1SECILC(8)                    SELinux CIL Compiler                    SECILC(8)
2
3
4

NAME

6       secilc - invoke the SELinux Common Intermediate Language (CIL) Compiler
7

SYNOPSIS

9       secilc [OPTION...] file
10

DESCRIPTION

12       secilc invokes the CIL compiler with the specified arguments to build a
13       kernel binary policy. A file_contexts file will also be built as
14       described in the FILE FORMAT section of file_contexts(5).
15

OPTIONS

17       -o, --output=<file>
18           Write binary policy to file (default: policy.version)
19
20       -f, --filecontext=<file>
21           Write file contexts to file (default: file_contexts)
22
23       -t, --target=<type>
24           Specify target architecture. May be selinux or xen (default:
25           selinux)
26
27       -M, --mls true|false
28           Build an mls policy. Must be true or false. This will override the
29           (mls boolean) statement if present in the policy.
30
31       -c, --policyvers=<version>
32           Build a binary policy with a given version (default: depends on the
33           systems SELinux policy version, see sestatus(8))
34
35       -U, --handle-unknown=<action>
36           How to handle unknown classes or permissions. May be deny, allow,
37           or reject (default: deny). This will override the (handleunknown
38           action) statement if present in the policy.
39
40       -D, --disable-dontaudit
41           Do not add dontaudit rules to the binary policy.
42
43       -P, --preserve-tunables
44           Treat tunables as booleans.
45
46       -Q, --qualified-names
47           Allow names containing dots (qualified names). Blocks,
48           blockinherits, blockabstracts, and in-statements will not be
49           allowed.
50
51       -m, --multiple-decls
52           Allow some statements to be re-declared.
53
54       -N, --disable-neverallow
55           Do not check neverallow rules.
56
57       -G, --expand-generated
58           Expand and remove auto-generated attributes
59
60       -X, --attrs-size <size>
61           Expand type attributes with fewer than <SIZE> members.
62
63       -O, --optimize
64           Optimize final policy (remove redundant rules).
65
66       -v, --verbose
67           Increment verbosity level.
68
69       -h, --help
70           Display usage information.
71

SEE ALSO

73       file_contexts(5), sestatus(8)
74
75       HTML documentation describing the CIL language statements is available
76       starting with docs/html/index.html.
77
78       PDF documentation describing the CIL language statements is available
79       at: docs/pdf/CIL_Reference_Guide.pdf.
80
81       There is a CIL Design Wiki at:
82       http://github.com/SELinuxProject/cil/wiki that describes the goals and
83       features of the CIL language.
84

AUTHOR

86       Richard Haines
87
88
89
90secilc                            07/22/2023                         SECILC(8)
Impressum