SEMODULE_PACKAGE(8)

πŸ“¦
version 3.11 Β· 2 versions
, in alpine 3.24, centos-stream 10, centos-stream 9, debian trixie, fedora 43, fedora 44, nixos 26.05, nixpkgs unstable, opensuse-leap 16.0, ubuntu questing, ubuntu resolute, ubuntu stonking

✨ semodule_package β€” the System Manager's Manual glow-up ✨

okay bestie, gather round, because this is semodule_package(8) and she is literally the girl who wraps your policy module up all pretty so the system will actually accept it πŸ’…


πŸŽ€ NAME πŸŽ€

semodule_package β€” Create a SELinux policy module package.

like. that's the whole job. she makes packages. periodt.


πŸ¦‹ SYNOPSIS πŸ¦‹

semodule_package -o <output file> -m <module> [-f <file contexts>]

🌸 DESCRIPTION 🌸

so semodule_package is THE tool for making a SELinux policy module package. you feed her a binary policy module, and optionally some other lil extras like file contexts, and she boxes it all up πŸ’–

she packages binary policy modules that were made by checkmodule. and then? the policy package she spits out can be installed via semodule. that's the pipeline, bestie. that's the vibe. 🫢


⭐ EXAMPLE ⭐

# Build a policy package for a base module.
$ semodule_package -o base.pp -m base.mod -f file_contexts
# Build a policy package for a httpd module.
$ semodule_package -o httpd.pp -m httpd.mod -f httpd.fc
# Build a policy package for local TE rules and no file contexts.
$ semodule_package -o local.pp -m local.mod

see how the third one has no -f? that's her being flexible. no file contexts, no problem. icon behavior honestly. πŸ‘‘


πŸ’… OPTIONS πŸ’…

  • -o, --outfile <output file> β€” the policy module package file that this tool generates. this is the main character output. she's the one you're here for πŸ’–
  • -s, --seuser <seuser file> β€” an seuser file to be included in the package. pop it in, bestie.
  • -u, --user_extra <user extra file> β€” a user_extra file to be included in the package. yes, also goes in the package. we love a package with layers ✨
  • -m, --module <Module file> β€” the policy module file to be included in the package. this is kinda the whole point tbh πŸ”₯
  • -f, --fc <File context file> β€” the file contexts file for the module. and listen β€” it's optional. no pressure, no cap.
  • -n, --nc <netfilter context file> β€” a netfilter context file to be included in the package. netfilter girlies, this one's for you 🌈
  • -h, --help β€” show the help message. when in doubt, ask her directly πŸŽ€

πŸ‘‘ SEE ALSO πŸ‘‘

checkmodule(8), semodule(8), semodule_unpackage(8)

go read those too, iykyk πŸ¦‹


πŸ’œ AUTHORS πŸ’œ

this manual page was written by Dan Walsh <dwalsh@redhat.com>. the program was written by Karl MacMillan <kmacmillan@tresys.com>


ok that's the whole page, bestie!! she's from Security Enhanced Linux, dated Nov 2005, and she's still serving looks. mwah πŸ’‹ go build something iconic πŸ“βœ¨