TrumanWong

seinfo

Query how many related rules the SELinux policy provides

Supplementary instructions

The seinfo command is used to query how many relevant rules the SELinux policy provides. Whether a subject process can read the target file resources focuses on the SELinux policy and the rules within the policy, and then passes the rules. Define the security context to handle each target file, especially the "type" part. SELinux policy and rule management related commands: seinfo command, sesearch command, getsebool command, setsebool command, semanage command.

grammar

seinfo (option)

Options

-A: Lists all information such as SELinux status, rule Boolean values, identification, roles, types, etc.
-t: List all types of SELinux.
-r: List the types of all roles in SELinux.
-u: List all identification (user) types of SELinux.
-b: List all rule types (Boolean value).

Example

List rules related to httpd:

seinfo -b | grep httpd