semanage-permissive(8) | semanage-permissive(8) |
NAME¶
semanage-permissive - SELinux Policy Management permissive mapping tool
SYNOPSIS¶
semanage permissive [-h] [-n] [-N] [-S STORE] (--add TYPE | --delete TYPE | --deleteall | --extract | --list)
DESCRIPTION¶
semanage is used to configure certain elements of SELinux policy without requiring modification to or recompilation from policy sources. semanage permissive adds or removes a SELinux Policy permissive module. Please note that this command can make any domain permissive, but can only remove the permissive property from domains where it was added by semanage permissive ("semanage permissive -d" can only be used on types listed as "Customized Permissive Types" by "semanage permissive -l").
OPTIONS¶
- -h, --help
- Show this help message and exit
- -a, --add
- Add a record of the specified object type
- -d, --delete
- Delete a record of the specified object type
- -D, --deleteall
- Remove all local customizations of permissive domains
- -l, --list
- List records of the specified object type
- -E, --extract
- Extract customizable commands, for use within a transaction
- -n, --noheading
- Do not print heading when listing the specified object type
- -N, --noreload
- Do not reload the policy after commit
- -S STORE, --store STORE
- Select an alternate SELinux Policy Store to manage
EXAMPLE¶
List all permissive domains ("Builtin Permissive Types" where set by the system policy, or a custom policy module) # semanage permissive -l Make httpd_t (Web Server) a permissive domain # semanage permissive -a httpd_t
SEE ALSO¶
AUTHOR¶
This man page was written by Daniel Walsh <dwalsh@redhat.com>
20130617 |