semanage-module(8)

Usage

semanage {module [-h] [-n] [-N] [-S STORE] (-a | -r | -e | -d | --extract | --list [-C] | --deleteall) [module_name]}

Overview

semanage is used to configure certain elements of SELinux policy without requiring modification to or recompilation from policy sources. semanage module installs, removes, disables, or enables SELinux Policy modules.

Options

-h, --help: Show this help message and exit

-n, --noheading: Do not print heading when listing the specified object type

-N, --noreload: Do not reload policy after commit

-S STORE, --store STORE: Select an alternate SELinux Policy Store to manage

-a, --add: Install specified module. Accepts both binary policy files (.pp) and CIL source files

-r, --remove: Remove specified module

-D, --deleteall: Remove all local customizations related to modules

-d --disable: Disable specified module

-e --enable: Enable specified module

-E, --extract: Extract customizable commands, for use within a transaction

-l, --list: List records of the specified object type

-C, --locallist: List local customizations

Examples

List all modules
# semanage module -l
Disable unconfined module
# semanage module --disable unconfined
Install custom apache policy module (same as #semodule -i myapache.pp)
# semanage module -a myapache.pp

Releases

6 releases since Debian 8 (Jessie); the text changed 2 times.

--deleteall since Debian 13 (Trixie); -D since Debian 13 (Trixie).

Referred to by

semanage(8) SELinux Policy Management tool