (1 Reply)
Not quite sure how to explain what I need to do (or how to title the post!) so will try and show it!
Basically I have a list of 'modules' which takes the form seen below, where there can be a module name, module type and module version (a module may not have each of those and could in theory... (2 Replies)