tomoyo-editpolicy - policy editor for TOMOYO Linux
Contents
Bugs
If you find any bugs, send an email to <tomoyo-users-en@lists.osdn.me>.
Description
This program is the primary tool for policy management. It provides an ncurses interface for editing
either policy saved to disk, or policy currently loaded into kernel memory.
If no directory or remote address is specified, the policy loaded in kernel memory will be edited.
Before this program can be invoked, you must register it in /sys/kernel/security/tomoyo/manager. After
initializing policy, this is usually as simple as rebooting the system.
Examples
Startthepolicyeditor
tomoyo-editpolicy
Editpolicystoredinthe"/etc/tomoyo/192.168.1.1/policy/current"directory
tomoyo-editpolicy /etc/tomoyo/192.168.1.1/
Editpolicyviaanagentconnectingto192.168.1.1atport10000
tomoyo-editpolicy 192.168.1.1:10000
A usage guide with screenshots is available at <https://tomoyo.osdn.jp/2.5/tool-editpolicy.html>.
Name
tomoyo-editpolicy - policy editor for TOMOYO Linux
Options
e Set initial screen to be the Exception Policy Editor.
d Set initial screen to be the Domain Transition Editor [default].
p Set initial screen to be the Profile Editor.
m Set initial screen to be the Manager Editor.
s Set initial screen to be the Statistics.
n Set initial screen to be the Namespace Selector.
readonly
Start the policy editor in browse-only mode. No editing is allowed.
refresh=integer
Refresh the screen automatically at the interval specified in seconds.
directory
Edit policy stored in the directory/policy/current/ directory, instead of the policy loaded in kernel
memory. This must be the full path to the directory.
remote_ip:remote_port
Edit policy on a remote system via an agent waiting at port remote_port on IP address remote_ip.
<namespace>
Set initial namespace to be the <namespace> namespace [default="<kernel>"].
See Also
tomoyo-loadpolicy(8), tomoyo-editpolicy-agent(8) See <https://tomoyo.osdn.jp> for more information. tomoyo-tools 2.6.0 2019-02-05 TOMOYO-EDITPOLICY(8)
Synopsis
tomoyo-editpolicy [options]
tomoyo-editpolicy [options] [directory]
tomoyo-editpolicy [options] [remote_ip:remote_port]
