tomoyo-editpolicy-agent(8) [debian man page]

TOMOYO-EDITPOLICY-AGENT(8)				  System Administration Utilities				TOMOYO-EDITPOLICY-AGENT(8)

NAME

       tomoyo-editpolicy-agent - agent for remotely editing TOMOYO Linux policy

SYNOPSIS

       tomoyo-editpolicy-agent listen_ip:listen_port

DESCRIPTION

       This program is an agent for tomoyo-editpolicy, tomoyo-loadpolicy, tomoyo-savepolicy, tomoyo-pstree, tomoyo-queryd, and tomoyo-auditd.

       It listens on the specified IP address at the specified port.

       Do not run this program unless you know what you are doing. It allows anonymous users to edit policy, as no user authentication is
       performed. It is designed for systems with resource limitations that make it difficult to run the TOMOYO Linux userspace tools. Do not use
       this for normal desktops or servers.

       Before this program can be invoked, you must register it in /sys/kernel/security/tomoyo/manager.

EXAMPLES

       Listen to 192.168.1.1 at port 10000
	     tomoyo-editpolicy-agent 192.168.1.1:10000

BUGS

       If you find any bugs, send an email to <tomoyo-users-en@lists.sourceforge.jp>.

AUTHORS

       Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
	   Main author.

       Jamie Nguyen <jamie@tomoyolinux.co.uk>
	   Documentation and website.

SEE ALSO

       tomoyo-editpolicy(8), tomoyo-loadpolicy(8), tomoyo-savepolicy(8), tomoyo-pstree(8), tomoyo-queryd(8), tomoyo-auditd(8)

       See <http://tomoyo.sourceforge.jp> for more information.

tomoyo-tools 2.5.0						    2012-04-14						TOMOYO-EDITPOLICY-AGENT(8)

TOMOYO-INIT(8)						  System Administration Utilities					    TOMOYO-INIT(8)

NAME

       tomoyo-init - load TOMOYO Linux policy automatically

SYNOPSIS

       tomoyo-init

DESCRIPTION

       When /sbin/init starts, the kernel automatically calls this program. Policy files that have been saved to disk are subsequently loaded into
       kernel memory.

       This program copies the following files:

	 /etc/tomoyo/exception_policy.conf => /sys/kernel/security/tomoyo/exception_policy

	 /etc/tomoyo/domain_policy.conf => /sys/kernel/security/tomoyo/domain_policy

	 /etc/tomoyo/profile.conf => /sys/kernel/security/tomoyo/profile

	 /etc/tomoyo/manager.conf => /sys/kernel/security/tomoyo/manager

	 /etc/tomoyo/stat.conf => /sys/kernel/security/tomoyo/stat

       If /etc/tomoyo/tomoyo-post-init exists and is executable, then it will also be executed. This allows additional control over what happens
       at startup.

       You will not usually need to invoke this program manually.

EXAMPLES

       Contents of "/etc/tomoyo/tomoyo-post-init" allowing non-root "demo" user to edit policy
	     #!/bin/bash
	     echo manage_by_non_root > /sys/kernel/security/tomoyo/manager
	     chown -R demo /sys/kernel/security/tomoyo

BUGS

       If you find any bugs, send an email to <tomoyo-users-en@lists.sourceforge.jp>.

AUTHORS

       Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
	   Main author.

       Jamie Nguyen <jamie@tomoyolinux.co.uk>
	   Documentation and website.

SEE ALSO

       tomoyo-loadpolicy(8)

       See <http://tomoyo.sourceforge.jp> for more information.

tomoyo-tools 2.5.0						    2012-04-14							    TOMOYO-INIT(8)