---
name: "sepolicy-network"
section: "8"
platform: "linux"
package: "policycoreutils-dev"
version: "3.8.1-2"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/sepolicy-network"
---

# sepolicy-network(8)

Examine the SELinux Policy and generate a network report

## NAME

sepolicy-network - Examine the SELinux Policy and generate a network report

## SYNOPSIS

**sepolicy network \[-h\] (-l \| -a application \[application ...\] \| -p PORT \[PORT ...\] \| -t TYPE \[TYPE ...\] \| -d DOMAIN \[DOMAIN ...\])**

## DESCRIPTION

Use **sepolicy network** to examine SELinux Policy and generate network reports.

## OPTIONS

- *-a, --application*

  Generate a report listing the ports to which the specified init application is allowed to connect and or bind

- *-d, --domain*

  Generate a report listing the ports to which the specified domain is allowed to connect and or bind

- *-l, --list*

  List all Network Port Types defined in SELinux Policy

- *-h, --help*

  Display help message

- *-t, --type*

  Generate a report listing the port numbers associate with the specified SELinux port type

- *-p, --port*

  Generate a report listing the SELinux port types associate with the specified port number

## EXAMPLES

**sepolicy network -p 22**\
 22: tcp ssh\_port\_t 22\
 22: udp reserved\_port\_t 1-511\
 22: tcp reserved\_port\_t 1-511

**sepolicy network -a /usr/sbin/sshd**\
 sshd\_t: tcp name\_connect\
\
 	111 (portmap\_port\_t)\
\
 	53 (dns\_port\_t)\
\
 	88, 750, 4444 (kerberos\_port\_t)\
\
 	9080 (ocsp\_port\_t)\
\
 	9180, 9701, 9443-9447 (pki\_ca\_port\_t)\
\
 	32768-61000 (ephemeral\_port\_t)\
\
 	all ports \< 1024 (reserved\_port\_type)\
\
 	all ports with out defined types (port\_t)\
 sshd\_t: tcp name\_bind\
\
 	22 (ssh\_port\_t)\
\
 	5900-5983, 5985-5999 (vnc\_port\_t)\
\
 	6000-6020 (xserver\_port\_t)\
\
 	32768-61000 (ephemeral\_port\_t)\
\
 	all ports \> 500 and  \< 1024 (rpc\_port\_type)\
\
 	all ports with out defined types (port\_t)\
 sshd\_t: udp name\_bind\
\
 	32768-61000 (ephemeral\_port\_t)\
\
 	all ports \> 500 and  \< 1024 (rpc\_port\_type)\
\
 	all ports with out defined types (port\_t)

## AUTHOR

This man page was written by Daniel Walsh \<dwalsh@redhat.com\>

## SEE ALSO

[sepolicy(8)](/sepolicy/8.md), [selinux(8)](/selinux/8.md), [semanage(8)](/semanage/8.md)