File: manpages

package info (click to toggle)
libsemanage 3.8.1-1
  • links: PTS, VCS
  • area: main
  • in suites: forky, sid, trixie
  • size: 2,108 kB
  • sloc: ansic: 21,317; python: 1,308; yacc: 504; makefile: 280; lex: 80; sh: 16
file content (261 lines) | stat: -rw-r--r-- 10,407 bytes parent folder | download
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
Index: libsemanage-3.8.1/man/man5/semanage.conf.5
===================================================================
--- libsemanage-3.8.1.orig/man/man5/semanage.conf.5
+++ libsemanage-3.8.1/man/man5/semanage.conf.5
@@ -1,16 +1,19 @@
-.TH semanage.conf "5" "September 2011" "semanage.conf" "Linux System Administration"
+.TH semanage.conf 5 "September 2011" "semanage.conf"
+"Linux System Administration"
 .SH NAME
 semanage.conf \- global configuration file for the SELinux Management library
 .SH DESCRIPTION
-.PP
 The
-.BR semanage.conf
-file is usually located under the directory /etc/selinux and it is used for run-time configuration of the
+.B semanage.conf
+file is usually located under the directory /etc/selinux
+and it is used for run-time configuration of the
 behavior of the SELinux Management library.
 
 .PP
-Each line should contain a configuration parameter followed by the equal sign ("=") and then followed by the configuration value for that
-parameter. Anything after the "#" symbol is ignored similarly to empty lines.
+Each line should contain a configuration parameter
+followed by the equal sign ("=")
+and then followed by the configuration value for that parameter.
+Anything after the "#" symbol is ignored similarly to empty lines.
 
 .PP
 The following parameters are allowed:
@@ -18,49 +21,75 @@ The following parameters are allowed:
 .RS
 .TP
 .B module-store
-Specify how the SELinux Management library should interact with the SELinux policy store. When set to "direct", the SELinux
-Management library writes to the SELinux policy module store directly (this is the default setting).
+Specify how the SELinux Management library should interact with the
+SELinux policy store.
+When set to "direct",
+the SELinux Management library writes to the SELinux policy module store
+directly
+(this is the default setting).
 Otherwise a socket path or a server name can be used for the argument.
-If the argument begins with "/" (as in "/foo/bar"), it represents the path to a named socket that should be used to connect the policy management
-server.
-If the argument does not begin with a "/" (as in "example.com:4242"), it should be interpreted as the name of a remote policy management server
-to be used through a TCP connection (default port is 4242 unless a different one is specified after the server name using the colon to separate
-the two fields).
+If the argument begins with "/"
+(as in "/foo/bar"),
+it represents the path to a named socket
+that should be used to connect the policy management server.
+If the argument does not begin with a "/"
+(as in "example.com:4242"),
+it should be interpreted as the name of a remote policy management server
+to be used through a TCP connection
+(default port is 4242
+unless a different one is specified after the server name using the colon
+to separate the two fields).
 
 .TP
 .B root
-Specify an alternative root path to use for the store. The default is "/"
+Specify an alternative root path to use for the store.
+The default is "/"
 
 .TP
 .B store-root
-Specify an alternative store_root path to use. The default is "/var/lib/selinux"
+Specify an alternative store_root path to use.
+The default is "/var/lib/selinux"
 
 .TP
 .B compiler-directory
-Specify an alternative directory that contains HLL to CIL compilers. The default value is "/usr/libexec/selinux/hll".
+Specify an alternative directory that contains HLL to CIL compilers.
+The default value is "/usr/libexec/selinux/hll".
 
 .TP
 .B ignore-module-cache
-Whether or not to ignore the cache of CIL modules compiled from HLL. It can be set to either "true" or "false" and is set to "false" by default.
-If the cache is ignored, then all CIL modules are recompiled from their HLL modules.
+Whether or not to ignore the cache of CIL modules compiled from HLL.
+It can be set to either "true" or "false"
+and is set to "false" by default.
+If the cache is ignored,
+then all CIL modules are recompiled from their HLL modules.
 
 .TP
 .B policy-version
-When generating the policy, by default
-.BR semanage
-will set the policy version to POLICYDB_VERSION_MAX, as defined in <sepol/policydb/policydb.h>. Change this setting if a different
-version needs to be set for the policy.
+When generating the policy,
+by default
+.B semanage
+will set the policy version to POLICYDB_VERSION_MAX,
+as defined in <sepol/policydb/policydb.h>.
+Change this setting
+if a different version needs to be set for the policy.
 
 .TP
 .B target-platform
-The target platform to generate policies for. Valid values are "selinux" and "xen", and is set to "selinux" by default.
+The target platform to generate policies for.
+Valid values are "selinux" and "xen",
+and is set to "selinux" by default.
 
 .TP
 .B expand-check
 Whether or not to check "neverallow" rules when executing all
-.BR semanage
-command. It can be set to either "0" (disabled) or "1" (enabled) and by default it is enabled. There might be a large
-penalty in execution time if this option is enabled.
+.B semanage
+command. It can be set to either "0"
+(disabled)
+or "1"
+(enabled)
+and by default it is enabled.
+There might be a large penalty in execution time
+if this option is enabled.
 
 .TP
 .B file-mode
@@ -68,62 +97,96 @@ By default the permission mode for the r
 
 .TP
 .B save-previous
-It controls whether the previous module directory is saved after a successful commit to the policy store and it can be set to
-either "true" or "false". By default it is set to "false" (the previous version is deleted).
+It controls
+whether the previous module directory is saved after a successful commit
+to the policy store
+and it can be set to either "true" or "false".
+By default it is set to "false"
+(the previous version is deleted).
 
 .TP
 .B save-linked
-It controls whether the previously linked module is saved (with name "base.linked") after a successful commit to the policy store.
-It can be set to either "true" or "false" and by default it is set to "false" (the previous module is deleted).
+It controls
+whether the previously linked module is saved
+(with name "base.linked")
+after a successful commit to the policy store.
+It can be set to either "true" or "false"
+and by default
+it is set to "false"
+(the previous module is deleted).
 
 .TP
 .B ignoredirs
-List, separated by ";",  of directories to ignore when setting up users homedirs.
+List,
+separated by ";",
+of directories to ignore
+when setting up users homedirs.
 Some distributions use this to stop labeling /root as a homedir.
 
 .TP
 .B usepasswd
-Whether or not to enable the use getpwent() to obtain a list of home directories to label. It can be set to either "true" or "false".
+Whether or not to enable the use
+.BR getpwent()
+to obtain a list of home directories to label.
+It can be set to either "true" or "false".
 By default it is set to "true".
 
 .TP
 .B disable-genhomedircon
 It controls whether or not the genhomedircon function is executed when using the
-.BR semanage
-command and it can be set to either "false" or "true". By default the genhomedircon functionality is enabled (equivalent
-to this option set to "false").
+.B semanage
+command
+and it can be set to either "false" or "true".
+By default the genhomedircon functionality is enabled
+(equivalent to this option set to "false").
 
 .TP
 .B handle-unknown
-This option overrides the kernel behavior for handling permissions defined in the kernel but missing from the actual policy.
-It can be set to "deny", "reject" or "allow". By default the setting from the policy is taken.
+This option overrides the kernel behavior for handling permissions
+defined in the kernel
+but missing from the actual policy.
+It can be set to "deny",
+"reject" or "allow".
+By default the setting from the policy is taken.
 
 .TP
 .B bzip-blocksize
-It should be in the range 0-9. A value of 0 means no compression. By default the bzip block size is set to 9 (actual block
-size value is obtained after multiplication by 100000).
+It should be in the range 0\(en9.
+A value of 0 means no compression.
+By default the bzip block size is set to 9
+(actual block size value is obtained after multiplication by 100,000).
 
 .TP
 .B bzip-small
-When set to "true", the bzip algorithm shall try to reduce its system memory usage. It can be set to either "true" or "false" and
+When set to "true",
+the bzip algorithm shall try to reduce its system memory usage.
+It can be set to either "true" or "false" and
 by default it is set to "false".
 
 .TP
 .B remove-hll
-When set to "true", HLL files will be removed after compilation into CIL. In order to delete HLL files already compiled into CIL,
+When set to "true",
+HLL files will be removed after compilation into CIL.
+In order to delete HLL files already compiled into CIL,
 modules will need to be recompiled with the
-.BR ignore-module-cache
+.B ignore-module-cache
 option set to 'true' or using the
-.BR ignore-module-cache
-option with semodule. The remove-hll option can be set to either "true" or "false"
+.B ignore-module-cache
+option with semodule.
+The remove-hll option can be set to either "true" or "false"
 and by default it is set to "false".
 
-Please note that since this option deletes all HLL files, an updated HLL compiler will not be able to recompile the original HLL file into CIL.
-In order to compile the original HLL file into CIL, the same HLL file will need to be reinstalled.
+Please note
+that since this option deletes all HLL files,
+an updated HLL compiler will not be able to recompile the original HLL
+file into CIL.
+In order to compile the original HLL file into CIL,
+the same HLL file will need to be reinstalled.
 
 .TP
 .B optimize-policy
-When set to "true", the kernel policy will be optimized upon rebuilds.
+When set to "true",
+the kernel policy will be optimized upon rebuilds.
 It can be set to either "true" or "false" and by default it is set to "true".
 
 .TP
@@ -210,12 +273,12 @@ The syntax is identical to the above com
 The program should exit with a value of 0 on success, and non zero on
 failure.
 
-.SH "SEE ALSO"
+.SH SEE ALSO
 .TP
-semanage(8)
-.PP
+.BR semanage(8)
 
 .SH AUTHOR
 This manual page was written by Guido Trentalancia <guido@trentalancia.com>.
 
-The SELinux management library was written by Tresys Technology LLC and Red Hat Inc.
+The SELinux management library was written by Tresys Technology LLC
+and Red Hat Inc.