---
name: "tomoyo-editpolicy"
section: "8"
platform: "linux"
package: "tomoyo-tools"
version: "2.6.1-20210910-1+b1"
release: "Debian 12 (Bookworm)"
platforms: ["linux"]
url: "https://new.carta.tech/tomoyo-editpolicy"
---

# tomoyo-editpolicy(8)

policy editor for TOMOYO Linux

## NAME

tomoyo-editpolicy - policy editor for TOMOYO Linux

## SYNOPSIS

**tomoyo-editpolicy** \[*options*\]

**tomoyo-editpolicy** \[*options*\] \[*directory*\]

**tomoyo-editpolicy** \[*options*\] \[*remote\_ip:remote\_port*\]

## DESCRIPTION

This program is the primary tool for policy management. It provides an ncurses interface for editing either policy saved to disk, or policy currently loaded into kernel memory.

If no directory or remote address is specified, the policy loaded in kernel memory will be edited.

Before this program can be invoked, you must register it in */sys/kernel/security/tomoyo/manager*. After initializing policy, this is usually as simple as rebooting the system.

## OPTIONS

- **e**

  Set initial screen to be the Exception Policy Editor.

- **d**

  Set initial screen to be the Domain Transition Editor \[default\].

- **p**

  Set initial screen to be the Profile Editor.

- **m**

  Set initial screen to be the Manager Editor.

- **s**

  Set initial screen to be the Statistics.

- **n**

  Set initial screen to be the Namespace Selector.

- **readonly**

  Start the policy editor in browse-only mode. No editing is allowed.

- **refresh**=*integer*

  Refresh the screen automatically at the interval specified in seconds.

- *directory*

  Edit policy stored in the *directory*/policy/current/ directory, instead of the policy loaded in kernel memory. This must be the full path to the directory.

- *remote\_ip:remote\_port*

  Edit policy on a remote system via an agent waiting at port *remote\_port* on IP address *remote\_ip*.

- *\<namespace\>*

  Set initial namespace to be the *\<namespace\>* namespace \[default=`"<kernel>"`\].

## EXAMPLES

- **Start the policy editor**

  ```
    tomoyo-editpolicy
  ```

- **Edit policy stored in the "/etc/tomoyo/192.168.1.1/policy/current" directory**

  ```
    tomoyo-editpolicy /etc/tomoyo/192.168.1.1/
  ```

- **Edit policy via an agent connecting to 192.168.1.1 at port 10000**

  ```
    tomoyo-editpolicy 192.168.1.1:10000
  ```

A usage guide with screenshots is available at \<https://tomoyo.osdn.jp/2.5/tool-editpolicy.html\>.

## BUGS

If you find any bugs, send an email to \<tomoyo-users-en@lists.osdn.me\>.

## AUTHORS

- Tetsuo Handa \<penguin-kernel@I-love.SAKURA.ne.jp\>

  Main author.

- Jamie Nguyen \<jamie@tomoyolinux.co.uk\>

  Documentation and website.

- Yoshihiro Kusuno \<yocto@users.sourceforge.jp\>

  Line coloring feature.

## SEE ALSO

[**tomoyo-loadpolicy**(8)](/tomoyo-loadpolicy/8.md), [**tomoyo-editpolicy-agent**(8)](/tomoyo-editpolicy-agent/8.md)

See \<https://tomoyo.osdn.jp\> for more information.