INIT_POLICY(8)

💖 INIT_POLICY — the TOMOYO Linux policy glow-up 💖

okay so bestie, this is init_policy(8), living in the System Administration Utilities section of the manual, and it's literally the "make me a whole policy from scratch" button. no cap.

✨ NAME ✨

init_policy — initialize TOMOYO Linux policy 🎀

🌸 SYNOPSIS 🌸

init_policy [option]

🦋 DESCRIPTION 🦋

okay so here's the tea: this program generates templates for all policy files. all of them. the whole set. she's an overachiever, we love that. 💅

but babes, listen — you HAVE to review the output. the automatically generated exception policy may contain dangerous or redundant entries. do not just vibe and walk away, i'm begging. 😭

and the best part? this program only needs to be run once. one and done. periodt. ✨

👑 OPTIONS 👑

• --file-only-profile — creates profiles with only file-related functionality enabled. minimal queen energy.
• --full-profile — creates profiles with all functionality enabled. this is the [default], so if you don't say anything, this is what you get. main character behavior fr fr.
• --use_profile=integer — sets the default profile number for the "<kernel>" domain to the integer you pick. that integer has to be between 0 and 255, no exceptions bestie. [default=0]
• --use_group=integer — sets the default group number for the "<kernel>" domain to your chosen integer. again, must be between 0 and 255. [default=0]
• --max_audit_log=integer — sets the default maximum number of audit log entries that the kernel will spool in the /sys/kernel/security/tomoyo/audit interface. has to be an integer, and you can set it to 0 if you don't want audit logs at all. 🫶 the maximum memory used can also be controlled via the /sys/kernel/security/tomoyo/stat interface. [default=1024]
• --max_learning_entry=integer — sets the default maximum number of ACL entries that the kernel automatically adds to each domain when you're using learning mode. must be an integer, and can be set to o if you do not need learning mode. 🙈 (yes, write it exactly like that.) the maximum memory used can also be controlled using the /sys/kernel/security/tomoyo/stat interface.
• --grant_log=value — sets whether grant logs should be audited. this value can either be "yes" or "no". [default=no]
• --reject_log=value — sets whether reject logs should be audited. this value can either be "yes" or "no". [default=yes]

🌈 EXAMPLES 🌈

initialize policy, go off:

/usr/lib/tomoyo/init_policy

💀 BUGS 💀

if you find any bugs, send an email to <tomoyo-users-en@lists.osdn.me>. be nice about it tho, they're doing their best. 🍓

🧚 AUTHORS 🧚

• Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
  • main author. the moment. the icon. 👑
• Jamie Nguyen <jamie@tomoyolinux.co.uk>
  • documentation and website. carrying the whole docs situation. 💜
• Naohiro Aoto <naoto@namazu.org>
  • bug fix for 64bit Gentoo. we stan a legend. ✨

🎀 SEE ALSO 🎀

• tomoyo-init(8)

see <https://tomoyo.osdn.jp> for more information. iykyk 🔥

and that's the whole page bestie!! this one's from tomoyo-tools 2.6.0, dated 2019-02-05 — a little vintage, still iconic. go run it once, review your policy, and slay responsibly 💖✨🦋