.\" Automatically generated by Pod::Man 2.22 (Pod::Simple 3.13) .\" .\" Standard preamble: .\" ======================================================================== .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Vb \" Begin verbatim text .ft CW .nf .ne \\$1 .. .de Ve \" End verbatim text .ft R .fi .. .\" Set up some character translations and predefined strings. \*(-- will .\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left .\" double quote, and \*(R" will give a right double quote. \*(C+ will .\" give a nicer C++. Capital omega is used to do unbreakable dashes and .\" therefore won't be available. \*(C` and \*(C' expand to `' in nroff, .\" nothing in troff, for use with C<>. .tr \(*W- .ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p' .ie n \{\ . ds -- \(*W- . ds PI pi . if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch . if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\" diablo 12 pitch . ds L" "" . ds R" "" . ds C` "" . ds C' "" 'br\} .el\{\ . ds -- \|\(em\| . ds PI \(*p . ds L" `` . ds R" '' 'br\} .\" .\" Escape single quotes in literal strings from groff's Unicode transform. .ie \n(.g .ds Aq \(aq .el .ds Aq ' .\" .\" If the F register is turned on, we'll generate index entries on stderr for .\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index .\" entries marked with X<> in POD. Of course, you'll have to process the .\" output yourself in some meaningful fashion. .ie \nF \{\ . de IX . tm Index:\\$1\t\\n%\t"\\$2" .. . nr % 0 . rr F .\} .el \{\ . de IX .. .\} .\" .\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2). .\" Fear. Run. Save yourself. No user-serviceable parts. . \" fudge factors for nroff and troff .if n \{\ . ds #H 0 . ds #V .8m . ds #F .3m . ds #[ \f1 . ds #] \fP .\} .if t \{\ . ds #H ((1u-(\\\\n(.fu%2u))*.13m) . ds #V .6m . ds #F 0 . ds #[ \& . ds #] \& .\} . \" simple accents for nroff and troff .if n \{\ . ds ' \& . ds ` \& . ds ^ \& . ds , \& . ds ~ ~ . ds / .\} .if t \{\ . ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h"|\\n:u" . ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u' . ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u' . ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u' . ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u' . ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u' .\} . \" troff and (daisy-wheel) nroff accents .ds : \\k:\h'-(\\n(.wu*8/10-\*(#H+.1m+\*(#F)'\v'-\*(#V'\z.\h'.2m+\*(#F'.\h'|\\n:u'\v'\*(#V' .ds 8 \h'\*(#H'\(*b\h'-\*(#H' .ds o \\k:\h'-(\\n(.wu+\w'\(de'u-\*(#H)/2u'\v'-.3n'\*(#[\z\(de\v'.3n'\h'|\\n:u'\*(#] .ds d- \h'\*(#H'\(pd\h'-\w'~'u'\v'-.25m'\f2\(hy\fP\v'.25m'\h'-\*(#H' .ds D- D\\k:\h'-\w'D'u'\v'-.11m'\z\(hy\v'.11m'\h'|\\n:u' .ds th \*(#[\v'.3m'\s+1I\s-1\v'-.3m'\h'-(\w'I'u*2/3)'\s-1o\s+1\*(#] .ds Th \*(#[\s+2I\s-2\h'-\w'I'u*3/5'\v'-.3m'o\v'.3m'\*(#] .ds ae a\h'-(\w'a'u*4/10)'e .ds Ae A\h'-(\w'A'u*4/10)'E . \" corrections for vroff .if v .ds ~ \\k:\h'-(\\n(.wu*9/10-\*(#H)'\s-2\u~\d\s+2\h'|\\n:u' .if v .ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'\v'-.4m'^\v'.4m'\h'|\\n:u' . \" for low resolution devices (crt and lpr) .if \n(.H>23 .if \n(.V>19 \ \{\ . ds : e . ds 8 ss . ds o a . ds d- d\h'-1'\(ga . ds D- D\h'-1'\(hy . ds th \o'bp' . ds Th \o'LP' . ds ae ae . ds Ae AE .\} .rm #[ #] #H #V #F C .\" ======================================================================== .\" .IX Title "INIT_POLICY 8" .TH INIT_POLICY 8 "2012-04-14" "tomoyo-tools 2.5.0" "System Administration Utilities" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l .nh .SH "NAME" init_policy \- initialize TOMOYO Linux policy .SH "SYNOPSIS" .IX Header "SYNOPSIS" \&\fBinit_policy\fR [\fIoption\fR] .SH "DESCRIPTION" .IX Header "DESCRIPTION" This program generates templates for all policy files. However, the output should be reviewed because automatically generated exception policy may contain dangerous or redundant entries. .PP This program only needs to be run once. .SH "OPTIONS" .IX Header "OPTIONS" .IP "\fB\-\-file\-only\-profile\fR" 4 .IX Item "--file-only-profile" Create profiles with only file-related functionality enabled. .IP "\fB\-\-full\-profile\fR" 4 .IX Item "--full-profile" Create profiles with all functionality enabled. [default] .IP "\fB\-\-use_profile=\fR\fIinteger\fR" 4 .IX Item "--use_profile=integer" Set the default profile number for the \*(L"\*(R" domain to the specified integer, which must be between 0 and 255. [default=0] .IP "\fB\-\-use_group=\fR\fIinteger\fR" 4 .IX Item "--use_group=integer" Set the default group number for the \*(L"\*(R" domain to the specified integer, which must be between 0 and 255. [default=0] .IP "\fB\-\-max_audit_log=\fR\fIinteger\fR" 4 .IX Item "--max_audit_log=integer" Set the default maximal audit log entries that the kernel will spool in the \fI/sys/kernel/security/tomoyo/audit\fR interface. This value must be an integer, and can be set to 0 if audit logs are not required. Maximum memory used can also be controlled via the \fI/sys/kernel/security/tomoyo/stat\fR interface. [default=1024] .IP "\fB\-\-max_learning_entry=\fR\fIinteger\fR" 4 .IX Item "--max_learning_entry=integer" Set the default maximum number of \s-1ACL\s0 entries automatically added to each domain by the kernel when using learning mode. This value must be an integer, and can be set to o if you do not need learning mode. Maximum memory used can also be controlled using the \fI/sys/kernel/security/tomoyo/stat\fR interface. .IP "\fB\-\-grant_log=\fR\fIvalue\fR" 4 .IX Item "--grant_log=value" Set whether grant logs should be audited. This value can either be \f(CW\*(C`yes\*(C'\fR or \f(CW\*(C`no\*(C'\fR. [default=no] .IP "\fB\-\-reject_log=\fR\fIvalue\fR" 4 .IX Item "--reject_log=value" Set whether reject logs should be audited. This value can either be \f(CW\*(C`yes\*(C'\fR or \f(CW\*(C`no\*(C'\fR. [default=yes] .SH "EXAMPLES" .IX Header "EXAMPLES" .IP "\fBInitialize policy\fR" 4 .IX Item "Initialize policy" .Vb 1 \& /usr/lib/tomoyo/init_policy .Ve .SH "BUGS" .IX Header "BUGS" If you find any bugs, send an email to . .SH "AUTHORS" .IX Header "AUTHORS" .IP "Tetsuo Handa " 4 .IX Item "Tetsuo Handa " Main author. .IP "Jamie Nguyen " 4 .IX Item "Jamie Nguyen " Documentation and website. .IP "Naohiro Aoto " 4 .IX Item "Naohiro Aoto " Bug fix for 64bit Gentoo. .SH "SEE ALSO" .IX Header "SEE ALSO" \&\fBtomoyo-init\fR(8) .PP See for more information.