SEMODULE_PACKAGE(8)
β¨ semodule_package β the System Manager's Manual glow-up β¨
okay bestie, gather round, because this is semodule_package(8) and she is literally the girl who wraps your policy module up all pretty so the system will actually accept it π
π NAME π
semodule_package β Create a SELinux policy module package.
like. that's the whole job. she makes packages. periodt.
π¦ SYNOPSIS π¦
semodule_package -o <output file> -m <module> [-f <file contexts>]
πΈ DESCRIPTION πΈ
so semodule_package is THE tool for making a SELinux policy module package. you feed her a binary policy module, and optionally some other lil extras like file contexts, and she boxes it all up π
she packages binary policy modules that were made by checkmodule. and then? the policy package she spits out can be installed via semodule. that's the pipeline, bestie. that's the vibe. π«Ά
β EXAMPLE β
# Build a policy package for a base module.
$ semodule_package -o base.pp -m base.mod -f file_contexts
# Build a policy package for a httpd module.
$ semodule_package -o httpd.pp -m httpd.mod -f httpd.fc
# Build a policy package for local TE rules and no file contexts.
$ semodule_package -o local.pp -m local.mod
see how the third one has no -f? that's her being flexible. no file contexts, no problem. icon behavior honestly. π
π OPTIONS π
-o,--outfile<output file> β the policy module package file that this tool generates. this is the main character output. she's the one you're here for π-s,--seuser<seuser file> β anseuserfile to be included in the package. pop it in, bestie.-u,--user_extra<user extra file> β auser_extrafile to be included in the package. yes, also goes in the package. we love a package with layers β¨-m,--module<Module file> β the policy module file to be included in the package. this is kinda the whole point tbh π₯-f,--fc<File context file> β the file contexts file for the module. and listen β it's optional. no pressure, no cap.-n,--nc<netfilter context file> β a netfilter context file to be included in the package. netfilter girlies, this one's for you π-h,--helpβ show the help message. when in doubt, ask her directly π
π SEE ALSO π
checkmodule(8), semodule(8), semodule_unpackage(8)
go read those too, iykyk π¦
π AUTHORS π
this manual page was written by Dan Walsh <dwalsh@redhat.com>. the program was written by Karl MacMillan <kmacmillan@tresys.com>
ok that's the whole page, bestie!! she's from Security Enhanced Linux, dated Nov 2005, and she's still serving looks. mwah π go build something iconic πβ¨
π¦ where this page comes from
- alpine 3.24: semodule-utils-doc 3.10-r0 Β· GPL-2.0-only
- centos-stream 10: policycoreutils 3.11-1.el10 Β· GPL-2.0-or-later
- centos-stream 9: policycoreutils 3.6-9.el9 Β· GPL-2.0-or-later
- debian trixie: semodule-utils 3.8.1-1
- fedora 43: policycoreutils 3.9-5.fc43 Β· GPL-2.0-or-later
- fedora 43: policycoreutils 3.9-7.fc43 Β· GPL-2.0-or-later
- fedora 44: policycoreutils 3.10-1.fc44 Β· GPL-2.0-or-later
- fedora 44: policycoreutils 3.11-2.fc44 Β· GPL-2.0-or-later
- nixos 26.05: semodule-utils 3.10
- nixpkgs unstable: semodule-utils 3.11
- opensuse-leap 16.0: policycoreutils 3.8.1-160000.5.1 Β· GPL-2.0-or-later
- opensuse-leap 16.0: policycoreutils 3.8.1-160000.5.1 Β· GPL-2.0-or-later
- opensuse-leap 16.0: policycoreutils 3.8.1-160000.5.1 Β· GPL-2.0-or-later
- opensuse-leap 16.0: policycoreutils 3.8.1-160000.5.1 Β· GPL-2.0-or-later
- ubuntu questing: semodule-utils 3.8.1-1
- ubuntu resolute: semodule-utils 3.9-1
- ubuntu stonking: semodule-utils 3.11-1
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms