CmdID

CmdID / Commands

semanage

SELinux persistent policy management tool. tldr-pages

On Linux

Opens CmdID with your command. It is read in your browser and sent nowhere.

Linux

from tldr-pages, CC BY 4.0

SELinux persistent policy management tool. Some subcommands such as boolean, fcontext, port, etc. have their own usage documentation.

Set or unset a SELinux boolean. Booleans allow the administrator to customize how policy rules affect confined process types (a.k.a domains)

sudo semanage boolean --modify --on haproxy_connect_anyIdentify

Add a user-defined file context labeling rule. File contexts define what files confined domains are allowed to access

sudo semanage fcontext --add --type samba_share_t '/mnt/share(/.*)?'Identify

Add a user-defined port labeling rule. Port labels define what ports confined domains are allowed to listen on

sudo semanage port --add --type ssh_port_t --proto tcp 22000Identify

Set or unset permissive mode for a confined domain. Per-domain permissive mode allows more granular control compared to setenforce

sudo semanage permissive --add httpd_tIdentify

Output local customizations in the default store

sudo semanage export --output_file path/to/fileIdentify

Import a file generated by semanage export into local customizations (CAREFUL: may remove current customizations!)

sudo semanage import --input_file path/to/fileIdentify