1seinfo(1) SETools: SELinux Policy Analysis Tools seinfo(1)
2
6 seinfo - SELinux policy information tool
7
10 seinfo [OPTIONS] [EXPRESSION] [POLICY]
11
14 seinfo allows the user to query the components of a SELinux policy.
15
18 A single file containing a binary policy. This file is usually named by
19 version on Linux systems, for example, policy.30. This file is usually
20 named sepolicy on Android systems. If no policy file is provided,
21 seinfo will search for the policy running on the current system. If no
22 policy can be found, seinfo will print an error message and exit.
23
26 One or more of the following component types can be queried. If no
27 expressions are provided, policy statistics will be printed.
28 -a [ATTR], --attribute [ATTR]
30 Print a list of type attributes or, if ATTR is provided, print
31 the named attribute. With -x, print a list of types assigned to
32 each displayed attribute.
33 -b [BOOL], --bool [BOOL]
35 Print a list of Booleans or, if BOOL is provided, print the
36 named boolean. With -x, print the statement of each displayed
37 conditional boolean.
38 -c [CLASS], --class [CLASS]
40 Print a list of object classes or, if CLASS is provided, print
41 the named object class. With -x, print a list of permissions
42 for each displayed object class.
43 -r [ROLE], --role [ROLE]
45 Print a list of roles or, if NAME is provided, print the named
46 role. With -x, print the statement for each displayed role.
47 -t [TYPE], --type [TYPE]
49 Print a list of types or, if TYPE is provided, print the named
50 type. With -x, print a list of attributes which include each
51 displayed type.
52 -u [USER], --user [USER]
54 Print a list of users or, if USER is provided, print the named
55 user. With -x, print a list of statement for each displayed
56 user.
57 --category [CAT]
59 Print a list of categories or, if CAT is provided, print the
60 named category. With -x, print a list of sensitivities with
61 which each displayed category may be associated.
62 --common [COMMON]
64 Print a list of common permission sets or, if COMMON is pro‐
65 vided, print the named common. With -x, print a list of permis‐
66 sions in the set.
67 --constrain [CLASS]
69 Print a list of constraints and MLS constraints statements or,
70 if CLASS is provided, print all constraints for the named object
71 class. There is no expanded information for this component.
72 --default [CLASS]
74 Print a list of default_* statements or, if CLASS is provided,
75 print all default_* statements for the named object class.
76 There is no expanded information for this component.
77 --fs_use [FS_TYPE]
79 Print a list of fs_use_* statements or, if FS_TYPE is provided,
80 print the statement for the named filesystem type. There is no
81 expanded information for this component.
82 --genfscon [FS_TYPE]
84 Print a list of genfscon statements or, if FS_TYPE is provided,
85 print the statement for the named filesystem type. There is no
86 expanded information for this component.
87 --initialsid [NAME]
89 Print a list of initial SIDs or, if NAME is provided, print the
90 named initial SID. With -x, print the context assigned to each
91 displayed SID.
92 --netifcon [DEVICE]
94 Print a list of netif contexts or, if DEVICE is provided, print
95 the named statement for the interface. There is no expanded
96 information for this component.
97 --nodecon [ADDR]
99 Print a list of node contexts or, if ADDR is provided, print the
100 named statement for the node with address. There is no expanded
101 information for this component.
102 --permissive [TYPE]
104 Print permissive types or, if TYPE is specified, print the named
105 statement if it is permissive. There is no expanded information
106 for this component.
107 --polcap [NAME]
109 Print policy capabilities or, if NAME is specified, print the
110 named capability, if enabled. With -x, print the statement.
111 --portcon [PORTNUM[-PORTNUM]]
113 Print a list of port contexts or, if PORT or PORT range is pro‐
114 vided, print the named statement for the port/port range. There
115 is no expanded information for this component.
116 --sensitivity [SENS]
118 Print a list of sensitivities or, if SENS is provided, print the
119 named sensitivity. With -x, print the statement for each sensi‐
120 tivity.
121 --typebounds [BOUND_TYPE]
123 Print a list of typebounds statements or, if BOUND_TYPE is pro‐
124 vided, print the statement for the named bound type. There is
125 no expanded information for this component.
126 --validatetrans [CLASS]
128 Print a list of validatetrans and MLS validatetrans rules or, if
129 CLASS is provided, print all constraints for the named object
130 class. There is no expanded information for this component.
131 --all Print all components.
133
136 -x, --expand
137 Print additional details for each component matching the expres‐
138 sion. See the description of each component for the details
139 this option will provide.
140 --flat Exclude headers and indentation in output.
142 -h, --help
144 Print help information and exit.
145 --version
147 Print version information and exit.
148 -v, --verbose
150 Print additional informational messages.
151 --debug
153 Enable debugging output.
154
157 Chris PeBenito <pebenito@ieee.org>
158
161 Please report bugs via the SETools bug tracker,
162 https://github.com/SELinuxProject/setools/issues
163
166 apol(1), sediff(1), sedta(1), seinfoflow(1), sesearch(1)
167SELinux Project 2016-02-20 seinfo(1)