sepolicy-communicate(8)

✨ sepolicy-communicate — the "can y'all even talk??" page ✨

okay bestie, welcome to sepolicy-communicate, part of the sepolicy manual crew 💖 this is the tool that tells you whether two SELinux Policy Domains are on speaking terms or if they're giving each other the silent treatment fr fr.

---

🌸 NAME 🌸

sepolicy-communicate — generate a report showing if two SELinux Policy Domains can communicate 🫶

---

🎀 SYNOPSIS 🎀

sepolicy communicate [-h] -s SOURCE -t TARGET [-c TCLASS] [-S
SOURCEACCESS] [-T TARGETACCESS]

---

💅 DESCRIPTION 💅

okay so here's the vibe. you run sepolicy communicate and it goes digging through SELinux Policy to figure out whether a source SELinux Domain can communicate with a target SELinux Domain. yes, we're literally playing matchmaker between domains 😭

and by default? the command checks whether there are any file types that the source domain can write that the target domain can read. that's the default love language, no cap.

---

✨ OPTIONS ✨

• -c, --class — pick the SELinux class that the source domain is gonna use to try to communicate with the target domain. (Default is file) 🍓
• -h, --help — shows you the help message, bestie. the classic escape hatch 🫶
• -s, --source — name the source SELinux domain type. who's the one sliding into DMs 👑
• -S, --sourceaccess — give the list of accesses the source SELinux domain type uses to communicate with the target domain. Default is Open, Write. 📝
• -t, --target — name the target SELinux domain type. the one receiving the message 💌
• -T, --targetaccess — give the list of accesses the target SELinux domain type uses to receive communications from the source domain. Default is Open, Read. 👀

---

🌈 EXAMPLE 🌈

list the types that can be used to communicate between the samba daemon and the apache server:

# sepolicy communicate -s httpd_t -t smbd_t

now consider a type to be accessible by the source domain when it can be opened and appended to (as opposed to opened and written to) — yes, different vibe entirely:

# sepolicy communicate -s httpd_t -t smbd_t -S open,append

---

💜 AUTHOR 💜

this man page was written by Daniel Walsh <dwalsh@redhat.com> — credit where credit is due, periodt 💅

---

🔥 SEE ALSO 🔥

sepolicy(8), selinux(8)

---

that's the whole page bestie, you ate it 💖 this little icon was dated 20121005 and it lives in the sepolicy-communicate(8) section of the manual — go forth and vibe check your domains, ily 🦋✨