SELINT(1)

📦
version 1.5.1 · 7 versions
, in fedora 43, fedora 44

✨ SELINT(1) ✨

okay bestie, gather round 💖 this is SELint, a User Commands situation, section 1 of the manual, and she is here to do static source code analysis on SELinux policy source files. yes she's that girl. let's get into it 🎀

🌸 NAME 🌸

SELint — Perform static source code analysis on SELinux policy source files.

like, she reads your policy files and tells you what's up. no compiling required. iconic behavior fr fr 💅

🦋 SYNOPSIS 🦋

selint [OPTIONS] FILE [...]

that's it. that's the whole vibe. you give her options, you give her files, she goes to work ✨

💜 DESCRIPTION 💜

Perform static code analysis on SELinux policy source. no cap, she just looks at your files and finds stuff — you don't have to build anything.

here's every single flag she takes, and yes, we're going through all of them, because you deserve to know 👑

  • -c, --config=CONFIGFILE — override the default config with the config file you name right there on the command line. the config file syntax lives in the CONFIGURATION section (go read it, bestie).
  • --color=COLOR_OPTION — configure color output. your options are on, off, and auto. and auto is the default, so if you say nothing she picks for you 🎀
  • --context=CONTEXT_PATH — recursively scan CONTEXT_PATH to find additional te and if files to parse, but not scan. SELint will assume the scanned policy files are intended to be compiled together with the context files. are intended to be compiled together with the context files. (yes, the original says that twice, we're keeping it, it's canon 💀) this one implies -s.
  • --debug-parser — enable debug output for the internal policy parser. very noisy, but genuinely useful to debug parsing failures. turn this on when the parser is acting mysterious 🙈
  • -d, --disable=CHECKID — disable the check with the given ID. bye felicia 👋
  • -e, --enable=CHECKID — enable the check with the given ID. welcome back queen 👑
  • -E, --only-enabled — only run checks that are explicitly enabled with the --enable option. if you didn't enable it, she's not running it. periodt.
  • --full-path — print the full path for files. no more guessing where that finding came from 💅
  • -F, --fail — exit with a non-zero value if any issue was found. perfect for CI, perfect for making your coworkers fix things 😌
  • -h, --help — display this menu. the classic. the icon.
  • -l, --level=LEVEL — only list errors with a severity level at or greater than LEVEL. your options are C (convention), S (style), W (warning), E (error), F (fatal error). filter the noise, keep the drama 🔥
  • --scan-hidden-dirs — scan hidden directories. by default hidden directories (like .git) are skipped in recursive mode, so if you actually want her digging through those, you have to ask nicely.
  • -s, --source — run in "source mode" to scan a policy source repository that is designed to compile into a full system policy. main character mode honestly 🫶
  • -S, --summary — display a summary of issues found after running the analysis. the lil recap at the end, chef's kiss.
  • --summary-only — only display a summary of issues found after running the analysis. do not show the individual findings. implies -S. sometimes you just want the tea, not the whole transcript 🍓
  • -r, --recursive — scan recursively and check all SELinux policy files found. go deep, bestie 🧚
  • -v, --verbose — enable verbose output. she will talk. a lot. we love that for her.
  • -V, --version — show version information and exit. quick lil hello then she's gone 💨

🌈 REPORTING_BUGS 🌈

found a bug? not the vibe. report bugs at https://github.com/SELinuxProject/selint/issues — the maintainers want to hear from you fr fr 🙏

⭐ AUTHOR ⭐

Daniel Burgener <Daniel.Burgener@microsoft.com> — the actual legend behind all this 👑

and that's the whole page bestie!! if you made it this far you're officially a SELinux policy girlie now, no going back 💖

SELint 1.5.1 — February 2025 — from the SELINT(1) era. slay, and go lint something 🎀✨🦋

📦 where this page comes from