semanage-ibpkey(8)

✨ semanage-ibpkey ✨

okay bestie, you found the semanage-ibpkey page from the semanage-ibpkey(8) manual 💖 this is the SELinux Policy Management ibpkey mapping tool, and honestly? it's giving infrastructure queen. let's get into it 🫶

---

🌸 NAME 🌸

semanage-ibpkey — the SELinux Policy Management ibpkey mapping tool ✨

---

🎀 SYNOPSIS 🎀

semanage ibpkey [-h] [-n] [-N] [-S STORE] [ --add -t TYPE -x
SUBNET_PREFIX -r RANGE ibpkey_name | ibpkey_range | --delete -x
SUBNET_PREFIX ibpkey_name | ibpkey_range | --deleteall | --extract |
--list [-C] | --modify -t TYPE -x SUBNET_PREFIX -r RANGE ibpkey_name |
ibpkey_range ]

literally read that synopsis twice, bestie. the brackets are doing the most and we respect them 💅

---

💜 DESCRIPTION 💜

So semanage is the tool you use to configure certain elements of SELinux policy without requiring modification to, or recompilation from, policy sources. no cap. no rebuild. just vibes 🦋

And semanage ibpkey specifically? it controls the ibpkey number to ibpkey type definitions ✨ that's its whole main character job.

---

🌈 OPTIONS 🌈

• -h, --help — shows this help message and exits. the classic "pls explain urself" button 🙈
• -n, --noheading — do not print the heading when listing the specified object type. minimalism, we love her 💅
• -N, --noreload — do not reload policy after commit. commit and ghost, iykyk 👑
• -S STORE, --store STORE — select an alternate SELinux Policy Store to manage 🗂️
• -C, --locallist — list local customizations. just the local ones, bestie ✨
• -a, --add — add a record of the specified object type ➕
• -d, --delete — delete a record of the specified object type 🗑️
• -m, --modify — modify a record of the specified object type 🔧
• -l, --list — list records of the specified object type 📋
• -E, --extract — extract customizable commands, for use within a transaction. very "batch it and slay" of you 🌸
• -D, --deleteall — remove all local customizations. dramatic? yes. effective? also yes 💀
• -t TYPE, --type TYPE — the SELinux type for the object 🏷️
• -r RANGE, --range RANGE — MLS/MCS Security Range (MLS/MCS Systems only). The SELinux Range for SELinux login mapping defaults to the SELinux user record range. The SELinux Range for SELinux user defaults to s0. 🔐
• -x SUBNET_PREFIX, --subnet_prefix SUBNET_PREFIX — the subnet prefix for the specified pkey or range of pkeys 🌐

---

🦋 EXAMPLE 🦋

List all ibpkey definitions — every single one, no crumbs:

# semanage ibpkey -l

Label pkey 0x8FFF (limited membership default pkey) as a default pkey type. yes, that's the whole flex:

# semanage ibpkey -a -t default_ibpkey_t -x fe80:: 0x8FFF

---

💖 SEE ALSO 💖

selinux(8), semanage(8) — go read those too, bestie, they're the supporting cast and they ate 🫶

---

👑 AUTHOR 👑

This man page was written by Daniel Jurgens <danielj@mellanox.com> — thank you for your service, king 🎀

---

and that's the whole page, no notes 💜 this icon of a document is dated 20170508, brought to you by the semanage-ibpkey(8) manual. go forth and label your pkeys, bestie ✨🌸🦋