Linux Manual Pages

Free Software * Books

Source Code

Free Media

Linux

sepolicy-generate(8)

NAME

   sepolicy-generate - Generate an initial SELinux policy module template.

SYNOPSIS

   Common options

   sepolicy generate [-h ] [-p PATH]

   Confined Applications

   sepolicy generate --application [-n NAME] command [-w WRITE_PATH ]
   sepolicy generate --cgi [-n NAME] command [-w WRITE_PATH ]
   sepolicy generate --dbus [-n NAME] command [-w WRITE_PATH ]
   sepolicy generate --inetd [-n NAME] command [-w WRITE_PATH ]
   sepolicy generate --init [-n NAME] command [-w WRITE_PATH ]

   Confined Users

   sepolicy generate --admin_user [-r TRANSITION_ROLE] -n NAME
   sepolicy  generate --confined_admin -n NAME [-a ADMIN_DOMAIN] [-u USER]
   [-n NAME] [-w WRITE_PATH]
   sepolicy generate --desktop_user -n NAME [-w WRITE_PATH]
   sepolicy generate --term_user -n NAME [-w WRITE_PATH]
   sepolicy generate --x_user -n NAME [-w WRITE_PATH]

   Miscellaneous Policy

   sepolicy generate --customize -d DOMAIN -n NAME [-a ADMIN_DOMAIN]
   sepolicy generate --newtype -t type -n NAME
   sepolicy generate --sandbox -n NAME

DESCRIPTION

   Use sepolicy generate to generate an SELinux policy Module.

   sepolicy generate will create 5 files.

   When specifying  a  confined  application  you  must  specify  a  path.
   sepolicy  generate  will  use  the rpm payload of the application along
   with nm -D APPLICATION to help it generate types and policy  rules  for
   your policy files.

   Type Enforcing File NAME.te
   This  file  can  be used to define all the types rules for a particular
   domain.

   Note: Policy generated by sepolicy generate will  automatically  add  a
   permissive  DOMAIN  to  your te file.  When you are satisfied that your
   policy works, you need to remove the permissive line from the  te  file
   to run your domain in enforcing mode.

   Interface File NAME.if
   This  file  defines  the  interfaces  for the types generated in the te
   file, which can be used by other policy domains.

   File Context NAME.fc
   This file defines the default file context for the system, it takes the
   file  types  created  in  the  te file and associates file paths to the
   types.  Tools like restorecon and RPM will use these paths to put  down
   labels.

   RPM Spec File NAME_selinux.spec
   This  file  is an RPM SPEC file that can be used to install the SELinux
   policy on to machines and  setup  the  labeling.  The  spec  file  also
   installs  the interface file and a man page describing the policy.  You
   can use sepolicy manpage -d NAME to generate the man page.

   Shell File NAME.sh
   This is a helper shell script to compile, install and fix the  labeling
   on  your  test  system.   It will also generate a man page based on the
   installed policy, and compile and build an RPM suitable to be installed
   on other machines

   If  a generate is possible, this tool will print out all generate paths
   from the source domain to the target domain

OPTIONS

   -h, --help
          Display help message

   -d, --domain
          Enter domain type(s) which you will be extending

   -n, --name
          Specify alternate name of policy. The policy will default to the
          executable or name specified

   -p, --path
          Specify  the  directory  to  store  the  created  policy  files.
          (Default to current working directory ) optional arguments:

   -r, --role
          Enter role(s) to which this admin user will transition.

   -t, --type
          Enter type(s) for which you will  generate  new  definition  and
          rule(s)

   -u, --user
          SELinux user(s) which will transition to this domain

   -w, --writepath
          Path(s) which the confined processes need to write

   -a, --admin
          Domain(s) which the confined admin will administrate

   --admin_user
          Generate Policy for Administrator Login User Role

   --application
          Generate Policy for User Application

   --cgi  Generate Policy for Web Application/Script (CGI)

   --confined_admin
          Generate Policy for Confined Root Administrator Role

   --customize
          Generate Policy for Existing Domain Type

   --dbus Generate Policy for DBUS System Daemon

   --desktop_user
          Generate Policy for Desktop Login User Role

   --inetd
          Generate Policy for Internet Services Daemon

   --init Generate Policy for Standard Init Daemon (Default)

   --newtype
          Generate new policy for new types to add to an existing policy.

   --sandbox
          Generate Policy for Sandbox

   --term_user
          Generate Policy for Minimal Terminal Login User Role

   --x_user
          Generate Policy for Minimal X Windows Login User Role

EXAMPLE

   > sepolicy generate --init /usr/sbin/rwhod
   Generating Policy for /usr/sbin/rwhod named rwhod
   Created the following files:
   rwhod.te # Type Enforcement file
   rwhod.if # Interface file
   rwhod.fc # File Contexts file
   rwhod_selinux.spec # Spec file
   rwhod.sh # Setup Script

AUTHOR

   This man page was written by Daniel Walsh <dwalsh@redhat.com>

Opportunity

Personal Opportunity - Free software gives you access to billions of dollars of software at no cost. Use this software for your business, personal use or to develop a profitable skill. Access to source code provides access to a level of capabilities/information that companies protect though copyrights. Open source is a core component of the Internet and it is available to you. Leverage the billions of dollars in resources and capabilities to build a career, establish a business or change the world. The potential is endless for those who understand the opportunity.

Business Opportunity - Goldman Sachs, IBM and countless large corporations are leveraging open source to reduce costs, develop products and increase their bottom lines. Learn what these companies know about open source and how open source can give you the advantage.

Free Software

Free Software provides computer programs and capabilities at no cost but more importantly, it provides the freedom to run, edit, contribute to, and share the software. The importance of free software is a matter of access, not price. Software at no cost is a benefit but ownership rights to the software and source code is far more significant.

Free Office Software - The Libre Office suite provides top desktop productivity tools for free. This includes, a word processor, spreadsheet, presentation engine, drawing and flowcharting, database and math applications. Libre Office is available for Linux or Windows.

Free Books

The Free Books Library is a collection of thousands of the most popular public domain books in an online readable format. The collection includes great classical literature and more recent works where the U.S. copyright has expired. These books are yours to read and use without restrictions.

Source Code - Want to change a program or know how it works? Open Source provides the source code for its programs so that anyone can use, modify or learn how to write those programs themselves. Visit the GNU source code repositories to download the source.

Education

Study at Harvard, Stanford or MIT - Open edX provides free online courses from Harvard, MIT, Columbia, UC Berkeley and other top Universities. Hundreds of courses for almost all major subjects and course levels. Open edx also offers some paid courses and selected certifications.

Linux Manual Pages - A man or manual page is a form of software documentation found on Linux/Unix operating systems. Topics covered include computer programs (including library and system calls), formal standards and conventions, and even abstract concepts.