sepolicy-interface(8) [centos man page]

sepolicy-interface(8)													     sepolicy-interface(8)

NAME

       sepolicy-interface - Print interface information based on the installed SELinux Policy

SYNOPSIS

       sepolicy interface [-h] [-c] [-v] [-a | -u | -l | -i INTERFACE [INTERFACE ... ]]

DESCRIPTION

       Use sepolicy interface to print interfaces information based on SELinux Policy.

OPTIONS

       -a, --list_admin
	      List all domains with admin interface

       -c, --compile
	      Test compile of interfaces

       -h, --help
	      Display help message

       -i, --interface
	      Interface(s) to be displayed

       -l, --list
	      List all interfaces

       -u, --list_user
	      List all domains with SELinux user role interface

       -v, --verbose
	      Display extended information about the interface including parameters and desctiprion if available.

AUTHOR

       This man page was written by Daniel Walsh <dwalsh@redhat.com>

SEE ALSO

       sepolicy(8), selinux(8)

								     20121222						     sepolicy-interface(8)

sepolicy-network(8)													       sepolicy-network(8)

NAME

       sepolicy-network - Examine the SELinux Policy and generate a network report

SYNOPSIS

       sepolicy network [-h] (-l | -a application [application ...] | -p PORT [PORT ...] | -t TYPE [TYPE ...] | -d DOMAIN [DOMAIN ...])

DESCRIPTION

       Use sepolicy network to examine SELinux Policy and generate network reports.

OPTIONS

       -a, --application
	      Generate a report listing the ports to which the specified init application is allowed to connect and or bind.

       -d, --domain
	      Generate a report listing the ports to which the specified domain is allowed to connect and or bind.

       -l, --list
	      List all Network Port Types defined in SELinux Policy

       -h, --help
	      Display help message

       -t, --type
	      Generate a report listing the port numbers associate with the specified SELinux port type.

       -p, --port
	      Generate a report listing the SELinux port types associate with the specified port number.

EXAMPLES

       sepolicy network -p 22
       22: tcp ssh_port_t 22
       22: udp reserved_port_t 1-511
       22: tcp reserved_port_t 1-511

       sepolicy network -a /usr/sbin/sshd
       sshd_t: tcp name_connect
	    111 (portmap_port_t)
	    53 (dns_port_t)
	    88, 750, 4444 (kerberos_port_t)
	    9080 (ocsp_port_t)
	    9180, 9701, 9443-9447 (pki_ca_port_t)
	    32768-61000 (ephemeral_port_t)
	    all ports < 1024 (reserved_port_type)
	    all ports with out defined types (port_t)
       sshd_t: tcp name_bind
	    22 (ssh_port_t)
	    5900-5983, 5985-5999 (vnc_port_t)
	    6000-6020 (xserver_port_t)
	    32768-61000 (ephemeral_port_t)
	    all ports > 500 and  < 1024 (rpc_port_type)
	    all ports with out defined types (port_t)
       sshd_t: udp name_bind
	    32768-61000 (ephemeral_port_t)
	    all ports > 500 and  < 1024 (rpc_port_type)
	    all ports with out defined types (port_t)

AUTHOR

       This man page was written by Daniel Walsh <dwalsh@redhat.com>

SEE ALSO

       sepolicy(8), selinux(8), semanage(8)

								     20121005						       sepolicy-network(8)