ccs-init(8)

ccs-init8

Load tomoyo linux's policy automatically

Usage

ccs-init

Overview

This program is automatically called to load policy from files into kernel when /sbin/init starts.

This program copies the following files.

/etc/ccs/exception_policy.conf => /proc/ccs/exception_policy

/etc/ccs/domain_policy.conf => /proc/ccs/domain_policy

/etc/ccs/profile.conf => /proc/ccs/profile

/etc/ccs/manager.conf => /proc/ccs/manager

/etc/ccs/meminfo.conf => /proc/ccs/meminfo

If /etc/ccs/ccs-post-init is an executable file, /etc/ccs/ccs-post-init is also executed. You can use /etc/ccs/ccs-post-init for additional initialization purpose. For example, you can write

#! /bin/sh

echo manage_by_non_root > /proc/ccs/manager

chown -R demo /proc/ccs/

in the /etc/ccs/ccs-post-init and chown/chmod like

chown -R demo /etc/ccs/

to allow policy management by user "demo" as well as user "root".

Examples

None.

Notes

If something went wrong, a prompt is shown so that the administrator can take action before the kernel gets panic.

You don't need to invoke this program manually.

To load policy after /sbin/init starts, use ccs-loadpolicy instead.

Releases

2 releases since Debian 5.0 (Lenny); the text changed 1 time.

  1. 5.0
  2. 6.0

Authors

penguin-kernel _at_ I-love.SAKURA.ne.jp

From tomoyo-ccstools1.7 1.7.2-20100401-3 in Debian 6.0 (Squeeze). Parsed by carta from the page's man source.