---
name: "tomoyo-savepolicy"
section: "8"
platform: "linux"
package: "tomoyo-tools"
version: "2.6.1-20210910-1+b1"
release: "Debian 12 (Bookworm)"
platforms: ["linux"]
url: "https://new.carta.tech/tomoyo-savepolicy"
---

# tomoyo-savepolicy(8)

save TOMOYO Linux policy

## NAME

tomoyo-savepolicy - save TOMOYO Linux policy

## SYNOPSIS

**tomoyo-savepolicy** \[*directory*\]

**tomoyo-savepolicy** \[*directory*\] \[*remote\_ip:remote:port*\]

## DESCRIPTION

This program saves TOMOYO Linux policy onto disk from kernel memory.

The directory */etc/tomoyo/policy/YY-MM-DD.hh:mm:ss* is created with four files inside: *domain\_policy.conf*, *exception\_policy.conf*, *profile.conf*, and *manager.conf*. The symbolic links */etc/tomoyo/policy/previous* and */etc/tomoyo/policy/current* are updated to point to the previous and current *YY-MM-DD.hh:mm:ss* directories respectively.

The following symbolic links should exist within the */etc/tomoyo* directory:

```
  domain_policy.conf -> policy/current/domain_policy.conf
  exception_policy.conf -> policy/current/exception_policy.conf
  profile.conf -> policy/current/profile.conf
  manager.conf -> policy/current/manager.conf
  policy/current -> policy/YY-MM-DD.hh:mm:ss
  policy/previous -> policy/YY-MM-DD.hh:mm:ss
```

You can therefore access the current policy files without having to descend into subdirectories, and without having to determine which *YY-MM-DD.hh:mm:ss* directory is the most recent.

If the policy type is specified, this program works similar to [**cat**(1)](/cat/1.md).

## OPTIONS

- **-e**

  Print */sys/kernel/security/tomoyo/exception\_policy* to standard output.

- **-d**

  Print */sys/kernel/security/tomoyo/domain\_policy* to standard output.

- **-p**

  Print */sys/kernel/security/tomoyo/profile* to standard output.

- **-m**

  Print */sys/kernel/security/tomoyo/manager* to standard output.

- **-s**

  Print */sys/kernel/security/tomoyo/stat* to standard output.

- *directory*

  Save policy to an alternative directory, rather than the default */etc/tomoyo* directory.

- *remote\_ip:remote\_port*

  Save policy on a remote system via an agent waiting at port *remote\_port* on IP address *remote\_ip*.

## EXAMPLES

- **Save policy to disk**

  ```
    tomoyo-savepolicy
  ```

- **Print "/sys/kernel/security/tomoyo/exception\_policy" to standard output**

  ```
    tomoyo-savepolicy -e
  ```

- **Retrieve policy from a remote system and save in a local directory**

  ```
    tomoyo-savepolicy /etc/tomoyo/192.168.1.1/ 192.168.1.1:10000
  ```

## BUGS

If you find any bugs, send an email to \<tomoyo-users-en@lists.osdn.me\>.

## AUTHORS

- Tetsuo Handa \<penguin-kernel@I-love.SAKURA.ne.jp\>

  Main author.

- Jamie Nguyen \<jamie@tomoyolinux.co.uk\>

  Documentation and website.

## SEE ALSO

[**tomoyo-editpolicy-agent**(8)](/tomoyo-editpolicy-agent/8.md), [**tomoyo-loadpolicy**(8)](/tomoyo-loadpolicy/8.md)

See \<https://tomoyo.osdn.jp\> for more information.