sepolicy-communicate - Generate a report showing if two SELinux Policy Domains can communicate

       This man page was written by Daniel Walsh <dwalsh@redhat.com>

       Use  sepolicycommunicate  to  examine  SELinux  Policy  and  determine  if  a source SELinux Domain can
       communicate with a target SELinux Domain.  The default command looks to see if there are any  file  types
       that the source domain can write, which the target domain can read.

       List types that can be used to communicate between samba daemon and apache server
       # sepolicy communicate -s httpd_t -t smbd_t
       Consider a type to be accessible by the source domain when it can be opened and appended to (as opposed to opened and written to)
       # sepolicy communicate -s httpd_t -t smbd_t -S open,append

       sepolicy-communicate - Generate a report showing if two SELinux Policy Domains can communicate

-c,--class
              Specify  the  SELinux  class  which  the source domain will attempt to communicate with the target
              domain.  (Default file)

       -h,--help
              Display help message

       -s,--source
              Specify the source SELinux domain type.

       -S,--sourceaccess
              Specify the list of accesses used by the source SELinux domain type to communicate with the target
              domain. Default Open, Write.

       -t,--target
              Specify the target SELinux domain type.

       -T,--targetaccess
              Specify the list of accesses used by the target SELinux domain type to receive communications from
              the source domain. Default Open, Read.

sepolicy(8), selinux(8)

                                                    20121005                             sepolicy-communicate(8)

sepolicycommunicate[-h]-sSOURCE-tTARGET[-cTCLASS][-SSOURCEACCESS][-TTARGETACCESS]