1SECILC(8)                    SELinux CIL Compiler                    SECILC(8)
2
3
4

NAME

6       secilc - invoke the SELinux Common Intermediate Language (CIL) Compiler
7

SYNOPSIS

9       secilc [OPTION...] file
10

DESCRIPTION

12       secilc invokes the CIL compiler with the specified arguments to build a
13       kernel binary policy. A file_contexts file will also be built as
14       described in the FILE FORMAT section of file_contexts(5).
15

OPTIONS

17       -o, --output=<file>
18           Write binary policy to file (default: policy.version)
19
20       -f, --filecontext=<file>
21           Write file contexts to file (default: file_contexts)
22
23       -t, --target=<type>
24           Specify target architecture. May be selinux or xen (default:
25           selinux)
26
27       -M, --mls true|false
28           Build an mls policy. Must be true or false. This will override the
29           (mls boolean) statement if present in the policy.
30
31       -c, --policyvers=<version>
32           Build a binary policy with a given version (default: depends on the
33           systems SELinux policy version, see sestatus(8))
34
35       -U, --handle-unknown=<action>
36           How to handle unknown classes or permissions. May be deny, allow,
37           or reject (default: deny). This will override the (handleunknown
38           action) statement if present in the policy.
39
40       -D, --disable-dontaudit
41           Do not add dontaudit rules to the binary policy.
42
43       -P, --preserve-tunables
44           Treat tunables as booleans.
45
46       -m, --multiple-decls
47           Allow some statements to be re-declared.
48
49       -N, --disable-neverallow
50           Do not check neverallow rules.
51
52       -G, --expand-generated
53           Expand and remove auto-generated attributes
54
55       -X, --attrs-size <size>
56           Expand type attributes with fewer than <SIZE> members.
57
58       -O, --optimize
59           Optimize final policy (remove redundant rules).
60
61       -v, --verbose
62           Increment verbosity level.
63
64       -h, --help
65           Display usage information.
66

SEE ALSO

68       file_contexts(5), sestatus(8)
69
70       HTML documentation describing the CIL language statements is available
71       starting with docs/html/index.html.
72
73       PDF documentation describing the CIL language statements is available
74       at: docs/pdf/CIL_Reference_Guide.pdf.
75
76       There is a CIL Design Wiki at:
77       http://github.com/SELinuxProject/cil/wiki that describes the goals and
78       features of the CIL language.
79

AUTHOR

81       Richard Haines
82
83
84
85secilc                            03/08/2021                         SECILC(8)
Impressum