TOMOYO-EDITPOLICY(8)

NAME
tomoyo-editpolicy - Edit TOMOYO Linux's policy

SYNOPSIS
tomoyo-editpolicy [options]

tomoyo-editpolicy [options] <directory>

tomoyo-editpolicy [options] <remote_ip:remote_port>

DESCRIPTION
This program is the primary tool through which TOMOYO Linux policy can be managed. It uses an ncurses interface, and can be used to either edit policy saved to disk or policy currently loaded into kernel memory.

If no directory or remote address is specified, the policy loaded in kernel memory will be edited.

OPTIONS
e
    Set initial screen to be the Exception Policy Editor.

d
    Set initial screen to be the Domain Transition Editor [default].

p
    Set initial screen to be the Profile Editor.

m
    Set initial screen to be the Manager Editor.

s
    Set initial screen to be the Statistics screen.

readonly
    Start the policy editor in browse-mode. No editing is allowed.

refresh=<integer>
    Refresh the screen automatically at the interval specified in seconds.

<directory>
    Instead of editing policy loaded in the kernel, edit policy stored in the <directory>/policy/current/ directory.

<remote_ip:remote_port>
    Instead of editing policy loaded in the kernel, edit policy via an agent waiting at port <remote_port> on IP address <remote_ip>.

EXAMPLES
Start the policy editor:
tomoyo-editpolicy

Edit policy stored in the "/etc/tomoyo/192.168.1.1/" directory:
tomoyo-editpolicy /etc/tomoyo/192.168.1.1/

Edit policy via an agent connecting to 192.168.1.1 at port 10000:
tomoyo-editpolicy 192.168.1.1:10000

Usage with images are available at http://tomoyo.sourceforge.jp/1.8/tool-editpolicy.html

NOTES
Before this program can be invoked, it must be registered in /sys/kernel/security/tomoyo/manager. After initializing policy, this is usually as simple as rebooting the system.

BUGS
If there are any bugs, send an email with as much detail as possible to tomoyo-users-en@lists.sourceforge.jp

AUTHORS

Main authors:

    • Tetsuo Handa <penguin-kernel AT I-love.SAKURA.ne.jp>

Other contributers:

    • Jamie Nguyen <jamie AT tomoyolinux.co.uk>

    Man pages, documentation and website.

    • Yoshihiro Kusuno <yocto AT users.sourceforge.jp>

    Line coloring feature.

SEE ALSO
tomoyo-loadpolicy(8), tomoyo-editpolicy-agent(8)

See http://tomoyo.sourceforge.jp/ for more information.