Dan Walsh | 1925e1e | 2013-10-11 08:34:44 -0400 | [diff] [blame] | 1 | .TH "semanage-node" "8" "20130617" "" "" |
| 2 | .SH "NAME" |
Laurent Bigonville | 2e93833 | 2013-11-06 13:24:01 +0100 | [diff] [blame] | 3 | .B semanage\-node \- SELinux Policy Management node mapping tool |
Dan Walsh | 1925e1e | 2013-10-11 08:34:44 -0400 | [diff] [blame] | 4 | .SH "SYNOPSIS" |
Petr Lautrbach | 03e87ff | 2016-06-29 14:05:42 +0200 | [diff] [blame] | 5 | .B semanage node [\-h] [\-n] [\-N] [\-S STORE] [ \-\-add \-M NETMASK \-p PROTOCOL \-t TYPE \-r RANGE node | \-\-delete \-M NETMASK \-p PROTOCOL node | \-\-deleteall | \-\-extract | \-\-list [\-C] | \-\-modify \-M NETMASK \-p PROTOCOL \-t TYPE \-r RANGE node ] |
Dan Walsh | 1925e1e | 2013-10-11 08:34:44 -0400 | [diff] [blame] | 6 | |
| 7 | .SH "DESCRIPTION" |
| 8 | semanage is used to configure certain elements of |
| 9 | SELinux policy without requiring modification to or recompilation |
| 10 | from policy sources. semanage controls the ipaddress to node type definitions. |
| 11 | |
| 12 | .SH "OPTIONS" |
| 13 | .TP |
| 14 | .I \-h, \-\-help |
| 15 | show this help message and exit |
| 16 | .TP |
| 17 | .I \-n, \-\-noheading |
| 18 | Do not print heading when listing the specified object type |
| 19 | .TP |
| 20 | .I \-N, \-\-noreload |
| 21 | Do not reload policy after commit |
| 22 | .TP |
| 23 | .I \-S STORE, \-\-store STORE |
| 24 | Select an alternate SELinux Policy Store to manage |
| 25 | .TP |
| 26 | .I \-C, \-\-locallist |
| 27 | List local customizations |
| 28 | .TP |
| 29 | .I \-a, \-\-add |
| 30 | Add a record of the specified object type |
| 31 | .TP |
| 32 | .I \-d, \-\-delete |
| 33 | Delete a record of the specified object type |
| 34 | .TP |
| 35 | .I \-m, \-\-modify |
| 36 | Modify a record of the specified object type |
| 37 | .TP |
| 38 | .I \-l, \-\-list |
| 39 | List records of the specified object type |
| 40 | .TP |
| 41 | .I \-E, \-\-extract |
| 42 | Extract customizable commands, for use within a transaction |
| 43 | .TP |
| 44 | .I \-D, \-\-deleteall |
| 45 | Remove all local customizations |
| 46 | .TP |
| 47 | .I \-M NETMASK, \-\-netmask NETMASK |
| 48 | Network Mask |
| 49 | .TP |
| 50 | .I \-t TYPE, \-\-type TYPE |
| 51 | SELinux type for the object |
| 52 | .TP |
| 53 | .I \-r RANGE, \-\-range RANGE |
| 54 | MLS/MCS Security Range (MLS/MCS Systems only) SELinux Range for SELinux login mapping defaults to the SELinux user record range. SELinux Range for SELinux user defaults to s0. |
| 55 | .TP |
| 56 | .I \-p PROTO, \-\-proto PROTO |
| 57 | |
| 58 | Protocol for the specified port (tcp|udp) or internet protocol version for the specified node (ipv4|ipv6). |