semanage-module(8)

💖 semanage-module — the SELinux module manager, bestie edition 💖

okay so real talk, this is semanage-module from section 8 of the manual (the admin-commands girlies), and it is literally the tool that handles your SELinux Policy modules. she installs, removes, disables, enables, lists — the whole glow-up. let's get into it 🎀

---

✨ NAME ✨

semanage-module — SELinux Policy Management module mapping tool 🌸

---

✨ SYNOPSIS ✨

semanage module [-h] [-n] [-N] [-S STORE] (-a | -r | -e | -d | --extract
| --list [-C] | --deleteall) [module_name]

---

✨ DESCRIPTION ✨

so semanage is the vibe for configuring certain elements of SELinux policy without needing to modify or recompile anything from policy sources. no cap, that's the whole point. 💅

and semanage module specifically? she installs, removes, disables, or enables SELinux Policy modules. that's her job. that's her moment. periodt. 👑

---

✨ OPTIONS ✨

• -h, --help — shows this help message and then dips. exit. bye. 👋
• -n, --noheading — when you're listing the specified object type, this says no heading for you. just the goods, no title card. 🙈
• -N, --noreload — do not reload policy after commit. lowkey convenient, highkey something to be aware of. ⚠️
• -S STORE, --store STORE — pick an alternate SELinux Policy Store to manage. switching stores like switching playlists. 🎧
• -a, --add — install the specified module. and she accepts both binary policy files (.pp) and CIL source files. versatile icon. 💖
• -r, --remove — remove the specified module. she's gone, bestie. 💀
• -D, --deleteall — remove all local customizations related to modules. like a factory reset but specifically for your module customizations. dramatic but necessary sometimes. 😭
• -d --disable — disable the specified module. not deleted, just napping. 😴
• -e --enable — enable the specified module. she's back and she's thriving. ✨
• -E, --extract — extract customizable commands, for use within a transaction. very "pull the receipts so you can work with them later" energy. 🧾
• -l, --list — list records of the specified object type. the inventory check. 🗂️
• -C, --locallist — list local customizations. just the stuff you changed. main character energy only. 👑

---

✨ EXAMPLE ✨

List all modules

# semanage module -l

Disable unconfined module

# semanage module --disable unconfined

Install custom apache policy module (same as #semodule -i myapache.pp)

# semanage module -a myapache.pp

---

✨ SEE ALSO ✨

selinux(8), semanage(8), semodule(8) — the whole friend group fr fr 🫶

---

✨ AUTHOR ✨

This man page was written by Daniel Walsh <dwalsh@redhat.com>. king behavior, we love to see it. 👑

---

okay that's the whole page bestie, you're officially a semanage-module girlie now 💅✨ this version is dated 20130617 and lives under semanage-module(8) in the manual — go forth and manage your modules responsibly 🌈🎀🦋