FAGENRULES(8)

πŸ“¦
version 2.0.1 Β· 2 versions
, in centos-stream 10, centos-stream 9, fedora 43, fedora 44, ubuntu stonking

πŸ’– FAGENRULES β€” bestie edition πŸ’–

okay so. this is fagenrules(8), a System Administration Utilities girlie from section 8 of the manual, and she is literally the glue holding your fapolicyd rules together. no cap.


✨ NAME ✨

fagenrules β€” a script that merges component fapolicyd rule files. that's it, that's the whole job, and she does it flawlessly πŸ’…


πŸŽ€ SYNOPSIS πŸŽ€

fagenrules [--check] [--load]

🌸 DESCRIPTION 🌸

okay bestie, listen. fagenrules is a script that merges all the component fapolicyd rules files it can find. where do they live? in the fapolicyd rules directory, /etc/fapolicyd/rules.d. and where does the merged masterpiece go? straight into /etc/fapolicyd/compiled.rules. iconic behavior, honestly.

now here's the vibe check on which files get processed: component fapolicyd rule files must end in .rules in order to be processed. that's the entry fee. everything else chillin' in /etc/fapolicyd/rules.d gets ignored β€” not invited to the party, no hard feelings. πŸ™ˆ

the files are concatenated in order, based on their natural sort (peep the -v option of ls(1) if you wanna see how that sorting works), and then they get stripped of empty and comment (#) lines. glow-up via deletion, we love to see it.

the generated file is then validated with the daemon policy parser before installation β€” like a bouncer at the door checking IDs. and if it differs from the existing compiled rules, it gets synced and atomically renamed into /etc/fapolicyd/compiled.rules. why atomic, you ask? so the previous compiled rules remain in place if validation or installation fails. safety first, bestie, always. 🫢

and finally β€” fagenrules prints the final SHA-256 ruleset identity when the installed compiled rules are unchanged or successfully updated. she's keeping receipts. ⭐


πŸ’… OPTIONS πŸ’…

  • --check β€” test if rules have changed and need updating without overwriting compiled.rules. look but don't touch energy. πŸ‘€
  • --load β€” load old or newly built rules into the daemon. feeding the daemon, bestie. πŸ“

πŸ¦‹ FILES πŸ¦‹

/etc/fapolicyd/rules.d/
/etc/fapolicyd/compiled.rules

🌈 SEE ALSO 🌈


✨ bestie reminder: this page is brought to you by Red Hat, dated Nov 2021. periodt. πŸ’œ

πŸ‘‘ FAGENRULES(8) πŸ‘‘

πŸ“¦ where this page comes from