ccs-savepolicy

Langue: en

Autres versions - même langue

Version: May 2009 (debian - 07/07/09)

Section: 8 (Commandes administrateur)

Sommaire

NAME

ccs-savepolicy - Save TOMOYO Linux's policy

SYNOPSIS

ccs-savepolicy [s][e][d][a][f][p][m][u] [{-|policy_dir} [remote_ip:remote_port]]

DESCRIPTION

This program saves TOMOYO Linux's policy from kernel into files.
s
Save system policy. ( /proc/ccs/system_policy - policy_dir/system_policy.base => policy_dir/system_policy.conf )
e
Save exception policy. ( /proc/ccs/exception_policy - policy_dir/exception_policy.base => policy_dir/exception_policy.conf )
d
Save domain policy. ( /proc/ccs/domain_policy - policy_dir/domain_policy.base => policy_dir/domain_policy.conf )
a
Save system policy, exception policy and domain policy. This is default.
p
Save profile. ( /proc/ccs/profile - policy_dir/profile.base => policy_dir/profile.conf )
m
Save manager. ( /proc/ccs/manager - policy_dir/manager.base => policy_dir/manager.conf )
u
Print meminfo. Implies '-' option. ( /proc/ccs/meminfo )
f
Forcefully save even if the on-memory policy and the on-disk policy are identical.
-
Write policy to stdout. Specify only one of "sedpmu" option when you use this option.
policy_dir
Save policy files into policy_dir directory. Must starts with / . Default is /etc/tomoyo/ if /sys/kernel/security/tomoyo/ exists, none if remote_ip:remote_port is specified, /etc/ccs/ otherwise.
remote_ip:remote_port
Receive policy from agent listening at specified IP address and port number.

EXAMPLES

# ccs-savepolicy

Save system policy, exception policy and domain policy.

# ccs-savepolicy e

Save exception policy.

# ccs-savepolicy /etc/ccs/192.168.1.1/ 192.168.1.1:10000

Receive policy from 192.168.1.1:10000 and save into /etc/ccs/192.168.1.1/ directory.

NOTES


 This is a symbolic link to /usr/lib/ccs/savepolicy .

AUTHORS


 penguin-kernel _at_ I-love.SAKURA.ne.jp

Copyright © 2005-2009 NTT DATA CORPORATION.

This program is free software; you may redistribute it under the terms of the GNU General Public License. This program has absolutely no warranty.

SEE ALSO


 ccs-loadpolicy (8)
 ccs-editpolicy-agent (8)