ccs-loadpolicy8

Usage

Overview

This program loads TOMOYO Linux's policy from files or standard input into kernel.

e

Load exception policy. ( policy_dir/exception_policy.conf => /proc/ccs/exception_policy )

d

Load domain policy. ( policy_dir/domain_policy.conf => /proc/ccs/domain_policy )

a

Load exception policy and domain policy.

p

Load profile. ( policy_dir/profile.conf => /proc/ccs/profile )

m

Load manager. ( policy_dir/manager.conf => /proc/ccs/manager )

u

Load meminfo. ( policy_dir/meminfo.conf => /proc/ccs/meminfo )

f

Erase on-memory policy before loading on-disk policy. If not specified, on-disk policy is appended to on-memory policy. This option is valid for "eda" options.

-

Read policy from stdin. Specify only one of "edpmu" option when you use this option.

policy_dir

Load policy files from policy_dir directory. Must starts with / . Default is none if remote_ip:remote_port is specified, /etc/ccs/ otherwise.

remote_ip:remote_port

Send policy to agent listening at specified IP address and port number.

Examples

# echo "allow_read /proc/meminfo" | ccs-loadpolicy -e

Add "allow_read /proc/meminfo" to exception policy.

# echo "delete allow_read /proc/meminfo" | ccs-loadpolicy -e

Remove "allow_read /proc/meminfo" from exception policy.

# ( echo "<kernel>"; echo "allow_execute /sbin/init" ) | ccs-loadpolicy -d

Add "allow_execute /sbin/init" to "<kernel>" domain.

# ccs-loadpolicy df

Replace currently loaded domain policy with policy_dir/domain_policy.conf .

# ccs-loadpolicy d

Append policy_dir/domain_policy.conf into currently loaded domain policy.

# ccs-loadpolicy d /etc/ccs/192.168.1.1/ 192.168.1.1:10000

Append /etc/ccs/192.168.1.1/domain_policy.conf to 192.168.11.1:10000 .

Notes

You need to register either path to this program ( /usr/sbin/ccs-loadpolicy ) or a domain for this program in /proc/ccs/manager before invoking this program.