1CHECKPOLICY(8)              System Manager's Manual             CHECKPOLICY(8)
2
3
4

NAME

6       checkpolicy - SELinux policy compiler
7

SYNOPSIS

9       checkpolicy  [-b]  [-C]  [-d]  [-M]  [-c  policyvers]  [-o output_file]
10       [input_file]
11

DESCRIPTION

13       This manual page describes the checkpolicy command.
14
15       checkpolicy is a program that checks and compiles  a  SELinux  security
16       policy  configuration  into  a binary representation that can be loaded
17       into the kernel.  If no input file name is specified, checkpolicy  will
18       attempt to read from policy.conf or policy, depending on whether the -b
19       flag is specified.
20
21

OPTIONS

23       -b,--binary
24              Read an existing binary policy file rather than  a  source  pol‐
25              icy.conf file.
26
27       -C,--cil
28              Write CIL policy file rather than binary policy file.
29
30       -d,--debug
31              Enter debug mode after loading the policy.
32
33       -M,--mls
34              Enable the MLS policy when checking and compiling the policy.
35
36       -o,--output filename
37              Write a binary policy file to the specified filename.
38
39       -c policyvers
40              Specify the policy version, defaults to the latest.
41
42       -t,--target
43              Specify the target platform (selinux or xen).
44
45       -U,--handle-unknown <action>
46              Specify  how the kernel should handle unknown classes or permis‐
47              sions (deny, allow or reject).
48
49       -V,--version
50              Show version information.
51
52       -h,--help
53              Show usage information.
54
55

SEE ALSO

57       SELinux  documentation  at  http://www.nsa.gov/research/selinux,  espe‐
58       cially "Configuring the SELinux Policy".
59
60
61

AUTHOR

63       This     manual     page     was    written    by    Arpad    Magosanyi
64       <mag@bunuel.tii.matav.hu>,    and    edited    by    Stephen    Smalley
65       <sds@epoch.ncsc.mil>.   The  program  was  written  by  Stephen Smalley
66       <sds@epoch.ncsc.mil>.
67
68
69
70                                                                CHECKPOLICY(8)
Impressum