tomoyo-setprofile(8)

tomoyo-setprofile8

Profile assignment utility for tomoyo linux

Usage

tomoyo-setprofile [option] number <domain> [<domain> ...]

Overview

This program assigns the specified profile number to the specified domain.

Before this program can be invoked, you must register it in /sys/kernel/security/tomoyo/manager. After initializing policy, this is usually as simple as rebooting the system.

Options

-r

Apply the specified profile number to all domains whose domain name starts with the specified string.

number

The profile number must be an integer between 0 and 255.

<domain>

The string must be quoted or escaped to avoid misinterpretation by the shell. It only matches an exact string unless the "-r" option is specified.

Examples

Assign profile 0 to all domains
  tomoyo-setprofile -r 0 '<kernel>'
Assign profile 1 to sshd and httpd domains
  tomoyo-setprofile 1 '<kernel> /usr/sbin/sshd' '<kernel> /usr/sbin/httpd'

Releases

7 releases since Debian 6.0 (Squeeze); the text changed 2 times.

  1. 6.0
  2. 7–10
  3. 11–12

Bugs

If you find any bugs, send an email to <[email protected]>.

Authors

Tetsuo Handa <[email protected]>

Main author.

Jamie Nguyen <[email protected]>

Documentation and website.

From tomoyo-tools 2.6.1-20210910-1+b1 in Debian 12 (Bookworm). Parsed by carta from the page's man source.