1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
|
.TH apol 1
.SH NAME
apol \- SELinux policy analysis tool
.SH SYNOPSIS
.B apol
[OPTIONS] [POLICY ...]
.SH DESCRIPTION
.PP
.B apol
is a graphical tool that allows the user to inspect aspects of a SELinux policy.
The tool allows the user to browse policy components (types, classes, roles, users, etc.), rules (TE, RBAC, MLS), and file system contexts.
The tool also provides in depth analyses of domain transitions, information flows, and relabeling permissions.
.SH POLICY
.PP
.B
apol
supports loading a SELinux policy in one of four formats.
.IP "source"
A single text file containing policy source for versions 12 through 21. This file is usually named policy.conf.
.IP "binary"
A single file containing a monolithic kernel binary policy for versions 15 through 21. This file is usually named by version - for example, policy.20.
.IP "modular"
A list of policy packages each containing a loadable policy module. The first module listed must be a base module.
.IP "policy list"
A single text file containing all the information needed to load a policy, usually exported by SETools graphical utilities.
.PP
If a policy is not given on the command line then
.B
apol
will begin with none loaded.
.SH OPTIONS
.IP "-h, --help"
Print help information and exit.
.IP "-V, --version"
Print version information and exit.
.SH AUTHOR
This manual page was written by Jeremy A. Mowery <jmowery@tresys.com>.
.SH COPYRIGHT
Copyright(C) 2001-2007 Tresys Technology, LLC
.SH BUGS
Please report bugs via an email to setools-bugs@tresys.com.
.SH SEE ALSO
seinfo(1), sesearch(1), sechecker(1), indexcon(1)
|
