checkmodule man page on Scientific

Man page or keyword search:  
man Server   26626 pages
apropos Keyword Search (all sections)
Output format
Scientific logo
[printable version]

CHECKMODULE(8)							CHECKMODULE(8)

NAME
       checkmodule - SELinux policy module compiler

SYNOPSIS
       checkmodule  [-h]  [-b]	[-m]  [-M]  [-U handle_unknown ] [-V] [-o out‐
       put_file] [input_file]

DESCRIPTION
       This manual page describes the checkmodule command.

       checkmodule is a program that checks and compiles  a  SELinux  security
       policy  module  into a binary representation.  It can generate either a
       base policy module (default) or a non-base policy module	 (-m  option);
       typically, you would build a non-base policy module to add to an exist‐
       ing module store that already has a base module provided	 by  the  base
       policy.	 Use semodule_package to combine this module with its optional
       file contexts to create a policy package,  and  then  use  semodule  to
       install the module package into the module store and load the resulting
       policy.

OPTIONS
       -b,--binary
	      Read an existing binary policy module file rather than a	source
	      policy module file.  This option is a development/debugging aid.

       -h,--help
	      Print usage.

       -m     Generate a non-base policy module.

       -M,--mls
	      Enable  the MLS/MCS support when checking and compiling the pol‐
	      icy module.

       -V,--version
	       Show policy versions created by this program

       -o,--output filename
	      Write a binary policy module file	 to  the  specified  filename.
	      Otherwise,  checkmodule will only check the syntax of the module
	      source file and will not generate a binary module at all.

       -U,--handle-unknown <action>
	      Specify how the kernel should handle unknown classes or  permis‐
	      sions (deny, allow or reject).

EXAMPLE
       # Build a MLS/MCS-enabled non-base policy module.
       $ checkmodule -M -m httpd.te -o httpd.mod

SEE ALSO
       semodule(8),	semodule_package(8)	SELinux	   documentation    at
       http://www.nsa.gov/selinux, especially "Configuring  the	 SELinux  Pol‐
       icy".

AUTHOR
       This  manual  page  was copied from the checkpolicy man page written by
       Arpad Magosanyi <mag@bunuel.tii.matav.hu>,  and	edited	by  Dan	 Walsh
       <dwalsh@redhat.com>.   The  program  was	 written  by  Stephen  Smalley
       <sds@epoch.ncsc.mil>.

								CHECKMODULE(8)
[top]

List of man pages available for Scientific

Copyright (c) for man pages and the logo by the respective OS vendor.

For those who want to learn more, the polarhome community provides shell access and support.

[legal] [privacy] [GNU] [policy] [cookies] [netiquette] [sponsors] [FAQ]
Tweet
Polarhome, production since 1999.
Member of Polarhome portal.
Based on Fawad Halim's script.
....................................................................
Vote for polarhome
Free Shell Accounts :: the biggest list on the net