semanage-permissive - SELinux Policy Management permissive mapping tool
Contents
Description
semanage is used to configure certain elements of SELinux policy without requiring modification to or
recompilation from policy sources. semanagepermissive adds or removes a SELinux Policy permissive
module. Please note that this command can make any domain permissive, but can only remove the permissive
property from domains where it was added by semanage permissive ("semanage permissive -d" can only be
used on types listed as "Customized Permissive Types" by "semanage permissive -l").
Example
List all permissive domains ("Builtin Permissive Types" where set by the system policy, or a custom policy module)
# semanage permissive -l
Make httpd_t (Web Server) a permissive domain
# semanage permissive -a httpd_t
Name
semanage-permissive-SELinuxPolicyManagementpermissivemappingtool
Options
-h,--help
Show this help message and exit
-a,--add
Add a record of the specified object type
-d,--delete
Delete a record of the specified object type
-D,--deleteall
Remove all local customizations of permissive domains
-l,--list
List records of the specified object type
-E,--extract
Extract customizable commands, for use within a transaction
-n,--noheading
Do not print heading when listing the specified object type
-N,--noreload
Do not reload the policy after commit
-SSTORE,--storeSTORE
Select an alternate SELinux Policy Store to manage
See Also
selinux(8), semanage(8)
Synopsis
semanagepermissive[-h][-n][-N][-SSTORE](--addTYPE|--deleteTYPE|--deleteall|--extract|--list)
