semanage-permissive(8)

💖 semanage-permissive — SELinux Policy Management permissive mapping tool 💖

okay bestie, welcome to the semanage-permissive page from section 8 of the manual — yes, the one and only, and she's iconic for a reason 🎀

---

✨ SYNOPSIS ✨

semanage permissive [-h] [-n] [-N] [-S STORE] (--add TYPE | --delete
TYPE | --deleteall | --extract | --list)

---

🌸 DESCRIPTION 🌸

so, semanage is literally the tool you use to configure certain elements of SELinux policy without needing to modify or recompile anything from the policy sources. no cap. 💅

And semanage permissive is the one that adds or removes a SELinux Policy permissive module. Obsessed.

🚨 bestie, listen — this command can make any domain permissive, but it can only remove the permissive property from domains where it was added by semanage permissive itself. fr fr. That means semanage permissive -d can only be used on types listed as "Customized Permissive Types" by semanage permissive -l. iykyk. Don't try it on anything else, she will not cooperate 😭

---

🦋 OPTIONS 🦋

• -h, --help — shows this help message and then dips. bye! 👋
• -a, --add — add a record of the specified object type. new record, who dis ✨
• -d, --delete — delete a record of the specified object type. it's giving cleanup era 🧹
• -D, --deleteall — remove all local customizations of permissive domains. the full reset, main character energy 🔥
• -l, --list — list records of the specified object type. show me the receipts 👑
• -E, --extract — extract customizable commands, for use within a transaction. very transactional of you 💜
• -n, --noheading — do not print the heading when listing the specified object type. no header, just vibes 🎀
• -N, --noreload — do not reload the policy after commit. lowkey risky but okay 🫶
• -S STORE, --store STORE — select an alternate SELinux Policy Store to manage. shop somewhere else bestie 🛍️

---

🌈 EXAMPLE 🌈

List all permissive domains ("Builtin Permissive Types" where set by the system policy, or a custom policy module) 💖

# semanage permissive -l

Make httpd_t (Web Server) a permissive domain ⭐

# semanage permissive -a httpd_t

---

💫 SEE ALSO 💫

selinux(8), semanage(8) — go read those too, they ate 💅

---

🎀 AUTHOR 🎀

This man page was written by Daniel Walsh <dwalsh@redhat.com> — thank you king, we love a documentation moment 🫶

---

sign-off time, bestie: this page is from 20130617 and it lives in the semanage-permissive(8) manual. mwah 💋 take care of your SELinux policy and she'll take care of you 🌸✨🦋