sebuild_graph(1)

💅 sebuild_graph — the sebuild_graph(1) glow-up

okay bestie, welcome to the SELinux Policy Analysis Tool corner of the sebuild_graph(1) manual, where we build graphs and slay ✨

---

🌸 NAME 🌸

sebuild_graph — the SELinux policy visualization tool graph builder. she builds the graph, you get to stare at it. iconic behavior fr fr 👑

---

🎀 SYNOPSIS 🎀

sebuild_graph [-h] [-dg] [-fb [FILTER_BOOLS]] [-c CLASSES]
                   [-p [POLICY]] FILENAME

yes the flags are stacked like that. no we don't make the rules, we just read them 💖

---

🦋 DESCRIPTION 🦋

So here's the tea: sebuild_graph creates a snapshot of a given SELinux policy — and that snapshot is a thing you can then go analyze with segraph_query. 🫶

and if you don't hand her a policy file at all? no stress, she'll just use the policy that's loaded in the system right now. lowkey convenient, highkey useful. ✨

---

✨ OPTIONS ✨

🌈 Positional arguments:

• FILENAME — the name for the new policy graph file. that's it, that's the whole job, and she does it gorgeously 💅

💜 Optional arguments:

• -h, --help — shows this help message and dips. short, sweet, and exits. 🙈
• -dg, --domain_grouping — groups SELinux domains based on the package they belong to. cute in theory!! but listen to me bestie: use with caution, because this one generates false positives! ⚠️ not a vibe, just a fact.
• -fb [FILTER_BOOLS], --filter_bools [FILTER_BOOLS] — filters rules based on either the current boolean setting, or a comma separated list written as [boolean]:[on/off]. mix and match, she's flexible 🌸
• -c CLASSES, --class CLASSES — a comma separated list of object classes that should be present in the graph. omit it and all classes are assumed. "all of them? sure bestie, all of them." 🎀
• -p [POLICY], --policy [POLICY] — path to the SELinux policy you want to be used. point her at your file, she handles it 🦋

---

🔥 EXAMPLE 🔥

create a snapshot of the SELinux policy loaded in the system — only rules concerning files and processes are considered, and the boolean setting is taken into account:

$ sebuild_graph.py -fb -c file,process graph

look at that command go. she ate and left no crumbs 💅✨

---

👑 SEE ALSO 👑

• segraph_query(1) — the other half of the duo. go check her out too, they're a set fr fr 💖

---

🌟 AUTHOR 🌟

Vit Mojzis <vmojzis@redhat.com> — thank her for the graph builder, she understood the assignment 🫶

---

okay that's the whole page bestie, no cap, every flag accounted for, nothing skipped, we kept the lore intact 💀✨

written 2017-02-09, and this is sebuild_graph(1) from the SELinux Policy Analysis Tool — bye babes, go build a graph 🦋💜🎀