---
name: "ccs-loadpolicy"
section: "8"
platform: "linux"
package: "tomoyo-ccstools1.7"
version: "1.7.2-20100401-3"
release: "Debian 6.0 (Squeeze)"
platforms: ["linux"]
url: "https://new.carta.tech/ccs-loadpolicy"
---

# ccs-loadpolicy(8)

Load TOMOYO Linux's policy manually

## NAME

ccs-loadpolicy - Load TOMOYO Linux's policy manually

## SYNOPSIS

**ccs-loadpolicy** \[*e*\]\[*d*\]\[*a*\]\[*f*\]\[*p*\]\[*m*\]\[*u*\] \[*{-\|policy\_dir}* \[*remote\_ip:remote\_port*\]\]

## DESCRIPTION

This program loads TOMOYO Linux's policy from files or standard input into kernel.

- e

  Load exception policy. ( policy\_dir/exception\_policy.conf =\> /proc/ccs/exception\_policy )

- d

  Load domain policy. ( policy\_dir/domain\_policy.conf =\> /proc/ccs/domain\_policy )

- a

  Load exception policy and domain policy.

- p

  Load profile. ( policy\_dir/profile.conf =\> /proc/ccs/profile )

- m

  Load manager. ( policy\_dir/manager.conf =\> /proc/ccs/manager )

- u

  Load meminfo. ( policy\_dir/meminfo.conf =\> /proc/ccs/meminfo )

- f

  Erase on-memory policy before loading on-disk policy. If not specified, on-disk policy is appended to on-memory policy. This option is valid for "eda" options.

- \-

  Read policy from stdin. Specify only one of "edpmu" option when you use this option.

- policy\_dir

  Load policy files from policy\_dir directory. Must starts with / . Default is none if remote\_ip:remote\_port is specified, /etc/ccs/ otherwise.

- remote\_ip:remote\_port

  Send policy to agent listening at specified IP address and port number.

## EXAMPLES

\# echo "allow\_read /proc/meminfo" \| ccs-loadpolicy **-e**

-

  Add "allow\_read /proc/meminfo" to exception policy.

\# echo "delete allow\_read /proc/meminfo" \| ccs-loadpolicy **-e**

-

  Remove "allow\_read /proc/meminfo" from exception policy.

\# ( echo "\<kernel\>"; echo "allow\_execute /sbin/init" ) \| ccs-loadpolicy **-d**

-

  Add "allow\_execute /sbin/init" to "\<kernel\>" domain.

\# ccs-loadpolicy df

-

  Replace currently loaded domain policy with policy\_dir/domain\_policy.conf .

\# ccs-loadpolicy d

-

  Append policy\_dir/domain\_policy.conf into currently loaded domain policy.

\# ccs-loadpolicy d /etc/ccs/192.168.1.1/ 192.168.1.1:10000

-

  Append /etc/ccs/192.168.1.1/domain\_policy.conf to 192.168.11.1:10000 .

## NOTES

 You need to register either path to this program ( /usr/sbin/ccs-loadpolicy ) or a domain for this program in /proc/ccs/manager before invoking this program.

## AUTHORS

 penguin-kernel \_at\_ I-love.SAKURA.ne.jp

## COPYRIGHT

Copyright © 2005-2010 NTT DATA CORPORATION.

This program is free software; you may redistribute it under the terms of the GNU General Public License. This program has absolutely no warranty.

## SEE ALSO

 ccs-init (8)\
  ccs-editpolicy-agent (8)