sepolicy-interface(8)
π sepolicy-interface(8) π
okay bestie, so this is the sepolicy-interface page from section 8 of the manual (the sysadmin-y one, iykyk) and honestly? it's giving "let me peek inside your SELinux policy modules" and I'm obsessed. sit down, hydrate, we're doing this π«Ά
β¨ NAME β¨
sepolicy-interface β print interface information based on the installed SELinux Policy π
β¨ SYNOPSIS β¨
sepolicy interface [-h] [-c] [-v] [-f FILE] [-a | -u | -l | -i INTERFACE
[INTERFACE ... ]]
β¨ DESCRIPTION β¨
so here's the vibe: you run sepolicy interface and it prints out info about the interface macros that live between domains in SELinux policy modules, the way they're used in Reference Policy. iconic, right? π
but listen β important caveat alert β this info comes from the installed on-disk representation of the SELinux Policy, and it may be different from the policy that's currently loaded. so like, what you see is what's on disk, not necessarily what's running. fr fr, don't get it twisted π
β¨ OPTIONS β¨
-a,--list_adminβ lists every domain that has an admin interface π-c,--compileβ runs a test compile of the interfaces π§ͺ-h,--helpβ shows you the help message, the classic rescue move π-i,--interfaceβ the interface(s) you want displayed πΈ-l,--listβ lists all the interfaces, every single one π-u,--list_userβ lists every domain that has an SELinux user role interface π¦-v,--verboseβ gives you the extended info about the interface, including parameters and description if they're available β¨-f,--fileβ the interface file you wanna explore π
β¨ EXAMPLE β¨
Show description of given interface
# sepolicy interface -vi samba_rw_config
List interfaces in given interface file and show their description
# sepolicy interface -f my_policy.if -lv
Run compile test for all interfaces in given file
# sepolicy interface -f my_policy.if -lc
β¨ AUTHOR β¨
This man page was written by Daniel Walsh <dwalsh@redhat.com> β shoutout to the author, absolute main character energy π«Ά
β¨ SEE ALSO β¨
sepolicy(8), selinux(8) β go read those next, bestie, no cap π
and that's the whole page!! this little guy is dated 20121222 and it's part of the sepolicy-interface(8) manual β mwah, slay, periodt π
β¨π
π¦ where this page comes from
- centos-stream 10: policycoreutils-devel 3.11-1.el10 Β· GPL-2.0-or-later
- centos-stream 9: policycoreutils-devel 3.6-9.el9 Β· GPL-2.0-or-later
- centos-stream 9: policycoreutils-devel 3.6-9.el9 Β· GPL-2.0-or-later
- debian trixie: policycoreutils-dev 3.8.1-2 Β· GPL-2.0-or-later
- fedora 43: policycoreutils-devel 3.9-5.fc43 Β· GPL-2.0-or-later
- fedora 43: policycoreutils-devel 3.9-5.fc43 Β· GPL-2.0-or-later
- fedora 43: policycoreutils-devel 3.9-7.fc43 Β· GPL-2.0-or-later
- fedora 43: policycoreutils-devel 3.9-7.fc43 Β· GPL-2.0-or-later
- fedora 44: policycoreutils-devel 3.10-1.fc44 Β· GPL-2.0-or-later
- fedora 44: policycoreutils-devel 3.10-1.fc44 Β· GPL-2.0-or-later
- fedora 44: policycoreutils-devel 3.11-2.fc44 Β· GPL-2.0-or-later
- fedora 44: policycoreutils-devel 3.11-2.fc44 Β· GPL-2.0-or-later
- nixos 26.05: selinux-python 3.10
- nixpkgs unstable: selinux-python 3.10
- opensuse-leap 16.0: policycoreutils-devel 3.8.1-160000.5.1 Β· GPL-2.0-or-later
- opensuse-leap 16.0: policycoreutils-devel 3.8.1-160000.5.1 Β· GPL-2.0-or-later
- opensuse-leap 16.0: policycoreutils-devel 3.8.1-160000.5.1 Β· GPL-2.0-or-later
- opensuse-leap 16.0: policycoreutils-devel 3.8.1-160000.5.1 Β· GPL-2.0-or-later
- ubuntu questing: policycoreutils-dev 3.8.1-2
- ubuntu resolute: policycoreutils-dev 3.9-2 Β· GPL-2.0-or-later
- ubuntu stonking: policycoreutils-dev 3.11-2 Β· GPL-2.0-or-later
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms