1sepolicy-communicate(8)                                sepolicy-communicate(8)
2
3
4

NAME

6       sepolicy-communicate  - Generate a report showing if two SELinux Policy
7       Domains can communicate
8
9

SYNOPSIS

11       sepolicy communicate [-h] -s SOURCE -t TARGET [-c TCLASS] [-S SOURCEAC‐
12       CESS] [-T TARGETACCESS]
13
14

DESCRIPTION

16       Use  sepolicy  communicate to examine SELinux Policy and determine if a
17       source SELinux Domain can communicate with  a  target  SELinux  Domain.
18       The  default  command looks to see if there are any file types that the
19       source domain can write, which the target domain can read.
20
21

OPTIONS

23       -c, --class
24              Specify the SELinux class which the source domain  will  attempt
25              to communicate with the target domain.  (Default file)
26
27       -h, --help
28              Display help message
29
30       -s, --source
31              Specify the source SELinux domain type.
32
33       -S, --sourceaccess
34              Specify  the  list of accesses used by the source SELinux domain
35              type to communicate with the target domain. Default Open, Write.
36
37       -t, --target
38              Specify the target SELinux domain type.
39
40       -T, --targetaccess
41              Specify the list of accesses used by the target  SELinux  domain
42              type  to  receive communications from the source domain. Default
43              Open, Read.
44
45

EXAMPLE

47       List types that can be used to communicate between samba daemon and apache server
48       # sepolicy communicate -s httpd_t -t smbd_t
49       Consider a type to be accessible by the source domain when it can be opened and appended to (as opposed to opened and written to)
50       # sepolicy communicate -s httpd_t -t smbd_t -S open,append
51
52

AUTHOR

54       This man page was written by Daniel Walsh <dwalsh@redhat.com>
55
56

SEE ALSO

58       sepolicy(8), selinux(8)
59
60
61
62                                   20121005            sepolicy-communicate(8)
Impressum