1CHECKPOLICY(8)              System Manager's Manual             CHECKPOLICY(8)
2
3
4

NAME

6       checkpolicy - SELinux policy compiler
7

SYNOPSIS

9       checkpolicy   [-b]   [-d]   [-M]   [-c   policyvers]  [-o  output_file]
10       [input_file]
11

DESCRIPTION

13       This manual page describes the checkpolicy command.
14
15       checkpolicy is a program that checks and compiles  a  SELinux  security
16       policy  configuration  into  a binary representation that can be loaded
17       into the kernel.  If no input file name is specified, checkpolicy  will
18       attempt to read from policy.conf or policy, depending on whether the -b
19       flag is specified.
20
21

OPTIONS

23       -b     Read an existing binary policy file rather than  a  source  pol‐
24              icy.conf file.
25
26       -d     Enter debug mode after loading the policy.
27
28       -M     Enable the MLS policy when checking and compiling the policy.
29
30       -o filename
31              Write a binary policy file to the specified filename.
32
33       -c policyvers
34              Specify the policy version, defaults to the latest.
35
36

SEE ALSO

38       SELinux  documentation  at http://www.nsa.gov/selinux, especially "Con‐
39       figuring the SELinux Policy".
40
41
42

AUTHOR

44       This    manual    page    was    written     by     Arpad     Magosanyi
45       <mag@bunuel.tii.matav.hu>,    and    edited    by    Stephen    Smalley
46       <sds@epoch.ncsc.mil>.  The  program  was  written  by  Stephen  Smalley
47       <sds@epoch.ncsc.mil>.
48
49
50
51                                                                CHECKPOLICY(8)