tomoyo-setlevel8

Usage

Overview

This program can be used to edit the profiles currently defined in /sys/kernel/security/tomoyo/profile. The output must be quoted or escaped to avoid misinterpretation by the shell.

Before this program can be invoked, you must register it in /sys/kernel/security/tomoyo/manager. After initializing policy, this is usually as simple as rebooting the system.

Examples

Change mode for profile number 3 to enforcing mode

  tomoyo-setlevel "3-CONFIG={ mode=enforcing }"