logo
Free, unlimited AI code reviews that run on commit
git-lrc git-lrc GitHub Install Now We'd appreciate a star git-lrc - Free, unlimited AI code reviews that run on commit | Product Hunt git-lrc - Free, unlimited AI code reviews that run on commit | Product Hunt

tomoyo-editpolicy - policy editor for TOMOYO Linux

Authors

       Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
           Main author.

       Jamie Nguyen <jamie@tomoyolinux.co.uk>
           Documentation and website.

       Yoshihiro Kusuno <yocto@users.sourceforge.jp>
           Line coloring feature.

Bugs

       If you find any bugs, send an email to <tomoyo-users-en@lists.osdn.me>.

Description

       This program is the primary tool for policy management. It provides an ncurses interface for editing
       either policy saved to disk, or policy currently loaded into kernel memory.

       If no directory or remote address is specified, the policy loaded in kernel memory will be edited.

       Before this program can be invoked, you must register it in /sys/kernel/security/tomoyo/manager. After
       initializing policy, this is usually as simple as rebooting the system.

Examples

Startthepolicyeditor
             tomoyo-editpolicy

       Editpolicystoredinthe"/etc/tomoyo/192.168.1.1/policy/current"directory
             tomoyo-editpolicy /etc/tomoyo/192.168.1.1/

       Editpolicyviaanagentconnectingto192.168.1.1atport10000
             tomoyo-editpolicy 192.168.1.1:10000

       A usage guide with screenshots is available at <https://tomoyo.osdn.jp/2.5/tool-editpolicy.html>.

Name

       tomoyo-editpolicy - policy editor for TOMOYO Linux

Options

e   Set initial screen to be the Exception Policy Editor.

       d   Set initial screen to be the Domain Transition Editor [default].

       p   Set initial screen to be the Profile Editor.

       m   Set initial screen to be the Manager Editor.

       s   Set initial screen to be the Statistics.

       n   Set initial screen to be the Namespace Selector.

       readonly
           Start the policy editor in browse-only mode. No editing is allowed.

       refresh=integer
           Refresh the screen automatically at the interval specified in seconds.

       directory
           Edit policy stored in the directory/policy/current/ directory, instead of the policy loaded in kernel
           memory. This must be the full path to the directory.

       remote_ip:remote_port
           Edit policy on a remote system via an agent waiting at port remote_port on IP address remote_ip.

       <namespace>
           Set initial namespace to be the <namespace> namespace [default="<kernel>"].

See Also

tomoyo-loadpolicy(8), tomoyo-editpolicy-agent(8)

       See <https://tomoyo.osdn.jp> for more information.

tomoyo-tools 2.6.0                                 2019-02-05                               TOMOYO-EDITPOLICY(8)

Synopsis

tomoyo-editpolicy [options]

       tomoyo-editpolicy [options] [directory]

       tomoyo-editpolicy [options] [remote_ip:remote_port]

See Also