semanage-permissive - SELinux Policy Management permissive mapping tool
semanage permissive [-h] [-n] [-N] [-S STORE] (--add TYPE | --delete TYPE |
--deleteall | --extract | --list)
semanage is used to configure certain elements of SELinux policy without
requiring modification to or recompilation from policy sources. semanage
permissive adds or removes a SELinux Policy permissive module.
- -h, --help
- show this help message and exit
- -a, --add
- Add a record of the specified object type
- -d, --delete
- Delete a record of the specified object type
- -D, --deleteall
- Remove all local customizations of permissive domains
- -l, --list
- List records of the specified object type
- -E, --extract
- Extract customizable commands, for use within a
transaction
- -n, --noheading
- Do not print heading when listing the specified object
type
- -N, --noreload
- Do not reload the policy after commit
- -S STORE, --store STORE
- Select an alternate SELinux Policy Store to manage
List all permissive modules
# semanage permissive -l
Make httpd_t (Web Server) a permissive domain
# semanage permissive -a httpd_t
selinux(8),
semanage(8)
This man page was written by Daniel Walsh <
[email protected]>