semodule_expand(8)

semodule_expand8

Expand a selinux policy module package.

Usage

semodule_expand [-ahV] [-c [version]] basemodpkg outputfile

Overview

semodule_expand is a developer tool for manually expanding a base policy module package into a kernel binary policy file. This tool is not necessary for normal operation of SELinux. In normal operation, such expanding is performed internally by libsemanage in response to semodule commands. Base policy module packages can be created directly by semodule_package or by semodule_link (when linking together a set of packages into a single package).

Options

-h

show help

-V

show version

-c [version]

policy version to create

-a

Do not check assertions. This will cause the policy to not check any neverallow rules.

Releases

10 releases since Debian 4.0 (Etch); the text changed 3 times.

  1. 4.0
  2. 5.0–6.0
  3. 7–12
  4. 13

-a since Debian 7 (Wheezy); -h since Debian 13 (Trixie).