On Tue, 2008-04-08 at 09:59 -0400, Daniel J Walsh wrote:
> plain text document attachment (diff.part003)
> --- nsapolicycoreutils/semanage/semanage.8 2008-04-08 09:37:21.000000000 -0400
> +++ policycoreutils-2.0.46/semanage/semanage.8 2008-04-08 09:35:46.000000000 -0400
> @@ -3,7 +3,9 @@
> semanage \- SELinux Policy Management tool
>
> .SH "SYNOPSIS"
> -.B semanage {login|user|port|interface|fcontext|translation} \-l [\-n]
> +.B semanage {boolean|login|user|port|interface|fcontext|translation} \-{l|D} [\-n]
> +.br
> +.B semanage boolean \-{d|m} [\-T] boolean
Merged with some fixes (no -T, added --on/--off/-1/-0).
Also added a mention of the -C/--locallist option for only listing local
settings. And added error checking on the set_active() call.
> .br
> .B semanage login \-{a|d|m} [\-sr] login_name
> .br
> @@ -43,6 +45,9 @@
> .I \-d, \-\-delete
> Delete a OBJECT record NAME
> .TP
> +.I \-D, \-\-deleteall
> +Remove all OBJECTS local customizations
Does this actually yield the expected result for booleans? IOW, if I
delete all local customizations, does it also change the active boolean
settings to the base policy values? If not, then the user won't see the
real effect until they next reboot since the kernel will keep preserving
the active boolean settings across reload.
> +.TP
> .I \-f, \-\-ftype
> File Type. This is used with fcontext.
> Requires a file type as shown in the mode field by ls, e.g. use -d to match only directories or -- to match only regular files.
--
Stephen Smalley
National Security Agency
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.
