TOMOYO-EDITPOLICY(8)

✨ TOMOYO-EDITPOLICY(8) ✨

okay bestie, welcome to tomoyo-editpolicy 💖 it lives in the System Administration Utilities corner of your system, and it's the policy editor for TOMOYO Linux. yes, THE policy editor. the main character. 👑

---

🌸 NAME 🌸

tomoyo-editpolicy — policy editor for TOMOYO Linux 🎀

---

🦋 SYNOPSIS 🦋

tomoyo-editpolicy [options]

tomoyo-editpolicy [options] [directory]

tomoyo-editpolicy [options] [remote_ip:remote_port]

---

💅 DESCRIPTION 💅

so this program is the primary tool for policy management, no cap. it hands you an ncurses interface for editing policy — either policy that's saved to disk, or policy that's currently loaded into kernel memory. both. she contains multitudes. ✨

if you don't specify a directory or a remote address, then it's the policy loaded in kernel memory that gets edited. default vibe: kernel memory. 🧠

⚠️ before this program can be invoked, you must register it in /sys/kernel/security/tomoyo/manager. after initializing policy, this is usually as simple as rebooting the system. that's it, that's the whole registration process. go touch grass, then reboot. 🙈

---

✨ OPTIONS ✨

• e — sets the initial screen to be the Exception Policy Editor.
• d — sets the initial screen to be the Domain Transition Editor [default]. this is the one you get if you say nothing, bestie.
• p — sets the initial screen to be the Profile Editor.
• m — sets the initial screen to be the Manager Editor.
• s — sets the initial screen to be the Statistics.
• n — sets the initial screen to be the Namespace Selector.
• readonly — starts the policy editor in browse-only mode. no editing is allowed. look but do not touch energy. 👀
• refresh=integer — refreshes the screen automatically at the interval specified in seconds. type the number, she'll keep the screen fresh. ⏱️
• directory — edits policy stored in the directory/policy/current/ directory, instead of the policy loaded in kernel memory. heads up: this must be the full path to the directory. no shortcuts, no relative paths, periodt. 💅
• remote_ip:remote_port — edits policy on a remote system via an agent waiting at port remote_port on IP address remote_ip. long distance relationship, but make it policy. 🌐
• <namespace> — sets the initial namespace to be the <namespace> namespace [default="<kernel>"].

---

🎀 EXAMPLES 🎀

start the policy editor, just like that, no notes:

tomoyo-editpolicy

edit policy stored in the "/etc/tomoyo/192.168.1.1/policy/current" directory:

tomoyo-editpolicy /etc/tomoyo/192.168.1.1/

edit policy via an agent connecting to 192.168.1.1 at port 10000:

tomoyo-editpolicy 192.168.1.1:10000

and a usage guide with screenshots is available at <https://tomoyo.osdn.jp/2.5/tool-editpolicy.html>. screenshots!! visual learners rise. 📸

---

💀 BUGS 💀

if you find any bugs, send an email to <tomoyo-users-en@lists.osdn.me>. not me manifesting bug-free code, but if it happens, you know where to go. 📧

---

👑 AUTHORS 👑

• Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
  • Main author. the blueprint. the blueprint-est. 🫶
• Jamie Nguyen <jamie@tomoyolinux.co.uk>
  • Documentation and website. carrying the docs so we don't have to. 📚
• Yoshihiro Kusuno <yocto@users.sourceforge.jp>
  • Line coloring feature. the aesthetic department, truly iconic. 🌈

---

🔥 SEE ALSO 🔥

• tomoyo-loadpolicy(8)
• tomoyo-editpolicy-agent(8)

see <https://tomoyo.osdn.jp> for more information. go read, bestie, iykyk. 🌟

---

and that's the whole page!! this was brought to you by tomoyo-tools 2.6.0, dated 2019-02-05 — yes she's vintage, yes she still slays. mwah 💖✨🎀