ivuorinen/cheatsheet-tldr
1
0
Fork 0
mirror of https://github.com/ivuorinen/cheatsheet-tldr.git synced 2026-03-06 09:58:46 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update cheatsheets

Browse Source
This commit is contained in:
ivuorinen
2025-03-09 00:16:26 +00:00
parent f8bee5305f
commit 9e2d0f72f1
116 changed files with 330 additions and 330 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
tldr/linux/semanage
View File

@@ -11,15 +11,15 @@ source: https://github.com/tldr-pages/tldr.git
- Set or unset a SELinux boolean. Booleans allow the administrator to customize how policy rules affect confined process types (a.k.a domains):
`sudo semanage boolean {{-m|--modify}} {{-1|--on|-0|--off}} {{haproxy_connect_any}}`
`sudo semanage boolean {{[-m|--modify]}} {{-1|--on|-0|--off}} {{haproxy_connect_any}}`
- Add a user-defined file context labeling rule. File contexts define what files confined domains are allowed to access:
`sudo semanage fcontext {{-a|--add}} {{-t|--type}} {{samba_share_t}} '/mnt/share(/.*)?'`
`sudo semanage fcontext {{[-a|--add]}} {{[-t|--type]}} {{samba_share_t}} '/mnt/share(/.*)?'`
- Add a user-defined port labeling rule. Port labels define what ports confined domains are allowed to listen on:
`sudo semanage port {{-a|--add}} {{-t|--type}} {{ssh_port_t}} {{-p|--proto}} {{tcp}} {{22000}}`
`sudo semanage port {{[-a|--add]}} {{[-t|--type]}} {{ssh_port_t}} {{[-p|--proto]}} {{tcp}} {{22000}}`
- Set or unset permissive mode for a confined domain. Per-domain permissive mode allows more granular control compared to `setenforce`:
@@ -27,8 +27,8 @@ source: https://github.com/tldr-pages/tldr.git
- Output local customizations in the default store:
`sudo semanage export {{-f|--output_file}} {{path/to/file}}`
`sudo semanage export {{[-f|--output_file]}} {{path/to/file}}`
- Import a file generated by `semanage export` into local customizations (CAREFUL: may remove current customizations!):
`sudo semanage import {{-f|--input_file}} {{path/to/file}}`
`sudo semanage import {{[-f|--input_file]}} {{path/to/file}}`