semanage-permissive(8)semanage-permissive(8)NAME
semanage permissive - SELinux Policy Management permissive mapping tool
SYNOPSIS
semanage permissive [-h] (-a | -d | -l) [-n] [-N] [-S STORE] [type]
DESCRIPTION
semanage is used to configure certain elements of SELinux policy without requiring modification to or recompilation from policy sources.
semanage permissive adds or removes a SELinux Policy permissive module.
OPTIONS -h, --help
show this help message and exit
-a, --add
Add a record of the specified object type
-d, --delete
Delete a record of the specified object type
-l, --list
List records of the specified object type
-n, --noheading
Do not print heading when listing the specified object type
-N, --noreload
Do not reload the policy after commit
-S STORE, --store STORE
Select an alternate SELinux Policy Store to manage
EXAMPLE
List all permissive modules
# semanage permissive -l
Make httpd_t (Web Server) a permissive domain
# semanage permissive -a httpd_t
SEE ALSO
selinux (8), semanage (8)
AUTHOR
This man page was written by Daniel Walsh <dwalsh@redhat.com>
20130617 semanage-permissive(8)
Check Out this Related Man Page
semanage-module(8)semanage-module(8)NAME
semanage module- SELinux Policy Management module mapping tool
SYNOPSIS
semanage module [-h] [-n] [-N] [-S STORE] (-a | -r | -e | -d | --extract | --list [-C] | --deleteall) [module_name]
DESCRIPTION
semanage is used to configure certain elements of SELinux policy without requiring modification to or recompilation from policy sources.
semanage module installs, removes, disables SELinux Policy modules.
OPTIONS -h, --help
show this help message and exit
-n, --noheading
Do not print heading when listing the specified object type
-N, --noreload
Do not reload policy after commit
-S STORE, --store STORE
Select an alternate SELinux Policy Store to manage
-a, --add
Install specified module
-r, --remove
Remove specified module
-d --disable
Disable specified module
-e --enable
Enable specified module
-E, --extract
Extract customizable commands, for use within a transaction
-l, --list
List records of the specified object type
-C, --locallist
List local customizations
EXAMPLE
List all modules
# semanage module -l
Disable unconfined module
# semanage module --disable unconfined
Install custom apache policy module
# semanage module -a myapache
SEE ALSO
selinux (8), semanage (8) semodule (8)
AUTHOR
This man page was written by Daniel Walsh <dwalsh@redhat.com>
20130617 semanage-module(8)
I have a file has following records
policy glb id 1233 name Permit ping from "One" to "Second" "Address1" "Any" "ICMP-ANY" permit
policy id 999251
service "snmp-udp"
exit
policy glb id 1234 name Permit telnet from "One" to "Second" "Address2" "Any" "TCP-ANY" permit
policy id 1234... (3 Replies)
For the life of me, I cannot find semanage binary using a default install. I have the following packages installed. Any help is appreciated.
libsemanage-2.0.43-4.el6.i686
policycoreutils-2.0.82-32.el6.i686
current kernel: 2.6.32-44.1.el6.i686 (1 Reply)