NAME

tomoyo-loadpolicy - load TOMOYO Linux manually

SYNOPSIS

tomoyo-loadpolicy [option]

tomoyo-loadpolicy [option] [directory] [remote_ip:remote_port]

This program reads TOMOYO Linux policy from standard input and loads it into the kernel.

e: Load exception policy from /etc/tomoyo/exception_policy.conf.
d: Load domain policy from /etc/tomoyo/domain_policy.conf.
a: Load exception policy and domain policy. [default]
p: Load profile from /etc/tomoyo/profile.conf.
m: Load manager from /etc/tomoyo/manager.conf.
u: Load meminfo from /etc/tomoyo/meminfo.conf.
f: Erase policy loaded in memory before loading policy from the file. This can be used with the e, d, and a options.
-: Read policy from standard input. This can bs used with the e, d, m, and u options.
directory: Load policy stored in the directory directory, instead of the default /etc/tomoyo directory. This must be the full path to the directory.
remote_ip:remote_port: Write to policy on a remote system via an agent waiting at port remote_port on IP address remote_ip.

  echo "allow_read /proc/meminfo | tomoyo-loadpolicy -e

  echo "delete allow_read /proc/meminfo" | tomoyo-loadpolicy -e

  ( echo "<kernel>"; echo "allow_execute /sbin/init" ) | tomoyo-loadpolicy -d

  tomoyo-loadpolicy df

  tomoyo-loadpolicy d /etc/tomoyo/192.168.1.1/ 192.168.1.1:10000

If you find any bugs, send an email to <tomoyo-users_en@lists.sourceforge.net>.