NAME

ccs-loadpolicy - load TOMOYO Linux manually

SYNOPSIS

ccs-loadpolicy [option]

ccs-loadpolicy [option] [remote_ip:remote_port]

This program reads TOMOYO Linux policy from standard input and loads it into the kernel.

-e: Append to /proc/ccs/exception_policy.
-ef: Overwrite /proc/ccs/exception_policy.
-d: Append to /proc/ccs/domain_policy.
-df: Overwrite /proc/ccs/domain_policy.
-m: Append to /proc/ccs/manager.
-p: Append to /proc/ccs/profile.
-s: Append to /proc/ccs/stat.
remote_ip:remote_port: Write to policy on a remote system via an agent waiting at port remote_port on IP address remote_ip.

  echo "acl_group 0 file read proc:/meminfo" | ccs-loadpolicy -e

  echo "delete acl_group 0 file read proc:/meminfo" | ccs-loadpolicy -e

  ( echo "<kernel>"; echo "file execute /sbin/init" ) | ccs-loadpolicy -d

  ccs-loadpolicy -df < /etc/ccs/domain_policy.conf

  ccs-loadpolicy -d 192.168.1.1:10000 < /etc/ccs/192.168.1.1/domain_policy.conf

  echo "delete /usr/sbin/ccs-queryd" | ccs-loadpolicy -m

If you find any bugs, send an email to <tomoyo-users-en@lists.osdn.me>.