Use of seinfo

Please specify version of CentOS

Moderator: xeont

Use of seinfo

Postby julian » Thu Jul 25, 2013 5:23 pm

What is the use of seinfo command in CentOS / RHEL / Linux?
julian
 
Posts: 1
Joined: Mon Jul 22, 2013 6:58 pm

Re: Use of seinfo

Postby dom » Thu Jul 25, 2013 7:20 pm

To query the components of a SELinux policy.

The combination of the seinfo and sesearch commands is very powerful. It enables one to determine the properties and characteristics of a security policy configuration.

See "man seinfo", and "man sesearch" to learn the specifics.

I use the seinfo command usually to see which types have assigned a specified type attribute, or to see which attributes a specified type has assigned, but it has all kinds of nifty functionality. You can list available security classes, type identifiers, role identifiers, identity identifiers, sensitivities, and categories and lots more.

The sesearch command lets you actually query the security policy configuration rules.

With those two tools one can basically answer almost every question with regards to the behavior of a security policy configuration, provided that you know the SELinux policy language.
dom
 
Posts: 5
Joined: Thu Jul 25, 2013 6:31 pm

Re: Use of seinfo

Postby Samuel » Fri Jul 26, 2013 10:03 am

In simple words,

The seinfo command allows the user to query the components of a SELinux policy. This tool can be used to analyze a binary or a source policy using this tool. :)
Samuel
 
Posts: 1
Joined: Mon Jul 22, 2013 6:13 pm


Return to SELinux for CentOS

Who is online

Users browsing this forum: No registered users and 2 guests
cron