sepolicy(8)
π sepolicy β the SELinux Policy Inspection tool, bestie edition π
ok so real talk, this is sepolicy(8) from the SELinux fam, and it's literally the group chat for your installed policy. β¨
π¦ SYNOPSIS
sepolicy [-h] [-P policy_path ]
{booleans,communicate,generate,interface,manpage,network,transition}
OPTIONS
Arguments:
booleansβ pokes the SELinux policy to get you a description of the booleans. seesepolicy-boolean(8)πcommunicateβ asks the SELinux policy whether domains can talk to each other or not. seesepolicy-communicate(8)πgenerateβ cooks up an SELinux Policy module template for you. seesepolicy-generate(8)πguiβ launches the Graphical User Interface for SELinux Policy, but heads up, it needs thepolicycoreutils-guipackage. seesepolicy-gui(8)β¨interfaceβ prints out SELinux Policy interface info. seesepolicy-interface(8)πΈmanpageβ generates SELinux man pages. seesepolicy-manpage(8)πnetworkβ queries SELinux policy network info. seesepolicy-network(8)πtransitionβ asks the SELinux Policy how a source process domain can transition over to the target process domain. seesepolicy-transition(8)π¦
π DESCRIPTION
so sepolicy is a little tool set (a whole squad, honestly) that queries the SELinux policy you already have installed and then generates useful reports, man pages, or even brand new policy modules for you. no cap. π
for the options and descriptions specific to each argument, go peek at that argument's own man page. each one is its own main character. π
β¨ OPTIONS β¨
-P,--policyβ pick a different policy to analyze instead of the default. (the default is whatever policy is currently installed at/sys/fs/selinux/policy) π-h,--helpβ shows you the help message. when in doubt, bestie, ask for help. π
π AUTHOR
this man page was written by Daniel Walsh <dwalsh@redhat.com> π«Ά
π SEE ALSO
selinux(8), sepolicy-booleans(8), sepolicy-communicate(8), sepolicy-generate(8), sepolicy-gui(8), sepolicy-interface(8), sepolicy-network(8), sepolicy-manpage(8), sepolicy-transition(8) π
ok and for the little sign-off moment: this page is from version 20121005, and it's the sepolicy(8) manual page itself, so like, you're reading the source of truth rn. periodt. π
πΈπ
π¦ where this page comes from
- centos-stream 10: policycoreutils-devel 3.11-1.el10 Β· GPL-2.0-or-later
- centos-stream 9: policycoreutils-devel 3.6-9.el9 Β· GPL-2.0-or-later
- centos-stream 9: policycoreutils-devel 3.6-9.el9 Β· GPL-2.0-or-later
- debian bookworm: policycoreutils-dev 3.4-1+b2 Β· GPL-2.0-or-later
- debian trixie: policycoreutils-dev 3.8.1-2 Β· GPL-2.0-or-later
- fedora 43: policycoreutils-devel 3.9-5.fc43 Β· GPL-2.0-or-later
- fedora 43: policycoreutils-devel 3.9-5.fc43 Β· GPL-2.0-or-later
- fedora 43: policycoreutils-devel 3.9-7.fc43 Β· GPL-2.0-or-later
- fedora 43: policycoreutils-devel 3.9-7.fc43 Β· GPL-2.0-or-later
- fedora 44: policycoreutils-devel 3.10-1.fc44 Β· GPL-2.0-or-later
- fedora 44: policycoreutils-devel 3.10-1.fc44 Β· GPL-2.0-or-later
- fedora 44: policycoreutils-devel 3.11-2.fc44 Β· GPL-2.0-or-later
- fedora 44: policycoreutils-devel 3.11-2.fc44 Β· GPL-2.0-or-later
- nixos 26.05: selinux-python 3.10
- nixpkgs unstable: selinux-python 3.10
- opensuse-leap 16.0: policycoreutils-devel 3.8.1-160000.5.1 Β· GPL-2.0-or-later
- opensuse-leap 16.0: policycoreutils-devel 3.8.1-160000.5.1 Β· GPL-2.0-or-later
- opensuse-leap 16.0: policycoreutils-devel 3.8.1-160000.5.1 Β· GPL-2.0-or-later
- opensuse-leap 16.0: policycoreutils-devel 3.8.1-160000.5.1 Β· GPL-2.0-or-later
- ubuntu jammy: policycoreutils-dev 3.3-1 Β· GPL-2.0-or-later
- ubuntu noble: policycoreutils-dev 3.5-1 Β· GPL-2.0-or-later
- ubuntu questing: policycoreutils-dev 3.8.1-2
- ubuntu resolute: policycoreutils-dev 3.9-2 Β· GPL-2.0-or-later
- ubuntu stonking: policycoreutils-dev 3.11-2 Β· GPL-2.0-or-later
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms