Detailed explanation of seinfo command

Introduction

The seinfo command is used to query how many relevant rules the SELinux policy provides. Whether a subject process can read the target file resources focuses on the SELinux policy and the rules in the policy, and then passes the The definition of rules handles the security context of each target file, especially the "type" part. SELinux policy and rule management related commands: seinfo command, sesearch command, getsebool command, setsebool command, semanage command. Let us explain in detail how to use the seinfo command.

grammar

seinfo（选项）

Options

-A：列出SELinux的状态、规则布尔值、身份识别、角色、类型等所有信息。 
-t：列出SELinux所有类型(type)的种类。 
-r：列出SELinux所有角色(role)的种类。 
-u：列出SELinux所有身份识别(user)的种类。 
-b：列出所有规则的种类（布尔值）。

Example List rules related to httpd:

seinfo -b | grep httpd

The above is the detailed content of Detailed explanation of seinfo command. For more information, please follow other related articles on the PHP Chinese website!