инструмент разрешающего сопоставления SELinux Policy Management (SELinux Policy Management permissive mapping tool)
Имя (Name)
semanage-permissive - SELinux Policy Management permissive
mapping tool
Синопсис (Synopsis)
semanage permissive [-h] [-n] [-N] [-S STORE] (--add TYPE |
--delete TYPE | --deleteall | --extract | --list)
Описание (Description)
semanage is used to configure certain elements of SELinux policy
without requiring modification to or recompilation from policy
sources. semanage permissive adds or removes a SELinux Policy
permissive module.
Параметры (Options)
-h, --help
show this help message and exit
-a, --add
Add a record of the specified object type
-d, --delete
Delete a record of the specified object type
-D, --deleteall
Remove all local customizations of permissive domains
-l, --list
List records of the specified object type
-E, --extract
Extract customizable commands, for use within a
transaction
-n, --noheading
Do not print heading when listing the specified object
type
-N, --noreload
Do not reload the policy after commit
-S STORE, --store STORE
Select an alternate SELinux Policy Store to manage
Примеры (Examples)
List all permissive modules
# semanage permissive -l
Make httpd_t (Web Server) a permissive domain
# semanage permissive -a httpd_t
Смотри также (See also)
selinux(8), semanage(8)