semanage-ibendport(8)

💖 semanage-ibendport(8) 💖

okay bestie, pull up a chair, because we're talking about semanage-ibendport — the SELinux Policy Management ibendport mapping tool ✨ (that's section 8 of the manual, iykyk 🫶)

✨ SYNOPSIS ✨

semanage ibendport [-h] [-n] [-N] [-S STORE] [ --add -t TYPE -z
IBDEV_NAME -r RANGE port | --delete -z IBDEV_NAME port | --deleteall |
--extract | --list [-C] | --modify -t TYPE -z IBDEV_NAME -r RANGE port ]

🌸 DESCRIPTION 🌸

So here's the vibe: semanage is the tool that lets you configure certain elements of SELinux policy without having to modify or recompile anything from the policy sources. Iconic, honestly. 💅

And semanage ibendport specifically? It controls the ibendport number to ibendport type definitions. That's the whole job. She's focused, she's got main character energy, and she's not doing anything else. 🎀

💅 OPTIONS 💅

• -h, --help — shows you this help message and then dips. bye bestie 👋
• -n, --noheading — do not print the heading when you're listing the specified object type. no title card, just the content.
• -N, --noreload — do not reload the policy after commit. commit and ghost 🫥
• -S STORE, --store STORE — pick an alternate SELinux Policy Store to manage. choose your own adventure ✨
• -C, --locallist — list local customizations only. the homegrown stuff, the originals 💖
• -a, --add — add a record of the specified object type. new entry, who dis 🌈
• -d, --delete — delete a record of the specified object type. it's giving goodbye 😭
• -m, --modify — modify a record of the specified object type. glow-up time 🦋
• -l, --list — list records of the specified object type. show me everything 👑
• -E, --extract — extract customizable commands, for use within a transaction. lil grab-bag of commands, ready to go 🎁
• -D, --deleteall — remove ALL local customizations. yes, all of them. no cap, it's a full reset 💀
• -t TYPE, --type TYPE — the SELinux type for the object. tell her what she is ✨
• -r RANGE, --range RANGE — MLS/MCS Security Range (MLS/MCS Systems only). SELinux Range for SELinux login mapping defaults to the SELinux user record range. SELinux Range for SELinux user defaults to s0. keep those two defaults in your notes, bestie, they're different 📝
• -z IBDEV_NAME, --ibdev_name IBDEV_NAME — the name of the infiniband device for the port to be labeled. (ex. mlx5_0) — yes, the example is right there, use it 🌸

🌟 EXAMPLE 🌟

List all ibendport definitions:

# semanage ibendport -l
Label mlx4_0 port 2.
# semanage ibendport -a -t allowed_ibendport_t -z mlx4_0 2

see how clean that is?? list first, then add the record with -t allowed_ibendport_t, -z mlx4_0, and port 2. slay. 🔥

👀 SEE ALSO 👀

selinux(8), semanage(8) — go read your sisters' pages, they ate too 🫶

🎀 AUTHOR 🎀

This man page was written by Daniel Jurgens <danielj@mellanox.com>. thank you for your service, king 👑

k bye!! this was semanage-ibendport(8) from 20170508 — yes she's an oldie but she's still serving 💖 go label some infiniband ports, bestie, and remember: the vibe changes, the flags do not. periodt. 💅✨