создание отчета, показывающего, могут ли два домена политики SELinux взаимодействовать (Generate a report showing if two SELinux Policy Domains can communicate)
Имя (Name)
sepolicy-communicate - Generate a report showing if two SELinux
Policy Domains can communicate
Синопсис (Synopsis)
sepolicy communicate [-h] -s SOURCE -t TARGET [-c TCLASS] [-S
SOURCEACCESS] [-T TARGETACCESS]
Описание (Description)
Use sepolicy communicate to examine SELinux Policy to if a source
SELinux Domain can communicate with a target SELinux Domain. The
default command looks to see if there are any file types that the
source domain can write, which the target domain can read.
Параметры (Options)
-c, --class
Specify the SELinux class which the source domain will
attempt to communicate with the target domain. (Default
file)
-h, --help
Display help message
-s, --source
Specify the source SELinux domain type.
-S, --sourceaccess
Specify the list of accesses used by the source SELinux
domain type to communicate with the target domain. Default
Open, Write.
-t, --target
Specify the target SELinux domain type.
-T, --targetaccess
Specify the list of accesses used by the target SELinux
domain type to receive communications from the source
domain. Default Open, Read.