semanage-interface(8)

💖 semanage-interface(8) 💖

okay bestie, so this is the manual page for semanage-interface, which lives in section 8 of the manual (that's the sysadmin zone, very grown-up of you) 💅. It's the SELinux policy management network interface tool, and honestly? she's niche but she serves.

---

✨ NAME ✨

semanage-interface — the SELinux Policy Management network interface tool 🌸

---

🦋 SYNOPSIS 🦋

semanage interface [-h] [-n] [-N] [-S STORE] [ --add -t TYPE -r RANGE
interface | --delete interface | --deleteall | --extract | --list [-C] |
--modify -t TYPE -r RANGE interface ]

---

👑 DESCRIPTION 👑

semanage is the girl who configures certain elements of SELinux policy without you having to go modify or recompile stuff from the policy sources. no cap, that's the whole point. 💅

And semanage interface specifically? She controls the labels assigned to network interfaces. that's her job. that's her lane. she stays in it. 🎀

---

🌈 OPTIONS 🌈

• -h, --help — shows you this help message and then dips. exit stage left. 🫶
• -n, --noheading — do NOT print the heading when listing the specified object type. heading? gone. not invited. 🙈
• -N, --noreload — don't reload the policy after commit. she commits and walks away, no second thoughts. 💀
• -S STORE, --store STORE — pick an alternate SELinux Policy Store to manage. choose your own adventure, bestie. ✨
• -C, --locallist — list local customizations. the homegrown stuff. the bespoke. 🎀
• -a, --add — add a record of the specified object type. new entry, who dis. 💖
• -d, --delete — delete a record of the specified object type. she's gotta go. 😭
• -m, --modify — modify a record of the specified object type. glow-up arc, activated. 🔥
• -l, --list — list records of the specified object type. show me what we're working with. 👑
• -E, --extract — extract customizable commands, for use within a transaction. take the little building blocks with you. 🧚
• -D, --deleteall — remove ALL local customizations. every last one. this is not a drill, bestie, she's taking everything. 💀
• -t TYPE, --type TYPE — the SELinux type for the object. that's the vibe label. ⭐
• -r RANGE, --range RANGE — MLS/MCS Security Range (MLS/MCS Systems only). SELinux Range for SELinux login mapping defaults to the SELinux user record range. SELinux Range for SELinux user defaults to s0. yes, two whole different defaults, she contains multitudes. 💜

---

🌸 EXAMPLE 🌸

list all interface definitions, go off queen:

# semanage interface -l

assign type netif_t and MLS/MCS range s0:c0.c1023 to interface eth0 — literally giving eth0 a whole identity:

# semanage interface -a -t netif_t -r s0:c0.c1023 eth0

---

💫 SEE ALSO 💫

selinux(8), semanage(8)

---

🫶 AUTHOR 🫶

This man page was written by Daniel Walsh <dwalsh@redhat.com> — thank you for your service, king. 👑

---

and that's the whole page, bestie!! this version is the 20130617 release of semanage-interface(8) — yes, she's an elder but she still ate. mwah, go label some network interfaces responsibly 💖✨🎀