sepolicy-communicate — Generate a report showing if two SELinux Policy Domains can communicate
Synopsis
sepolicy communicate [-h] -s SOURCE -t TARGET [-c TCLASS] [-S SOURCEACCESS] [-T TARGETACCESS]
Description
Use sepolicy communicate to examine SELinux Policy to if a source SELinux Domain can communicate with a target SELinux Domain. The default command looks to see if there are any file types that the source domain can write, which the target domain can read.
Options
- -c, --class
Specify the SELinux class which the source domain will attempt to communicate with the target domain. (Default file)
- -h, --help
Display help message
- -s, --source
Specify the source SELinux domain type.
- -S, --sourceaccess
Specify the list of accesses used by the source SELinux domain type to communicate with the target domain. Default Open, Write.
- -t, --target
Specify the target SELinux domain type.
- -T, --targetaccess
Specify the list of accesses used by the target SELinux domain type to receive communications from the source domain. Default Open, Read.