xref: /aosp_15_r20/external/selinux/libsemanage/src/semanage.conf (revision 2d543d20722ada2425b5bdab9d0d1d29470e7bba)
1*2d543d20SAndroid Build Coastguard Worker# Authors: Jason Tang <[email protected]>
2*2d543d20SAndroid Build Coastguard Worker#
3*2d543d20SAndroid Build Coastguard Worker# Copyright (C) 2004-2005 Tresys Technology, LLC
4*2d543d20SAndroid Build Coastguard Worker#
5*2d543d20SAndroid Build Coastguard Worker#  This library is free software; you can redistribute it and/or
6*2d543d20SAndroid Build Coastguard Worker#  modify it under the terms of the GNU Lesser General Public
7*2d543d20SAndroid Build Coastguard Worker#  License as published by the Free Software Foundation; either
8*2d543d20SAndroid Build Coastguard Worker#  version 2.1 of the License, or (at your option) any later version.
9*2d543d20SAndroid Build Coastguard Worker#
10*2d543d20SAndroid Build Coastguard Worker#  This library is distributed in the hope that it will be useful,
11*2d543d20SAndroid Build Coastguard Worker#  but WITHOUT ANY WARRANTY; without even the implied warranty of
12*2d543d20SAndroid Build Coastguard Worker#  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
13*2d543d20SAndroid Build Coastguard Worker#  Lesser General Public License for more details.
14*2d543d20SAndroid Build Coastguard Worker#
15*2d543d20SAndroid Build Coastguard Worker#  You should have received a copy of the GNU Lesser General Public
16*2d543d20SAndroid Build Coastguard Worker#  License along with this library; if not, write to the Free Software
17*2d543d20SAndroid Build Coastguard Worker#  Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
18*2d543d20SAndroid Build Coastguard Worker#
19*2d543d20SAndroid Build Coastguard Worker# Specify how libsemanage will interact with a SELinux policy manager.
20*2d543d20SAndroid Build Coastguard Worker# The four options are:
21*2d543d20SAndroid Build Coastguard Worker#
22*2d543d20SAndroid Build Coastguard Worker#  "source"     - libsemanage manipulates a source SELinux policy
23*2d543d20SAndroid Build Coastguard Worker#  "direct"     - libsemanage will write directly to a module store.
24*2d543d20SAndroid Build Coastguard Worker#  /foo/bar     - Write by way of a policy management server, whose
25*2d543d20SAndroid Build Coastguard Worker#                 named socket is at /foo/bar.  The path must begin
26*2d543d20SAndroid Build Coastguard Worker#                 with a '/'.
27*2d543d20SAndroid Build Coastguard Worker#  example.com:4242
28*2d543d20SAndroid Build Coastguard Worker#               - Establish a TCP connection to a remote policy
29*2d543d20SAndroid Build Coastguard Worker#                 management server at example.com.  If there is a colon
30*2d543d20SAndroid Build Coastguard Worker#                 then the remainder is interpreted as a port number;
31*2d543d20SAndroid Build Coastguard Worker#                 otherwise default to port 4242.
32*2d543d20SAndroid Build Coastguard Workermodule-store = direct
33*2d543d20SAndroid Build Coastguard Worker
34*2d543d20SAndroid Build Coastguard Worker# When generating the final linked and expanded policy, by default
35*2d543d20SAndroid Build Coastguard Worker# semanage will set the policy version to POLICYDB_VERSION_MAX, as
36*2d543d20SAndroid Build Coastguard Worker# given in <sepol/policydb.h>.  Change this setting if a different
37*2d543d20SAndroid Build Coastguard Worker# version is necessary.
38*2d543d20SAndroid Build Coastguard Worker#policy-version = 19
39*2d543d20SAndroid Build Coastguard Worker
40*2d543d20SAndroid Build Coastguard Worker# By default, semanage will generate policies for the SELinux target.
41*2d543d20SAndroid Build Coastguard Worker# To build policies for Xen, uncomment the following line.
42*2d543d20SAndroid Build Coastguard Worker#target-platform = xen
43