Joshua Brindle | 13cd4c8 | 2008-08-19 15:30:36 -0400 | [diff] [blame^] | 1 | .TH CHECKMODULE 8 |
| 2 | .SH NAME |
| 3 | checkmodule \- SELinux policy module compiler |
| 4 | .SH SYNOPSIS |
| 5 | .B checkmodule |
| 6 | .I "[-b] [-m] [-M] [-V] [-o output_file] [input_file]" |
| 7 | .SH "DESCRIPTION" |
| 8 | This manual page describes the |
| 9 | .BR checkmodule |
| 10 | command. |
| 11 | .PP |
| 12 | .B checkmodule |
| 13 | is a program that checks and compiles a SELinux security policy module |
| 14 | into a binary representation. It can generate either a base policy |
| 15 | module (default) or a non-base policy module (-m option); typically, |
| 16 | you would build a non-base policy module to add to an existing module |
| 17 | store that already has a base module provided by the base policy. Use |
| 18 | semodule_package to combine this module with its optional file |
| 19 | contexts to create a policy package, and then use semodule to install |
| 20 | the module package into the module store and load the resulting policy. |
| 21 | |
| 22 | .SH OPTIONS |
| 23 | .TP |
| 24 | .B \-b |
| 25 | Read an existing binary policy module file rather than a source policy |
| 26 | module file. This option is a development/debugging aid. |
| 27 | .TP |
| 28 | .B \-m |
| 29 | Generate a non-base policy module. |
| 30 | .TP |
| 31 | .B \-M |
| 32 | Enable the MLS/MCS support when checking and compiling the policy module. |
| 33 | .TP |
| 34 | .B \-V |
| 35 | Show policy versions created by this program |
| 36 | .TP |
| 37 | .B \-o filename |
| 38 | Write a binary policy module file to the specified filename. |
| 39 | Otherwise, checkmodule will only check the syntax of the module source file |
| 40 | and will not generate a binary module at all. |
| 41 | |
| 42 | .SH EXAMPLE |
| 43 | .nf |
| 44 | # Build a MLS/MCS-enabled non-base policy module. |
| 45 | $ checkmodule -M -m httpd.te -o httpd.mod |
| 46 | .fi |
| 47 | |
| 48 | .SH "SEE ALSO" |
| 49 | .B semodule(8), semodule_package(8) |
| 50 | SELinux documentation at http://www.nsa.gov/selinux, |
| 51 | especially "Configuring the SELinux Policy". |
| 52 | |
| 53 | |
| 54 | .SH AUTHOR |
| 55 | This manual page was copied from the checkpolicy man page |
| 56 | written by Arpad Magosanyi <mag@bunuel.tii.matav.hu>, |
| 57 | and edited by Dan Walsh <dwalsh@redhat.com>. |
| 58 | The program was written by Stephen Smalley <sds@epoch.ncsc.mil>. |