sesearch.1 - Online Linux Manual Page

sesearch - Online Linux Manual PageSection : 1

NAMEsesearch − SELinux policy query tool

SYNOPSISsesearch [OPTIONS] RULE_TYPE [RULE_TYPE ...] [EXPRESSION] [POLICY ...]

DESCRIPTIONsesearch allows the user to search the rules in a SELinux policy.

POLICYsesearch supports loading a SELinux policy in one of four formats. source A single text file containing policy source for versions 12 through 21. This file is usually named policy.conf. binary A single file containing a monolithic kernel binary policy for versions 15 through 21. This file is usually named by version - for example, policy.20. modular A list of policy packages each containing a loadable policy module. The first module listed must be a base module. policy list A single text file containing all the information needed to load a policy, usually exported by SETools graphical utilities. If no policy file is provided, sesearch will search for the system default policy: checking first for a source policy, next for a binary policy matching the running kernel's preferred version, and finally for the highest version that can be found. In the latter case, the policy will be downgraded to match the running system. If no policy can be found, sesearch will print an error message and exit.

RULE TYPE OPTIONSsesearch is capable of searching multiple types of rules. At least one of the following must be provided to specify the desired type(s) of rules to search. -A, --allow Search for allow rules. --neverallow Search for neverallow rules. --auditallow Search for auditallow rules. --dontaudit Search for dontaudit rules. -T, --type Search for type_transition, type_member, and type_change rules. --role_allow Search for role allow rules. --role_trans Search for role_transition rules. --range_trans Search for range_transition rules. --all Search all rule types.

EXPRESSIONSThe user may specify an expression containing values for a given field(s) in a rule. Only those fields applicable to a given rule type will be used; all other fields will be ignored. (For example, type_transition rules will ignore the permissions field.) If no expression is specified or if none of the specified fields apply to a given rule type, all rules of that type are considered to match the expression. -s NAME, --source=NAME Find rules with type/attribute NAME as their source. -t NAME, --target=NAME Find rules with type/attribute NAME as their target. --role_source=NAME Find rules with role NAME as their source. --role_target=NAME Find rules with role NAME as their target. -c NAME, --class=NAME Find rules with class NAME as their object class. -p P1[,P2,...] --perm=P1[,P2...] Find rules with at least one of the specified permissions. Multiple permissions may be specified as a comma separated list; it is recommended that this list be quoted for shells that interpret comma as a special character. -b NAME, --bool=NAME Find conditional rules with NAME in their conditional expression. This option will include rules in both the true and false lists of the conditional.

OPTIONSThe following additional options exist to modify how the search is performed and the amount of information printed for each result. -d, --direct Normally rules are matched using the type given or any of that type's attributes (or an attribute's types). This "indirect" matching also considers types used in complemented sets, the special set "*", and the special target "self". When the direct flag is given, matching is done literally. The rule must explicitly contain the given type (or attribute) for it to be returned. -R, --regex Use regular expressions to match symbol names. By default only exact string matches will be considered. -n, --linenum Print the line number for each rule. This option is ignored if using the --semantic option or if line numbers are not available for the given policy. -S, --semantic Search rules semantically instead of syntactically. This option is implied for policies for which syntactic rules are not available. -C, --show_cond Print the conditional expression and state for all conditional rules found. This option has no effect on unconditional rules. -h, --help Print help information and exit. -V, --version Print version information and exit.

AUTHORThis manual page was written by Jeremy A. Mowery <jmowery@tresys.com>.

BUGSPlease report bugs via an email to setools-bugs@tresys.com.

SEE ALSOseinfo(1), apol(1) 0

Johanes Gumabo

Data Size : 13,940 byte
man-sesearch.1Build : 2024-12-05, 20:55 :
Visitor Screen : x
Visitor Counter ( page / site ) : 2 / 204,334
Visitor ID : :
Visitor IP : 18.222.182.226 :
Visitor Provider : AMAZON-02 :
Provider Position ( lat x lon ) : 39.962500 x -83.006100 : x
Provider Accuracy Radius ( km ) : 1000 :
Provider City : Columbus :
Provider Province : Ohio , : ,
Provider Country : United States :
Provider Continent : North America :
Visitor Recorder : Version :
Visitor Recorder : Library :
Online Linux Manual Page : Version : Online Linux Manual Page - Fedora.40 - march=x86-64 - mtune=generic - 24.12.05
Online Linux Manual Page : Library : lib_c - 24.10.03 - march=x86-64 - mtune=generic - Fedora.40
Online Linux Manual Page : Library : lib_m - 24.10.03 - march=x86-64 - mtune=generic - Fedora.40
Data Base : Version : Online Linux Manual Page Database - 24.04.13 - march=x86-64 - mtune=generic - fedora-38
Data Base : Library : lib_c - 23.02.07 - march=x86-64 - mtune=generic - fedora.36

Very long time ago, I have the best tutor, Wenzel Svojanovsky . If someone knows the email address of Wenzel Svojanovsky , please send an email to johanes_gumabo@yahoo.co.id .

If error, please print screen and send to johanes_gumabo@yahoo.co.id
Under development. Support me via PayPal.