sepolicy-interface(8)

πŸ“¦
version 3.11 Β· 2 versions
, in centos-stream 10, centos-stream 9, debian trixie, fedora 43, fedora 44, nixos 26.05, nixpkgs unstable, opensuse-leap 16.0, ubuntu questing, ubuntu resolute, ubuntu stonking

πŸ’– sepolicy-interface(8) πŸ’–

okay bestie, so this is the sepolicy-interface page from section 8 of the manual (the sysadmin-y one, iykyk) and honestly? it's giving "let me peek inside your SELinux policy modules" and I'm obsessed. sit down, hydrate, we're doing this 🫢


✨ NAME ✨

sepolicy-interface β€” print interface information based on the installed SELinux Policy πŸ’…


✨ SYNOPSIS ✨

sepolicy interface [-h] [-c] [-v] [-f FILE] [-a | -u | -l | -i INTERFACE
[INTERFACE ... ]]

✨ DESCRIPTION ✨

so here's the vibe: you run sepolicy interface and it prints out info about the interface macros that live between domains in SELinux policy modules, the way they're used in Reference Policy. iconic, right? πŸŽ€

but listen β€” important caveat alert β€” this info comes from the installed on-disk representation of the SELinux Policy, and it may be different from the policy that's currently loaded. so like, what you see is what's on disk, not necessarily what's running. fr fr, don't get it twisted πŸ’€


✨ OPTIONS ✨

  • -a, --list_admin β€” lists every domain that has an admin interface πŸ‘‘
  • -c, --compile β€” runs a test compile of the interfaces πŸ§ͺ
  • -h, --help β€” shows you the help message, the classic rescue move πŸ™ˆ
  • -i, --interface β€” the interface(s) you want displayed 🌸
  • -l, --list β€” lists all the interfaces, every single one πŸ“œ
  • -u, --list_user β€” lists every domain that has an SELinux user role interface πŸ¦‹
  • -v, --verbose β€” gives you the extended info about the interface, including parameters and description if they're available ✨
  • -f, --file β€” the interface file you wanna explore πŸ”

✨ EXAMPLE ✨

Show description of given interface

# sepolicy interface -vi samba_rw_config

List interfaces in given interface file and show their description

# sepolicy interface -f my_policy.if -lv

Run compile test for all interfaces in given file

# sepolicy interface -f my_policy.if -lc

✨ AUTHOR ✨

This man page was written by Daniel Walsh <dwalsh@redhat.com> β€” shoutout to the author, absolute main character energy 🫢


✨ SEE ALSO ✨

sepolicy(8), selinux(8) β€” go read those next, bestie, no cap πŸ’œ


and that's the whole page!! this little guy is dated 20121222 and it's part of the sepolicy-interface(8) manual β€” mwah, slay, periodt πŸ’…βœ¨πŸŽ€

πŸ“¦ where this page comes from