---
name: "sepolicy-communicate"
section: "8"
platform: "linux"
package: "policycoreutils-dev"
version: "3.8.1-2"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/sepolicy-communicate"
---

# sepolicy-communicate(8)

Generate a report showing if two SELinux Policy Domains can communicate

## NAME

sepolicy-communicate - Generate a report showing if two SELinux Policy Domains can communicate

## SYNOPSIS

**sepolicy communicate \[-h\] -s SOURCE -t TARGET \[-c TCLASS\] \[-S SOURCEACCESS\] \[-T TARGETACCESS\]**

## DESCRIPTION

Use **sepolicy communicate** to examine SELinux Policy and determine if a source SELinux Domain can communicate with a target SELinux Domain. The default command looks to see if there are any file types that the source domain can write, which the target domain can read.

## OPTIONS

- *-c, --class*

  Specify the SELinux class which the source domain will attempt to communicate with the target domain.  (Default file)

- *-h, --help*

  Display help message

- *-s, --source*

  Specify the source SELinux domain type.

- *-S, --sourceaccess*

  Specify the list of accesses used by the source SELinux domain type to communicate with the target domain. Default Open, Write.

- *-t, --target*

  Specify the target SELinux domain type.

- *-T, --targetaccess*

  Specify the list of accesses used by the target SELinux domain type to receive communications from the source domain. Default Open, Read.

## EXAMPLE

```
List types that can be used to communicate between samba daemon and apache server
# sepolicy communicate -s httpd_t -t smbd_t
Consider a type to be accessible by the source domain when it can be opened and appended to (as opposed to opened and written to)
# sepolicy communicate -s httpd_t -t smbd_t -S open,append
```

## AUTHOR

This man page was written by Daniel Walsh \<dwalsh@redhat.com\>

## SEE ALSO

[sepolicy(8)](/sepolicy/8.md), [selinux(8)](/selinux/8.md)