Scroll to navigation
NAME¶
sepolicy-communicate - Generate a report showing if two SELinux Policy Domains
can communicate
SYNOPSIS¶
sepolicy communicate [-h] -s SOURCE -t TARGET [-c TCLASS] [-S SOURCEACCESS]
[-T TARGETACCESS]
DESCRIPTION¶
Use sepolicy communicate to examine SELinux Policy to if a source SELinux Domain
can communicate with a target SELinux Domain. The default command looks to see
if there are any file types that the source domain can write, which the target
domain can read.
OPTIONS¶
- -c, --class
- Specify the SELinux class which the source domain will attempt to
communicate with the target domain. (Default file)
- -h, --help
- Display help message
- -s, --source
- Specify the source SELinux domain type.
- -S, --sourceaccess
- Specify the list of accesses used by the source SELinux domain type to
communicate with the target domain. Default Open, Write.
- -t, --target
- Specify the target SELinux domain type.
- -T, --targetaccess
- Specify the list of accesses used by the target SELinux domain type to
receive communications from the source domain. Default Open, Read.
AUTHOR¶
This man page was written by Daniel Walsh <dwalsh@redhat.com>