sepolicy-transition(8)
π sepolicy-transition β it's giving "where can this domain go" energy
okay bestie, welcome to the sepolicy-transition(8) page, part of the sepolicy fam β¨ this one is lowkey a glow-up for your SELinux detective work and i'm obsessed.
β¨ NAME β¨
sepolicy-transition β go read the SELinux Policy and make a whole process transition report out of it π¦
πΈ SYNOPSIS πΈ
sepolicy transition [-h] -s SOURCE
sepolicy transition [-h] -s SOURCE -t TARGET
π DESCRIPTION π
okay so here's the vibe: sepolicy transition will show you every single domain that a given SELinux source domain can transition to, and yes, it includes the entrypoint too. no gatekeeping here π
and if you also hand it a target domain? it goes full main character and examines the policy for all the transition paths from the source domain to the target domain, then lists those paths out for you. it's giving β¨map of the whole journeyβ¨
π OPTIONS π
-h,--helpβ shows you the help message. the classic. the icon. always there for you π«Ά-s,--sourceβ you tell it the source SELinux domain type. this one's mandatory, bestie, no skipping π-t,--targetβ you tell it the target SELinux domain type πΈ
π₯ EXAMPLE π₯
want to list all the domain transition paths from init_t to httpd_t? say less:
# sepolicy transition -s init_t -t httpd_t
or if you just want every transition available from the samba domain β including entry points and the booleans controlling each transition β do this:
# sepolicy transition -s smbd_t
periodt. that's it. that's the whole assignment π
π AUTHOR π
this man page was written by Daniel Walsh <dwalsh@redhat.com> β shoutout to the author fr fr π
π SEE ALSO π
ngl this page is from 20121005 and it's still out here doing its thing β sepolicy-transition(8), the icon, the moment, the blueprint ππβ¨ bye bestie, go check your transitions π¦
π¦ where this page comes from
- centos-stream 10: policycoreutils-devel 3.11-1.el10 Β· GPL-2.0-or-later
- centos-stream 9: policycoreutils-devel 3.6-9.el9 Β· GPL-2.0-or-later
- centos-stream 9: policycoreutils-devel 3.6-9.el9 Β· GPL-2.0-or-later
- debian trixie: policycoreutils-dev 3.8.1-2 Β· GPL-2.0-or-later
- fedora 43: policycoreutils-devel 3.9-5.fc43 Β· GPL-2.0-or-later
- fedora 43: policycoreutils-devel 3.9-5.fc43 Β· GPL-2.0-or-later
- fedora 43: policycoreutils-devel 3.9-7.fc43 Β· GPL-2.0-or-later
- fedora 43: policycoreutils-devel 3.9-7.fc43 Β· GPL-2.0-or-later
- fedora 44: policycoreutils-devel 3.10-1.fc44 Β· GPL-2.0-or-later
- fedora 44: policycoreutils-devel 3.10-1.fc44 Β· GPL-2.0-or-later
- fedora 44: policycoreutils-devel 3.11-2.fc44 Β· GPL-2.0-or-later
- fedora 44: policycoreutils-devel 3.11-2.fc44 Β· GPL-2.0-or-later
- nixos 26.05: selinux-python 3.10
- nixpkgs unstable: selinux-python 3.10
- opensuse-leap 16.0: policycoreutils-devel 3.8.1-160000.5.1 Β· GPL-2.0-or-later
- opensuse-leap 16.0: policycoreutils-devel 3.8.1-160000.5.1 Β· GPL-2.0-or-later
- opensuse-leap 16.0: policycoreutils-devel 3.8.1-160000.5.1 Β· GPL-2.0-or-later
- opensuse-leap 16.0: policycoreutils-devel 3.8.1-160000.5.1 Β· GPL-2.0-or-later
- ubuntu questing: policycoreutils-dev 3.8.1-2
- ubuntu resolute: policycoreutils-dev 3.9-2 Β· GPL-2.0-or-later
- ubuntu stonking: policycoreutils-dev 3.11-2 Β· GPL-2.0-or-later
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms