sepolicy-communicate - Generate a report showing if two SELinux Policy Domains
can communicate
sepolicy communicate [-h] -s SOURCE -t TARGET [-c TCLASS] [-S SOURCEACCESS]
[-T TARGETACCESS]
Use sepolicy communicate to examine SELinux Policy to if a source SELinux Domain
can communicate with a target SELinux Domain. The default command looks to see
if there are any file types that the source domain can write, which the target
domain can read.
- -c, --class
- Specify the SELinux class which the source domain will
attempt to communicate with the target domain. (Default file)
- -h, --help
- Display help message
- -s, --source
- Specify the source SELinux domain type.
- -S, --sourceaccess
- Specify the list of accesses used by the source SELinux
domain type to communicate with the target domain. Default Open,
Write.
- -t, --target
- Specify the target SELinux domain type.
- -T, --targetaccess
- Specify the list of accesses used by the target SELinux
domain type to receive communications from the source domain. Default
Open, Read.
This man page was written by Daniel Walsh <
[email protected]>
sepolicy(8),
selinux(8)