TOMOYO-INIT(8)

📦 version 2.6.1-20210910, in debian bookworm, ubuntu jammy, ubuntu noble, ubuntu questing

💖 TOMOYO-INIT 💖

okay bestie, gather round, because this is the little program that makes TOMOYO Linux load its policy automatically. no cap. it's tomoyo-init — load TOMOYO Linux policy automatically. she's giving background-support-icon energy and honestly? we stan a quiet overachiever. ✨

✨ SYNOPSIS ✨

tomoyo-init

that's it. no flags, no arguments, no drama. she simply is. 💅

🦋 DESCRIPTION 🦋

so here's the tea, fr fr: when /sbin/init starts up, the kernel itself automatically calls this program. like, you don't even have to ask — the kernel is already on it. main character energy from the kernel tbh. and then all the policy files you've saved to disk get loaded right into kernel memory. slay.

here's exactly what she copies, one-for-one, no substitutions:

  • /etc/tomoyo/exception_policy.conf => /sys/kernel/security/tomoyo/exception_policy
  • /etc/tomoyo/domain_policy.conf => /sys/kernel/security/tomoyo/domain_policy
  • /etc/tomoyo/profile.conf => /sys/kernel/security/tomoyo/profile
  • /etc/tomoyo/manager.conf => /sys/kernel/security/tomoyo/manager
  • /etc/tomoyo/stat.conf => /sys/kernel/security/tomoyo/stat

and THEN — plot twist — if /etc/tomoyo/tomoyo-post-init exists and is executable, that gets executed too. 🎀 that's your little backstage pass to extra control over what happens at startup. the way that one file can change your whole boot vibe… iconic.

heads up bestie: you will not usually need to invoke this program manually. hands off, let the kernel cook. 🙈

🌸 EXAMPLES 🌸

here's the contents of "/etc/tomoyo/tomoyo-post-init" that lets the non-root "demo" user edit policy. yes, really, non-root. look at her go:

#!/bin/bash
echo manage_by_non_root > /sys/kernel/security/tomoyo/manager
chown -R demo /sys/kernel/security/tomoyo

so she flips the manager setting over to manage_by_non_root, then hands the whole /sys/kernel/security/tomoyo tree over to demo with chown -R. clean, simple, delicious. ate and left no crumbs. 🍓

💀 BUGS 💀

found a bug? not the vibe, but we need to know. send an email to <tomoyo-users-en@lists.osdn.me> and tell them everything. 🫶

👑 AUTHORS 👑

  • Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
    • Main author. the blueprint. the blueprint. 🧚
  • Jamie Nguyen <jamie@tomoyolinux.co.uk>
    • Documentation and website. carrying the words so we can all understand. 💜

🌈 SEE ALSO 🌈

and if you want more, more, more — see <https://tomoyo.osdn.jp> for more information. iykyk. ⭐

and that's the whole page, bestie! this one's from tomoyo-tools 2.6.0, dated 2019-02-05, and honestly she's aged like fine wine. now go let your kernel handle it. periodt. 💅✨

📦 where this page comes from