tomoyo-setprofile (8)

tomoyo-setprofile [option] number <domain> [<domain> ...]

This program assigns the specified profile number to the specified domain.

Before this program can be invoked, you must register it in /sys/kernel/security/tomoyo/manager. After initializing policy, this is usually as simple as rebooting the system.

-r

Apply the specified profile number to all domains whose domain name starts with the specified string.

number

The profile number must be an integer between 0 and 255.

<domain>

The string must be quoted or escaped to avoid misinterpretation by the shell. It only matches an exact string unless the \*(C`-r\*(C' option is specified.

Assign profile 0 to all domains

  tomoyo-setprofile -r 0 '<kernel>'

Assign profile 1 to sshd and httpd domains

tomoyo-setprofile 1 '<kernel> /usr/sbin/sshd' '<kernel> /usr/sbin/httpd'

If you find any bugs, send an email to <[email protected]>.

Tetsuo Handa <[email protected]>

Main author.

Jamie Nguyen <[email protected]>

Documentation and website.

tomoyo-pstree(8)

See <http://tomoyo.sourceforge.jp> for more information.