TOMOYO-INIT(8)

NAME
tomoyo-init - load TOMOYO Linux policy automatically

SYNOPSIS
tomoyo-init

DESCRIPTION
When /sbin/init starts, the kernel automatically calls this program. Policy files that have been saved to disk are subsequently loaded into kernel memory.

This program copies the following files:

    /etc/tomoyo/exception_policy.conf => /sys/kernel/security/tomoyo/exception_policy

    /etc/tomoyo/domain_policy.conf => /sys/kernel/security/tomoyo/domain_policy

    /etc/tomoyo/profile.conf => /sys/kernel/security/tomoyo/profile

    /etc/tomoyo/manager.conf => /sys/kernel/security/tomoyo/manager

    /etc/tomoyo/stat.conf => /sys/kernel/security/tomoyo/stat

If /etc/tomoyo/tomoyo-post-init exists and is executable, then it will also be executed. This is useful to additional control over what happens at startup.

EXAMPLES
Contents of "/etc/tomoyo/tomoyo-post-init" allowing non-root "demo" user to edit policy:
#! /bin/sh
echo manage_by_non_root > /sys/kernel/security/tomoyo/manager
chown -R demo /sys/kernel/security/tomoyo/

Then do the following:
chown -R demo /etc/tomoyo/

NOTES
This program will usually not need to be invoked manually.

BUGS
If there are any bugs, send an email with as much detail as possible to tomoyo-users-en@lists.sourceforge.jp

AUTHORS

Main authors:

    • Tetsuo Handa <penguin-kernel AT I-love.SAKURA.ne.jp>

Other contributers:

    • Jamie Nguyen <jamie AT tomoyolinux.co.uk>

    Man pages, documentation and website.

SEE ALSO

tomoyo-loadpolicy(8)

See http://tomoyo.sourceforge.jp/ for more information.