xref: /aosp_15_r20/external/selinux/libsemanage/src/semanage.conf (revision 2d543d20722ada2425b5bdab9d0d1d29470e7bba)
1# Authors: Jason Tang <[email protected]>
2#
3# Copyright (C) 2004-2005 Tresys Technology, LLC
4#
5#  This library is free software; you can redistribute it and/or
6#  modify it under the terms of the GNU Lesser General Public
7#  License as published by the Free Software Foundation; either
8#  version 2.1 of the License, or (at your option) any later version.
9#
10#  This library is distributed in the hope that it will be useful,
11#  but WITHOUT ANY WARRANTY; without even the implied warranty of
12#  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
13#  Lesser General Public License for more details.
14#
15#  You should have received a copy of the GNU Lesser General Public
16#  License along with this library; if not, write to the Free Software
17#  Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
18#
19# Specify how libsemanage will interact with a SELinux policy manager.
20# The four options are:
21#
22#  "source"     - libsemanage manipulates a source SELinux policy
23#  "direct"     - libsemanage will write directly to a module store.
24#  /foo/bar     - Write by way of a policy management server, whose
25#                 named socket is at /foo/bar.  The path must begin
26#                 with a '/'.
27#  example.com:4242
28#               - Establish a TCP connection to a remote policy
29#                 management server at example.com.  If there is a colon
30#                 then the remainder is interpreted as a port number;
31#                 otherwise default to port 4242.
32module-store = direct
33
34# When generating the final linked and expanded policy, by default
35# semanage will set the policy version to POLICYDB_VERSION_MAX, as
36# given in <sepol/policydb.h>.  Change this setting if a different
37# version is necessary.
38#policy-version = 19
39
40# By default, semanage will generate policies for the SELinux target.
41# To build policies for Xen, uncomment the following line.
42#target-platform = xen
43